Privacy Policy
1) Introduction and Contact Details of the Data Controller
1.1 Welcome to our website and thank you for your interest. We would like to inform you about how we handle your personal data when you use our website. Personal data refers to any data that can identify a person.
1.2 The data controller responsible for processing your data on this website in accordance with the General Data Protection Regulation (GDPR) is Basel Alwaros, Karl-Hilbig-Straße 3, 04159 Leipzig, Germany, Phone: +49 163 3787087, Email: info@deutschland-helden.de. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When you use our website for informational purposes only, meaning if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (the so-called “server log files”). When you visit our website, we collect the following data that is technically necessary for the website to be displayed:
- Visited page
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address (if applicable, in anonymized form)
Processing is based on Article 6.1(f) of the GDPR due to our legitimate interest in improving the website’s stability and functionality. The data will not be passed on or used for any other purpose. However, we reserve the right to review server log files if there are specific indications of illegal use.
2.2 This website uses SSL or TLS encryption to secure the transmission of personal data and other confidential information (e.g., inquiries or messages to the data controller). You can recognize the encrypted connection by the prefix “https://” and the padlock icon in your browser’s address bar.
3) Hosting and Content Delivery Network
To host our website and display its content, we use a service provider that provides its services on servers within the European Union, either directly or through selected subcontractors.
All data collected on our website is processed on these servers.
We have entered into a data processing agreement with the provider that ensures the protection of website visitors’ data and prohibits the transfer to third parties without permission.
4) Cookies
To make your visit to our website more attractive and to enable certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for a longer period to retain settings on the site (so-called “persistent cookies”). In the latter case, you can see the storage time in the cookie settings of your browser.
If data is processed through certain cookies we use, this is done based on Article 6.1(b) of the GDPR to perform a contract, or based on Article 6.1(a) of the GDPR if consent has been given, or based on Article 6.1(f) of the GDPR to protect our legitimate interests in optimizing the website and providing an efficient and user-friendly experience.
You can configure your browser to inform you when cookies are placed and decide whether to accept cookies individually or to reject cookies in certain cases or generally.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contact
5.1 WhatsApp Business
We offer visitors the option to contact us via the WhatsApp messaging service from WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, using the “Business” version of WhatsApp.
If you send us a message about a specific transaction (e.g., an order) via WhatsApp, we store and use your mobile number on WhatsApp, as well as, if provided, your first and last name based on Article 6.1(b) of the GDPR to process and respond to your request. Based on the same legal basis, we may request additional information (order number, customer number, address, or email) to associate your request with a specific transaction.
If you use our WhatsApp contact option for general inquiries (e.g., about service, availability, or our website), we store and use your mobile number on WhatsApp, as well as, if provided, your first and last name based on Article 6.1(f) of the GDPR, based on our legitimate interest in effectively and quickly providing the requested information.
Your data is used only to respond to your request via WhatsApp. It will not be forwarded to third parties.
Please note that WhatsApp Business accesses the address book on our mobile device used for this purpose and automatically sends phone numbers stored in the address book to Meta Platforms Inc. servers in the USA. For the use of our WhatsApp Business account, we use a mobile device where WhatsApp data from users who have communicated with us via WhatsApp is only stored in the address book.
We ensure that every person whose data is stored in our address book has given consent to the transfer of their WhatsApp phone number from contact addresses via WhatsApp based on Article 6.1(a) of the GDPR when the application is first used. It is excluded that data from users who do not use WhatsApp and/or have not contacted us via WhatsApp will be forwarded.
For more information on the collection and use of data by WhatsApp and on your rights and options to protect your privacy, see WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
In connection with the described processing, data may be transferred to Meta Platforms Inc. servers in the USA.
The provider has joined the EU-US Data Privacy Framework, which, according to a decision by the European Commission, offers a level of data protection equivalent to that in the European Union.
5.2 In connection with contacting us (e.g., via contact form or email), personal data is collected. The data collected during the use of the contact form is detailed in the form itself. This data is stored and used only to process your request or to contact you, as well as for the technical administration related to it.
The legal basis for the processing of this data is our legitimate interest in responding to your request based on Article 6.1(f) of the GDPR. If the purpose of your contact is to enter into a contract, the additional legal basis for processing the data is Article 6.1(b) of the GDPR. Your data will be deleted when your request has been finally processed. This occurs when it is clear that the relevant issue has been finally resolved, unless there are legal obligations to retain data.
6) Registration on the Portal or Forum
You can register on our website by providing personal data. The personal data processed during registration is specified in the registration form. We use the double opt-in method for registration, meaning that your registration is only considered complete after you have confirmed your registration via a confirmation link in an email. If you do not confirm within 24 hours, your registration will automatically be removed from our database. The aforementioned data must be provided. You can voluntarily provide additional information when using our portal.
When using our portal, we store the data necessary for the execution of the contract, including payment method data, until you finally remove your access. Additionally, we store the voluntarily provided additional data during your use of our portal.