Privacy Policy | BOXHIIT

We attach great importance to data protection. The collection and processing of your personal data is carried out in accordance with the applicable data protection regulations, in particular the EU Data Protection Basic Regulation (DSGVO). We collect and process your personal data in order to offer you our website and our services. In accordance with Art. 13 DSGVO, we describe in this declaration which data is used by us in which way and for what purpose and scope and which options and rights you have in connection with the use of your personal data.

1. Responsible body

Dennis van der Vlugt, Heidter Str. 97, 42369 Wuppertal, Germany, is responsible for compliance with data protection on our website. We have not appointed a data protection officer.

We are at your disposal for any questions regarding data protection laws. You have the following contact options:

E-mail: support@boxhiit.com

phone: +49 0202 25338653

2. Data collection on our website

a) Server log files

Whenever you access our website, information is automatically transmitted by your browser to the server of our website. This information is only stored for a short time in a so-called log file and is automatically deleted.

This includes the following data:

Your IP address,
Date and time of the call,
Name and URL of the file you are accessing,
Website from which the call is made (referrer URL),
Information about the browser and operating system you use,
Name of your access provider.

This data is used for the purpose of ensuring a smooth connection and comfortable use of our website as well as for the evaluation of system security and stability.

The legal basis for data processing is derived from Art. 6 Para. 1 S. 1 lit. f DSGVO, as we have a legitimate interest in collecting data for the aforementioned purposes. In addition, a legal basis also results from Art. 6 para. 1 lit. b DSGVO for the processing of data for the fulfilment of a contract or pre-contractual measures.

The data will not be used to draw conclusions about your person.

b) Contact form/ communication by e-mail

On our site you will find a contact form. Herewith we would like to give our customers the possibility to contact us in an uncomplicated way. You can also contact us directly by e-mail. If you would like to use our contact form, you must enter your name and a valid e-mail address. If you send us a cover letter by e-mail, we will at least receive your e-mail address. All other data provided is optional. Data is collected for the purpose of initiating or implementing contractual relationships in accordance with Art. 6 para. 1 lit. b DSGVO Insofar as your enquiry is not directed at initiating or implementing a contract, we nevertheless have a justified interest in processing and answering your enquiry. In this respect, the use of personal data for this purpose is governed by Art. 6 para. 1 lit. f DSGVO.

We use the data you provide exclusively to process your request. Insofar as your enquiry is directed towards the initiation or execution of business, we will delete your data in accordance with our internal deletion periods.

Insofar as your enquiry is related to another purpose, we will delete your data after processing, insofar as there is no other legal basis for data storage.

c) Processing of customer and contract data

When initiating, concluding and fulfilling a contract, we use the personal data required for this purpose in accordance with Art. 6 Para. 1 letter b DSGVO.

Data will only be transferred to third parties if and insofar as this is necessary for contractual fulfilment, e.g. if a company has been commissioned for production or transport services or a credit institution has been commissioned to process payments.

This personal data is deleted after the expiry of the statutory warranty periods or after the end of statutory retention periods.

d) Newsletter

On our website you have the possibility to subscribe to a free newsletter for the purpose of direct advertising. When registering for the newsletter, your name and e-mail address will be transmitted to us from the input mask. Your IP address and the date and time of registration are also used. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.

For the processing of the data, your consent will be obtained during the registration process and reference will be made to this data protection declaration. The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 para. 1 lit. a DSGVO, if the user has given his consent.

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. The user’s e-mail address is therefore stored for as long as the subscription to the newsletter is active.

If you purchase goods or services on our website and enter your e-mail address, we may subsequently use it to send you a newsletter for direct marketing purposes. In such a case, the newsletter will only be used to send direct advertising for our own similar goods or services. The legal basis for the dispatch of the newsletter as a result of the sale of goods or services is § 7 para. 3 UWG.

E-mails are sent via “MailChimp”, a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection regulations of the dispatch service provider here: https://mailchimp.com/legal/privacy/

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter.

e) Cookies

Our website contains cookies. Cookies are small text files that are stored on your end device. They help us to make it easier for you to navigate through our offer and enable the correct display of the website. They are intended to support the user-friendliness of the website and are of course completely harmless to your terminal device. As a result, information is temporarily collected in connection with the terminal device and software you use. Conclusions about your identity are not drawn from this.

For example, we use so-called “session cookies”. These cookies are automatically deleted after your visit. We also use cookies that are stored on your end device, for example, to make it easier for you to use our site during a subsequent visit and to recognise your browser on your next visit (“permanent cookies”). These cookies can of course be deleted manually by you at any time.

We also use cookies to statistically record and evaluate the use of our website. This is done for the purpose of further optimising our offer for you. You can find further information under GoogleAnalytics.

We use the cookies that are absolutely necessary for the operation of our website, i.e. without which our website cannot be displayed, for this purpose to protect our legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO. These are automatically deleted after a defined period of time.

We use the cookies required for the processing of contracts or for the contractually agreed use of our website in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO. These are automatically deleted after a defined period of time.

The use of required cookies not described above is based on your consent in accordance with Art. 6 Para. 1 lit. a DSGVO. Your consent can be revoked at any time with immediate effect. To do so, go to the settings of the browser you are using and select “Delete browser data”. You must have selected “Cookies and other website data” and then remove them.

Of course you can also view our website without cookies. To do so, you must prevent cookies from being saved on your hard drive by selecting “do not accept cookies” in your browser settings. For a more detailed description, please refer to the instructions of your browser manufacturer. You can also use the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/) to deactivate cookies. If you do not accept cookies, this may lead to functional restrictions on our website.

f) Google Analytics

On the basis of your consent (within the meaning of Art. 6 para. 1 lit. a DSGVO) we use Google Analytics, a web analysis service of Google LLC, 1600 AmphitheatreParkway, Mountain View, CA 94043, USA, for our site. With regard to the use of the data, there is a joint responsibility for data processing between Google and us in accordance with Art 26 DSGVO. We have agreed with Google that we assume primary responsibility under the DSGVO for the processing of the data and fulfil all obligations under the DSGVO with regard to the processing of the data (including Articles 12 and 13 DSGVO, Articles 15 to 22 DSGVO and Articles 32 to 34 DSGVO). The use of Google Analytics is used to design our website in line with requirements and to continuously optimise our website and to statistically record and evaluate our website. In this context, pseudonymised user profiles are created and cookies are used. Information about your use of this website is recorded such as

Your IP address,
Date and time of the call,
Name and URL of the file you are accessing,
Website from which the call is made (referrer URL),
Information about the browser and operating system you use,
Name of your access provider.

Insofar as you have given your consent, this information is transmitted to a Google server in the USA and stored there. Please note that this is a data transfer to a country outside the EU. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. The anonymised IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

As described above, you can prevent the storage of cookies on your computer. In addition, you can prevent Google from using the data collected by the cookies by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

Google submits to European data protection with the standard contractual clauses and thus offers a guarantee that it complies with European data protection law.

g) Google Ajax & jQuery libraries, Google Web Fonts

On the basis of Art. 6 para. 1 sentence 1 lit. f DSGVO, we use Google Ajax & jQuery libraries, Google web fonts of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”, for the purpose of a customer-friendly and attractive presentation of our website. Here, program libraries and fonts are retrieved by your browser from Google and loaded into the browser cache in order to display content, text and fonts correctly. Information about your provider, operating system, browser and your IP address may be transmitted to Google.

Google complies with European data protection law. For more information on data protection at Google, please visit: https://policies.google.com/privacy?hl=de

h) Facebook

On the basis of your consent (within the meaning of Art. 6 para. 1 lit. a. DSGVO), we use the plugin of the social network Facebook (address: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) to increase our level of awareness on our website. You can recognise the plug-ins by the Facebook logo or the like-button (I like) – an overview can be found here: http://developers.facebook.com/docs/Plug-ins/

Insofar as you have given your consent, the plug-in establishes a direct connection between your browser and the Facebook servers. We have no influence whatsoever on the nature and scope of the data which the plug-in transmits to the servers of Facebook Inc. You can find information about this here: https://www.facebook.com/help/186325668085084

The plug-in informs Facebook Inc. that you as a user have visited this website. It is possible that your IP address will be saved. If you are logged in to your Facebook account during your visit to this website, the aforementioned information is linked to this account.

If you use the functions of the plug-in – for example, by sharing or “linking” to a post – the corresponding information is also transmitted to Facebook Inc.

Do you want to prevent the Facebook. Inc. links this data to your Facebook account, please log out of Facebook before visiting this website and delete the stored cookies. Via your Facebook profile you can make further settings for data processing for advertising purposes or object to the use of your data for advertising purposes. You can access the settings here:

Profile settings on Facebook: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Your consent can be revoked at any time for the future.

i) Twitter

On the basis of your consent (within the meaning of Art. 6 para. 1 lit. a. DSGVO), we integrate plug-ins from the social network Twitter (address: Twitter, Inc. 1355 Market Street, Suite 900, San Francisco, CA 94103) on our website. You can recognise the plug-ins by the Twitter logo; an overview can be found here: https://about.twitter.com/resources/buttons

Provided you have given your consent, the plug-in establishes a direct connection between your browser and the Twitter servers. We have no influence whatsoever on the nature and scope of the data that the plug-in transmits to the Twitter servers. You can find information about this here: https://twitter.com/de/privacy

The plug-in informs Twitter that you as a user have visited this website. It is possible that your IP address will be saved. If you are logged in to your Twitter account during your visit to this website, the information mentioned above will be linked to your Twitter account.

If you use the functions of the plug-in – for example by using the Tweet button, the relevant information is also sent to Twitter.

If you want to prevent Twitter from linking this data to your Twitter account, please log out of Twitter before visiting this website and delete the cookies stored.

j) YouTube

On the basis of your consent (within the meaning of Art. 6 Para. 1 letter a. DSGVO), we use the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of videos on our site on the basis of Art. 6 Para. 1 sentence 1 letter f DSGVO. This is done for the purpose of presenting and explaining our services in a more customer-friendly and attractive manner.

Provided you have given your consent, the plug-in establishes a direct connection between your browser and the Google servers. We have no influence whatsoever on the nature and extent of the data which the plug-in transmits to the Google servers. You can find information on this here: https://policies.google.com/privacy?hl=de

The plug-in informs Google that you have visited this website as a user. It is possible that your IP address will be saved. If you are logged in to your Google account during your visit to this website, the information mentioned above will be linked to this account.

If you use the functions of the plug-in – for example by watching a video – the corresponding information is also transmitted to Google.

Opt-out: https://adssettings.google.com/authenticated.

(k) Vimeo

On the basis of your consent (within the meaning of Art. 6 Para. 1 letter a. DSGVO), we use the provider Vimeo LLC, 555 West 18th Street, New York 10011, USA, for the integration of videos on our site on the basis of Art. 6 Para. 1 sentence 1 letter f DSGVO. This is done for the purpose of customer-friendly and more attractive presentation and explanation of our services.

Provided you have given your consent, the plug-in establishes a direct connection between your browser and the Vimeo servers. We have no influence on the nature and scope of the data that the plug-in transmits to the Vimeo servers. You can find information about this here: https://vimeo.com/privacy

The plug-in informs Vimeo that you have visited this website as a user. It is possible that your IP address may be saved. If you are logged in to your Vimeo account while visiting this website, the above-mentioned information is linked to your Vimeo account.

If you use the functions of the plug-in – for example, by watching a video – the relevant information is also transmitted to Vimeo.

l) Pinterest

Based on your consent (within the meaning of Art. 6 para. 1 lit. a. DSGVO), we include on our website the plug-in of the social network Pinterest, from Pinterest Inc, 635 High Street, Palo Alto, CA, 94301, USA, hereinafter Pinterest. You can recognise the plug-ins by the Pinterest logo.

If you have given your consent, the plug-in establishes a direct connection between your browser and the Pinterest servers. We have no influence whatsoever on the nature and scope of the data that the plug-in transmits to the Pinterest servers. You can find information about this here: https://about.pinterest.com/de/privacy-policy.

The plug-in informs Pinterest that you have visited this website as a user. It is possible that your IP address may be saved. If you are logged in to your Pinterest account during your visit to this website, this information will be linked to your Pinterest account.

If you use the functions of the plug-in – e.g. by using the Pinterest button – the corresponding information is also transmitted to Pinterest.

If you wish to prevent LinkedIn from linking this data to your Pinterest account, please log out of Pinterest before visiting this website and delete the cookies stored.

m) Tumblr

On the basis of your consent (within the meaning of Art. 6 para. 1 lit. a. DSGVO) we integrate plug-ins from the Tumblr social network (address: Tumblr Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA) on our website. You can recognise the plug-ins by the Tumblr logo.

If you have given your consent, the plug-in establishes a direct connection between your browser and the Tumblr servers. We have no influence on the nature and extent of the data that the plug-in transmits to the Tumblr servers. You can find information about this here: http://www.tumblr.com/policy/de/privacy.

The plug-in informs Tumblr that you have visited this website as a user. It is possible that your IP address will be saved. If you are logged in to your Tumblr account during your visit to this website, the information mentioned above will be linked to this account.

If you use the functions of the plug-in – for example, by using the Tumblr button, the relevant information is also transmitted to Tumblr.

If you wish to prevent Tumblr from linking this data to your Tumblr account, please log out of Tumblr before visiting this website and delete the cookies stored.

3. social media channels

Facebook

We have created a fan page on the social network Facebook (address: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), hereinafter referred to as Facebook, and as the operator of this fan page we are deemed to be jointly responsible with Facebook within the meaning of Art. 26 DSGVO. Facebook, as the operator of a fan page, offers us the opportunity to compile anonymous statistics in the form of so-called page insights about the usage behaviour of our fan page. For this purpose, Facebook installs and reads cookies on the user’s end device.

We have agreed with Facebook that Facebook will assume the primary responsibility under the DSGVO for the processing of Insights data and will fulfil all obligations under the DSGVO with regard to the processing of Insights data (including Articles 12 and 13 DSGVO, Articles 15 to 22 DSGVO and Articles 32 to 34 DSGVO). In addition, Facebook Ireland will make the essence of this Page Insights supplement available to data subjects.

This addendum can be viewed here:

https://www.facebook.com/legal/terms/page_controller_addendum

We process the data collected via Facebook-Insights on the basis of our legitimate interest in accordance with Art. 6 Para. 1 lit. f) DSGVO. Our legitimate interest is to increase our level of awareness by informing people about our services and our company in the widely used social media. In this context, it is particularly important to us that our company is presented in a modern and timely manner.

All further information about Facebook-Insights can be found here:

https://www.facebook.com/legal/terms/information_about_page_insights_data

Instagram

We have created a business profile on the social network Instagram (operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), hereinafter referred to as Facebook, and as the operator of this profile we are considered jointly responsible with Facebook within the meaning of Art. 26 DSGVO. Facebook offers us, as the operator of an Instagram profile, to compile anonymous statistics in the form of so-called page insights into the usage behaviour of our profile. For this purpose, Facebook installs and reads cookies on the user’s end device.

This addendum can be viewed here:

https://www.facebook.com/legal/terms/page_controller_addendum

All further information about Facebook-Insights can be found here:

https://www.facebook.com/legal/terms/information_about_page_insights_data

Other social media channels

We also use the social network Youtube. Insofar as personal data is collected here, e.g. through direct messages, this is done for the purpose of initiating or implementing contractual relationships in accordance with Art. 6 Para. 1 lit. b DSGVO Insofar as your enquiry is not directed at initiating or implementing a contract, we nevertheless have a justified interest in processing and answering your enquiry. In this respect, the use of personal data for this purpose is governed by Art. 6 para. 1 lit. f DSGVO.

Insofar as your enquiry is related to another purpose, we will delete your data after processing, insofar as there is no other legal basis for data storage.

4. Transfer of data

Your personal data will not be transferred to third parties. However, data may exceptionally be transmitted for the following reasons:

insofar as you have given your express consent, Art. 6 para. 1 sentence 1 lit. a DSGVO
insofar as disclosure is required under Art. 6 para. 1 sentence 1 letter f DSGVO and there is no overriding interest worthy of protection in not disclosing your data
insofar as we are legally obliged to pass on the data, Art. 6 para. 1 sentence 1 lit. c DSGVO
insofar as disclosure is permitted and necessary in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO for the processing of contractual relationships with you

Insofar as your data is processed by third parties commissioned by us, this is done on the basis of Art. 28 DSGVO by means of an order processing contract.

5. Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual approvals, we will only process or transfer the data in a third country if the special requirements of Art. 44 ff. DSGVO. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised establishment of a level of data protection equivalent to that in the EU or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

A transmission of your data collected on this website takes place in the USA via MailChimp, Google, YouTube, Vimeo, Pinterest, Tumblr, Facebook: By accepting further cookies, you consent to your data being processed in the USA in accordance with Art. 49 Paragraph 1 S. 1 lit. a DSGVO.

6. Rights of data subjects

Right to information Art. 15 DSGVO

You have the right to ask us to confirm whether we are processing personal data about you. If this is the case, you can request information about this personal data and about the following information:

the processing purposes
the categories of personal data processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or to international organisations
if possible, the envisaged duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
the existence of a right to rectify or erase personal data concerning you or to limit processing or to object to such processing
the existence of a right of appeal to a supervisory authority
if the personal data is not collected from you, all available information about the origin of the data
the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the DPA and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing on the data subject

Right of rectification Art. 16 DSGVO

You can immediately demand the correction of incorrect or complete personal data stored by us.

Right to deletion (right to be forgotten) of your data, Art. 17 DSGVO

You can demand the deletion of your data stored with us, insofar as

the personal data are not relevant to the purposes for which they were collected or otherwise processed or are no longer necessary
you withdraw your consent on which the processing is based pursuant to Article 6 paragraph 1 letter a DSGVO or Article 9 paragraph 2 letter a DSGVO and there is no other legal basis for the processing;
you object to the processing in accordance with Article 21 paragraph 1 DSGVO and there are no overriding legitimate reasons for the processing or you object to the processing in accordance with Article 21 paragraph 2 DSGVO;
personal data have been processed unlawfully;
the deletion of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which you are subject
the personal data relating to information society services offered have been collected in accordance with Article 8 paragraph 1 of the DSGVO.

Upon presentation of the prerequisites, we are obliged to delete the data, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

Right to restrict processing, Art. 17 DSGVO

You have the right to demand that we restrict the processing of your data, insofar as

the accuracy of your personal data is disputed by you, but only for the time necessary to enable us to verify the accuracy of the data;
the processing is unlawful and you do not wish to have your personal data deleted immediately, but instead request that the use of your personal data be restricted;
we no longer need the personal data for the purposes of the processing, but you need it to assert, exercise or defend legal claims, or
you have lodged an objection to the processing in accordance with Article 21 paragraph 1 DSGVO, as long as it has not yet been established whether the justified reasons on our part outweigh the objection to you.

Insofar as processing is restricted, we may process your personal data – apart from storing them – only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

You will be informed again before the restriction is lifted.

Right to data transferability Art. 20 DSGVO

You have the right to receive your personal data that you have provided us with in a structured, common, machine-readable format or to request that it be transferred to another responsible party.

Right of objection Art. 21 DSGVO

You have the right, pursuant to Art. 21 DSGVO, to object to the processing of your personal data if they are processed on the basis of a legitimate interest pursuant to Art. 6 Paragraph 1 Sentence 1 letter f DSGVO. However, this only applies if there are reasons arising from your particular situation or if the objection is directed against direct advertising.

Right of withdrawal Art. 7 para. 3 DSGVO

You have the right to revoke your consent granted under Art. 6 para. 1 sentence 1 lit. a DSGVO to us at any time. This revocation applies exclusively to future use.

Right of appeal to supervisory authorities

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are habitually resident, your place of employment or our registered office, if you consider that the processing of personal data relating to you is contrary to the basic data protection regulation.

If you wish to exercise your rights as a data subject, you can also submit your request by e-mail to the above-mentioned e-mail address.

7. Data security

For security reasons and to protect the transmission of confidential content, such as enquiries which you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise this by the fact that the address line of the browser changes from “http://” to “https://”. In addition, a lock symbol can be seen in the browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

We have also taken precautions in the form of technical and organisational measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties.

8. Topicality and amendment of this data protection declaration

This privacy policy is currently valid and has the status of November 2020.

In order to ensure that our data protection declaration always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection declaration has to be adapted due to new or revised services, for example new services. The new data protection declaration will then take effect on your next visit to our website.

Our data protection declaration is available on our website for you to view and print out at any time.

9. complaints and warnings

Should you feel that your rights have been infringed or otherwise disadvantaged, we would ask you to inform us of this yourself. You will then receive a personal, individual reply. Within the scope of your duty to minimise damages, we would like to point out that we will not assume any costs of a lawyer commissioned by you out of court without prior contact. There is expressly no intention on our part for you to instruct a lawyer to cease and desist and/or to issue a cease-and-desist declaration subject to penalty. Consequently, a presumed intention cannot be taken into account.

boxhiit
Privacy policy