Protecting your personal data is important to us and we want you to feel safe when visiting our website. We comply with the provisions of data protection law, in particular the EU General Data Protection Regulation (“GDPR”).
In this privacy statement, we explain to you what information (including personal data) we process when you visit and use our website www.imoxo.de (“website”).
We would like to point out that security gaps may occur when transmitting data over the Internet (e.g. when communicating by e-mail). It is not possible to completely protect data from access by third parties.
The person responsible for the processing of personal data within the meaning of data protection law is:
imoxo GmbH (“we”)
Altkönigstrasse 11
65812 Bad Soden
Phone: +49 6174 91369-0
info@imoxo.de
Contact details of the data protection officer:
imoxo GmbH
data protection officer
Altkönigstrasse 9
65812 Bad Soden
Phone: +49 6174 91369-0
info@imoxo.de
You can access our website without providing direct information about yourself (such as name, postal address or email address). However, in order to enable you to access our website, we must collect and store certain information.
1. Log files: We collect information about you when you use this website. We automatically collect information about your usage behavior and interaction with us and register information about your computer or mobile device. We collect, store and use data about every access to our online offering (so-called server log files). The access data includes the name and URL of the retrieved file, date and time of retrieval, amount of data transferred, message of successful retrieval (HTTP response code), browser type and browser version, operating system, referrer URL (i.e. the previously visited page), IP address and the requesting provider. We use this log data without attribution to you or other profiling for statistical evaluations for the purpose of operating, security and optimizing our online offering, but also to anonymously record the number of visitors to our website (traffic) and the extent and type of use of our website and services, as well as for billing purposes to measure the number of clicks received from cooperation partners. Based on this information, we can provide personalized and location-based content and analyze traffic, find and fix errors, and improve our services. We reserve the right to review the log data retrospectively if, on the basis of concrete evidence, there is a legitimate suspicion of illegal use. We store IP addresses in log files for a limited period of time if this is necessary for security purposes or to provide services. We also store IP addresses if we have a specific suspicion of a criminal offence in connection with the use of our website.
2. Contacting us: If you contact us via one of the options offered on our website, we process all personal data contained and provided in your message to process and answer your request.
3. Cookies: We use cookies to make our website as user-friendly as possible. Cookies are small text files that are stored by your Internet browser. With the help of these files, we can recognize our visitors' preferences when browsing the website and design our website accordingly. Most of the cookies we use are known as session cookies. They are automatically deleted when you leave the website. We also use persistent cookies. Our cookies do not collect any personal data, nor are they suitable for making you identifiable on third-party websites, unless otherwise stated in this privacy statement with regard to specific tools. You can adjust your browser settings so that you are notified when cookies are being set. This makes the use of cookies transparent to you. You can generally reject cookies via your browser settings. However, this may mean that you are unable to use all functions of our website.
4. Website analysis with Google Analytics: On our website, we also use Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), to continuously improve our website. Google Analytics also uses cookies, which are stored on your computer and enable an analysis of the use of this website. An extended version of Google Analytics is used on the website to collect IP addresses anonymously (also known as IP masking). Google uses the data collected on our behalf to analyze your use of our website, to prepare reports on website activity and to provide us with additional services in connection with the use of the website. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You can deactivate the storage of cookies by changing the appropriate settings in your browser software. Please note that in this case, you may not be able to use all features of the website to their full extent. You can also prevent the data generated by the cookie regarding your use of this website (including your IP address) from being recorded and transmitted to Google and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com; an unsubscribe cookie will then be installed to prevent your data from being collected when you visit this website. For more information about data protection at Google Analytics, please visit the following link: www.google.com/analytics and www.google.com/privacyoverview.html.
5. Marketing activities: When you visit our website, technology from Google Inc. (“Google”), partly set cookies, which are used for general marketing, retargeting and statistical purposes. These cookies can trigger personalized advertising on external websites. With this process, too, we only generate anonymized user data. Most browsers are automatically set to accept cookies. However, if you wish, you can configure your browser to restrict or completely block cookies by changing your browser settings.
6. Microsoft Bing: This website uses the Microsoft Bing map service via an API. Microsoft Bing is provided by Microsoft. In order for you to be able to use the features of Microsoft Bing, your IP address must be saved. This data is usually transferred to a Microsoft server in the USA and stored there. The operator of this website has no influence on this data transfer.
7. Links to other websites: Our website also provides links to other offers (including our online presence on Facebook, YouTube, Google+, LinkedIn and Instagram). Please note that when you access this other offer, the operator of this offer may collect information (possibly including personal data) about your visit. Further information is contained in the privacy policy of the operator of the corresponding offer.
1. The personal data that may be contained in the log files is processed to enable you to use our website; processing is carried out in accordance with Section 15 (1) German Telemedia Act (TMG) and Article 6 (1) f) GDPR to protect our legitimate interest in operating our website.
2. The data collected via cookies (including web analysis services, plug-ins and tools) and pseudonymized user profiles are processed for advertising and market research purposes and to make our website user-friendly on the basis of Section 15 (3) TMG and Article 6 (1 f) GDPR to protect our legitimate interest in analyzing the use and user-friendly design of our website.
3. Data processing in the context of answering an enquiry is based on Article 6 (1) f) GDPR to protect our legitimate interest in establishing and maintaining business contacts. Insofar as your request relates to the conclusion of a contract or to pre-contractual measures, we process your personal data on the basis of Article 6 (1) b) GDPR, in the context of employment relationships on the basis of Section 26 BDSG.
4. We may also process the personal data processed in connection with your use of our website to comply with legal obligations to which we are subject; this is done on the basis of Article 6 (1) c) GDPR.
5. In addition to the purposes mentioned above, we may also process personal data to protect our legitimate interests or the interests of third parties; this is done on the basis of Article 6 (1) f) GDPR. Our legitimate interests include asserting legal claims and defending our interests in legal disputes, preventing and investigating criminal offences, and managing and developing our business, including risk management.
If we collect additional personal data from you, we will inform you as part of collecting your data whether the provision of this data is based on a legal or contractual obligation or is a requirement necessary to conclude a contract. In this regard, we usually mark information that can be provided voluntarily and whose provision is not based on the above obligations or is not necessary to conclude a contract.
As a rule, your personal data is processed in our company. Depending on the type of personal data, only certain departments/organizational units have access to your personal data. A role and authorization concept limits access within our company to the functions required for the respective processing purpose and to the scope required in this regard.
To the extent permitted by law, we may also share your personal information with third parties outside of our company. In particular, these external recipients may include the following people:
companies that belong to our group of companies, insofar as they are involved in processing inquiries or orders,
service providers commissioned by us who provide services for us on the basis of a separate contract, which may include the processing of personal data, as well as all subcontractors commissioned by our service providers with our consent, shipping companies involved in processing your order,
Credit institutions involved in processing payments, private and public bodies, insofar as we are required to transfer your personal data due to legal obligations.
In connection with operating our website, we usually do not use automated decision-making (including profiling) within the meaning of Article 22 GDPR. If we use such procedures in special cases, we will inform you separately to the extent required by law.
As part of our web analysis services, plug-ins and tools, as well as in connection with using our website and contacting us, information may be transmitted to recipients in “third countries,” in particular the USA. “Third countries” are countries outside the European Union or the European Economic Area for which it cannot be readily assumed that the level of data protection is comparable with that of the European Union. Insofar as the information provided also includes personal data and we are not obliged to transfer the data due to a legal obligation, we will ensure that the required appropriate level of data protection is maintained in the respective third country or by the recipient in the third country before transmission. In particular, this can take the form of an “adequacy decision” by the European Commission, which ensures that an adequate level of data protection has been established for a particular third country overall. Such an adequacy decision exists with regard to Israel. Alternatively, we may transfer data in particular on the basis of “EU standard contractual clauses” agreed with a recipient or for recipients in the USA, if and insofar as this is required under applicable data protection laws. On request, we will be happy to provide you with further information about the appropriate and appropriate guarantees for compliance with an appropriate level of data protection; the corresponding contact details can be found at the beginning of this data protection statement. For information on the EU standard contractual clauses, please visit: http://eur-lex.europa.eu and information on the adequacy decisions can be found here: https://ec.europa.eu.
As a rule, we store your personal data as long as we have a legitimate interest in storing it and this outweighs your interest in stopping storage. We can continue to store the data even without a legitimate interest if we are required to do so by law (e.g. to fulfill archiving obligations). We delete your personal data without your intervention as soon as the data is no longer required to fulfill the processing purpose or its storage is otherwise prohibited by law.
The personal data that we must store to fulfill the archiving obligations will be stored until the respective archiving obligation expires. Insofar as we store personal data only to fulfill archiving obligations, the data is usually blocked so that it can only be accessed if it is necessary for the purpose of the archiving obligation.
The following rights apply only:
for data subjects who are located in the EU and whose personal data is processed by us as described above, provided that the processing activities are related to the offer of goods or services or if the behavior of the data subjects is monitored insofar as their conduct takes place within the EU;
for data subjects whose personal data is processed as part of imoxo GmbH's activities, regardless of whether the processing takes place in the EU or not.
a) The right of objection under Article 21 GDPR
You have the right to object to the processing of your personal data on the basis of Article 6 (1) e) or 1 f) GDPR at any time for reasons relating to your particular situation; this also applies to profiling based on these provisions. Should you object to processing, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for processing that prevail over your interests, rights and freedoms, or for asserting, exercising or defending legal claims.
If we process your personal data for direct marketing purposes, you are entitled to object to the processing of your personal data for such advertising purposes at any time; this also applies to profiling insofar as this is related to direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
b) Other rights
As a data subject, you have the following rights:
Information about your stored personal data, Article 15 GDPR
Correction of incorrect or incomplete data, Article 16 GDPR
Deletion of personal data, Article 17 GDPR
Restriction of processing, Article 18 GDPR and data portability, Article 20 GDPR
You can withdraw your consent to the data processing granted to us at any time with effect for the future. A notification by e-mail is sufficient for this purpose. The legality of data processing carried out before your withdrawal remains unaffected by the revocation. Furthermore, data processing may continue despite your withdrawal of consent if another legal basis (e.g. Article 6 (1) (b) GDPR or Article 6 (1) f) GDPR) has been proven.
To exercise these rights, you can contact us at any time, for example by using one of the contact options listed at the beginning of this data protection information.
In addition, you have the right to lodge a complaint with the supervisory authority responsible for data protection, Article 77 GDPR.