Privacy policy

In the following we inform you which data we collect when using our website and the online shop at www.uli-ludwig.de (hereinafter also referred to as "Uli-Ludwig") and when using the services offered there for what purpose and for what we use this data. The protection of your personal data and your privacy is of particular concern to us. We observe the provisions of German data protection law.

1. Responsible office and contact

Responsible body in the sense of the DSGVO is the operator of the website www. uli-ludwig.de:

Uli Ludwig
Wasgaustraße 6
65929 Frankfurt.
Phone: 069 - 37003940
Fax: 069 - 36408418

If you have any questions about data protection or if you wish to exercise your rights (see Section 8) or claims regarding your personal data, you can also send us an e-mail to the following address: uludwig@uli-ludwig.de

2. Encryption

Our website uses TLS encryption for security reasons and to protect the transmission of data that you send to us as the site operator. You can recognize the encrypted connection in the address line of your browser by the fact that the browser line "https://" begins and by the lock symbol located there.
 
If TLS encryption is activated, the data you transmit to us cannot be read by third parties.

3. Data collection, processing and use of personal data

 a) Personal data

"Personal data" within the meaning of the DSGVO means any information relating to an identified or identifiable natural person; an identifiable person is considered to be a natural person who can be identified, directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics which express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

b) Automatically collected data

When you visit www.uli-ludwig.de, the web server automatically registers so-called log files on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f) DSGVO.

This data includes the

- Browser type and version,
- operating system used,
- Referrer URL (the previously visited page),
- IP address of the requesting computer,
- access date and time of the server request and
- the file request of the client (file name and URL).

This data is only collected for the purpose of statistical evaluation and for security reasons (e.g. to clarify misuse or fraud) and stored for a period of 7 days. They are then deleted. Should a longer storage of the data be necessary for evidence purposes, they are excluded from deletion until the respective incident has been finally clarified.

c) Order

You can visit Uli-Ludwig's web pages without having to provide any personal data yourself.

However, if you place an order, we collect, process and use the personal data provided by you in accordance with Art 6 Para. 1 lit. b) DSGVO to fulfil our contractual obligations and services. In the form fields, the information that we require for the services you require is marked as mandatory; other information is optional.

For the conclusion and processing of contracts and orders, we require contact details such as name, delivery and billing address and e-mail address, as well as information on the type of payment you have chosen, depending on the individual case. In addition, we use your data to maintain our customer database so that only relevant data is stored there. In order to avoid typing errors and to ensure that your ordered items reach you, we check the completeness and correctness of your address when entering them.

d) Customer account

You can register as a customer on our website and create a customer account. To do this, you must fill in the form "Create a new customer account". Mandatory fields are marked with an asterisk. Your complete contact details will then be automatically transferred with each order and do not have to be entered again and again with each subsequent order. You can check your order status on our website at any time. The collection and use of the data is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO. We guarantee that your data will only be processed and used by us for this purpose.

The content of your consent is available to you at any time by logging in with your password under your user name and pressing the button[My account], or during the order process under the tab 1[Billing address] and tab 4[Payment method].
You can revoke your declaration of consent at any time with effect for the future. To do this, you must click on the "Delete customer account" link after successful login. You can also revoke your revocation using the contact data stated under item 1.

e) Use of a contact form

When using our contact form, we record your e-mail address and your name on the basis of Art. 6 para. 1 lit. b) for the fulfilment of (pre)contractual obligations or the implementation of measures. The personal data that you make available to us in the context of this contact enquiry will only be used to answer your enquiry or contact you and for the associated technical administration. The data will not be passed on to third parties.

If you have given us your consent to store your data, you have the right to revoke your consent with effect for the future at any time. In this case your personal data will be deleted immediately.

Your personal data will also be deleted without your revocation if we have processed your request or if you revoke your consent to its storage. This also happens if the storage is inadmissible for other legal reasons.

f) Shop Ratings

Uli-Ludwig uses the online evaluation portal ShopVote. ShopVote is a service of Blickreif GmbH, Alter Messeplatz 2, 80339 Munich.

To display the ShopVote seal and any collected and/or aggregated ratings, we have included ShopVote graphics on our website. This serves the protection of our legitimate interests in an optimal marketing of our offer. The legal basis for the integration is Art. 6 para. 1 lit. f DSGVO. When calling up the ShopVote graphics, the web server automatically saves a so-called server log file which, for example, contains your IP address, date and time of the call up, transferred data volume and the source of the call up (access data) and documents the call up. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit. Further personal data is not collected or stored by the ShopVote graphics.

During the ordering process you will be asked via an appropriate checkbox whether you want to submit an evaluation of our online shop. If you have given us your explicit consent according to art. 6 para. 1 lit. a DSGVO by activating the corresponding checkbox in the order process or by clicking a button provided for this purpose after completion of the order, we transmit your e-mail address and your order or customer number for reminder to the evaluation portal ShopVote.de for submission of a rating of your order. ShopVote then reminds you by e-mail of the possibility to give a review.

This consent can be revoked at any time by sending a message to uludwig@uli-ludwig.de or directly to ShopVote (datenschutz@shopvote.de). The terms of use for the rating request of ShopVote can be found at

https://www.shopvote.de/nutzungsbedingungen

to see the truth.

g) Newsletter

At your request, we will inform you regularly by e-mail about the current price development and other interesting offers from the Uli-Ludwig product and service comparison. Registration is voluntary and takes place via the so-called double opt-in procedure. After registration you will receive an e-mail asking you to confirm your registration. This is necessary so that no third party can log in with a foreign e-mail address. In order to be able to prove the application in accordance with the legal requirements, the time of application, time of confirmation and the IP address are recorded on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f) DSGVO.

Within the framework of registration, you consent to the processing of the data provided for sending or receiving e-mails (Art. 6 para. 1 lit. a) DSGVO). Furthermore, you agree that data about your usage behaviour (namely the opening and clicking of links in the e-mail) will be collected and processed by Uli-Ludwig in order to adapt the contents of the mailings to your needs, e.g. if you click on links on topic x several times but not on topic y, you will only receive links on topic x in future mailings.

The newsletter is sent by the mail service provider "MailChimp". MailChimp is a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The data protection regulations of the shipping service provider can be viewed here:

https://mailchimp.com/legal/privacy/

The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection level.
(https://www.privacyshield.gov/participant?id=a2zt0000000000TO6hAAG&status=Active).

The dispatch service provider is used on the basis of our legitimate interests according to Art. 6 Para. 1 letter f DSGVO and an order processing contract according to Art. 28 Para. 3 S. 1 DSGVO.

The shipping service provider can use the recipient's data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for statistical purposes. However, the shipping service does not use the data of our newsletter recipients to write them down itself or to pass the data on to third parties.

You can revoke your consent to receive these e-mails at any time and without giving reasons with future effect by sending an e-mail to uludwig@uli-ludwig.de or the link contained in the respective e-mail itself at the end.

We can store the e-mail addresses that have been deleted and the data stored within the framework of logging the registration for up to three years on the basis of our legitimate interests (Art. 6 para. 1 lit. f) DSGVO) before we delete them for the purpose of sending the newsletter in order to be able to prove a previously given consent. The processing of these data is limited to the purpose of a possible defence against claims. An individual application for cancellation is possible at any time, provided that at the same time the former existence of a consent is confirmed.

4. Disclosure of personal data to third parties and contract data processors

a) Your personal data will be passed on in accordance with Art. 6 Para. 1 lit. b) DSGVO if this is necessary for processing and fulfilling contractual obligations, e.g. parcel delivery agents such as DHL, Hermes, dpd or payment service providers such as PayPal, Klarna or Mastercard. In these cases we strictly observe the provisions of data protection laws. The scope of data transmission is limited to the minimum (e.g. name, delivery address for deliverers). Our contractual partners may use the data transmitted in this way exclusively for the fulfilment of the order.

b) In addition, we will only pass on data on the basis of your express consent (Art. 6 para. 1 lit. a) DSGVO) if a legal obligation provides for this (Art. 6 para. 1 lit. c) DSGVO) or on the basis of our legitimate interests (Art. 6 para. 1 lit. f) DSGVO, e.g. when using agents, web hosters, etc.).

Hosting services are used to provide infrastructure and platform services, computing capacity, storage and database services, security services and technical maintenance services. We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta- and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer according to Art. 6 para. 1 lit. f DSGVO. The processing of data by third parties on the basis of an order data processing relationship is carried out on the basis of Art. 28 DSGVO.

c) If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA) or if this occurs in the context of the use of services of third parties or disclosure or transfer of data to third parties, this only takes place if it is necessary to fulfil our (pre)contractual obligations (Art. 6 para. 1 lit. b) DSGVO), on the basis of your consent (Art. 6 para. 1 lit. a) DSGVO), on the basis of a legal obligation (Art. 6 para. 1 lit. c) DSGVO) or on the basis of our legitimate interests (Art. 6 para. 1 lit. f) DSGVO). Subject to legal or contractual permissions, we process or leave the data in a third country only if the special requirements of Art. 44 ff. Process DSGVO. The processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to the EU (e.g. for the USA through the "Privacy Shield" agreement) or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").

5. Cookies

In order to make the use of the websites more user-friendly and effective overall, Uli-Ludwig stores so-called cookies on the customer's hard disk itself or through third parties commissioned by us.

A cookie is a small text file that is used, among other things, to collect information regarding the use of a website. These cookies can neither run programs nor transmit viruses to your computer. They do not contain any personal data, cannot be assigned to specific persons and, unless otherwise described, are automatically deleted after one year at the latest. These data are not combined with other data sources.

The use of our website is also possible without cookies. You can deactivate the storage of cookies in your respective browser, limit them to certain websites or set your browser so that it informs you as soon as a cookie is sent. You can also delete cookies from your PC's hard drive at any time.

6. Use of web analysis, remarketing and retargeting tools

On the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f) DSGVO, we use tools or plug-ins for web analysis, remarketing and retargeting to optimize our online presence and to be able to compile more targeted offers for you.

Cookies are used, the IP address forwarded and/or different types of data collected and evaluated. These include, for example, number of website visitors, duration of visit, average page load time, origin of visitors.

In detail:

Google Analytics

We use Google Analytics, a web analysis service from Google. Google Analytics uses cookies, which enable an analysis of the use of the website by the users. The information generated by the cookie about your use of the website (including your IP address) is generally transmitted to and stored by Google on servers in the United States. Insert Operator Name] has activated IP anonymisation by adding the code "gat._anonymizeIp();" to the web pages, so that your IP address will be shortened beforehand by Google within EU member states or in other signatory states to the Agreement on the European Economic Area (so-called IP masking). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of us, Google will use this information to evaluate your use of the website, to compile reports on website activity for[insert operator's name] and to provide other services related to website and internet use. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

Google offers an extension for web browsers (Add-On) to prevent data collection by Google Analytics and processing of this data by Google. The add-on can be found under

https://tools.google.com/dlpage/gaoptout

can be downloaded and installed at your own risk.

For more information, see

http://www.google.com/intl/de/analytics/privacyoverview.html
(general information about Google Analytics and data protection).

Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law
(https://www.privacyshield.gov/participant?id=a2zt00000000001L5AAI&status=Active).

7. Use of Google invisible reCAPTCHA

We use the invisible reCAPTCHA service of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) on our website. This serves the purpose of distinguishing the input by a human or by automated, machine processing. In the background, Google collects and analyzes usage data that is used by Invisible reCaptcha to distinguish regular users from bots. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and any other data required by Google for the Invisible reCAPTCHA service will be transmitted to Google. This data is processed by Google within the European Union and possibly also in the USA. For data processing in the USA, Google has certified itself in accordance with the US-EU data protection agreement “Privacy Shield” and is therefore obliged to comply with European data protection regulations. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of the legitimate interest to protect our website from automated spying, misuse and SPAM. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f) GDPR. You can find more information about Google reCAPTCHA and the associated privacy policy at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

8. Use of social plugins

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) so-called Social Plugins ("Plugins")

a) Facebook

We use the social plugin of the social network facebook.com. This is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are identified by one of the Facebook logos (white "f" on blue tile, the terms "like", "like" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and the appearance of the Facebook Social Plugins can be viewed here:

https://developers.facebook.com/docs/plugins/.

When a user calls up a function of this online offer that contains such a plugin, a direct connection is established with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user's device and integrated into the online offer. The processed data can be used to create user profiles. We therefore have no influence on the amount of data Facebook collects with the help of this plugin and therefore inform users according to our level of knowledge.

By integrating the plugins, Facebook receives information that a user has called up the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, such as pressing the Like button or posting a comment, the information is sent directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to obtain and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options for the protection of the privacy of the users, can be found in the Facebook data protection information:

https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about him via this online offer and link it to his membership data stored on Facebook, he must log out of Facebook before using our online offer and delete his cookies. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings:

https://www.facebook.com/settings?tab=ads

or via the US side

http://www.aboutads.info/choices/

or the EU page

http://www.youronlinechoices.com/.

The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

b) Twitter

The functions of the Twitter service are integrated on our website. Twitter is a social media portal of Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107 (USA). If you access a page containing a social media plugin, the data will be exchanged with Twitter servers in the USA, regardless of where you live. Even in the case of interactions that are possible with the various Twitter plugins, the corresponding information about you is collected and transmitted to Twitter and stored.

If you are also a member of Twitter and logged in to Twitter during the time you use the plugin, the information collected about your visit to the website will be linked to your Twitter account and made known to other users.

If you do not want Twitter to link and merge the information with your Twitter account information, you must log out of Twitter before visiting our website.

For more information about Twitter's collection and use of data, please visit

https://twitter.com/privacy

You can restrict the processing of your data in the general settings of your Twitter account and under "Privacy and Security". In addition, you can restrict Twitter access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the settings options there. However, this depends on the operating system used.

For more information, see

https://support.twitter.com/articles/105576#

or

https://help.twitter.com/de/search?q=data protection

Twitter also offers at

https://twitter.com/personalization

the ability to control how content is personalized and how certain data is collected and shared in the preferences.

Twitter Inc. is committed to the principles of the EU-US Privacy Shield
(https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active)

(c) Pinterest

Our website includes plugins of the social network Pinterest. Pinterest is an offer of Pinterest Inc, 808 Brannan St, San Francisco, CA 94103, USA. This transmits your IP address to Pinterest. If you are logged in to Pinterest when you visit our site in the same browser, this information may be linked to your profile and Pinterest may associate your visit to our site with your user account. If you click on the "Pin-It" plugin button, this will be sent to Pinterest and published in your account. If you do not agree to the transfer of your data to Pinterest, please log out of the browser you are using to visit our site.

For more information on Pinterest's collection and use of data, please visit

https://policy.pinterest.com/de/privacy-policy

d) Google +1

Our pages use functions of Google +1. provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

The Google +1 button allows you to publish information worldwide. The Google +1 button gives you and other users personalized content from Google and our partners. Google stores both the information that you have given +1 for a content and information about the page that you viewed when you clicked +1. Your +1 can appear in Google services, such as search results or your Google profile, or elsewhere on websites and ads, along with your profile name and photo. Google records information about your +1 activity to improve Google services for you and others. To use the Google +1 button, you need a public Google profile that is visible worldwide and must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name may also replace another name you used when sharing content through your Google Account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you.

In addition to the uses described above, the information you provide will be used in accordance with the applicable Google Privacy Policy. Google may publish aggregated statistics about users' +1 activity or share them with users and partners, such as publishers, advertisers or related websites.

e) Instagram

Functions and contents of the Instagram service can be integrated within our online offer. The supplier is Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. This may include, for example, content such as images, videos or texts and buttons with which users can express their appreciation of the content, subscribe to the authors of the content or our contributions.

If the users are members of the Instagram platform, Instagram can assign the call of the above contents and functions to the profiles of the users there. Privacy Policy of Instagram:

http://instagram.com/about/legal/privacy/

9. Your rights

For your rights and further questions on the subject of personal data, you can contact us at any time using the contact data mentioned under item 1 above.

You have the following rights:

a) Right to information

You have the right to request information free of charge at any time about your personal data stored by us, its origin and recipient, the purpose of data processing, the planned duration of data storage including a copy of the personal data which are the subject of the processing (Art. 15 DSGVO).

(b) Right to correction

In addition, you have the right to have incorrect personal data corrected immediately or incomplete personal data completed at any time (Art. 16 DSGVO).

c) Right to revoke consent

You have the right to revoke your consent to data processing at any time and with effect for the future, without there having to be a reason for revocation (Art. 7 Para. 3 DSGVO).

d) Right to cancellation

You have the right to have your personal data deleted immediately if they are no longer necessary for the purposes for which they were collected or processed in any other way, or if you revoke your consent to the lawful processing and no other legal basis for storage exists. If you object to the processing and there are no overriding interests for the processing, your data will also be deleted. Finally, the data will be deleted if processing is not permitted for other legal reasons (Art. 17 DSGVO).

(e) Right to limitation of processing

You have the right to have the processing of your personal data restricted if you dispute the accuracy of your personal data for a period that allows us to verify its accuracy.

A restriction also occurs if the processing is unlawful but you refuse the deletion of your personal data and instead of a deletion demand a restriction of the use, we no longer need your personal data for the purposes, but you need for the assertion, exercise or defense of legal claims or you had filed an objection against the processing, but it has not yet been determined whether there are legitimate reasons for data storage at Uli-Ludwig, which outweigh your interest (Art. 18 DSGVO).

f) Right to data transferability

You have the right to receive the personal data you have provided to us in a structured, current and machine-readable format or to transmit it to another person responsible, provided that the processing is based on consent and the processing is carried out using automated procedures (Art. 20 DSGVO).
 
g) Right of objection

Finally, you have the right to revoke your consent to the processing of your personal data at any time with effect for the future.

You have the right to object at any time to the creation of user profiles and to the processing of your personal data concerned, insofar as the processing is based on Art. 6 para. 1 lit. e or f DSGVO. Your personal data will no longer be processed unless compelling reasons worthy of protection outweigh your interests, rights and freedoms. If your personal data is used for the purpose of direct marketing, you have the right to object to such processing (Art. 21 DSGVO) at any time.

h) Right of appeal

They also have the right of appeal to a supervisory authority (Art. 77 DSGVO).

10. Data deletion

We delete your personal data immediately if they are no longer necessary for the purposes for which they were collected or otherwise processed, or if you revoke your consent to legal processing and no other legal basis for storage exists.

If the data are not deleted because they are necessary for other and legally permissible purposes, their processing is restricted. The data will be blocked and not processed for other purposes. This includes, for example, data that must be retained for commercial or tax law reasons.

Status May 2018