Privacy POLICY

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1. Thank you for visiting our website and for your interest in our products and services. Below you will find information on how we handle your personal data when you use our website. Personal data refers to all data that can be used to identify you personally.

1.2. Controller for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is alfi GmbH, Ernst-Abbe-Str. 14, Wertheim, Germany, phone: +49 (0) 9342/877-0, email: contact@alfi.de. The Controller is the natural person or legal entity who alone or jointly with others determines the purpose and means of processing personal data.

1.3. For reasons of security and in order to protect the transmission of personal data and other confidential content (such as orders or requests to the Controller), this website applies an SSL or TLS encryption method. An encrypted connection is recognizable by the sequence of characters “https://” and the lock symbol used in your browser bar.

2) DATA COLLECTED WHEN YOU VISIT OUR WEBSITE

If you visit our website simply to obtain information, so if you do not register or transmit information otherwise, we only collect such data that your browser transmits to our server (“server logfiles”). When you pull up our website, we collect the following data, which we require for technical reasons in order to display the website:

Our website that you are visiting
Date and time the page was accessed
Quantity of transmitted data in byte
Source/reference from where you accessed the page
Browser used
Operating system used
IP address used (in some cases in anonymous form)

Data is processed in accordance with Art. 6 (1f) GDPR on the basis of our legitimate interests in improving the stability and functions of our website. Your data is not shared or used otherwise. However, we do reserve the right to review the server log files at a later point should there be any specific indication of illegal use.

3) Cookies

We use so-called cookies on several of our web pages to make your visit to our website more appealing and to enable certain functions to be used. They are small text files that are stored on your end device. Some of the cookies used are deleted after your browsing session has ended, i.e. after you have closed your browser. (“Session cookies”). Other cookies remain on your end device, which allow us or our partner companies (cookies from third parties) to recognize your browser the next time you visit our website (“called persistent cookies”). If cookies are stored, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a predetermined period of time, which may vary depending on the cookie.

In part, the cookies are intended to simplify the ordering process by storing certain settings (e.g. remembering the content of a virtual shopping cart for future visits to the website). If individual cookies used by us also process personal data, the processing is in accordance with Art. 6 (1b) GDPR either for the performance of the contract or in accordance with Art. 6 (1f) GDPR to protect our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective design of the page visit.

In some cases, we may work with advertising partners that help us to create our online presence to be more interesting for you. If this is the case, when you visit our website, cookies from our partner companies may be stored on your hard drive for this purpose (cookies from third party providers). If we work with the aforementioned advertising partners, you will be informed in the paragraphs below individually and separately of the use of such cookies and the scope of the information collected in each case.

Please keep in mind that you can set your browser so that you are informed about when cookies are placed and you can make a decision each time as to whether to accept them, or you can decide to decline the acceptance of cookies in certain cases or generally. Each browser differs in terms of how the cookies settings are managed. This is described in the help menu of each browser, where you will find an explanation on how you can change your cookies settings. You can find this in the respective browser under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you decide not to accept cookies, the functions of our website may be limited.

4) Kontaktaufnahme

Im Rahmen der Kontaktaufnahme mit uns (z.B. per Kontaktformular oder E-Mail) werden personenbezogene Daten erhoben. Welche Daten im Falle eines Kontaktformulars erhoben werden, ist aus dem jeweiligen Kontaktformular ersichtlich. Diese Daten werden ausschließlich zum Zweck der Beantwortung Ihres Anliegens bzw. für die Kontaktaufnahme und die damit verbundene technische Administration gespeichert und verwendet. Rechtsgrundlage für die Verarbeitung dieser Daten ist unser berechtigtes Interesse an der Beantwortung Ihres Anliegens gemäß Art. 6 Abs. 1 lit. f DSGVO. Zielt Ihre Kontaktierung auf den Abschluss eines Vertrages ab, so ist zusätzliche Rechtsgrundlage für die Verarbeitung Art. 6 Abs. 1 lit. b DSGVO. Ihre Daten werden nach abschließender Bearbeitung Ihrer Anfrage gelöscht. Dies ist der Fall, wenn sich aus den Umständen entnehmen lässt, dass der betroffene Sachverhalt abschließend geklärt ist und sofern keine gesetzlichen Aufbewahrungspflichten entgegenstehen.

5) USE OF YOUR DATA FOR DIRECT ADVERTISING

5.1 Registering for our email Newsletter

If you register to receive our email Newsletter you will receive information about our product and service offers on a regular basis. Your email address is the only mandatory information for receiving the Newsletter. The provision of any additional data is voluntary and is only used to address you personally. We use the “double opt-in process” when sending the Newsletter. This means, we will only send you an email Newsletter once you have expressly confirmed that you agree to receiving a Newsletter. We will then send you a confirmation email in which we will ask you to confirm that you would like to receive the Newsletter in the future by clicking on the relevant link.

By activating the confirmation link, you grant us your consent to use your personal data pursuant to Art. 6 (1a) GDPR. When you subscribe to our Newsletter, we store the IP address registered by your Internet service provider (ISP) as well as the date and time you registered in order to be able to trace any misuse of your email address in the future. The data collected when you subscribe to the Newsletter is used exclusively for the promotional purposes when addressing you in the Newsletter. You may unsubscribe from the Newsletter at any time by clicking on the specified link or by sending a message accordingly to the Controller mentioned in the introduction. After you have unsubscribed, your email address will immediately be deleted from our Newsletter distribution list, unless you have expressly consented to further use of your data or we have reserved the right to further use of the data as allowed for by law and of which we inform you in this statement.

5.2 Advertising by direct mail

We reserve the right, on the basis of our legitimate interest in personalized direct advertising, to store your first name and last name, your mailing address and - insofar as we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your occupational, industry or business designation in accordance with Art. 6 (1f) GDPR and to use this information to send you interesting offers and information about our products by mail.

You may object to the storage and use of your data for this purpose at any time by sending a message accordingly to the Controller.

6) Online-Marketing

Facebook Pixel for generating custom audiences

Our website makes use of so-called "Facebook Pixel" offered by the social network Facebook operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").

If a user clicks on an ad on Facebook that we have placed, Facebook Pixel adds an extension to the URL of our linked page. If our site allows data sharing with Facebook via Pixel, this URL parameter will be inserted in the user's browser via a cookie, which our linked site sets itself. This cookie will then be read by Facebook Pixel, allowing the data to be shared with Facebook.

With the help of the Facebook Pixel, Facebook will be able, on the one hand, to determine the visitors to our website as a target group when displaying advertisements (so-called "Facebook ads"). Accordingly, we use Facebook Pixel to display Facebook ads placed by us only to Facebook users who have also shown an interest in our website or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called "Custom Audiences"). The use of Facebook Pixel is also intended to ensure that our Facebook ads correspond to the potential interest of users and are not intended to be an annoyance. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

The collected data are anonymous for us, therefore does not allow us to make any conclusions about the identity of the users. However, the data is stored and processed by Facebook, allowing a connection to the respective user profile and as such Facebook is able to use the data for its own advertising purposes, in accordance with the Facebook data usage policy (https://www.facebook.com/about/privacy/). The data may allow Facebook and its partners to run ads on and off Facebook.

The data processing associated with the use of the Facebook Pixel is based on our overriding legitimate interest in the evaluation, optimization and economic operation of our website and our advertising measures pursuant to Art. 6 (1f) GDPR.

The information generated by Facebook is usually transmitted to a Facebook server and stored there; this may also involve transmission to the servers of Facebook Inc. in the USA. Facebook Inc., with headquarters in the USA, is certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

To opt-out of the data collection by the Facebook Pixel and the use of your data to display Facebook ads altogether, you may set an opt-out cookie by clicking on the link below, which will disable Facebook Pixel tracking: Disable Tracking

This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click on this link again.

7) Webanalysedienste

Google (Universal) Analytics

Google Universal Analytics with demographic characteristics

This website uses Google Analytics, a web analysis service offered by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics makes use of so-called Cookies, text files that are stored on your computer, which allow your use of the website to be analyzed. The information about your use of the website generated by the cookie (including the abbreviated IP address) is generally transmitted to a Google server and stored there. In the process, the information may also be transmitted to the Google LLC servers in the United States.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()", ensuring an anonymization of the IP address by shortening and excluding any direct personal reference. With the extension, your IP address will first be abbreviated by Google within any Member State of the European Union or any other contracting parties to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to Google LLC in the USA and abbreviated there. In these exceptional cases, this data is processed pursuant to Art. 6 (1f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

Google uses this information on our behalf in order to evaluate your use of the website, to compile reports about website activities and to provide us as website operator additional services associated with the website and Internet use. The IP address transmitted by your browser as a part of the Google Analytics process is not consolidated with any other Google data.

You can set your browser software accordingly to prevent cookies from being stored. Please note, however, that in this case you may not be able to use all the functions of this website in their entirety. Furthermore, you can prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being collected and processed by Google by downloading and installing the browser plug-in available through the following link.

https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in or in browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again): Disable Tracking

In the event that personal data is transmitted to Google LLC., with its headquarters in the USA, Google LLC has certified the US-European data protection agreement "Privacy Shield", which guarantees compliance with the level of data protection applicable in the EU. You can view an updated certificate here: https://www.privacyshield.gov/list

This website also uses Google Analytics for a cross-device analysis of visitor flows, which are analyzed with a user-ID. When a page is pulled up for the first time, the user is assigned a unique, permanent and anonymized ID, which is set across devices. With this ID, interaction data from various devices and from different session are assigned to an individual user. The user ID does not include any personal data and does not share any such with Google.

You may object to the collection and storage of the data by way of the user ID at any time with effect for the future. To do so, you must disable Google Analytics on all systems that you use, for example in another browser or on your mobile end device.

In addition, this website also uses the Google Analytics function “Demographic Characteristics”. This can be used to create reports that contain statements about demographic data such as age, gender, and interests of site visitors. This data comes from interest-based advertising from Google, the Google Display Network, as well as visitor data from third-party providers. You can disable this function at any time using the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown below.

The function can be disabled with the aid of a Google browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser plug-in or in browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again): Disable Tracking

You can find more information on Google (Universal) Analytics here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These cookies are small text files stored on your device, collecting certain information. This information includes your IP address, which is, however, truncated by Google to exclude direct personal identification.

The information is transmitted to and processed by Google's servers. Transfers to Google LLC in the United States are also possible.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website usage and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All the processing described above, particularly the setting of cookies on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6(1)(a) of the General Data Protection Regulation (GDPR). Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time for future effect. To exercise your right to revoke, please disable this service using the "Cookie Consent Tool" provided on the website about this link: disable tracking

We have entered into a data processing agreement with Google, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. For data transfers to the United States, Google relies on the European Commission's standard contractual clauses, which are intended to ensure compliance with the European level of data protection. Further legal information regarding Google Analytics 4, including a copy of the mentioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites.

Demographic Features

Google Analytics 4 utilizes the special feature "demographic characteristics" and can generate statistics about the age, gender, and interests of site visitors. This is done through the analysis of advertising and information from third-party sources. This allows for the identification of target audiences for marketing activities. However, the collected data cannot be attributed to any specific individual and is deleted after being stored for a period of two months.

Google Signals

As an extension to Google Analytics 4, this website may use Google Signals to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google, subject to your consent to the use of Google Analytics in accordance with Art. 6(1)(a) of the GDPR, may analyze your cross-device usage behavior and create database models, including cross-device conversions. We do not receive any personally identifiable information from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Advertising" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en For more information about Google Signals, visit the following link: https://support.google.com/analytics/answer/7532985?hl=en

UserIDs

As an extension to Google Analytics 4, this website can utilize the "UserIDs" feature. If you have given consent to the use of Google Analytics 4 in accordance with Art. 6(1)(a) of the General Data Protection Regulation (GDPR), have created an account on this website, and log in with that account on different devices, your activities, including conversions, can be analyzed across devices.

Google Tag Manager

This website uses "Google Tag Manager," a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").

Google Tag Manager provides a technical foundation for bundling various web applications, including tracking and analytics services, and allows for their calibration, control, and conditional implementation through a unified user interface. Google Tag Manager itself does not store or retrieve any information on user devices, nor does it perform independent data analysis. However, when a page is accessed, the Google Tag Manager transfers your IP address to Google and may store it there. It is also possible for the data to be transmitted to servers of Google LLC in the United States.

This processing is only carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) of the General Data Protection Regulation (GDPR). Without this consent, the use of Google Tag Manager will not occur during your visit to the site. You can revoke your consent at any time with future effect. To exercise your revocation, please disable this service using the "Cookie Consent Tool" provided on the website about this link: disable tracking

We have entered into a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties.

For the transfer of data to the United States, the provider relies on the European Commission's standard contractual clauses, which are intended to ensure compliance with the European level of data protection.

8) Tools AND OTHER

8.1 Google Maps

Our website uses Google Maps, API offered by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service used to display interactive maps to illustrate geographical information visually. By using this service, you will be shown our location, making it easier to find us.

Information about your use of our website (such as your IP address) is transmitted to Google servers and stored there as soon as you call up the sub-pages that integrate the Google Maps map. This information may also be transmitted to the Google LLC servers in the USA. This occurs irrespective of whether you have a Google account that you are logged into or whether another user account exists. If you are logged in to Google, your data is assigned to your account directly. If you do not want to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users that are not logged in) as usage profiles and evaluates it. Data is collected, stored and evaluated pursuant to Art. 6 (1f) GDPR on the basis of the legitimate interests of Google in displaying personalized advertising, market research and / or in designing targeted Google websites. You have the right to object to the creation of these user profiles, however you must contact Google to exercise this right.

In the event that personal data is transmitted to Google LLC, with its headquarters in the USA, Google LLC has certified the US-European data protection agreement "Privacy Shield", which guarantees compliance with the level of data protection applicable in the EU. You can view an updated certificate here: https://www.privacyshield.gov/list

If you do not agree to the future transmission of your data to Google in connection with the use of Google Maps, you may also disable the Google Maps web service completely by disabling the JavaScript application in your browser. If you do so, Google Maps can no longer be used and the map will no longer be shown on this website.

You may view the Google terms and conditions of user at https://www.google.de/intl/de/policies/terms/regional.html; additional terms and conditions of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in conjunction with the use of Google Maps (“Google Privacy Policy”) can be found on the Google homepage at: https://www.google.de/intl/de/policies/privacy/

8.2 Google Web Fonts

9) RIGHTS OF THE DATA SUBJECT

9.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) in relation to the controller with respect to the processing of your personal data, about which we inform you below:

Rights of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the intended storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if was not collected from you by us, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing that concern you, as well as your right to be informed about what guarantees exist in accordance with Art. 46 GDPR when your data is transferred to third countries;
Right of rectification pursuant to Art. 16 GDPR: You have the right to obtain from us without undue delay the rectification of inaccurate personal data that concerns you.
Right to erasure pursuant to Art. 17 GDPR: You have the right to request that your personal data is erased provided the requirements of Art. 17 (1) GDPR apply. However, you do not have this right in particular if such data is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercising or defense of legal claims;
Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data in question that you dispute has been verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you require your data to assert, exercise or defend legal claims after we no longer need such data after the purpose has been achieved or if you have lodged an objection on the grounds of your particular situation as long as it has not yet been determined whether our legitimate interests are overridden;
Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, deletion or restriction of processing vis-à-vis the controller, then the controller is obliged to inform all recipients, to whom your personal data has been disclosed, about this rectification or deletion of data or the restriction on processing, unless this proves impossible or involves disproportionate effort. You have the right to be notified of these recipients.
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to transmit such data to another controller to the extent technically possible;
Right to withdraw any issued consent pursuant to Art. 7 (3) GDPR; You have the right to withdraw the your consent to the processing of your data at any time with effect for the future. In the event of a withdrawal of consent, we will erase the relevant data without undue delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the legality of the processing on the basis of consent until the time of its withdrawal;
Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

9.2 RIGHT TO OBJECT

IF WE PROCESS YOUR DATA IN THE CONTEXT OF A RECONCILIATION OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

SHOULD YOU EXERCISE YOUR RIGHT TO OBJECT, WE SHALL IMMEDIATELY REFRAIN FROM PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING YOUR DATA IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

SHOULD YOU EXERCISE YOUR RIGHT TO OBJECT, WE SHALL REFRAIN FROM PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

10) LENGTH OF TIME THAT PERSONAL DATA IS STORED

The length of time for which personal data is stored is calculated on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent pursuant to Art. 6 (1a) GDPR, said data shall be stored until such time that the data subject has withdrawn his or her consent.

Where legal retention periods exist for data processed in the context of legal transactions or obligations similar to legal transactions on the basis of Art. 6 (1b) GDPR, such data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for the purpose of fulfilling the contract or the initiating the contract and/or there is no legitimate interest on our part in continuing to store it.

When processing personal data on the basis of Art. 6(1f) GDPR, such data shall be stored until the data subject has exercised his or her right to object pursuant to Art. 21(1) GDPR, unless we are able to demonstrate compelling legitimate reasons for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of asserting, exercising or defending legal claims.

Where personal data is processed for the purpose of direct marketing on the basis of Art 6 (1f) GDPR, such data is stored until the data subject has exercised his or her right to object according to Art. 21 (2) GDPR.

Unless otherwise stated elsewhere in this statement with respect to specific processing situations, stored personal data shall otherwise be deleted when such data is no longer required for the purposes for which it was collected or otherwise processed.