Privacy Policy

1.            Information on the Collection of Personal Data and Contact Details of the Controller

 

1.1      We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data are all data by which you can be personally identified.

 

1.2         The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

 

Cinja Christnacht
Kicke 7
51427 Bergisch Gladbach

Telephone: +49 (0) 2204 - 4091152
E-mail: info@helpindeal.com

 

The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

 

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the string „https://“ and the lock symbol in your browser's address bar.

2.            Data Collection When Visiting Our Website

When using our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we collect only the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data that are technically necessary for us to display the website to you:

·         Our visited website

·         Date and time of access

·         Amount of data sent in bytes

·         Source/referrer from which you reached the page

·         Browser used

·         Operating system used

·         IP address used (if applicable, in anonymized form)

 

Processing occurs pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

3.            Hosting by AWS

We host our website with AWS. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter: AWS).

When you visit our website, your personal data are processed on AWS's servers. This may also involve the transfer of personal data to AWS's parent company in the United States. The transfer of data to the United States is based on the EU Standard Contractual Clauses. Details can be found here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.

More information can be found in AWS's privacy policy: https://aws.amazon.com/de/privacy/?nc1=f_pr.

Use of AWS is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a presentation of our website that is as reliable as possible. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn at any time.

Conclusion of a Data Processing Agreement

We have concluded a data processing agreement with AWS. This is a contract required by data protection law that ensures AWS processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

4.            Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. when you close your browser (session cookies). Other cookies remain on your device and enable your browser to be recognized on your next visit (persistent cookies). When cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the storage duration of the respective cookies in the overview of your web browser's cookie settings.

In some cases, cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data are also processed by individual cookies we use, the processing takes place pursuant to Art. 6(1)(b) GDPR either for the performance of the contract, pursuant to Art. 6(1)(a) GDPR in the case of consent, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

Please note that you can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or can exclude the acceptance of cookies for certain cases or generally. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find this for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if cookies are not accepted, the functionality of our website may be restricted.

5.            Contact

When you contact us (e.g. via contact form or e-mail), personal data are collected. Which data are collected when a contact form is used can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing these data is our legitimate interest in answering your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after your request has been finally processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

6.            Data Processing When Opening a Customer Account and for Contract Processing

Pursuant to Art. 6(1)(b) GDPR, personal data are further collected and processed when you provide them to us for the performance of a contract or when opening a customer account. Which data are collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be effected by sending a message to the controller's above address. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be restricted with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or we reserve the right to further use the data as permitted by law.

7.            Use of Social Media: Social Plugins

7.1         Facebook Plugins with Shariff Solution

On our website, so-called social plugins ("plugins") of the social network Facebook are used, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

To increase the protection of your data when you visit our website, these buttons are not fully integrated as plugins, but only by using an HTML link. This form of integration ensures that when a page of our website containing such buttons is accessed, no connection is yet established with Facebook's servers. When you click the button, a new browser window opens and loads the Facebook page, where you can interact with the plugins there (if necessary after entering your login data).

For information on the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and settings options for protecting your privacy, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php

 

7.2     Instagram Plugin as a Shariff Solution

On our website, so-called social plugins ("plugins") of the online service Instagram are used, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

To increase the protection of your data when you visit our website, these buttons are not fully integrated as plugins, but only by using an HTML link. This form of integration ensures that when a page of our website containing such buttons is accessed, no connection is yet established with Instagram's servers. When you click the button, a new browser window opens and loads the Instagram page, where you can interact with the plugins there (if necessary after entering your login data).

For information on the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and settings options for protecting your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

 

7.3   LinkedIn Plugin as a Shariff Solution

On our website, so-called social plugins ("plugins") of the online service LinkedIn are used, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

To increase the protection of your data when you visit our website, these buttons are not fully integrated as plugins, but only by using an HTML link. This form of integration ensures that when a page of our website containing such buttons is accessed, no connection is yet established with LinkedIn's servers. When you click the button, a new browser window opens and loads the LinkedIn page, where you can interact with the plugins there (if necessary after entering your login data).

For information on the purpose and scope of data collection and the further processing and use of the data by LinkedIn, as well as your rights in this regard and settings options for protecting your privacy, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy

 

7.4   Twitter Plugin as a Shariff Solution

On our website, so-called social plugins ("plugins") of the microblogging service Twitter are used, which is operated by Twitter International Company, One Cumberland Place, Fenian Street
Dublin 2, D02 AX07 Ireland ("Twitter").

To increase the protection of your data when you visit our website, these buttons are not fully integrated as plugins, but only by using an HTML link. This form of integration ensures that when a page of our website containing such buttons is accessed, no connection is yet established with Twitter's servers. When you click the button, a new browser window opens and loads the Twitter page, where you can interact with the plugins there (if necessary after entering your login data). Please note that when interacting with the plugin, information collected (including your IP address) is transmitted directly from your browser to a server of Twitter Inc. in the United States and stored there.

For information on the purpose and scope of data collection and the further processing and use of the data by Twitter, as well as your rights in this regard and settings options for protecting your privacy, please refer to Twitter's privacy policy: https://twitter.com/privacy

8.            Tools and Miscellaneous

8.1         CookieBot

This website uses the cookie consent tool from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark („CookieBot“), which sets technically necessary cookies to save your cookie preferences. This data processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing a cookie consent management service for website visitors.

8.2         - Google Maps

On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (land) maps in order to visually present geographic information. Using this service shows you our location and makes any directions to us easier.

As soon as you access the subpages into which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also result in a transfer to Google LLC servers in the United States. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data are directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out pursuant to Art. 6(1)(f) GDPR on the basis of Google's legitimate interest in displaying personalized advertising, market research and/or the needs-based design of Google websites. You have a right to object to the creation of these user profiles, which you must exercise by contacting Google. If you do not agree to the future transfer of your data to Google in connection with the use of Google Maps, you can also completely disable the Google Maps web service by turning off JavaScript in your browser. Google Maps, and therefore the map display on this website, can then no longer be used.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html, and you can find the additional terms of use for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps can be found on Google's website (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/

Where legally required, we have obtained your consent pursuant to Art. 6(1)(a) GDPR for the processing of your data described above. You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the objection option described above.

9.            Rights of the data subject

9.1         The applicable data protection law grants you comprehensive rights as a data subject vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), which we inform you about below:

·         Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the source of your data if these were not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope concerning you and the intended effects of such processing, as well as your right to be informed which safeguards pursuant to Art. 46 GDPR exist for the transfer of your data to third countries;

·         Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of incomplete data stored by us;

·         Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data where the conditions of Art. 17(1) GDPR are met. However, this right does not apply in particular if processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

·         Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request restriction of the processing of your personal data as long as the accuracy of your data disputed by you is being verified, if you refuse erasure of your data due to unlawful processing and instead request restriction of processing of your data, if you need your data for the establishment, exercise or defense of legal claims after we no longer need these data for the purposes for which they were collected, or if you have objected on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds override;

·         Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

·         Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, insofar as this is technically feasible;

·         Right to withdraw consent pursuant to Art. 7(3) GDPR: You have the right to withdraw consent once given for the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the affected data without delay, provided further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent up to the time of withdrawal;

·         Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of personal data concerning you violates the GDPR, you have the right - without prejudice to any other administrative or judicial remedy - to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

 

9.2         RIGHT TO OBJECT

10.         Storage period of personal data

The duration for which personal data are stored is determined by the respective legal basis, the processing purpose and, where applicable, additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of express consent pursuant to Art. 6(1)(a) GDPR, such data are stored until the data subject withdraws their consent.

If statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, such data are routinely deleted after expiry of the retention periods, provided they are no longer required for the performance of the contract or for the initiation of a contract and/or no legitimate interest on our part in continuing to store them remains.

When processing personal data on the basis of Art. 6(1)(f) GDPR, such data are stored until the data subject exercises their right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, such data are stored until the data subject exercises their right to object under Art. 21(2) GDPR.

Unless otherwise stated in the other information in this statement on specific processing situations, stored personal data are otherwise deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

 

Status: 02.06.2021

 

Our social media presences

 

Data processing by social networks

We maintain publicly accessible profiles in social networks. The social networks we use in detail can be found below.

Social networks such as Facebook, Twitter etc. can usually comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (e.g. Like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, such data collection occurs, for example, via cookies stored on your device or by recording your IP address.

The operators of the social media portals can use the data collected in this way to create user profiles in which your preferences and interests are stored. This allows interest-based advertising to be displayed to you both within and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or have been logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.

 

Legal basis

Our social media presences are intended to ensure the broadest possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6(1)(a) GDPR).

 

 

Controller and assertion of rights

If you visit one of our social media presences (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by that visit. As a rule, you can assert your rights (access, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).

Please note that despite our joint responsibility with the operators of the social media portals, we do not have full influence over the data processing operations of the social media portals. Our options are determined largely by the corporate policy of the respective provider.

 

Storage period

The data collected directly by us via the social media presence are deleted from our systems as soon as the purpose for their storage no longer applies, you ask us to delete them, you withdraw your consent to storage, or the purpose for data storage ceases to exist. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data that is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

 

Social networks in detail

 

Facebook

We maintain a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected are also transferred to the USA and other third countries.

We have concluded an agreement on joint processing (Controller Addendum) with Facebook. This agreement determines for which data processing operations we or Facebook are responsible when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can independently adjust your advertising settings in your user account. To do so, click the following link and log in: https://www.facebook.com/settings?tab=ads.

For details, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/.

 

Twitter

We use the short message service Twitter. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter is certified under the EU-US-Privacy Shield.

You can independently adjust your Twitter privacy settings in your user account. To do so, click the following link and log in: https://twitter.com/personalization.

For details, please refer to Twitter's privacy policy: https://twitter.com/de/privacy.

 

Instagram

We maintain a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Details about how they handle your personal data can be found in Instagram's privacy policy: https://help.instagram.com/519522125107875.

 

LinkedIn

We maintain a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

If you would like to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

The transfer of data to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Details about how they handle your personal data can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

 

Status: 02.06.2021