1. Name and contact details of the person responsible for processing and the company data protection officer
The following information on data protection applies to data processing by:
Brandenburgische Str. 139 ; Berlin-Heidesee
An operational data protection officer is not required.
2. Collection and storage of personal data as well as type and purpose of use
The legal basis for processing operations in which we obtain consent for a specific processing purpose is always Art. 6 para. 1 sentence 1 lit. a GDPR. Insofar as the processing of personal data is necessary to fulfill a contract (provision of services) to which you are a party, the processing is based on Art. 6 Para. 1 S. 1 lit. b GDPR. The above legal basis also applies to the implementation of pre-contractual measures (e.g. inquiries about our products or services).
If our company is subject to a legal (legal) obligation which requires the processing of personal data and which is based on Union law or the law of the Member State to which we are subject, the processing is based on Article 6 (1) sentence 1 lit. c GDPR. Furthermore, processing can be based on Art. 6 para. 1 sentence 1 lit. d GDPR are based if vital interests are affected (danger to life and limb and / or disasters). In addition, the legal basis for the processing of personal data of Art. 6 Para. 1 S. 1 lit. f GDPR. In this case we will inform you of our legitimate interest. Art. 6 para. 1 sentence 1 lit. f DSGVO separately.
The duration of the storage of your data is based on our commercial and tax law retention requirements. In this case, the storage of your data is based on Art. 6 Abs.1 S.2 lit. c GDPR.
a) Visit our website
When you visit our website, your browser automatically sends information to the server on our website that is temporarily stored in a so-called log file. This is the following information:
• IP address of the requesting computer,
Date and time of access,
• Name and URL of the file accessed,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The data is saved until it is automatically deleted after seven days. We process this data for the following purposes:
• ensuring a smooth connection to the website,
• ensuring comfortable use of our website,
• Evaluation of system security and stability as well
• for other administrative purposes.
The data processing we undertake is based on Art. 6 Para. 1 S. 1 lit. f GDPR as the legal basis. The purposes of data collection listed above constitute our legitimate interest. We do not draw any conclusions about you personally from the data collected.
b) Contact form
There is a contact form on our website, which you can use for questions of any kind. This type of data processing is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR with your voluntary consent. A valid email address is required so that we know the sender of the request and can answer it. All other information is voluntary.
All personal data collected by us using the contact form is automatically deleted as soon as your request has been dealt with.
c) Business transactions
If you conclude a distance contract with us, for example by shopping through our online shop, data processing is carried out in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. In addition, we have a legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR on a credit check. The data you provide when entering into the contract or during registration, in particular your name, address and email address, are required for the fulfillment and processing of the contract. The contract cannot be carried out without them. You are expressly informed of this in accordance with Article 13 (2) (e) GDPR. The data will also be passed on to third parties (Section 3) if this is absolutely necessary (e.g. shipping service provider).
The registration data is stored as long as the account exists. If this is deleted, the account data will also be deleted. All data for the conclusion of the contract will be saved until the end of the limitation period. If these are no longer required for the above-mentioned purposes, they will be deleted immediately.
d) Newsletter service
According to Art. 6 Para. 1 S. 1 lit. a GDPR, express consent is required if you would like to receive our newsletter. For the regular sending of the newsletter, we use the email address you provided for this purpose. You do not have to provide any further information to receive the newsletter.
3. Disclosure of data
In principle, your personal data will not be passed on to third parties. Forwarding takes place only in the following cases:
• You have express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR for forwarding to third parties;
• The transfer is in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR to protect our legitimate interests or those of a third party, in particular to assert, exercise or defend legal claims, and you have no overriding interest worthy of protection in not disclosing your data;
• A legal obligation according to Art. 6 Para. 1 S. 1 lit. c GDPR exists;
• The data is processed in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of contractual relationships with you. In this case, your personal data will only be passed on to the service partners involved in the execution of the contract, such as the credit institution commissioned with payment matters and the service company responsible for merchandise management and bookkeeping, provided that this is absolutely necessary for contract fulfillment and processing. In the case of disclosure to third parties, the scope of the information passed on is limited to the minimum required in the context of contract execution.
The data processed by session cookies are necessary for the stated purposes and serve to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.
As a data subject, you can counter the setting of cookies by our website at any time by setting your internet browser accordingly and thus permanently object to the setting of cookies. Cookies that have already been set can be deleted at any time using an Internet browser or other software programs. We would like to point out that deactivating the setting of cookies may result in you not being able to use all functions of our website.
5. Analysis tools and tracking tools
The legal basis for using the following tool is Art. 6 Para. 1 S. 1 lit. a GDPR. Only with this measure can a needs-based design and continuous optimization of our website be ensured. In addition, we can create statistics on the use of our website and continuously optimize our offer.
a) Google Analytics
• Browser type / version
• Operating system used
• Referrer URL (the previously visited page)
• host name of the accessing computer (IP address)
• Time of the server request
These are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the activities of the website and to provide other services related to the use of the website and the Internet for the purposes of market research and the needs-based design of this website. If necessary. this information will also be transferred to third parties if this is required by law or if third parties process this data on behalf.
However, the IP addresses are anonymized so that an assignment is not possible (IP masking). Google will not link your IP address to other data.
As in section 4, the installation of cookies can be prevented by a corresponding setting of the browser software, but this can influence the use of the website. The data collection by this tool can also be prevented by a browser add-on, which you can find under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
On mobile devices, you can simply click on the link and thus prevent Google Analytics from recording it. This sets an opt-out cookie on our device for our website. This lasts until you delete it.
You can withdraw your consent given to us at any time. As a result, we are no longer allowed to continue processing the data based on this consent in the future. However, this does not affect the lawfulness of processing based on consent before its withdrawal.
Further information on data protection in connection with Google Analytics can be found in the "Help" information, which you can find under the following link: https://support.google.com/analytics/answer/6004245?hl=de.
We have concluded the required order data processing agreement with Google. The contract defines the subject and duration of processing, the type and purpose of processing, the type of personal data, the categories of data subjects and the obligations and rights that are incumbent on us under the GDPR. The contract ensures that Google is bound to comply with these obligations. The processing of your data by Google takes place exclusively on our instructions. We have made sure that Google offers sufficient guarantees that suitable technical and organizational measures are carried out in such a way that processing is carried out in accordance with the requirements of the GDPR and that the rights of the data subjects are protected. The processor will not use any other processor without our prior separate or general written approval.
b) Google Ads
This website uses Google AdWords. AdWords is an online advertising program by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called conversion tracking. If you click on an advertisement placed by Google, a cookie for the conversion tracking is set. Cookies are small text files that the Internet browser places on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
Every Google AdWords customer receives a different cookie. The cookies cannot be tracked through the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users. If you do not want to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics.
The website operator is interested in analyzing user behavior in order to optimize both its website and its advertising. “Conversion cookies” are saved on the basis of Art. 6 Para. 1 lit. a GDPR.
You can find more information on Google AdWords and Google Conversion Tracking in Google's data protection regulations: https://www.google.de/policies/privacy/.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.
6. Social media plug-ins
On the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, we use social plug-ins from the social networks Facebook and Instagram to increase our awareness on our website. This advertising purpose is to be classified as a legitimate interest within the meaning of the GDPR. The respective provider of the plug-ins are responsible for data protection-compliant operation. We try to protect the visitor to our website as best we can by integrating the plug-ins using the so-called two-click method.
Social media plug-ins from Facebook in the form of “LIKE” or “SHARE” buttons are used on our website. It is an offer from Facebook. When you visit a page on our website that contains such a plug-in, your browser establishes a direct connection to the Facebook servers. The content of the plug-in is transmitted from Facebook directly to your browser, which integrates it into the website.
By integrating the plug-ins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged in to Facebook. This information (including your IP address) is sent from your browser directly to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plug-ins, for example by pressing the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.
Facebook can use this information for the purposes of advertising, market research and the needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. For example, to evaluate your use of our website with regard to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to the use of Facebook.
If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options for protecting your privacy can be found in Facebook's data protection information, which can be found at the following link: https://www.facebook.com/ about / privacy /.
So-called social plug-ins (“plug-ins”) from Instagram are used on our website, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).
The plug-ins are marked with an Instagram logo, for example in the form of an "Instagram camera".
When you visit a page of our website that contains such a plug-in, your browser establishes a direct connection to the Instagram servers. The content of the plug-in is transmitted from Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are currently not logged in to Instagram.
This information (including your IP address) is sent from your browser directly to an Instagram server in the USA and stored there. If you are logged into Instagram, Instagram can immediately assign your visit to our website to your Instagram account. If you interact with the plug-ins, for example by pressing the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.
The information is also published on your Instagram account and displayed to your contacts there.
If you do not want Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website.
Our website also uses plug-ins from the service "pinterest.com", which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest"). The plug-in can be recognized by the Pinterest logo. As with the other social media plug-ins, a direct connection to the Pinterest servers is established when you visit our website and log data is transmitted to the Pinterest servers. These are located in the United States, among others. The log data may contain your IP address, the address of the websites visited, which also contain Pinterest functions, type and settings of the browser, date and time of the request, your use of Pinterest and cookies. Pinterest can assign your visit to our website to your Pinterest account if you are logged in under it. When you click the Pinterest button, the corresponding information is forwarded from your browser directly to Pinterest.
Further information on the purpose, scope and further processing and use of the data by Pinterest as well as your rights and options to protect your privacy can be found in Pinterest's data protection information: https://about.pinterest.com/de/privacy-policy. We have no further knowledge of data usage.
Plug-ins of the short message network of Twitter Inc. (Twitter) are integrated on our website. You can recognize the Twitter plug-ins (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found here: https://publish.twitter.com/#
When you visit a page on our website that contains such a plug-in, a direct connection is established between your browser and the Twitter server. Twitter thus receives the information that you have visited our site with your IP address. If you click the Twitter “tweet button” while you are logged into your Twitter account, you can link the content of our pages to your Twitter profile. This enables Twitter to associate your visit to our website with your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or of how it is used by Twitter.
If you do not want Twitter to be able to associate your visit to our website, please log out of your Twitter user account.
Further information can be found in Twitter's data protection declaration at: https://twitter.com/de/privacy.
A link to the internet platform www.youtube.com is placed on our site. YouTube LLC, with its main office at 901 Cherry Avenue, San Bruno, CA 94066, USA, is responsible for this appearance. (https://www.youtube.com/t/terms).
Information about the data provided to YouTube LLC:
As soon as you run the corresponding plug-in and visit the website www.youtube.com, YouTube LLC collects data from you. We expressly point out that we only have the following knowledge about data processing by YouTube:
Basically, data is collected and transmitted with every interaction with www.youtube.com. First of all, the data is saved that you provide to the platform operator yourself (especially when registering for a user account).
Even if you do not provide your own information, data is collected when you use the services: In particular, information about the services you use and the type of use is collected, for example, when you watch a video on YouTube, visit a website where our advertising services are used , or when you view and interact with our advertising and content.
Our website also uses plug-ins from the "tumblr.com" service, which is operated by Tumblr, Inc., located at 770 Broadway, New York, NY 10003, USA ("Tumblr"). The plug-in can be recognized by the Tumblr logo. As with the other social media plug-ins, a direct connection to the Tumblr servers is established when you visit our website and log data is transmitted to the Tumblr servers. These are located in the United States, among others. The log data may contain your IP address, the address of the websites visited, which also contain Tumblr functions, the type and settings of the browser, the date and time of the request, your use of Tumblr and cookies. Tumblr can assign your visit to our website to your Tumblr account if you are logged in under it. When you click the Tumblr button, the corresponding information is forwarded directly from your browser to Tumblr.
Further information on the purpose, scope and further processing and use of the data by Tumblr as well as your rights and options to protect your privacy can be found in Tumblr's data protection information: https://www.tumblr.com/privacy/de. We have no further knowledge of data usage.
Our website also uses plug-ins from the "whatsapp.com" service, which is operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, ("WhatsApp"). The plug-in can be recognized by the WhatsApp logo. As with the other social media plug-ins, a direct connection to the WhatsApp servers is established when you visit our website and log data is transmitted to the WhatsApp servers. These can be abroad, among other things. The log data may contain your IP address, the address of the websites visited, which also contain WhatsApp functions, the type and settings of the browser, the date and time of the request, your use of WhatsApp and cookies. WhatsApp can assign your visit to our website to your WhatsApp account if you are logged in under it. When you click the WhatsApp button, the corresponding information is forwarded from your browser directly to WhatsApp.
Further information on the purpose, scope and further processing and use of the data by WhatsApp as well as your rights and options to protect your privacy can be found in WhatsApp's data protection information: https://www.whatsapp.com/legal/#privacy-policy. We have no further knowledge of data usage.
7. Rights of data subjects
Your rights have been significantly expanded by the new General Data Protection Regulation. These are listed below and briefly explained with reference to the legal basis.
• Information, Art. 15 GDPR: You have the right to request information about your personal data processed by us. This includes, for example, information about processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint , the origin of your data, unless it was collected by us, and the existence of automated decision-making, including profiling and, if necessary, meaningful information about its details;
• Right to correction, Art. 16 GDPR: You can immediately request the correction of incorrect or completion of your personal data stored by us;
Right to deletion ("Right to be forgotten"), Art. 17 GDPR: You have the right to have your personal data stored by us deleted, unless the processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, is necessary for reasons of public interest or for the establishment, exercise or defense of legal claims;
• Right to restriction of processing, Art. 18 GDPR: You can request that the processing of your personal data be restricted. The prerequisite is that the accuracy of the data is disputed by you or that the processing is unlawful, but you refuse to delete it, or that we no longer need the data, but you need it to assert, exercise or defend legal claims or you do so in accordance with Art. 21 GDPR you have lodged an objection (item 7) to the processing;
• Right to data transfer, Art. 20 GDPR: You can request that you receive your personal data that you have provided to us in a structured, common and machine-readable format or that it be transferred to another person responsible;
• Revocation of consent, Art. 7 Para. 3 GDPR: You can revoke your consent given to us at any time. As a result, we are no longer allowed to continue processing the data based on this consent in the future. However, this does not affect the lawfulness of processing based on consent before its withdrawal;
• Right to lodge a complaint, Art. 77 GDPR: You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the data protection regulations. As a rule, you can contact the supervisory authority of your usual place of residence or work or our headquarters.
8. Right to object
You also have the right to object under Art. 21 GDPR. This applies to your personal data based on legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. e or f GDPR are processed, and insofar as there are reasons for an objection to the processing that arise from your particular situation. If the objection is directed against direct advertising, you have an unrestricted right to object, even without specifying a particular situation.
9. Data security
It is important to us to protect your data. We therefore take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
10. Existence of automated decision making
There is no automatic decision-making or profiling.
11. Up-to-dateness and change of the data protection declaration
It may be necessary to adapt this data protection declaration to the further development of our website or to update it due to changed legal requirements. The current data protection declaration can be found for the purposes of retrieval and printing under the following link: [https://twinstabook.com/index.php/en/impressum-datenschutz-en/datenschutz-en]
Current status: 01.02 2021