(1) Data privacy at a glance
General notes
The following information provides a simple overview of what happens to your personal data
happens when you visit this website. Personal data is any data with which you
can be personally identified. Detailed information on the subject of data protection can be found
See our privacy policy listed below this text.
Data collection on this website
Who is responsible for the data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details
you can find in the section „Note on the controller“ in this privacy policy.
How do we collect your data?
Your data is collected, on the one hand, by you providing it to us. This may, for example, be
Handle data that you enter into a contact form.
Other data are collected automatically or with your consent when you visit the website by our IT
System records. These are primarily technical data (e.g. internet browser, operating system or time of day)
page view). The collection of this data takes place automatically as soon as you enter this website.
What do we use your data for?
A part of the data is collected to ensure the error-free provision of the website. Other
Data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right at any time to obtain free information about the origin, recipient and purpose of your
to obtain a copy of the personal data held about you. You also have the right to request the rectification or
to request the erasure of this data. If you have given consent for data processing,
you can withdraw this consent at any time with effect for the future. You also have the right, under
under certain circumstances, to request that the processing of your personal data be restricted.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time regarding this and any other questions concerning data protection.
Analytics and third-party tools
When you visit this website, your browsing behaviour may be analysed for statistical purposes. This takes place before
all with so-called analytics software.
Detailed information on these analysis programs can be found in the following
Privacy policy.
(2) Hosting
We host our website's content with the following provider:
All-Inkl
The provider is ALL-INKL.COM – Neue Medien Münnich, owned by René Münnich, Hauptstraße 68, 02742
Friedersdorf (hereinafter referred to as All-Inkl). You can find details in the All-Inkl privacy policy:
https://all-inkl.com/datenschutzinformationen/.
The use of All-Inkl is based on Article 6(1)(f) of the GDPR. We have a
legitimate interest in the most reliable presentation of our website possible. Provided that a
where consent has been sought, processing takes place exclusively on the basis of Art.
Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as consent relates to the storage of cookies or the
Access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG
includes. Consent may be withdrawn at any time.
Data processing
We have concluded a data processing agreement (DPA) with the aforementioned provider.
This is a legally mandated data protection agreement that ensures
that the personal data of our website visitors is processed only according to our instructions and under
Processed in compliance with the GDPR.
(3) General notes and mandatory information
Privacy policy
The operators of these pages take the protection of your personal data very seriously. We treat your
personal data confidentially and in accordance with the statutory data protection regulations and
this privacy policy.
When you use this website, various personal data are collected.
Personal data is data that can be used to personally identify you. This present
Privacy policy explains which data we collect and what we use it for. It also explains how
and for what purpose this is done.
Please note that data transmission on the internet (e.g. communication by email)
may exhibit security vulnerabilities. Complete protection of data against access by third parties is not
possible.
Note on the responsible party
The data controller responsible for data processing on this website is:
Mair Mair SRL
Old Town 1
39049 Vipiteno (BZ)
Italian
Telephone: Tel. +39 0472 765 386
Email: info@tartufo-pralinen.de
The data controller is the natural or legal person who, alone or jointly with others, determines the
the purposes and means of the processing of personal data (e.g. names, email addresses or similar)
decides.
Retention period
Unless a more specific storage period has been specified within this privacy policy, your data shall remain
Your personal data with us, until the purpose for data processing ceases to apply. If you
assert a legitimate request for erasure or withdraw consent to data processing,
your data will be erased, unless we have other legally permissible grounds for storing your
personal data (e.g. retention periods under tax or commercial law); in
In the latter case, deletion takes place once these reasons no longer apply.
General information on the legal bases of data processing on this website
Provided you have consented to data processing, we process your personal data on the basis of
Pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, insofar as special categories of data are concerned
processed in accordance with Art. 9(1) GDPR. In the event of explicit consent to the transfer
personal data to third countries, the data processing is also carried out on the basis of Art.
Article 49 (1) (a) GDPR. Provided that you have consented to the storage of cookies or the access to information in
your terminal device (e.g. via device fingerprinting) have given consent, the data processing is additionally
pursuant to Section 25 (1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG). Consent may be withdrawn at any time. Are your data to
necessary for the performance of a contract or in order to take steps prior to entering into a contract, we process your
Data pursuant to Art. 6(1)(b) GDPR. Furthermore, we process your data if these
are necessary to comply with a legal obligation pursuant to Article 6(1)(c) of the GDPR.
Data processing may furthermore be based on our legitimate interest pursuant to Art. 6 para. 1 lit. f
GDPR take place. The legal bases relevant in each individual case are set out in the following
paragraphs of this privacy policy.
Notice on data transfer to the USA and other third countries
We use tools from companies based in the USA or other
data protection-wise unsafe third countries. If these tools are active, your
personal data are transferred to these third countries and processed there. We point out
due to the fact that a level of data protection comparable to that of the EU cannot be guaranteed in these countries.
For example, US companies are obliged to pass on personal data to security authorities
to be issued without you as the data subject being able to take legal action against it. It is therefore not possible
it be excluded that US authorities (e.g. intelligence agencies) can access your data stored on US servers for
process, evaluate and permanently store for monitoring purposes. We have on this
processing activities have no effect.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can
already given consent at any time. The lawfulness of the processing carried out up to the revocation
Data processing remains unaffected by the withdrawal.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR
OCCURS, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR
right to object to the processing of your personal data
TO LODGE AN OBJECTION; THIS ALSO APPLIES TO ONE BASED ON THESE PROVISIONS
PROFILING. THE RESPECTIVE LEGAL BASIS UPON WHICH PROCESSING IS BASED,
REFER TO THIS PRIVACY POLICY. IF YOU OBJECT,
WILL WE NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, IT
UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING
PROVING THAT YOUR INTERESTS, RIGHTS AND FREEDOMS OVERRIDE OR THE
PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND
LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).
ARE YOUR PERSONAL DATA PROCESSED FOR DIRECT MARKETING PURPOSES,
YOU THEREFORE HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOU
CONCERNING PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING
TO BE INSERTED; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING IN
CONNECTION ESTABLISHED. IF YOU OBJECT, YOUR PERSONAL DATA
SUBSEQUENTLY NO LONGER USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION
(PURSUANT TO ART. 21 PARA. 2 GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a
supervisory authority, in particular in the member state of their habitual residence, place of work
or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other
administrative or judicial remedy.
Right to data portability
You have the right to request data that we, based on your consent or for the performance of a contract,
process automatically, either by itself or via a third party in a standard, machine-readable format
to have handed over. Provided that you wish the direct transmission of the data to another controller
request this, this is only done to the extent that it is technically feasible.
Access, erasure and rectification
You have the right at any time, within the scope of the applicable statutory provisions, to free of charge
Information about your stored personal data, its origin and recipients, and the
Purpose of data processing and, if applicable, a right to rectification or erasure of this data. For this purpose as well as
Should you have any further questions regarding personal data, please feel free to contact us at any time.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data.
You can contact us about this at any time. The right to restriction of processing applies in the following cases:
If you contest the accuracy of your personal data stored with us, we require
usually time to check this. For the duration of the check, you have the right to
to request the restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you can
request the restriction of data processing instead of deletion.
When we no longer require your personal data, but you need them for the establishment,
establishment, exercise or defence of legal claims, you have the right, instead of
To request the erasure of the restriction on the processing of your personal data.
If you have lodged an objection pursuant to Article 21(1) of the GDPR, a balancing of interests must take place between
be made in your and our interests. As long as it is not yet clear whose interests
outweigh, you have the right to request the restriction of the processing of your personal data
to demand.
If you have restricted the processing of your personal data, this data may – with
apart from their storage – only with your consent or for the establishment, exercise or
establishment, exercise or defence of legal claims or for the protection of the rights of another natural or
legal person or for reasons of substantial public interest of the European Union or
of a Member State are processed.
SSL or TLS encryption
This site uses for security reasons and for the protection of the transmission of confidential content, such as
For example, orders or enquiries that you send to us as the site operator, an SSL or TLS
Encryption. You can recognise an encrypted connection by the fact that the browser's address bar starts with
„http://“ to „https://“ changes and by the padlock icon in your browser address bar.
When SSL or TLS encryption is enabled, the data you transmit to us cannot
be read by third parties
(4) Data collection on this website
Biscuits
Our websites use so-called „cookies“. Cookies are small data packets and do not cause any damage to
cause no damage to your device. They are either temporarily for the duration of a session
(session cookies) or permanently (persistent cookies) stored on your device. Session cookies
are automatically deleted at the end of your visit. Permanent cookies remain on your device
stored until you delete them yourself or they are automatically deleted by your web browser.
Partly, cookies from third-party companies may also be stored on your device if you
entering our site (third-party cookies). These enable us or you to use certain
Services of the third-party company (e.g. cookies for processing payment services).
Cookies have various functions. Numerous cookies are technically necessary, as certain
Website features that would not function without them (such as the shopping basket function or the display)
of videos). Other cookies are used to evaluate user behaviour or to display advertising.
Cookies that are used to carry out the electronic communication process, to provide
specific functions desired by you (e.g. for the shopping basket function) or for the optimisation of
website (e.g. cookies for web audience measurement) are required (necessary cookies), are placed on
stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is specified.
The website operator has a legitimate interest in the storage of necessary cookies for the
technically error-free and optimised provision of its services. Provided that consent to
Storage of cookies and comparable recognition technologies was requested, the
Processing exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1
TTDSG); consent may be withdrawn at any time.
You can set your browser so that you are informed about the setting of cookies and
Allow cookies only on a case-by-case basis, block the acceptance of cookies for specific cases or generally
as well as enable the automatic deletion of cookies when closing the browser. During the
Disabling cookies may restrict the functionality of this website.
Insofar as cookies from third-party companies or for analytical purposes are used, we will inform you about this
provide separate information within the scope of this privacy policy and, if applicable, obtain consent.
server log files
The provider of the pages automatically collects and stores information in so-called server log
Files that your browser automatically transmits to us. These are:
- Browser type and browser version
- operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
These data will not be combined with other data sources.
The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has
a legitimate interest in the technically error-free presentation and optimisation of its website –
for this purpose, the server log files must be recorded.
Contact form
If you send us enquiries via the contact form, your details from the
enquiry form including the contact details provided by you for the purpose of processing the enquiry
and stored by us in case of follow-up questions. We do not pass this data on without your
Consent continues.
The processing of this data is carried out on the basis of Art. 6(1)(b) GDPR, provided your enquiry is related to
relates to the performance of a contract or is necessary for taking steps prior to entering into a contract
is required. In all other cases, the processing is based on our legitimate interest in the
effective processing of the enquiries sent to us (Art. 6(1)(f) GDPR) or on your
Consent (Art. 6(1)(a) GDPR) if this has been requested; the consent can be withdrawn at any time
revocable.
The data you enter in the contact form will remain with us until you ask us to delete it
request, withdraw your consent to storage or the purpose for data storage ceases to apply
(e.g., after processing of your request has been completed). Mandatory statutory provisions –
In particular, retention periods remain unaffected.
Enquiry by email, telephone or fax
If you contact us by email, telephone or fax, your request, including all resulting
resulting personal data (name, enquiry) for the purpose of processing your request
stored and processed by us. We do not pass these data on without your consent.
The processing of this data is carried out on the basis of Art. 6(1)(b) GDPR, provided your enquiry is related to
relates to the performance of a contract or is necessary for taking steps prior to entering into a contract
is required. In all other cases, the processing is based on our legitimate interest in the
effective processing of the enquiries sent to us (Art. 6(1)(f) GDPR) or on your
Consent (Art. 6(1)(a) GDPR) if this has been requested; the consent can be withdrawn at any time
revocable.
The data you sent to us via contact enquiries will remain with us until you ask us to delete it
request, withdraw your consent to storage or the purpose for data storage ceases to apply
(e.g. after your request has been dealt with). Mandatory legal provisions –
notably statutory retention periods, remain unaffected.
(5) Social Media
Social media elements with Shariff
This website uses social media elements (e.g. Facebook, Twitter, Instagram,
Pinterest, XING, LinkedIn, Tumblr).
You can usually recognise the social media elements by their respective social media logos.
To ensure data protection on this website, we only use these elements together
using the so-called „Shariff“ solution. This application prevents the content embedded on this website from
social media elements transfer your personal data to the site the very first time you visit it
respective provider.
Only when you activate the respective social media element by clicking the corresponding button,
a direct connection to the provider's server is established (consent). As soon as you social
Enable media element, the respective provider receives the information that you with your IP address this
have visited the website. If you are logged into your respective social media account (e.g. Facebook) at the same time
are logged in, the respective provider can assign the visit to this website to your user account.
Activating the plugin constitutes consent within the meaning of Article 6(1)(a) of the GDPR and Section 25(1)
TTDSG applies. You can revoke this consent at any time with future effect.
The service is used to obtain the legally required consent for the use
to obtain information on specific technologies. The legal basis for this is Article 6(1)(c) of the GDPR.
Facebook
Elements of the social network Facebook are integrated into this website. The provider of this service is
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The collected data will
however, according to Facebook, also transferred to the USA and other third countries.
An overview of the Facebook social media elements can be found here:
https://developers.facebook.com/docs/plugins/?locale=de_DE.
If the social media element is active, a direct connection is established between your device and the
Connection to Facebook’s servers established. This provides Facebook with the information that you have accessed this page using your IP address
have visited the website. If you click the Facebook „Like button“ while you are logged into your Facebook
account is logged in, you can link the content of this website to your Facebook profile.
As a result, Facebook can assign the visit to this website to your user account. We would like to point out,
that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use
received via Facebook. Further information can be found in the privacy policy of
Facebook at:
https://de-de.facebook.com/privacy/explanation.
Insofar as consent has been obtained, the use of the aforementioned service is based on
Art. 6 para. 1 sentence 1 lit. a GDPR and Section 25 TTDSG. The consent can be revoked at any time. Unless no
consent has been obtained, the use of the service is based on our legitimate
Interested in maximum visibility on social media.
Insofar as personal data is collected on our website using the tool described here and passed on to
If your data is transferred to Facebook, it is shared with us and Meta Platforms Ireland Limited, 4 Grand Canal Square,
Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26
GDPR). The joint controllership is thereby exclusively limited to the collection of
Data and their transfer to Facebook. The processing carried out after redirection by
Facebook is not part of the joint responsibility. The obligations incumbent upon us jointly
were set out in a joint processing agreement. The wording of the
You will find the agreement at:
https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for issuing
the data protection information relating to the use of the Facebook tool and for ensuring compliance with data protection legislation
responsible for implementing the tool on our website. Regarding the data security of Facebook
products Facebook is responsible for. Data subject rights (e.g. requests for access) regarding the data processed at
You can raise any concerns regarding data processed by Facebook directly with Facebook. If you wish to
If you exercise your rights as a data subject with us, we are obliged to pass these on to Facebook.
Data transfer to the USA is based on the European Commission's standard contractual clauses.
You can find further details here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://de-de.facebook.com/help/566994660333381 und
https://www.facebook.com/policy.php.
Pinterest
On this website, we use features from the social network Pinterest, which is operated by Pinterest
Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
When you visit a page that contains such an element, your browser establishes a direct connection to
from Pinterest’s servers. This social media element transmits log data to the server
from Pinterest to the USA. This log data may include your IP address and the address of the
websites visited that also include Pinterest features, the type and settings of the browser,
The date and time of the request, how you use Pinterest, and cookies.
Insofar as consent has been obtained, the use of the aforementioned service is based on
Art. 6 para. 1 sentence 1 lit. a GDPR and Section 25 TTDSG. The consent can be revoked at any time. Unless no
consent has been obtained, the use of the service is based on our legitimate
Interested in maximum visibility on social media.
Further information on the purpose, scope and further processing and use of the data by
Pinterest, as well as your rights and options in this regard for the protection of your privacy, can be found in
Pinterest's privacy policy:
https://policy.pinterest.com/de/privacy-policy.
(6) Newsletter
Newsletter data
If you would like to subscribe to the newsletter offered on the website, we will need your e-
Email address and information enabling us to verify that you are the owner of the
the email address provided and that you consent to receiving the newsletter. Further
Data is not collected, or is collected only on a voluntary basis. We use this data exclusively for
to send the requested information and not to pass it on to third parties.
The data entered in the newsletter subscription form is processed exclusively on
Basis for your consent (Article 6(1)(a) of the GDPR). The consent given for the storage of the
You can at any time access your data and email address, as well as the information regarding their use for sending the newsletter
unsubscribe, for example via the „Unsubscribe“ link in the newsletter. The lawfulness of any processing that has already taken place
Data processing operations remain unaffected by the withdrawal.
The data you have provided to us for the purpose of subscribing to the newsletter will be retained by us until your
unsubscribing from the newsletter is stored by us or the newsletter service provider and after the
Unsubscription from the newsletter or deleted from the newsletter distribution list after the purpose has ceased to apply. We
reserve the right to remove email addresses from our newsletter distribution list at our own discretion as part of
to delete or block based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Data stored with us for other purposes remains unaffected by this.
Following your removal from the newsletter distribution list, your email address will be stored by us or the
Newsletter service providers potentially stored on a blacklist, provided this is to prevent future
mailings is required. The data from the blacklist is used solely for this purpose and not with
merged with other data. This serves both your interest and our interest in the
Compliance with legal requirements when sending newsletters (legitimate interest within the meaning of the
Article 6(1)(f) GDPR. The storage in the blacklist is not limited in time. You may object to the
object to storage, provided your interests override our legitimate interest.
(7) Plugins and tools
YouTube
This website embeds videos from YouTube. The website is operated by Google Ireland Limited
(„Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our web pages that features embedded YouTube content, a connection is established to
to YouTube’s servers. In doing so, the YouTube server is informed which of our pages you are
have visited.
Furthermore, YouTube can store various cookies on your device or comparable
Use recognition technologies (e.g., device fingerprinting). This allows
YouTube receives information about visitors to this website. This information includes, amongst other things,.
used to collect video statistics, improve user experience and
To prevent attempts at fraud.
If you are logged into your YouTube account, you are allowing YouTube to track your browsing behaviour directly
to your personal profile. You can prevent this by logging out of your YouTube—
Log out of your account.
We use YouTube to ensure that our online content is presented in an engaging way.
This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Provided that a corresponding
Where consent has been sought, processing takes place exclusively on the basis of Article 6(1)(a)
GDPR and Section 25 Paragraph 1 TTDSG, insofar as the consent involves the storage of cookies or access to
includes information stored on the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG.
Consent may be withdrawn at any time.
Further information on the handling of user data can be found in YouTube’s privacy policy
at:
https://policies.google.com/privacy?hl=de.
Google Fonts (local hosting)
This page uses so-called Google Fonts, provided by Google, to ensure consistent font display
are made available. Google Fonts are installed locally. No connection is made to Google’s servers
That did not happen.
Further information regarding Google Fonts can be found under
https://developers.google.com/fonts/faq and in Google’s Privacy Policy:
https://policies.google.com/privacy?hl=de.
Font Awesome
This site uses Font Awesome to ensure consistent display of fonts and icons. The provider is
Fonticons, Inc., 6 Porter Road, Flat 3R, Cambridge, Massachusetts, USA.
When you visit a page, your browser loads the necessary fonts into its cache so that text and typefaces
and display symbols correctly. To do this, the browser you are using must connect to
to Font Awesome’s servers. This enables Font Awesome to recognise that via
Your IP address when you accessed this website. The use of Font Awesome is based on
Article 6(1)(f) of the GDPR. We have a legitimate interest in the consistent presentation of the
typeface on our website. Where consent has been sought, the
Processing exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the
Consent to the storage of cookies or the access to information in the user's terminal equipment (e.g.
device fingerprinting) within the meaning of the TTDSG. The consent may be revoked at any time.
If your browser does not support Font Awesome, a standard font from your computer will be used.
Further information on Font Awesome can be found in the Font Awesome privacy policy
at:
https://fontawesome.com/privacy.
Google Maps
This page uses the mapping service Google Maps. The provider is Google Ireland Limited („Google“), Gordon
House, Barrow Street, Dublin 4, Ireland.
To use the features of Google Maps, it is necessary to save your IP address. This
Information is generally transmitted to a Google server in the USA and stored there.
The provider of this site has no influence on this data transmission. If Google Maps is enabled,
can use Google Fonts for the purpose of a uniform display of fonts. When
When Google Maps is accessed, your browser loads the required web fonts into your browser cache in order to display text and
to display fonts correctly.
The use of Google Maps is in the interest of an appealing presentation of our online
Offers and for easy finding of the locations we specified on the website. This represents
a legitimate interest pursuant to Article 6(1)(f) GDPR. Provided that a corresponding
Where consent has been sought, processing takes place exclusively on the basis of Article 6(1)(a)
GDPR and Section 25 Paragraph 1 TTDSG, insofar as the consent involves the storage of cookies or access to
information stored in the user's terminal equipment (e.g. device fingerprinting) within the meaning of the TTDSG. The
Consent can be withdrawn at any time.
Data transfer to the USA is based on the European Commission's standard contractual clauses.
You can find further details here:
https://privacy.google.com/businesses/gdprcontrollerterms/ und
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information on the handling of user data, please see Google's Privacy Policy:
https://policies.google.com/privacy?hl=de.
Source: https://www.e-recht24.de