Data protection is important to us

1.  “Controller” within the meaning of Article 4 (7) GDPR

The controller responsible for processing within the meaning of Article 4(7) GDPR is:

PreTurn GmbH
Olgastraße 80
74072 Heilbronn
Telefon: +49 (0)7132 30-773 322
E-Mail: info@preturn-pooling.com

2. Communication by e-mail/telephone/mail/contact form 2.1 Purposes of the processing/legal basis  

We treat all personal data that we receive from you by e-mail, telephone, mail or contact form confidentially. We use your data solely for the limited purpose of processing your inquiry. The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the interest in responding to your inquiries so that customer satisfaction is ensured and promoted. When you send us personal data by contacting us for purposes of initiating or performing an existing contractual relationship, Article 6(1)(b) GDPR is the legal basis for data processing.

2.2 Recipients/categories of recipient

As a rule, we do not transfer the data to third parties outside PreTurn GmbH. In exceptional cases, we will have a processor process the data on our behalf. Such processors are carefully selected and bound by contract in accordance with Article 28 GDPR.

Where necessary to process your inquiry, we transfer your data to Schwarz Group companies, such as other PreZero companies.

2.3 Obligation to provide your data

You are under no statutory or contractual obligation to provide personal data to us. However, if you do not provide us with the data required to process your request, we will not be able to process or respond to it.

2.4 Storage time/criteria for determining storage time

All personal information that you send us in response to inquiries will be deleted or securely anonymized within 90 days of the final response to you. The 90-day retention period is explained by the fact that it may happen from time to time that you contact us again after a reply on the same matter and we must then be able to refer to the previous correspondence. Experience has shown that, as a rule, after 90 days, there are no further queries about our answers. If you assert your rights as a data subject, your personal data will be stored for 3 years after the final reply in order to prove that we have provided you with comprehensive information and that the legal requirements have been met.

We delete or securely anonymize all information we receive from you when you make inquiries no later than 90 days after the final response is sent to you. The information is retained for 90 days in case you contact us again after a receiving a response from us on the same matter and we need to refer to our previous correspondence. Based on experience, we generally do not receive any questions concerning our responses after 90 days. If you assert your rights as a data subject, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met. Personal data that you send to us as part of initiating or performing a contract will be deleted after no more than 12 years.

3. Data processed when you visit this website 3.1 Purposes and legal basis of processin  

When you visit this website, log files are generated containing the following information:

The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest arises from our interest in protecting our systems and preventing improper and/or fraudulent activity each time that a user accesses this website.

Where processing of the aforementioned data is necessary for preparing or performing a contractual relationship, we process your data on the basis of Article 6(1)(b) GDPR.

3.2 Recipients/categories of recipient

In exceptional cases, your personal data may be accessible to RAIDBOXES GmbH, Friedrich-Ebert-Straße 7, 48153 Münster, Germany, for support and maintenance purposes because our website is hosted on our behalf on servers provided and operated by RAIDBOXES GmbH.

3.3 Obligation to provide your data

You are under no statutory or contractual obligation to provide personal data to us. However, such data will be processed for technical reasons as soon as you access our site. The only way to prevent your data from being processed is to stop using our website.

3.4 Storage time

We store the aforementioned data for a period of 365 days.

4. Cookies

We, PreTurn GmbH, Stiftsbergstraße 1, 74172 Neckarsulm, Germany, are the controller with respect to data processing in connection with the use of “cookies” and other similar technologies to process usage data on all (sub-)domains at www.preturn-pooling.com.

Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our websites. Cookies do not cause any harm to your end device, nor do they contain any viruses, trojans or other malware. The cookie stores certain information that results in connection with the specific end device deployed. This does not, however, mean that we will immediately become aware of your identity.

You may also configure your browser to ensure that a warning appears every time a new cookie is placed. This makes the use of cookies more transparent for you. You may also configure your browser to refuse acceptance of all or some cookies from certain sources. Please be advised, however, that disabling cookies may limit the functionality of this website.

4.1 Purposes and legal basis of processing

Cookies and the other technologies used to process usage data are deployed for the following purposes, depending on the categories of cookie/other technologies:

Necessary: these cookies help to make a website usable by enabling basic functions such as site navigation and access to secure pages. The website cannot function properly without these cookies.

Preferences: using these methods, we can take into account your actual or perceived preferences to enhance the user experience. For example, we can use your settings to display our website in a language relevant to you. They also mean we can avoid displaying products that may not be available in your region.

Statistics: these methods enable us to tailor the design of our services by producing anonymized statistics about how they are used. For example, we can use them to determine how better to adapt our websites to user habits.

Marketing: these enable us to display relevant advertising content based on an analysis of your usage behavior. Your usage behavior can also be tracked over various websites, browsers or devices via a user ID (unique identifier).

Depending on the purpose, the use of cookies and similar technologies to process usage data involves processing the following types of personal data in particular:

Necessary:

Preferences: settings to customize the user interface that are not linked to a permanent identifier.

Statistics: pseudonymized usage profiles containing information on the use of our website. These contain in particular:

The IP address is routinely anonymized, which in principle means it is no longer possible to identify you.

We only store the user ID together with other data you provide (e.g., name, e-mail address) if you give us express permission to do so. In itself, we cannot use the user ID to identify you.

Marketing: pseudonymized usage profiles containing information on the use of our website. These contain in particular:  

IP addresses are routinely anonymized, which in principle means it is no longer possible to identify you.

We only store the user ID together with other data you provide (e.g., name, e-mail address) if you give us express permission to do so. In itself, we cannot use the user ID to identify you. We may potentially share the user ID and associated usage profiles with third parties via providers of advertising networks.

The legal basis for using preference, statistics and marketing cookies and similar technologies is your consent given pursuant to Article 6(1)(a) GDPR. The legal basis for using technically necessary cookies and similar technologies is your consent given pursuant to Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the technical stability and security of website operation.

You may withdraw/modify your consent at any time with effect for the future without this affecting the lawfulness of the processing based on consent before its withdrawal. Click here to make your selection. For an overview of the cookies and other technologies we use, including the respective purposes of processing, storage periods and any third party providers involved, see our cookie policy.

4.2 Transfer of data to third countries

To the extent that you have consented to the use of the relevant cookies, your data will be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, if it is processed using Google Analytics. This will also be the case if you play YouTube videos. Some of these servers are located in the U.S. Data is transferred on the basis of standard EU data protection clauses.

In order to protect your data and ensure the secure transmission of forms, we use Google reCaptcha, a service provided by Google LLC (“Google”), on the basis of Article 6(1)(f) GDPR. Our legitimate interest follows from the aforementioned purposes. This service performs an analysis of various information to determine whether the data was entered by a person or by an automated program (bot). The information generated is transmitted to a Google server in the USA and processed there. The collection and analysis of that information does not enable us or Google to identify you. In particular, Google does not merge the information with your personal data.

For further information on Google reCaptcha, please see: https://policies.google.com/privacy?hl=de or https://policies.google.com/terms?hl=de

4.3 Obligation to provide your data

You are under no statutory or contractual obligation to provide personal data to us. You may prevent cookies from being stored by adjusting the aforementioned settings, selecting the categories of cookies accordingly or by withdrawing or modifying any consent you may have given.

4.4 Storage time

For information on the duration of storage for cookies, see our cookie policy. If “persistent” is entered in the “expiration” column, the cookie will be stored permanently until the corresponding consent is withdrawn.

5. Embedded YouTube videos

We have embedded YouTube videos on our website, which are stored at http://www.YouTube.com and can be played directly from our website.

You will find further information on the purpose and scope of data collection and how YouTube processes data in the provider’s privacy policy. You will also find further information there about your rights in this regard and settings to protect your privacy. YouTube’s Address and privacy policies: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; https://www.google.de/intl/de/policies/privacy/.

6. Our social media sites

6.1 Processing as the controller

We, PreTurn GmbH and the operators of the social media platforms are partly responsible for the data collection and processing described below. For certain processing activities, we and the platform operators also act as jointly responsible parties in the sense of Art. 26 DSGVO.

6.1.1 The platform operator as controller

We have only limited influence on the data processing by the operators of the social media platform (e.g. administration of members and shared information). At the points where we can exert influence and parameterize the data processing, we work within the scope of the possibilities available to us to ensure that the operator of the social media platform treats the data in a manner that complies with data protection regulations. In many places, however, we cannot influence the data processing by the operator of the social media platform and do not know exactly which data the operator processes.

The platform operator operates the entire IT infrastructure of the service, maintains its own data protection regulations and maintains its own user relationship with you (if you are a registered user of the social media service). In addition, the operator is solely responsible for all questions regarding the data of your user profile, to which we as a company have no access.

For more information on data processing by the provider of the social media platform and further options for objection, please refer to the provider’s privacy policy:

Facebook: https://www.facebook.com/privacy/explanation Instagram: https://help.instagram.com/519522125107875 YouTube: https://www.youtube.com/intl/de/about/policies/ LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=d_org_guest_company_overview_footer-privacy-policy Twitter: https://twitter.com/de/privacy

6.1.2 PreTurn GmbH as the controller 6.1.2.1 Purposes and legal basis of processing

The purpose of data processing by us on our social media sites is to inform customers about services, promotions, competitions, factual topics, company news and the interaction with visitors to the social media sites on these topics, as well as to answer relevant questions, praise or criticism.

We only reserve the right to delete content if this should be necessary. We may share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. Legal basis is Art. 6 para. 1 lit. f) DSGVO. The data processing is carried out in the interest of our public relations and communication. The operator has no influence on the processing of your data by us in the context of customer communication or competitions.

As already mentioned, we take care to design our social media pages as data protection-compliant as possible in those places where the provider of the social media platform gives us the opportunity.

6.1.2.2 Recipients/categories of recipient

The data you enter on our social media pages, such as comments, videos, pictures, likes, public messages, etc., are published by the social media platform and will not be used or processed by us for any other purpose at any time. We only reserve the right to delete illegal content if this should be necessary. This is the case, for example, with infringing or illegal posts, hate comments, salacious comments (explicitly sexual content) or attachments (e.g. pictures or videos), which may violate copyrights, personal rights or criminal laws.

We may share your content on our site if this is a function of the social media platform and communicate via the social media platform. If you send us a request on the social media platform, we may also refer you to other, secure communication channels that guarantee confidentiality, depending on the required answer. You always have the possibility to send us confidential inquiries to our address mentioned under point 1. or in the imprint.

6.1.2.3 Obligation to provide your data

You are neither contractually nor legally obliged to provide us with personal data. We do not collect any personal data from you if you use our pages in social media for purely informational purposes. If you do not wish to provide us with any personal data, you can still visit our pages.

6.1.2.4 Storage period

All personal information that you send us in response to inquiries will be deleted or securely anonymized within 90 days of the final response to you. The 90-day retention period is explained by the fact that it may happen from time to time that you contact us again after a reply on the same matter and we must then be able to refer to the previous correspondence. Experience has shown that, as a rule, after 90 days, there are no further queries about our answers. If you assert your rights as a data subject, your personal data will be stored for 3 years after the final reply in order to prove that we have provided you with comprehensive information and that the legal requirements have been met.

All public posts by you on one of our social media pages remain in the timeline for an unlimited period of time, unless we delete them due to an update of the underlying topic, a violation of law or our guidelines, or you delete the post yourself. With regard to the deletion of your data by the operator himself, we have no possibility to influence this. Therefore, the data protection regulations of the respective operator apply in addition.

6.2 Processing as joint controllers

With the operator of the social media service there is partly a relationship according to Art. 26 para. 1 DSGVO (joint responsibility):

For the web tracking methods used by the operator of the social media platform, the platform operators and we act as jointly responsible parties. The web tracking can also be carried out independently of whether you are logged in or registered with the social media platform. As already mentioned, we unfortunately can hardly influence the web tracking methods of the social media platform. For example, we cannot switch this off.

The legal basis for the webtracking methods is Art. 6 para. lit. f) DSGVO. The interest in optimizing the social media platform and the respective fan page is considered justified in the sense of the aforementioned regulation.

For further information about recipients and categories of recipients and the storage time/criteria for determining storage time, please refer to the privacy policies of the platform operators. We do not have any control over this.

You will find information on the rights available to you to prevent these web tracking methods in the privacy policies of the platform operators. You can also contact the platform operators about this using the contact details provided in the legal notice section of their respective websites.

We have only a very limited ability to influence and prevent the provision of statistics to us by social media platform operators. However, we do make sure that we do not receive any additional optional statistics.

.Please be aware that it is possible that social media platforms will use your profile and user behavior data in order to analyze, for example, your habits, personal relationships and preferences etc. PreZero Stiftung & Co. KG has no control over the processing or disclosure of your data by social media platform operators.

7. Your rights as the data subject

Under Article 15(1) GDPR, you have the right to obtain information, free of charge, on the personal data stored about you.

If the statutory requirements are met, you also have a right to rectification (Article 16 GDPR), erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR) of your personal data.

If the basis of processing is Article 6(1)(e) or (f) GDPR, you have a right to object under Article 21 GDPR. If you object to processing, your data will no longer be processed thereafter, unless the controller demonstrates compelling legitimate grounds for the processing which override the interests of the data subject in the objection.

If you have provided the processed data yourself, you have a right to data portability under Article 20 GDPR.

If the data processing is carried out on the basis of consent granted under Article 6(1)(a) or Article 9(2)(a) GDPR, you may revoke that consent at any time with effect for the future without this affecting the lawfulness of the previous processing.

In the above-mentioned cases, or if you have questions or complaints, please write to or e-mail the data protection officer. You also have a right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority located in the state in which you live or where the controller is domiciled has jurisdiction.

8. Data protection officer

For further questions concerning the processing of your data or the exercise of your rights, please contact the competent data protection officer of the controller at:

PreTurn GmbH
– Datenschutzbeauftragter –
Olgastraße 80
74072 Heilbronn
E-Mail: datenschutz-stiftung@prezero.com