Data protection

The controller responsible for the collection, processing, and use of your data is Hommel Küchen- & Möbelmanufaktur GmbH, Eschenstrasse 6, 08468 Reichenbach. If you wish to object to the collection, processing, or use of your data by Hommel Küchen- & Möbelmanufaktur GmbH in accordance with this Privacy Policy, either in whole or for individual measures, you can send your objection by email or letter to the following contact details:

Hommel Küchen- & Möbelmanufaktur GmbH
Eschenstrasse 6
08468 Reichenbach
Email: hallo@unikaad.de

General Information

We want you to know when we collect which data and how we use it; therefore, you will find notes below on how we handle your data. As our website develops and new technologies are implemented, changes to this Privacy Policy may become necessary. We therefore recommend that you read this Privacy Policy again from time to time.

This Privacy Policy explains the type, scope, and purpose of the processing of personal data within our online offering and the websites, functions, and content associated with it (hereinafter collectively referred to as the “online offering” or “website”).

With regard to the terms used, such as “personal data” or their “processing,” we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Data Collection and Processing

You can visit our site without providing information about yourself. We only store access data without personal reference, such as the name of your internet service provider, the page from which you visit us, or the name of the requested file. These data are evaluated exclusively to improve our offering and do not allow any inference to your person.

The personal data of users—i.e., interested parties and visitors to our online offering—processed within this online offering include master data (first and last name, postal code, email address, telephone number, IP address) as well as content data (your entries in the questionnaire).

We process users’ personal data only in compliance with the relevant data protection regulations. This means that users’ data are processed only where a legal permission exists. In particular, where processing is necessary for the performance of our contractual services (e.g., processing inquiries) and online services or is legally required, where users have given consent, as well as on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation and security of our online offering within the meaning of Art. 6(1)(f) GDPR, especially in measuring reach, collecting access data, and using services of third-party providers).

We point out that the legal basis for consent is Art. 6(1)(a) and Art. 7 GDPR, the legal basis for processing to fulfill our services and contractual measures is Art. 6(1)(b) GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) GDPR, and the legal basis for processing to safeguard our legitimate interests is Art. 6(1)(f) GDPR.

Security Measures

We take organizational, contractual, and technical security measures according to the state of the art to ensure compliance with data protection laws and to protect the data we process against accidental or intentional manipulation, loss, destruction, or unauthorized access.

Disclosure of Data to Third Parties and Third-Party Providers

Data are disclosed to third parties only within the framework of legal requirements. We pass users’ data to third parties only based on consent granted pursuant to Art. 6(1)(a) GDPR, where necessary for contractual purposes under Art. 6(1)(b) GDPR, or on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR in the economic and efficient operation of our business.

If we use subcontractors to provide our services, we take appropriate legal safeguards and appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal provisions.

If, within the scope of this Privacy Policy, content, tools, or other means from other providers (hereinafter collectively referred to as “third-party providers”) are used and their stated seat is in a third country, it can be assumed that a data transfer to the states where the third-party providers are seated occurs. Third countries are countries in which the GDPR is not directly applicable law, i.e., generally countries outside the EU or the European Economic Area. The transfer of data to third countries takes place either if an adequate level of data protection is in place, users have given consent, or another legal permission exists.

Performance of Contractual Services

We process master data (e.g., names and addresses, as well as contact data of users) and content data (entries in the questionnaire) for the purpose of fulfilling our contractual obligations and services pursuant to Art. 6(1)(b) GDPR.

When using our online services, we store the IP address and the time of the respective user action. Storage is based on our legitimate interests as well as users’ interests in protection against misuse and other unauthorized use. These data are disclosed to third parties if there is a legal obligation pursuant to Art. 6(1)(c) GDPR or on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR in the economic and efficient operation of our business.

Contact

When you contact us (via contact form), the user’s details are processed to handle and respond to the contact request pursuant to Art. 6(1)(b) GDPR.

Users’ details may be stored in our Customer Relationship Management (“CRM”) system or comparable request organization.

Collection of Access Data and Log Files

On the basis of our legitimate interests within the meaning of Art. 6(1)(f) GDPR, we collect data on every access to the server on which this service is located (so-called server log files). Access data include the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address, and the requesting provider.

Log file information is stored for security reasons (e.g., to investigate acts of misuse or fraud) for a maximum of seven days and then deleted. Data whose further retention is required for evidentiary purposes are exempt from deletion until the respective incident has been finally clarified.

Cookies & Reach Measurement

Cookies are information transmitted from our web server or third-party web servers to users’ web browsers and stored there for later retrieval. Cookies can be small files or other types of information storage.

We use “session cookies,” which are only stored for the duration of the current visit to our online presence (e.g., to enable the use of our online offering at all). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. In addition, a cookie contains information on its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online offering, e.g., when you log out or close the browser.

Users are informed about the use of cookies within the scope of pseudonymous reach measurement in this Privacy Policy.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser system settings. Stored cookies can be deleted in the browser’s system settings. Excluding cookies can lead to functional restrictions of this online offering.

You can object to the use of cookies that serve reach measurement and advertising purposes via the Network Advertising Initiative opt-out page (http://optout.networkadvertising.org/) and additionally the U.S. website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

Google Analytics and Other Web Analytics Tools

On the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6(1)(f) GDPR), we use Google Analytics and Google Search Console, web analytics services of Google LLC (“Google”). Google uses cookies. The information generated by the cookie about users’ use of the online offering is typically transmitted to a Google server in the USA and stored there.

Google is certified under the Privacy Shield agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate users’ use of our online offering, to compile reports on activities within this online offering, and to provide us with other services related to the use of this online offering and the internet. In doing so, pseudonymous usage profiles of the users can be created from the processed data.

We use Google Analytics to display ads placed within Google’s advertising services and those of its partners only to users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g., interests in certain topics or products determined by the websites visited) which we transmit to Google (so-called “remarketing” or “Google Analytics Audiences”). With the help of Remarketing Audiences, we also want to ensure that our ads correspond to users’ potential interests and are not annoying.

We use Google Analytics only with IP anonymization enabled. This means that users’ IP addresses are shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

The IP address transmitted by the user’s browser is not merged with other Google data. Users can prevent the storage of cookies by selecting the appropriate settings in their browser software; users can also prevent the collection by Google of the data generated by the cookie and related to their use of the online offering as well as the processing of these data by Google by downloading and installing the browser plugin available at: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information on data use by Google, settings, and opt-out options can be found on Google’s websites: https://www.google.com/intl/de/policies/privacy/partners (“How Google uses data when you use our partners’ sites or apps”), http://www.google.com/policies/technologies/ads (“Advertising”), http://www.google.de/settings/ads (“Manage information Google uses to show you ads”).

Facebook Marketing Services

Within our online offering, due to our legitimate interests in analysis, optimization, and economic operation of our online offering and for these purposes, the so-called “Facebook Pixel” of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or—if you are resident in the EU—Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used.

Facebook is certified under the Privacy Shield agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

The Facebook Pixel is integrated directly by Facebook when our web pages are accessed and can store a so-called cookie—a small file—on your device. If you subsequently log in to Facebook or visit Facebook while logged in, the visit to our online offering will be recorded in your profile. The data collected about you are anonymous to us, i.e., they do not provide us with any conclusions about users’ identities. However, the data are stored and processed by Facebook, enabling a connection to the respective user profile, and can be used by Facebook for its own market research and advertising purposes. If we should transmit data to Facebook for matching purposes, these are locally hashed in the browser and then sent to Facebook via a secure https connection. This is done solely for the purpose of matching with equally hashed data from Facebook.

Facebook processes data in accordance with Facebook’s Data Use Policy. Accordingly, general information on the presentation of Facebook Ads can be found in Facebook’s Data Policy: https://www.facebook.com/policy.php. Specific information and details on the Facebook Pixel and its functioning can be found in Facebook’s Help Center: https://www.facebook.com/business/help/651294705016616.

You can object to collection by the Facebook Pixel and use of your data for displaying Facebook Ads. To set which types of advertisements are shown to you within Facebook, you can visit the page set up by Facebook and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, meaning they are applied to all devices such as desktop computers or mobile devices.

To prevent the collection of your data via the Facebook Pixel on our website, please click the following link: Facebook Opt-Out (if no pop-up appears after clicking the link, Facebook Custom Audience is currently not active).

Note: When you click the link, an “opt-out” cookie will be stored on your device. If you delete cookies in this browser, you will need to click the link again. Furthermore, the opt-out applies only within the browser you use and only within our web domain on which the link was clicked.

You can also object to the use of cookies serving reach measurement and advertising purposes via the Network Advertising Initiative opt-out page (http://optout.networkadvertising.org/) and additionally the U.S. website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices).

Newsletter

The following notes inform you about the contents of our newsletter as well as the registration, dispatch, and the statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described.

Newsletter content: We send newsletters, emails, and other electronic notifications with promotional information (hereinafter “newsletter”) only with the recipients’ consent or a legal permission. If the contents of the newsletter are specifically described as part of a subscription, they are decisive for users’ consent. Otherwise, our newsletters contain information about our products, offers, promotions, and our company.

The newsletters are sent via the mailing service provider “MailChimp,” a newsletter distribution platform of the U.S. provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the service provider’s privacy policy here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement and thus offers a guarantee to comply with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The service provider is used on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR and a data processing agreement pursuant to Art. 28(3) sentence 1 GDPR. The service provider may use recipients’ data in pseudonymous form, i.e., without assigning it to a user, to optimize or improve its own services, e.g., for technical optimization of the dispatch and presentation of the newsletters or for statistical purposes. However, the service provider does not use our newsletter recipients’ data to write to them itself or to pass the data to third parties.

Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. That means after registration you receive an email in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with email addresses that are not their own. Newsletter registrations are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the mailing service provider are also logged.

Registration data: To sign up for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name for the purpose of personal addressing in the newsletter.

Statistical collection and analyses: The newsletters contain a so-called “web beacon,” i.e., a pixel-sized file that is retrieved from the mailing service provider’s server when the newsletter is opened. As part of this retrieval, technical information such as information about the browser and your system, as well as your IP address and the time of retrieval, are initially collected. These data are used to improve services technically based on the technical data, or to determine target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened, and which links are clicked. Although, for technical reasons, this information can be assigned to individual newsletter recipients, it is neither our intention nor that of the mailing service provider to observe individual users. The evaluations serve us much more to recognize our users’ reading habits and to adapt our content to them or to send different content according to our users’ interests.

The statistical surveys and analyses as well as logging of the registration process are carried out on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR. Our interest is in using a user-friendly and secure newsletter system that serves our business interests and meets users’ expectations.

Termination/Revocation: You can cancel the receipt of our newsletter at any time, i.e., revoke your consents. This will simultaneously expire your consent to its dispatch [by the mailing service provider] and to the statistical analyses. Unfortunately, separate revocation of dispatch by the mailing service provider or the statistical evaluation is not possible. A link to cancel the newsletter can be found at the end of each newsletter. If users have only registered for the newsletter and have canceled this registration, their personal data will be deleted.

Integration of Third-Party Services and Content

Within our online offering, on the basis of our legitimate interests (i.e., interest in analysis, optimization, and economic operation of our online offering within the meaning of Art. 6(1)(f) GDPR), we use content or service offerings of third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”). This always requires that the third-party providers of this content perceive the users’ IP address since they could not send the content to their browsers without the IP address. The IP address is therefore required to display this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also referred to as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on users’ devices and may, among other things, contain technical information about the browser and operating system, referring websites, visit time, as well as further information on the use of our online offering, and may also be combined with such information from other sources.

The following overview lists third-party providers and their content, along with links to their privacy policies, which contain further information on data processing and, in some cases already mentioned here, opt-out options:

• External fonts from Google LLC, https://www.google.com/fonts (“Google Fonts”). Integration of Google Fonts is carried out by a server request to Google (usually in the USA). Privacy Policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.

• External CDN from Google LLC, e.g., jQuery. Integration of Google CDN is carried out by a server request to Google (usually in the USA). Privacy Policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.

• Maps provided by the “Google Maps” service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.

• Videos from the “YouTube” platform of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.

• Functions of the Google+ service are integrated within our online offering. These functions are offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are logged into your Google+ account, you can link the contents of our pages to your Google+ profile by clicking the Google+ button. Google can thereby assign the visit to our pages to your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data and their use by Google+. Privacy Policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.

Users’ Rights

Users have the right, upon request and free of charge, to obtain information about the personal data stored by us about them.

In addition, users have the right to rectification of inaccurate data, restriction of processing, and deletion of their personal data; where applicable, to exercise their right to data portability and, in the event of the assumption of unlawful data processing, to lodge a complaint with the competent supervisory authority.

Users may also revoke consent with effect for the future.

Deletion of Data

Data stored by us are deleted as soon as they are no longer required for their intended purpose and there are no statutory retention obligations preventing deletion. If users’ data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. That is, the data will be blocked and not processed for other purposes. This applies, for example, to users’ data which must be retained for commercial or tax law reasons.

According to legal requirements, retention is for 6 years pursuant to § 257(1) of the German Commercial Code (HGB) (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) as well as for 10 years pursuant to § 147(1) of the German Fiscal Code (AO) (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

Google Tag Manager: Google Tag Manager is a solution with which we can manage short terms that characterize the respective website and later lead to results via the search engine (so-called “tags”) via an interface (and thus, for example, integrate Google Analytics and other Google marketing services into our online offering). No personal data of the respective user are collected or processed in the process.

intelliAd Tracking: This website uses the web analytics service intelliAd, provided and operated by diva-e Products GmbH, St. Martin Str. 78, 81541 Munich. For needs-based design and optimization of this website, anonymized usage data are processed and stored in aggregated form. When using intelliAd tracking, cookies are stored locally. You have the right to object to the processing of your usage data. Please use the intelliAd opt-out function for this purpose.

First-Party Tracking: To improve tracking accuracy, the “first-party tracking” procedure is used. A first-party cookie (ia-) is set on the customer’s domain. Full IP addresses are not stored in this procedure either and are processed only in anonymized form.

Right to Object

Users may object at any time to the future processing of their personal data in accordance with the statutory provisions. The objection can in particular be made against processing for direct advertising purposes.

For all questions regarding the collection, processing, or use of your personal data; for information, rectification, blocking, or deletion of data; as well as revocation of consent granted, please contact the email address specified in the legal notice (Impressum).