Data Privacy Statement

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point about which of your personal data we collect when you visit our website and for what purposes it is used.

This data protection declaration applies to the Internet offer of Labelident GmbH, which can be reached under the domain www.labelident.de and the various subdomains ("our website").

1. Who is responsible and how can I contact you?

Responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR):

Labelident GmbH, Parisstraße 5, 97424 Schweinfurt, Phone +49 9721 79 398-0, Fax +49 9721 79 398-14, E-Mail: datenschutz@labelident.de

Data protection officer:

AGAD Service GmbH, Waldring 43-47, 44789 Bochum, Dr. Nils Helmke, E-Mail: datenschutz@labelident.de

2. What is it about?

This data protection declaration meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes e.g. information such as your name, your age, your address, your telephone number, your date of birth, your e-mail address, your IP address or user behavior when visiting a website. Information that we cannot (or only with a disproportionate amount of effort) relate to your person, e.g. through anonymization, is not considered personal data. The processing of personal data (e.g. collection, querying, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We inform you in the individual processing operations about the specific storage periods or criteria for the storage. Irrespective of this, we store your personal data in individual cases to assert, exercise or defend legal claims and if there are statutory storage obligations.

3. Who gets my data?

We only pass on your personal data, which we process on our webseite, to third parties if this is necessary for the fulfillment of the purpose and is covered in the individual case by the legal basis (e.g. consent or protectipn of legitimate interests). In addition, we pass on personal data to third parties in individual cases if this serves to assert, exercise or defend legal claims. Possible recipients can be e.g. law enforcement agencies, lawyers, auditors, courts, etc.

As far as we use service providers for the operation of our website who process personal data on our behalf within the scope of order processing in accordance with Art. 28 GDPR, these can be recipients of your personal data. More information on the use of processors and web services can be found in the overview of the individual processing operations.

4. Do you use cookies?

Cookies are small text files that are sent to the browser of your end device and stored there when you visit our website. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able to e.g. recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, e.g. by understanding how you use our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not damage your end device. They cannot run programs and do not contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. You can find detailed information on the cookies used in the cookie settings or in the Consent Manager of this website.

5. What rights do I have?

Under the conditions of the legal regulations of the General Data Protection Regulation (GDPR) you have the following rights:

Information in accordance with Art. 15 GDPR about the data stored about you in the form of meaningful information about the details of the processing as well as a copy of your data.

Correction in accordance with Art. 16 GDPR of incorrect or incomplete data, that are stored with us.

Deletion in accordance with Art. 17 GDPR of the data stored by us, insofar as the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is required.

Restriction of processing in accordance with Art. 18 GDPR if the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you refuse to delete it because you need it to assert, exercise or defend legal claims or you have raised an objection to the processing pursuant to Art. 21 GDPR.

Data transferability in accordance with Art. 20 GDPR, insofar as you have given us personal data within the scope of consent in accordance with Art. 6, para. 1 (a) GDPR or on the basis of a contract according to Art. 6, para. 1 (b) GDPR have provided and these have been processed by us using automated procedures. You will receive your data in a structured, common and machine readable format or we will transmit the data directly to another person in charge, insofar as this is technically feasible.

Objection inaccordance with Art. 21 GDPR against the processing of your personal data, insofar as this is based on Art. 6, para. 1 (e) (f) GDPR and there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling reasons worthy of protection for the processing can be proven or the processing is carried out to assert, exercise or defend legal claims. If there is no right to object to individual processing operations, this is stated there.

Revocation in accordance with Art. 7, para. 3 GDPR of your given consent with effect for the future.

Complaint in accordance with Art. 77 GDPR with a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

6. How is my data processed in detail?

Below we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

(1) Provision of the website

Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so called log file:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and guaranteeing security and stability on the basis of Art. 6 (f) GDPR. The collection of the data and the storage in log files is absolutely necessary for the operation of the website. A right to object to the processing exists not due to the exception under Art. 21, para. 1 GDPR. As far as the further storage of the log files is required by law, the processing takes place on the basis of Art. 6 (1) (c) GDPR. There is no legal or contractual obligation to provide the data, but it is technically not possible to access our website without providing the data.

Storage duration

The aforementioned data is stored for the duration of the website display and, for technical reasons, for a maximum of 14 days.

(2) Contact form

Type and scope of processing

On our website we offer you the option of contacting us using a form provided. The information collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you believe is necessary for processing the contact request.

When you use the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

Your data will be processed by using our contact form for the purpose of communicating and processing your request on the basis of your consent in accordance with Art. 6, para. 1 (a) GDPR. As far as your request relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6, para. 1 (b) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Storage duration

If you use the contact form on the basis of your consent, we will store the data collected for each inquiry for a period of ten years, starting with the completion of your inquiry or until you revoke your consent.

If you use the contact form as part of a contractual relationship, we will store the data collected for each inquiry for a period of ten years from the end of the contractual relationship.

(3) Newsletter

Type and scope of processing

If you register on our website to receive our newsletter, we collect your email address and store this information together with the date of registration and your IP address. Further information is voluntary. You will then receive an email in which you must confirm your subscription to the newsletter (double opt-in). If you do not confirm your registration, it will expire automatically and the data will not be used to send the newsletter.

To send the newsletter, we use a service from rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau, which processes your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.

Purpose and legal basis

We process your data for the purpose of sending the newsletter on the basis of your consent in accordance with Art. 6, para. 1 (a) GDPR. By unsubscribing from the newsletter, you can revoke your consent at any time with effect for the future in accordance with Art. 7, para. 3 GDPR to explain. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.

Storgae duration

After successful confirmation, we will store your data until you revoke your consent (unsubscribe from the newsletter).

(4) Bing Ads

Type and scope of processing

We have integrated Bing Ads on our website. Bing Ads is a service provided by Microsoft Corporation to display targeted advertising to users. Bing Ads uses cookies and other browser technologies to evaluate user behavior and to recognize users.

Bing Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. In addition, Bing Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent will be transmitted to the provider.

In this case, your data will be passed on to the operator of Bing Ads, Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States.

Purpose and legal basis

We process your data with the help of Bing Ads for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Art. 6, para. 1 (a) GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us but is determined by Microsoft Corporation. You can find further information in the data protection declaration for Bing Ads: https://privacy.microsoft.com/en-us/privacystatement.

(5) Amazon Web Services (AWS)

Type and scope of processing

Our online shop is hosted on servers in the AWS cloud. AWS is a cloud platform that provides capacities and extensive functions in globally distributed data centers.

Purpose and legal basis

The use of the AWS cloud is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimization of our online offer in accordance with Art. 6, para. 1 (f) GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Amazon.com Inc. Further information can be found in the data protection declaration for AWS: https://aws.amazon.com/compliance/data-privacy/?nc1=h_ls.

(6) Google Ads

Type and scope of processing

We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behavior and recognize users.

Google Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent will be transmitted to the provider.

If you are registered with a Google Ireland Limited service, Google Ads can assign the visit to your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identification features.

In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis

We process your data with the help of Google Ads for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Art. 6, para. 1 (a) GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. You can find further information in the data protection declaration for Google Ads: https://policies.google.com/privacy?hl=en.

(7) Google Analytics

Type and scope of processing

We use Google Analytics and Google Optimize from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for statistical evaluation and optimization of our online offer. The evaluation includes e.g. the number of views of our online offer, visited sub-pages and the length of stay of visitors.

Google uses cookies and other browser technologies to evaluate user behavior and to recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

We process the collected data with the help of Google Analytics and Google Optimize for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Art. 6, para. 1 (a) GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the data protection declaration for Google Analytics: https://policies.google.com/privacy?hl=en.

(8) Google Tag Manager

Type and scope of processing

We use the Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and allows us to control the precise integration of services on our website.

This allows us to flexibly integrate additional services to evaluate user access to our website.

Purpose and legal basis

Google Tag Manager is used on the basis of our legitimate interests, i.e. interest in optimizing our services in accordance with Art. 6, para. 1 (f) GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us but is determined by Google Ireland Limited. Further information can be found in the data protection declaration for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

(9) Mouseflow CDN

Type and scope of processing

We use Mouseflow CDN to properly provide the content of our website. Mouseflow CDN is a service of Mouseflow, Inc. which acts as a Content Delivery Network (CDN) on our website to ensure the functionality of other Mouseflow, Inc. services. You will find a separate section in this data protection declaration for said services. This section is only about using the CDN.

A CDN helps to provide the content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Mouseflow, Inc., 501 Congress Ave Suite, 150 Austin, TX 78701, United States, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed solely for the purposes set out above and to maintain the security and functionality of Mouseflow CDN.

Purpose and legal basis

The Content Delivery Network is used on the basis of our legitimate interests, i.e. interest in the secure and efficient provision and optimization of our online offer in accordance with Art. 6, para. 1 (f) GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Mouseflow, Inc. For more information, see the Mouseflow CDN Privacy Policy: https://mouseflow.com/privacy/.

(10) Consentmanager

Type and scope of processing

We have integrated the consent management tool "consentmanager" (www.consentmanager.net) from Jaohawi AB (Håltgelvågen 1b, 72348 Västerås, Sweden, info@consentmanager.net) on our website to obtain consent for data processing or use of cookies or similar functions.

With the help of "consentmanager", you have the option of giving or rejecting your consent to certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, range measurement and personalized advertising. You can use "consentmanager " to give or deny your consent for all functions or give your consent for individual purposes or individual functions.

You can also change the settings you have made afterwards. In the course of using "consentmanager", personal data and information on the end devices used, such as the IP address, are processed.

Purpose and legal basis

The purpose of integrating "consentmanager" and the associated data processing is to allow the users of our website to decide whether to set cookies and to offer them the opportunity to change settings that have already been made as part of their continued use of our website. The legal basis for processing is Art. 6, para. 1 (c) in conjunction with Art. 6, para. 1 (a) in conjunction with Art. 7, para. 1 GDPR and, alternatively, Art. 6, para. 1 (f) GDPR. The processing of the data serves us to fulfill our legal obligations (e.g obligation to provide evidence). Our legitimate interests in processing lie in the storage of user settings and preferences in relation to the use of cookies and other functionalities.

Storage duration

"Consentmanager" stores your data as long as your user settings are active. Two years after making the user settings, you will be asked again for consent. The user settings made are then saved again for this period.

(11) ShopVote & Use of ShopVote Graphics

Type and scope of processing

We have integrated ShopVote graphics on this website to display our ShopVote seal and any collected and/or aggregated ratings. The ShopVote graphics and the services advertised with them are an offer from Blickreif GmbH, Alter Messeplatz 2, 80339 Munich. When the ShopVote graphics are called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the call, amount of data transferred and the source of the call (access data) and documents the call. The ShopVote graphics do not record or store any other personal data.

If you have given us your consent to this during or after your order in accordance with Art. 6, para. 1 (a) GDPR we convey your order code and email address to SHOPVOTE from Blickreif GmbH, Alter Messeplatz 2, 80339 Munich (SHOPVOTE) so that they can send you a review reminder by email. You can revoke your consent at any time by sending a message to the person responsible for data processing or to the rating platform.

Purpose and legal basis

The purpose of the data processing is the optimal marketing of our offer on the basis of your consent in accordance with Art. 6, para. 1, cl. 1 (a) GDPR.

Storage duration

The access data is not evaluated and automatically overwritten no later than seven days after the end of your visit to the site.

(12) UserLike

Type and scope of processing

We use the Userlike chat module from Devcores UG, Aachener Straße 53, 50674 Cologne. The information about your use of the live chat is collected, stored and processed on Userlike servers in Germany. The chat module enables you to contact us easily and simply. For this we only need your email address and your name.

Purpose and legal basis

We use the chat module to be able to address our customers in a more targeted manner. The legal basis is your consent in accordance with Art. 6, para. 1, cl. 1 (a) GDPR.

Storage duration

Userlike saves the history of live chats. This serves the purpose of saving you from extensive explanations about the history of your request and for constant quality control of our live chat offer. If you do not want this, you are welcome to let us know using the contact details listed below. Saved live chats will then be deleted by us immediately. In all other cases, the chat history becomes irretrievable after 30 days at the latest. For more information, please refer to the privacy policy Userlike: https://www.userlike.com/en/terms#privacy-policy.

(13) Cyren (malware check)

Type and scope of processing

We check incoming mail traffic with the help of Mail Security from Cyren GmbH, Heidestr. 10, 10557 Berlin. The tool enables email traffic to be checked for malware. The content of the mail is not evaluated. In individual cases - for example if the result is positive - the mail is checked in Israel or the USA. The content of the mail is not checked, the finding is only compared with the quarantine file; the textual content of the mail is not evaluated by the provider. This can lead to the transmission of individual personal data, such as the IP address.

Purpose and legal basis

We use this tool to increase our data security and to protect our systems from harmful software and viruses. The legal basis for data processing is Art. 6, para. 1, cl. 1 (f) GDPR. The provider has submitted to the EU-US Privacy Shield Agreement. For Israel, the European Commission has established a secure level of data protection as part of an adequacy decision.

Storage duration

For the above purpose, the data will only be processed until the purpose is fulfilled and the verification is completed.

(14) Matomo

Type and scope of processing

We use the open source software tool Matomo (https://matomo.org) on our website to analyze the surfing behavior of our users. Matomo does not use cookies. We use Matomo in so-called cookie-free mode to analyze the use of the website. Your IP address is an anonymous identifier for us; we have no technical way of identifying you as a registered user. You remain anonymous as a user.

Matomo runs exclusively on the servers of our website. A storage of the analysis data of the users only takes place there. The data will not be passed on to third parties.

Purpose and legal basis

The processing of the anonymized analysis data enables us to analyze the surfing behavior of our users in more detail without processing personal data. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us improve our website and theirs to continuously improve user-friendliness. By making the IP address anonymous, the user's interest in the protection of personal data is sufficiently taken into account. The legal basis for data processing is Art. 6, para. 1 (f) GDPR.

Storage duration

For the stated purpose, the data will only be processed until the purpose has been fulfilled. Personal data is not processed or only processed anonymously.

You can find more information about the privacy settings of the Matomo software under the following link: https://matomo.org/docs/privacy/.

(15) Payments via PayPal

Type and scope of processing

We offer the option of processing the payment transaction via the payment service provider PayPal (PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg). The following data is transmitted to PayPal: first name, last name, address, e-mail address, telephone number.

The processing of this data is not required by law or contract. Without the transmission of your personal data, we cannot carry out a payment via PayPal. You have the option of choosing a different payment method.

Purpose and legal basis

It is in our legitimate interest to offer an efficient and secure payment method (Art. 6, para. 1 (f) GDPR). In this context, we pass on the above data to PayPal as far as this is necessary for the fulfillment of the contract (Art. 6, para. 1 (b) GDPR).

PayPal carries out a credit check for various services such as payment by direct debit in order to ensure your willingness and ability to pay. This corresponds to PayPal's legitimate interest (according to Art. 6, para. 1 (f) GDPR) and serves to execute the contract (according to Art. 6, para. 1 (b) GDPR). Your data (name, address and date of birth, bank account details) will be passed on to credit agencies for this purpose. We have no influence on this process and only receive the result of whether the payment was made, rejected or pending verification.

You can find more information on how to object to and remove PayPal from: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Storage duration

Your data will be stored until the payment has been processed. This includes the time it takes to process refunds, claims management and fraud prevention. A statutory retention period of ten (10) years applies to us.

Date: 07.10.2022