PRIVACY POLICY

As the operator of this domain, we take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the legal regulations. We hereby explain the type (hereinafter referred to as "online offer"), scope and purpose of the processing of personal data (hereinafter referred to as "data") for the online offer of lilligrill.de as well as the associated offers on the platforms of third parties. For the definition of the terms, we refer to Art. 4 of the General Data Protection Regulation (GDPR). The data collected on this domain is provided on a voluntary basis as far as possible and will not be passed on to third parties without your express consent. We use the common means of communication on the Internet for data transmission and point out that these can have security gaps, especially in the case of e-mails. Complete protection of the data against access by third parties cannot therefore be guaranteed.

legal basis

In accordance with Art. 13 GDPR, we inform you of the legal basis for our data processing. Unless otherwise stated, Art. 6 (1) (a) and Art. 7 GDPR apply to obtaining consent, Art. 6 (1) (b) GDPR applies to answering inquiries, carrying out contractual measures and processing to fulfill our services, Art. 6 (1) (c) GDPR applies to fulfilling our legal obligations, and Art. 6 (1) (f) GDPR applies to protecting our legitimate interests.

Data subjects, scope and purpose

All persons who access or use our online service in any way are affected by data collection and processing and are hereinafter referred to as "users". Inventory data such as names or addresses, contact data such as email addresses or telephone numbers and content data such as text entries, photographs or videos are collected to answer contact requests and to communicate with users. User data such as websites visited, interest in content or access times as well as meta and communication data such as IP addresses and device information are collected to provide the online service including its content and functions, for security measures and for marketing measures such as reach measurement.

data collection and data processing

order data

We collect, process and store the data that you provide when you make an inquiry by telephone, email, contact form or social media. We also store and process data on the subsequent communication process, on the execution of a resulting order and on its payment.

log data

When you use our online services, your device automatically transmits connection data to the servers of the service provider we have commissioned to operate the online service. This data includes the IP address of your Internet access, your system configuration, the type and version of the browser you are using, the website you previously visited, your system configuration and the date and time. Your IP address is only stored to the extent necessary to provide the online service. In order to detect and prevent attacks, your IP address is stored for a maximum of 7 days after you have used our website. This does not include data that needs to be stored for evidentiary purposes until the incident in question has been finally resolved. For other applications, your IP address is anonymized.

cookies

We use cookies to operate our website. These are identification files that the server stores on the device from which our website or services are accessed. These contain data that can be called up when using our online service and enable a more efficient and more interesting use of the service for you. We use both so-called "session cookies" or "transient cookies", which are deleted when you close your web browser, and "permanent cookies", also known as "persistent cookies", which are stored on your device until an expiry date corresponding to the purpose is reached. We use them to improve the use of our services and certain features. We also use them to determine statistical values on the use of our website. As a user, you can currently influence the use of cookies via the system settings of your browser, so that you are informed when cookies are set and can allow them in individual cases, or object to their use in certain cases or in general. Furthermore, cookies that have already been stored can be deleted at any time in all common Internet browsers or using suitable software programs. If you deactivate the use of cookies, you may not be able to use all functions of our online service.

Google Analytics

Based on our legitimate interest in the analysis, optimization and economic operation of our online service in accordance with Art. 6 Paragraph 1 Letter f. GDPR, we use the service “Google Analytics”, provided and operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, hereinafter referred to as “Google”, for the statistical analysis of user behavior. Google uses cookies to enable analysis of the use of our website. Each time a website with an integrated Google Analytics component is used, data is automatically transmitted to Google by the Internet browser. The data sent does not contain any personal data. We forward the collected IP address to Google in anonymized form. Google’s compliance with European data protection law is demonstrated by Google’s certification through the Privacy Shield Agreement as can be viewed at the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active#industries.

You can generally object to the collection and processing of data by Google by downloading and installing the browser add-on at https://tools.google.com/dlpage/gaoptout/ or by setting an opt-out cookie for this website individually using this link. Further information and explanations on Google Analytics are available at the following link https://www.google.com/intl/de_de/analytics/, the data protection provisions can be viewed at https://www.google.de/intl/de/policies/privacy/ and https://www.google.com/analytics/t erms/de.html.

social media

We operate social media accounts on Facebook, Instagram and Pinterest in order to present our services to the users of these platforms and to communicate with them. We only use static links to these presences on our website. When using our website, no information is sent to the operators of the platforms. If one of these links is followed, your browser only sends the system-related connection data. If you are logged into the relevant platform, the use of this data by the respective provider cannot be excluded. When using these networks and platforms, the terms of use and data protection guidelines of the respective operators apply. In particular, for the purpose of communicating with users, we save and process comments and messages addressed to our presences.

Facebook:

The “Facebook” service is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Further information can be found in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation/.

Instagram:

The “Instagram” service is provided by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Further information can be found in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

Pinterest:

The “Pinterest” service is provided by Pinterest Europe Ltd., Palmerston House 2nd Floor, Fenian Street, Dublin 2, Ireland. Further information can be found in Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy-policy/.

data handling

data deletion

Unless expressly stated in this data protection declaration, the processing of the data stored by us will be restricted or deleted in accordance with Art. 17 and 18 GDPR as soon as it is no longer required for its purpose and is not subject to any statutory retention period. If the data is not deleted, e.g. due to a statutory retention period, the data will be blocked for further processing. According to Section 147 Para. 1 AO and Section 257 Para. 1 HGB, retention periods of ten years apply, among other things, to accounting documents, books and records, as well as retention periods of six years, among other things, to received commercial or business letters, reproductions of commercial or business letters sent and other documents, insofar as they are relevant for taxation.

cooperation with processors or third parties

We process our orders in cooperation with contract processors. If we disclose, transmit or otherwise grant them access to personal data, this is done on the basis of your consent, because there is a legal obligation, on the basis of legal permission or on the basis of our legitimate interests. In this case, the data is protected in accordance with Art. 28 GDPR.

transfers to third countries

If we process data using service providers in a third country (not within the European Union, also known as the EU, or the European Economic Area, also known as the EEA) or an international organization, this is done on the basis of your consent, because there is a legal obligation, on the basis of legal permission, or on the basis of our legitimate interests. The processing is carried out in compliance with the conditions required in Art. 44 ff. GDPR, e.g. on the basis of suitable guarantees, or on the basis of an officially recognized determination of a data protection level corresponding to that of the EU, such as for the USA through the "Privacy Shield".

your rights

According to Art. 15 GDPR, you have the right to request confirmation as to whether or not data concerning you is being processed, the right to information about this data and related information, as well as a copy of the data.

According to Art. 16 GDPR, you have the right to request the rectification of inaccurate personal data concerning you as well as the completion of incomplete personal data.

According to Art. 17 GDPR, you have the right to demand the immediate deletion of personal data concerning you. According to Art. 18 GDPR, you have the right to demand restriction of processing.

According to Art. 20 GDPR, you have the right to receive the data you have provided from us and to pass it on to a third party.

According to Art. 77 GDPR, you have the right to lodge a complaint with the competent supervisory authority.

Revocation, objection and the consequences

According to Art. 7 Paragraph 3 GDPR, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal. According to Art. 21 GDPR, you have the right to object to the processing of personal data concerning you at any time. Due to the relevance of photographs and videography with regard to personal data, we may not be able to continue processing your order after withdrawal or objection. If this is the case, we will stop working on your order and invoice you for work carried out up to that point. In particular, we reserve the right to retain any advance payments made as a cancellation fee for the purpose of exclusive appointment reservation in your favor.