§ 1 Information on the collection of personal data
-
(1) Below, we inform you about the processing of personal data when using our website. Personal data is all data that can be related to you personally, for example, name, address, email addresses, user behavior. This is intended to inform you about our processing operations and at the same time fulfill the legal obligations, especially from the EU General Data Protection Regulation (GDPR).
(2) The controller according to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is Coinsbee GmbH, Lautenschlagerstr. 16, 70173 Stuttgart, mail@coinsbee.com (see our imprint).
(3) When you contact us by email or through a contact form, the data you provide (your email address, possibly your name and your phone number) will be stored by us to answer your questions. The data collected in this context will be deleted after the request has been allocated to a contract according to the contract duration periods, otherwise as soon as storage is no longer necessary, or processing will be restricted if there are statutory retention obligations.
(4) If we wish to use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will always select and monitor these service providers carefully and inform you in detail about the respective processes below. We also name the defined criteria of the storage duration.
§ 2 Your Rights
-
(1) You have the following rights regarding your personal data vis-à-vis the controller:
– Right of access,
– Right to rectification or erasure,
– Right to restriction of processing,
– Right to object to processing,
– Right to data portability.(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The contact details of the data protection supervisory authority responsible for us are as follows:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 StuttgartPhone: 0711/61 55 41 – 0
Email: poststelle@lfdi.bwl.de
§ 3 Processing of personal data when visiting our website
-
When using the website for information purposes only, i.e., if you do not register or otherwise provide us with information, we process the personal data that your browser transmits to our server. The following data are technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The legal basis is Art. 6 para. 1 s. 1 lit. f GDPR:
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– Volume of data transferred
– Website from which the request comes
– Browser
– Operating system and its interface
– Language and version of browser software.
§ 4 Newsletter
-
(1) You can subscribe to our newsletter, with which we inform you about our current interesting offers. The goods and services promoted are named in the declaration of consent.
(2) For the subscription to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the specified email address asking you to confirm that you are the owner of the email address and wish to receive the notifications. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. Furthermore, we store the IP addresses you used and the times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
(3) The only mandatory information for sending the newsletter is your email address. After your confirmation, we store your email address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 s. 1 lit. a GDPR.
(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email.
(5) Additionally, you may consent to us evaluating your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files. For the evaluations, we link the web beacons with your email address and an individual ID. The data on your user behavior is collected exclusively in a pseudonymized form; the IDs are thus not linked to your other personal data, a direct personal reference is excluded. With the data obtained in this way, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click in them, and conclude from this your personal interests.
(6) You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact method as shown above. The information will be stored for as long as you have subscribed to the newsletter. After you unsubscribe, we store the data purely for statistical purposes and anonymously. Such tracking is also not possible if you have deactivated the display of images by default in your email program. In this case, the newsletter will not be displayed completely, and you may not be able to use all the features. If you display the images manually, the tracking mentioned above will take place.
§ 5 Use of Matomo
-
(1) On this website, we use the web analysis service Matomo to analyze and regularly improve the use of our website. The statistics we gain allow us to improve our service and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 para. 1 s. 1 lit. f GDPR.
(2) For this analysis, cookies are not used, which means that no cookies will be stored on your computer for the purpose of web analysis. When analyzing the use of the website, your IP address and information such as the timestamp, pages visited, and your language settings are recorded. The information collected in this way is stored on our server. This website uses Matomo with the extension “AnonymizeIP” which means that IP addresses are processed in a shortened form, thus preventing them from being directly linked to a particular individual. The IP address provided by Matomo from your browser will not be merged with other data collected by us.
(3) The use of Matomo can be prevented by unchecking the following box and thus activating the opt-out plugin:
In this case, an opt-out cookie will be stored in your browser, which prevents Matomo from storing usage data. If you delete your cookies, this means that the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit our site again.You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
(4) Matomo is an open-source project. Third-party provider’s privacy information is available at matomo.org/privacy-policy/.
§ 6 Integration of YouTube videos
-
(1) We have integrated YouTube videos into our online service, which are stored on YouTube.com and can be played directly from our website. All of these are embedded in “enhanced privacy mode”, which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no control over this data transfer. The legal basis for displaying the videos is Art. 6 para. 1 s. 1 lit. a GDPR, which means the integration only occurs after your consent.
(2) By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the basic data mentioned above such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube provides a user account that you are logged in with or if there is no user account. If you are logged into Google, your data will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or tailor-made website design. Such an evaluation is carried out in particular (even for non-logged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
(3) The information is stored on Google’s servers, including in the USA. In these cases, the provider has committed itself to a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws during international data transfer. We have also agreed on so-called standard data protection clauses with Google, whose purpose is to ensure an adequate level of data protection in the third country.
(4) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.
§ 7 Use of a Rating System
(1) You can provide valuable feedback on our products and services on our website through our rating system. To submit a rating, you must register on our website and have purchased products. The purpose is to optimize our offerings.
(2) When submitting ratings through our rating system, personal data is processed to ensure the authenticity of the ratings. This data includes your IP address, email address, and your name, which are used for user recognition, as well as the contents of your (star) rating.
(3) The legal basis for processing your personal data within the scope of a rating is your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. For reasons that lie in our legitimate interest (Art. 6 para. 1 lit. f GDPR), we also store the IP addresses of the users for 90 days when leaving ratings on our website. This serves our safety in case illegal content (such as insults or illegal political advertising) is published.
§ 8 Use of Blog Functions
In our blog, where we publish various posts on topics related to our activities and products, you can leave public comments. Your comment will be published with your specified username at the post. We recommend using a pseudonym instead of your real name. The specification of username and email address is required, all other information is voluntary. When you post a comment, we also store your IP address, which we delete after one month. The storage is necessary to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your email address to contact you if a third party should complain about your comment as unlawful. The legal basis is Art. 6 para. 1 s. 1 lit. c and f GDPR. Comments are not reviewed before publication. We reserve the right to delete comments if they are objected to as unlawful by third parties.
§ 9 Use of our Webshop
(1) If you wish to order in our webshop, it is necessary for the conclusion of a contract that you provide your personal data, which we need for processing your order. Mandatory information required for the processing of contracts is marked separately, other information is voluntary. For payment, you can provide your payment data to our payment service providers or we pass on your payment data to our house bank, whereby these third parties are responsible for payment processing. The legal basis for this is Art. 6 para. 1 s. 1 lit. b GDPR. You can optionally create a customer account through which we can store your data for further purchases in the future. Upon the creation of an account, the data you provide will be revocably stored. All further data, including your user account, can always be deleted in the customer area. We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.
(2) Due to commercial and tax regulations, we are obliged to store your address, payment, and order data for a period of ten years. However, we restrict processing after three years, meaning that from this time your data will be used only to comply with legal obligations.
(3) To prevent unauthorized access to your personal data by third parties, the ordering process is encrypted using TLS technology.
§ 10 Use of the Payment Service Provider MixPay
(1) As part of our online services, we offer you the option to make payments using the payment service provider “MixPay” from the company MIXPMT LTD in 3-212 Governors Square, 23 Lime Tree Bay Avenue P.O. Box 30746, Seven Mile Beach GEORGE TOWN, GRAND CAYMAN, KY1-1203 Cayman Islands.
(2) Personal data processed within the scope of using MixPay serve the purpose of providing the payment services you requested. This includes:
– Processing of payment transactions,
– Fraud prevention and detection,
– Fulfillment of legal obligations (e.g., anti-money laundering),
– Improvement and personalization of the service.(3) The data processed include identification and contact information, payment transaction information, transaction data, and technical data that can be collected during the use of our services.
(4) The processing of your personal data is based on Art. 6 Abs. 1 lit. b) GDPR for the fulfillment of a contract of which you are a party or for the execution of pre-contractual measures. Additionally, processing is based on Art. 6 Abs. 1 lit. c) GDPR to fulfill a legal obligation and Art. 6 Abs. 1 lit. f) GDPR based on our legitimate interests, in particular, to improve our services and protect against fraud.
(5) Your personal data may be transferred to the following recipients:
– Banks and other payment service providers for payment processing,
– Authorities and other state bodies if this is legally required,
– Service providers that assist us in providing our services (e.g., IT service providers).(6) Further information about the payment service provider used can be found here: https://mixpay.me/privacy-policy