POMMEREL Live-Marketing GmbH Logo

Privacy Policy

1. data protection at a glance

General information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data refers to any information relating to an identified or identifiable natural person.

You can find detailed information on data protection in the following sections of this Privacy Policy.

Data Controller

The entity responsible for data processing on this website is:

POMMEREL Live-Marketing, LLC

5a Alfred-Hennings-Weg

27804 Berne

Germany

Phone: +49 4406 / 95 75 00

Email: info@pommerel.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Data Collection on This Website

Your data is collected, in part, when you provide it to us—for example, by using our contact form or contacting us via email.

Other data is collected automatically or with your consent by our IT systems or the services we use when you visit the website. This includes, in particular, technical data such as your browser, operating system, the time you accessed the page, or technical connection data.

Some of this data is necessary to ensure that the website operates without technical errors and remains secure. Other data is used for statistical analysis of how our website is used. To the extent that processing requires your consent, it will not take place until you have given such consent.

Your Rights

In accordance with the statutory requirements, you have the right, in particular, to:

  • Information Regarding Your Personal Data Processed by Us (Art. 15 GDPR)
  • Rectification of Inaccurate Data (Art. 16 of the GDPR)
  • Deletion of Your Data (Art. 17 of the GDPR)
  • Restriction of Processing (Art. 18 GDPR)
  • Data Portability (Art. 20 of the GDPR)
  • Objection to Certain Processing Activities (Art. 21 of the GDPR)

You may revoke your consent at any time, effective for the future. The lawfulness of the processing carried out up to the time of revocation remains unaffected.

In addition, you have the right to file a complaint with a data protection supervisory authority.

2. general notes and mandatory information

Data protection

We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.

When you use this website, various types of personal data may be processed. This Privacy Policy explains what data we process, for what purposes, and on what legal basis the processing takes place.

Please note that data transmission over the Internet—for example, when communicating via email—may involve security risks. It is technically impossible to completely protect data from access by third parties.

Legal Basis for Processing

Depending on the processing operation, we process personal data based on the following legal grounds, in particular:

  • Article 6(1)(a) of the GDPR , if you have consented to the processing;
  • Article 6(1)(b) of the GDPR , if the processing is necessary for the performance of a contract or for the implementation of precontractual measures;
  • Article 6(1)(c) of the GDPR , if the processing is necessary to comply with a legal obligation;
  • Article 6(1)(f) of the GDPR , if the processing is necessary to protect our legitimate interests or the interests of a third party, and your interests, fundamental rights, and fundamental freedoms do not override those interests.

To the extent that information is stored on or retrieved from your device and consent is required for this, such actions are based on Section 25(1) of the TDDDG. To the extent that access is absolutely necessary, it is based on Section 25(2) of the TDDDG.

Retention period

Unless a more specific retention period is stated in this Privacy Policy, we store personal data only for as long as is necessary for the respective purpose of processing.

If you submit a valid request for deletion or revoke your consent, the relevant data will be deleted unless there are other legally permissible grounds for continued storage. Statutory retention requirements remain unaffected.

Withdrawal of Your Consent

You may revoke any consent you have already given at any time, effective for the future. To do so, you can, in particular, change the settings in our consent management system or contact us.

The lawfulness of the processing carried out up to the time of revocation remains unaffected by the revocation.

Right to Object Under Article 21 of the GDPR

If data processing is based on Article 6(1)(e) or (f) of the GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. This also applies to profiling based on these provisions.

If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your data for such marketing purposes. This also applies to profiling, to the extent that it is related to such direct marketing.

Right to lodge a complaint with the competent supervisory authority

If you believe that the processing of your personal data violates the General Data Protection Regulation, you have the right to file a complaint with a data protection supervisory authority, without prejudice to any other administrative or judicial remedies.

The data protection supervisory authority responsible for us is:

The State Data Protection Commissioner of Lower Saxony
Prinzenstraße 5
30159 Hanover

Phone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de
Website: www.lfd.niedersachsen.de

You have the right to file a complaint, in particular with a supervisory authority in the Member State where you normally reside, where you work, or where the alleged violation occurred.

Right to data portability

You have the right to receive data that we process automatically based on your consent or to fulfill a contract in a structured, commonly used, and machine-readable format, or—to the extent technically feasible—to have that data transferred to another data controller.

Access, Correction, and Deletion

In accordance with applicable laws, you have the right at any time to request access to your stored personal data and, if necessary, to have that data corrected or deleted.

Right to restriction of processing

Pursuant to Article 18 of the GDPR, you have the right to request that the processing of your personal data be restricted, in particular if:

  • You dispute the accuracy of the data and we need time to verify it;
  • the processing is unlawful and you request restriction instead of erasure;
  • we no longer need the data for our own purposes, but you need it to assert, exercise, or defend legal claims;
  • You have filed an objection under Article 21(1) of the GDPR, and it has not yet been determined whose interests take precedence.

SSL or TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can tell that the connection is encrypted because the website address begins with “https://.”

3. Hosting with IONOS

We host our website with:

IONOS SE

57 Elgendorfer Street

56410 Montabaur

Germany

When you visit our website, IONOS processes technical data necessary for the operation, security, and stability of the website. This may include, in particular, the following information:

  • Referrer or previously visited website
  • Requested website or file
  • Browser type and browser version
  • Operating system used
  • Device Type
  • Time of access, as well as
  • IP address in anonymized form

According to IONOS, this visitor data related to web hosting is stored for eight weeks.

Data processing is carried out to ensure the secure, stable, and technically error-free provision of our website, based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and reliable operation of our website.

To the extent that IONOS processes personal data on our behalf, it does so on the basis of a data processing agreement in accordance with Article 28 of the GDPR.

4. Consent Management with Borlabs Cookie

We use Borlabs cookies on this website to obtain and manage consent for the use of certain services and technologies.

When you visit our website, you can use the consent banner to choose which optional services and processing activities you wish to consent to. Your selection will be saved so that it can be taken into account when you visit the site again.

Data processing in the context of consent management serves to document and implement the data protection decisions you have made, as well as to maintain the legally required records of the consents you have granted.

To the extent that processing is carried out to fulfill statutory record-keeping obligations, the legal basis is Article 6(1)(c) of the GDPR. In all other cases, the processing is based on our legitimate interest in the legally compliant and user-friendly management of consents in accordance with Article 6(1)(f) of the GDPR. The access to your device that is technically necessary for storing your selections is based on Section 25(2) of the TDDDG.

You can change or revoke your consent at any time, effective for the future, through the privacy and cookie settings on our website.

5. Making Contact

Contact form

If you contact us via our contact form, we will process the information you provide there to handle your inquiry and for any follow-up questions.

We use Gravity Forms for the contact form. The form data you enter is stored in our WordPress system and sent to us so we can process your request.

When the contact form is submitted, we do not store the sender’s IP address via Gravity Forms.

The legal basis depends on the content of your inquiry. If you contact us to initiate or execute a contractual relationship, the legal basis is Article 6(1)(b) of the GDPR. For all other inquiries, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the proper handling of communications directed to us.

Form submissions stored in Gravity Forms are automatically and permanently deleted after 365 days. Data may be retained beyond this period if required by a contractual relationship, statutory retention obligations, or to assert, exercise, or defend legal claims.

Contacting Us by Email

If you contact us by email, we will process your message, including the contact information it contains, in order to handle your inquiry.

For our business email communication, we use Microsoft 365 / Microsoft Exchange, a service provided by Microsoft.

The provider for users in the European Economic Area is generally:

Microsoft Ireland Operations Limited

One Microsoft Place

South County Business Park

Leopardstown

Dublin 18

Ireland

When using Microsoft services, it cannot be ruled out that data may also be processed by affiliated Microsoft companies. To the extent that personal data is transferred to third countries in this context, such transfers are conducted in accordance with the legal requirements governing international data transfers.

The legal basis for processing depends on the content of the communication. For contractual or pre-contractual inquiries, the legal basis is Article 6(1)(b) of the GDPR. For other business communications, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in efficient and reliable business communication.

6. Audience Measurement and Web Analytics

IONOS WebAnalytics

We use IONOS WebAnalytics for statistical analysis and technical optimization of our website.

According to the provider, IONOS WebAnalytics collects data via log files or a pixel and does not use cookies for this purpose. The IP address transmitted when a page is accessed is immediately anonymized by IONOS upon transmission and subsequently processed without any personal reference.

In particular, the following are evaluated:

  • Referrer,
  • the requested website or file,
  • Browser type and browser version,
  • Operating system,
  • Device type,
  • Time of access, as well as
  • IP address in anonymized form to determine the approximate location of access.

The processing is used exclusively for statistical analysis and technical optimization of our website.

Data processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the statistical analysis, optimization, and reliable operation of our website.

According to IONOS, WebAnalytics does not store any personal data about website visitors, does not share any data with third parties, and does not use cookies for WebAnalytics.

Koko Analytics

We use Koko Analytics to perform data-minimal statistical analysis of our website’s usage.

Koko Analytics runs on our own WordPress installation. We use Koko Analytics in its cookieless configuration. This means that no cookies are set to track visitors.

To identify unique visitors, Koko Analytics uses a privacy-friendly method in this configuration, in which a hash is generated from technical information such as the IP address and user agent, combined with a value that changes daily. According to the provider, the IP address is not stored permanently; the value used for identification changes daily. This is intended to prevent the permanent recognition of individual visitors.

The statistics collected using Koko Analytics are processed locally on our WordPress installation. The analytics data is not transmitted to Koko Analytics for analysis purposes.

This processing is used to measure aggregate reach and improve our website and is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in understanding how our website is used in a data-minimal manner and optimizing our offerings accordingly.

Google Analytics 4

If you have given your consent via our consent banner, we use **Google Analytics 4**, a web analytics service provided by Google.

The provider is:

Google Ireland Limited

Gordon House

Barrow Street

Dublin 4

Ireland

Google Analytics allows us to analyze the use of our website statistically. In particular, this may involve processing information about page views, sessions, interactions, technical device and browser information, and location data.

Google Analytics is activated on our website only after you have given your consent via our consent management system.

We use Google Analytics, among other things, to analyze the reach and usage of our website. Detailed location and device data collection is enabled. Google Signals is not enabled. Similarly, the collection of data provided by users is not enabled.

The processing of personal data in connection with Google Analytics is based on your consent pursuant to Article 6(1)(a) of the GDPR. To the extent that information is stored on or retrieved from your device, this is also based on your consent pursuant to Section 25(1) of the TDDDG.

You can revoke your consent at any time, effective for the future, through the privacy and cookie settings on our website.

Data Retention in Google Analytics

We have set the following retention periods for our Google Analytics property:

  • Event data: 2 months
  • User data: 14 months

For user data, the feature that resets the retention period when new user activity occurs is enabled. Therefore, the 14-month period may start over when new activity occurs.

The data retention period set by Google Analytics applies specifically to user- and event-level data and does not necessarily apply to all aggregated reports.

Data Transmission to Google

When using Google Analytics, it cannot be ruled out that data may be processed by Google entities outside the European Union or the European Economic Area.

To the extent that personal data is transferred to third countries, such transfers are conducted in accordance with the legal requirements governing international data transfers.

We have accepted the Google Analytics Data Processing Terms provided by Google.

7. Vimeo

Videos from Vimeo are embedded on our website.

The provider is:

Vimeo.com, Inc.

330 West 34th Street

5th Floor

New York, New York 10001

United States

When loading or playing an embedded Vimeo video, a connection may be established with Vimeo’s servers. In particular, technical connection data—such as your IP address—as well as information about which of our pages you have visited may be transmitted to Vimeo.

If you are logged in to Vimeo, Vimeo may, in some cases, associate your usage with your Vimeo account.

For some of the embedded Vimeo content, we use our consent/content blocker so that the external content is not loaded initially and you can actively enable it. However, due to different technical embedding methods, Vimeo content on our website may also be embedded in other ways.

To the extent that Vimeo content is activated through our consent management system, the associated processing is based on your consent pursuant to Art. 6(1)(a) of the GDPR and—to the extent that information from your device is accessed – Section 25(1) of the TDDDG.

Vimeo may transfer and process data in the United States. To the extent that personal data is transferred to third countries, this is done in accordance with the legal requirements governing international data transfers.

For more information about Vimeo’s processing of personal data, please see Vimeo’s Privacy Policy.

8. Social Media Presence and Links

Our website may contain links to our social media profiles. If it is merely a link, no data is generally transmitted to the respective provider through the link itself. Only when you click on the link do you leave our website and access the respective service.

The privacy policies of the respective providers also apply to data processing on the websites of the respective social networks.

9. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy if the services we use, the technical processes of our website, or legal requirements change.

The version published on this website at any given time shall apply.

If, for any reason, you believe we have stored inaccurate personal information about you, or if you wish to have your data corrected, restricted, or deleted, you can also contact us at the following email address: info@pommerel.de