Data Protection

Data Privacy Policy and Data Subject Information according to Art. 13, 14 EU-DSGVO

www.schogetten.com

The protection of your personal data is an important concern for Ludwig Schokolade GmbH & Co KG. The collection and processing of your personal data is therefore carried out by our company exclusively within the framework of the data protection regulations. On this page we inform you in accordance with Art. 13, 14 EU Data Protection Regulation (EU-DSGVO) about the collection and processing of your personal data.

Responsible for data processing is

Ludwig Schokolade GmbH & Co. KG
Senefelderstraße 44
51469 Bergisch Gladbach, Germany
T +49 2202 105-500
F +49 2202 105-501
verwaltung@ludwig-schokolade.de

Our data protection officer is

Dr. Philipp Wehler
Hoffmann Liebs Partnerschaft von Rechtsanwälten mbB
Kaiserswerther Straße 119
40474 Düsseldorf
legal@krueger.de

While visiting this website and using its various offers, we process your personal data as described in detail below.

For the operation of the website, we are working together with an external service provider who we have carefully selected and obligated in accordance with data protection law.

Table of Content

1. Cookies

On the website hosted at www.ludwig-schokolade.de (including its subpages) we use so-called cookies. These are small text files that are transferred from our web server to your computer via your web browser and stored there on the permanent memory (hard disk, fixed memory or similar). The information stored in cookies (e.g. IP address, date and time of request, web browser used and operating system) is read by us. Below you will find more information about individual cookies used by us.

2. Server log files

Each time you visit our website, your browser automatically transmits to us your IP address, identifier (manufacturer, version, operating system) and language settings of your web browser, the time of your visit and visited subpages of our website, your referrer URL (i.e. the URL of the page from which you visit us), as well as the data volume accrued during your visit to our website (hereinafter “Access Data“). We process your Access Data to ensure system security (e.g. to ward off hacker attacks) and to compile usage statistics. This processing is carried out on the basis of our legitimate overriding interest (Art. 6 para. 1 p. 1 lit. f) EU-DSGVO). You are under no legal or contractual obligation to provide us with your access data, nor is this necessary for the conclusion of a contract. However, you must provide us with your access data so that you can call up our website and use the offers and services provided on it.

3. Google WebFonts

This website uses Google WebFonts, a service of Google Inc. This service enables us to provide you with our website in a uniformly visually appealing manner with the help of the font library referred to above.

A uniform and visually attractive design of our website is in our overriding legitimate interest (Art. 6 (1) f EU-DSGVO). There is neither a user analysis, nor is a user profile created.

We have installed the Google Web Fonts locally on our website. Thus, there is no connection to Google servers.

For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and see Google’s privacy policy: https://policies.google.com/privacy?hl=de.

4. hCaptcha

We use “hCaptcha” on our websites. The provider is Intuition Machines, Inc, 2211 Selig Drive, Los Angeles, CA 90026, USA (“Intuition Machines”).

The purpose of hCaptcha is to check whether the data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, hCaptcha analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, hCaptcha evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Intuition Machines.

For this purpose, hCaptcha uses cookies, through which hCaptcha collects personal data of the users. However, it stores them separately from the captcha data and deletes them afterwards. hCaptcha keeps personal data only as long as it is necessary to fulfill the purposes for which they were collected. However, information collected with above cookies may be retained for a limited period of up to one year after the cookie expires, but usually in anonymized and aggregated form.

For analysis, hCaptcha evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Intuition Machines.

The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. There are no overriding conflicting interests of the data subject.

Reference to the right of objection

You can object to the processing of your personal data by hCaptcha at any time free of charge. No further data processing for this purpose will then take place. The objection has no effect on data processing operations that took place before the objection was lodged. The objection can be made informally and should be addressed to Ludwig Schokolade GmbH & Co. KG, Marketing Department, Senefelderstraße 44, 51469 Bergisch Gladbach, e-mail: info@schogetten.de, phone: +49 2202 105-500.For more information about hCaptcha and the privacy policy of Intuition Machines, please refer to the following links: hCaptcha – Privacy Policy and hCaptcha – Stop more bots. Start protecting privacy.

5. Google Analytics

a) Data categories concerned, recipients, processing purposes

This website uses Google Analytics, a web analytics service provided by Google, Inc (“Google”). As our processor, Google will process the data collected by means of Google Analytics in order to analyze your use of the websites, compile reports on corresponding activities and provide us with other services related to the use of our website. The statistics obtained in this way allow us to improve our offer and make it more interesting for you as a user. For this purpose, Google Analytics uses cookies, whereby the information generated by these cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

When using Google Analytics, usually no personal data is processed. Your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Insofar as personal data is transferred to the USA, an adequate level of data protection is ensured by means of suitable guarantees. For this purpose, EU standard contractual clauses have been concluded with the provider. Copies of these can be obtained from the person responsible or directly from the European Union at the following link: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

We would like to point out that on our websites Google Analytics has been extended by the plug-in “AnonymizeIP”; in order to ensure an anonymized collection of your IP address even in these exceptional cases, so that your data cannot be related to your person.

The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

b) Legal basis, storage period

The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. [a) / f)] EU-DSGVO. Sessions are regularly terminated after 30 minutes without activity and campaigns after six months; data on campaigns can be stored for a maximum of two years.

c) Possibility of objection

Insofar as Google Analytics processes your data in personal form, you can object to this at any time – in this case, this processing will be stopped immediately.

You can send your informal objection in particular to our data protection officer: legal@krueger.de.

You can also exercise your right to object in particular by preventing the storage of cookies used by Google Analytics by setting your browser software accordingly (further information on this can be found here); however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Please note that by doing so you will leave our websites.

d) Information from Google

Google Dublin, Google Ireland Ltd.
Gordon House, Barrow Street, Dublin 4, Ireland
Fax: +353 (1) 436 1001.

User conditions for Google Analytics: http://www.google.com/analytics/terms/de.html
Privacy policy (among others) for Google Analytics: https://policies.google.com/technologies/partner-sites?hl=de&gl=de

6. Google Tag Manager

a) This website uses the Google Tag Manager.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. The Google Tag Manager records your IP address. Insofar as personal data is transferred to the USA, an adequate level of data protection is ensured by means of suitable guarantees. For this purpose, EU standard contractual clauses have been concluded with the provider. Copies of these can be obtained from the responsible party or directly from the European Union at the following link: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de .

The use of Google Tag Manager is based on Art. 6 (1) lit. f DSGVO. Ludwig Schokolade has a legitimate interest in a quick and uncomplicated integration and management of various tools on its website. Insofar as a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

b) Information from Google

Google Dublin, Google Ireland Ltd.
Gordon House, Barrow Street, Dublin 4, Ireland
Fax: +353 (1) 436 1001

User conditions for Google Tag Manager: https://support.google.com/tagmanager/answer/9323295?hl=de

7. Matomo (previous Piwik)

This website uses the open source web analytics service Matomo. Matomo uses technologies that enable cross-page recognition of the user to analyze user behavior (e.g. cookies or device fingerprinting). The information collected by Matomo about the use of this website is stored on our server. The IP address is anonymized before storage.

With the help of Matomo, we are able to collect and analyze data about the use of our website by website visitors. This allows us to find out, among other things, when a page has been viewed, which page has been viewed and from which region the page has been viewed. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising. If a corresponding consent was requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

IP anonymization

We use IP anonymization for the analysis with Matomo. In this case, your IP address is shortened before analysis so that it can no longer be clearly assigned to you.

Hosting

We host Matomo exclusively on our own servers, so all analytics data remains with us and is not shared.

8. Facebook Fanpage

For further information on Ludwig Schokolade, our products, and special offers, please visit also our Facebook fanpage www.facebook.com/schogetten hereafter „fanpage“). You can also publish your own posts via these fanpages (please see our terms of use).

We are using the Facebook service “Insights“ for evaluation of our Facebook fanpages. When you visit our fanpage, we are, together with Facebook, processing your data provided via the Facebook service „Insights“. Such data includes information on your action and interaction on and in connection with our fanpages, thus the collected data can be personal data.

Meta Platforms Ireland Ltd. collects such data in compliance with your data privacy rights pursuant to Article 3 of the EU-GD e, together with Facebook, processing your data provided via the Facebook service „Insights“. Such data includes information on your action and interaction on and in connection with our fanpages, thus the collected data can be personal data.

Meta Platforms Ireland Ltd. collects such data in compliance with your data privacy rights pursuant to Article 3 of the EU-GDPR. For further information on the processing of your personal data in connection with the Facebook service Insights, please visit www.facebook.com/legal/terms/ information_about_page_insights_data). For further information on your rights in terms of data privacy pursuant to the EU-GDPR, please see also Facebook’s data privacy policy under www.facebook.com/about/privacy). To execute your rights, you are also free to contact us.

Please note that we do not have information on Facebook’s data processing. Thus, when visiting our fanpage or when sharing and linking our fanpages with other users and fanpages, Facebook might track your actions and collect your personal data for its own purposes.

9. Customer contact and customer complaints: contact form and e-mail function

You have the option of contacting us directly via a contact form stored on our website. If you do this, you must enter your name, e-mail address, title and address. We record this data, your message and your IP address as well as the time at which you send the form.

We also offer you the possibility to contact us directly via e-mail. If you click on the “E-mail” button on our website, your e-mail program will open and you can send us a message to our pre-entered e-mail address. We have no influence on the data processing by the e-mail program of your respective provider; we merely establish a link to the e-mail program.

We use the information you send us via the contact form or e-mail exclusively to process your request; we delete this information as soon as the communication has been completed, unless legal storage obligations require storage. We need your IP address and the time when you use the contact form for security reasons; this enables us to identify automated accesses and hacker attacks and to prevent them from happening again. This processing of the information you provide to us is in our legitimate interest (Art. 6 I 1 f EU-DSGVO).

10. Data Security

In order to protect your personal data in the best possible way, we use SSL encryption (https standard), technical and organizational security measures that are also adapted to the current state of the art in accordance with the risks involved.

11. Data Subject Rights

In the following, we would like to inform you about the further rights to which you are entitled in accordance with Articles 15-21 and Article 77 (1) EU GDPR. To assert these rights, you can contact our data protection officer in particular by e-mail legal@krueger.de.

a) Right to information:

In accordance with Art. 15 EU-DSGVO, you have the right to receive information about the data processing and a copy of the processed data. In this context, you also have the right to receive a copy of your personal data processed by us in accordance with Art. 15 (3-4) EU-DSGVO.

b) Right to rectification:

In accordance with Art. 16 EU-DSGVO, you have the right to request us to correct or complete your personal data.

c) Right to deletion:

In accordance with Art. 17 (1) EU-DSGVO, you have the right to demand that we delete your personal data. To the extent that we have published your personal data, you also have the right to request that we inform other data controllers of your request for the erasure of all links to and/or copies or replications of your personal data in accordance with Article 17(2) EU GDPR.

d) Right to restriction of processing:

In accordance with Art. 18 EU-DSGVO, you have the right to demand that we restrict the processing of your personal data.

e) Right to data portability:

Pursuant to Art. 20 EU GDPR, you have the right to receive the personal data about you that you have provided to us in a structured, commonly used and machine-readable format and to request that this data be transferred to another controller.

f) Revocation of your consent:

If you have given us consent to process your personal data, you may revoke this consent at any time, in whole or with respect to individual processing purposes, in each case without giving reasons.

Please note that any lawful processing of your personal data that has taken place up to the time of your revocation will not be rendered unlawful retroactively by such revocation.

You can revoke consents you have given us for the processing purposes listed above in particular by clicking on the hyperlinks provided there. You can also send your revocation by e-mail to legal@krueger.de.

In case of revocation of your consent given for a certain service, you can no longer use the corresponding service; beyond that, you will not suffer any disadvantages.

If you wish to revoke your consent only for certain processing and use purposes, we would like to ask you to make this clear in your revocation by naming the relevant purposes (e.g. as “Revocation of consent regarding the contact form” if you only wish to revoke your consent regarding the processing of your data for this purpose). If you do not specify your revocation in more detail or if you expressly declare it comprehensively, we will assume that you revoke your consent with regard to all collections, processing and uses explained in these data protection provisions.

g) Right of objection:

In accordance with Art. 21 EU-DSGVO, you have the right to object to the processing of your personal data by us, insofar as this is carried out for the purpose of direct advertising and/or on the basis of a “legitimate interest” within the meaning of Art. 6 para. 1 sentence 1 lit. f) EU-DSGVO.

h) Complaints to supervisory authorities:

In accordance with Art. 77 (1) EU-DSGVO, you have the right to lodge a complaint with a supervisory authority against the processing of your personal data by us, insofar as you are of the opinion that the processing of your personal data violates data protection provisions.

Responsible Contact for Data Protection and Freedom of Information in North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf

Tel.: 0211/38424-0
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de

In addition, you retain the right to pursue any other legal remedies to which you are entitled (e.g., in court or before the authorities).