Privacy Notice and Data Protection Declaration
Data protection declaration
Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.
“Personal data” is any information relating to an identified or identifiable natural person.
Server log files
You can use our websites without submitting personal data. Every time you access our website, user data is transmitted by your internet browser and stored in protocol files (server log files). This stored data includes e.g. name of the site called up, date and time of the request, amount of data transferred and the provider making the request. This data serves exclusively to ensure smooth operation of our website and to improve our offering. It is not possible to assign this data to a particular person.
Collection and processing when using the contact form
When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact. By submitting your message you agree to the processing of your transmitted data. Processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent.You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. We will only use your email address to process your request. Finally your data will be deleted, unless you have agreed to further processing and use.
Use of Google reCAPTCHA
Our website uses the reCAPTCHA service by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The request serves to distinguish whether the input was made by a human or automatic machine processing. The request includes the submission of the IP address and any other data required by Google for the reCAPTCHA service. For this purpose your input will be transmitted to Google and used further there. Google will, however, shorten your IP address beforehand within the Member States of the European Union or other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website in order to assess your use of this service. The IP address transmitted by your browser as part of reCAPTCHA is not associated with any other data held by Google. Your data may also be transmitted to the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission, the “Privacy Shield”. Google participates in “Privacy Shield” and has submitted to its requirements. By activating the request you agree to the processing of your data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.You can find more detailed information on Google reCAPTCHA and the associated data protection declaration at: https://policies.google.com/technologies/ads?hl=en
Customer account
When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.
Data collection when you post a comment
When you comment on an article or a contribution, we collect your personal data (name, email address, comment text) only in the scope provided by you. The processing serves to allow you to comment and to display comments. By submitting the comment you agree to the processing of the transmitted data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. You personal data will then be deleted.
On publication of your comment the name and email address you have enteredwill be published.
Collection, processing, and use of personal data in orders
When you submit an order, we only collect and use your personal data where this is necessary for the fulfilment and handling of your requests. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of art. 6 (1) lit. b GDPR and is required for the fulfilment of a contract with you. We will not forward your data to third parties without your explicit consent. This only excludes our service partners which we require in order to handle the contractual relationship or service providers we use to process an order. Along with the recipients named in the clauses of this data protection declaration, these may be recipients in the following categories: Shipping providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping dealers. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
Use of your email address for mailing of newsletters
We use your email address outside of contractual processing exclusively to send you a newsletter for our own marketing purposes, if you have explicitly agreed to this. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by contacting us. Your email address will then be removed from the distributor.
Your data will be forwarded to a service provider for email marketing in the course of order processing. It will not be forwarded to other third parties.
Use of your email address for mailing of direct marketing
We use your email address, which we obtained in the course of selling a good or service, for the electronic transmission of marketing for our own goods or services which are similar to those you have already purchased from us, unless you have objected to this use. You must provide your email address in order to conclude a contract. Failure to provide it will prevent the conclusion of any contract. The processing will be carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in direct marketing. You can object to this use of your email address at any time by contacting us. You will find the contact details for exercising your right to object in our imprint. You can also use the link provided in the marketing email. This will not involve any costs other than transmission costs at basic tariffs.
Forwarding of your email address to shipping companies for information on shipping status
We forward your email address to the shipping company in the course of contractual processing, if you have explicitly agreed to this in the order process. The forwarding is for the purpose of informing you by email on the shipping status of your order. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us or the transport company without affecting the legality of the processing carried out with your consent up to the withdrawal.
Use of an external merchandise management system
We use a merchandise management system in the course of order processing for the purposes of contractual processing. For this purpose your personal data as collected in the course of the order will be sent to
Actindo AG, Carl-Zeiss-Ring 15, D-85737 Ismaning
Using PayPal
All PayPal transaction are covered by the PayPal Data Privacy Statement. You can found this at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=en_GB
Cookies
Our website uses cookies. Cookies are small text files which are saved in a user’s internet browser or by the user’s internet browser on their computer system. When a user calls up a website, a cookie may be saved on the user’s operating system. This cookie contains a characteristic character string which allows the browser to be clearly identified when the website is called up again. We use cookies to make our offering more user-friendly, effective and secure. Cookies also allow our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognised again after a page change.
Our website also uses cookies to allow us to analyse the surfing behaviour of visitors to our website.
We also use cookies to address visitors to other websites with targeted marketing relating to their interests.
Processing is carried out on the basis of § 15 (3) TMG (Telemedia Act) as well as art. 6 (1) lit. f GDPR due to our justified interest in the purposes above.
The data collected in this way is pseudonymised using technological measures. It is therefore not possible to connect the data to your person. The data will not be stored together with other personal data pertaining to you. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. Cookies will be stored on your computer. You therefore have full control over the use of cookies. By choosing corresponding technical settings in your internet browser, you can prevent the storage of cookies and transmission of the data they contain. Cookies which have already been saved may be deleted at any time. We would, however, like to point out that this may prevent you from making full use of all the functions of this website.
Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Use of Google Analytics
Our website uses the web analysis service Google Analytics by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The processing of data serves to analyse this website and its visitors. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website and internet use. The IP address communicated by your browser as part of Google Analytics is not associated with any other data held by Google. Google Analytics uses cookies, which make it possible to analyse your use of the website. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymisation is activated on this website. Google uses this to shorten your IP address beforehand within Member States of the European Union or in other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Your data may be transmitted to the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in needs-based and targeted design of the website. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. You can prevent the storage of cookies by choosing corresponding technical settings in your internet browser; we would, however, like to point out that this may prevent you from making full use of all the functions of this website. You can also prevent collection of the data (including your IP address) generated by the cookies and related to your use of the website by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link [https://tools.google.com/dlpage/gaoptout?hl=en]. You can set an opt-out cookie to prevent collection by Google Analytics across devices. Opt-out cookies prevent the future collection of your data when you visit this website. You need to opt-out on all systems and devices in use for this to work comprehensively. If you click here, the opt-out cookie is set: Disable Google Analytics.
You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms and at https://policies.google.com/?hl=en.
Use of Google Adwords conversion tracking
Our website uses the online marketing programme “Google AdWords”, including conversion tracking. Google conversion tracking is a service operated by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the advert and were forwarded to this page. Every Google AdWords customer receives a separate cookie. Therefore, it is not possible to track cookies relating to the websites of AdWords customers. The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. However, they do not receive any information with which could be used to personally identify users. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in targeted marketing and analysis of the effectiveness and efficiency of this marketing.
You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. You can prevent the storage of cookies by choosing corresponding technical settings in your internet browser. We would, however, like to point out that this may prevent you from making full use of all the functions of this website. You will then not be included in the conversion tracking statistics.You can also deactivate personalised advertising in Google’s advertising settings. You can find an introduction to this at https://support.google.com/ads/answer/2662922 You can also deactivate the use of cookies by third parties by calling up the Network Advertising Initiative deactivation page at https://www.networkadvertising.org/choices and following the opt-out instructions.
You will find more information as well as Google’s data protection declaration at: https://www.google.de/policies/privacy
Use of Facebook remarketing
Our website uses the remarketing function “Custom Audiences” by Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; “Facebook”).This function serves to address the visitor to the website with interest-related advertising on the social network Facebook. We have implemented Facebook’s remarketing tag on our website for this purpose. This tag sets up a direct connection to Facebook’s servers when you visit our website. This informs the Facebook server which of our web pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook you will then be shown personalised, interest-related Facebook ads. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in the above purpose.
You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation.
For this purpose you can deactivate the remarketing function “Custom Audiences” here. You can find more detailed information on Facebook’s collection and use of data, your associated rights and options for protecting your privacy in Facebook’s privacy policy: https://www.facebook.com/about/privacy.
Use of Google AdSense
Our website uses the AdSense function by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
This function serves the purpose of renting out advertising space on the website and using these to address visitors to the website with targeted, interest-related advertising. This function displays personalised, interest-related adverts from the Google display network to visitors to the website. Google Analytics uses cookies, which make it possible to analyse your use of the website. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there. Google may also transmit this data to third parties if this is required by law or the third party is processing the data on behalf of Google. On no account will Google associate your IP address with other Google data. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in the above purpose. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. For this purpose you can permanently deactivate the use of cookies by following the link below and downloading and installing the plug-in: https://support.google.com/ads/answer/7395996?hl=en.
You can also deactivate the use of cookies by third parties by calling up the Network Advertising Initiative deactivation page at https://www.networkadvertising.org/choices and following the opt-out instructions. You can prevent the storage of cookies via the corresponding technical settings in your internet browser; we would, however, like to point out that this may prevent you from making full use of all the functions of this website.
You will find more information as well as Google’s data protection declaration at: https://www.google.com/policies/technologies/ads, https://www.google.com/policies/privacy
Use of Facebook plug-ins
This Internet site uses plug-ins of the social network facebook.com operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").
Whenever you display one of our Internet pages that hosts a Facebook plug-in you will be linked to the Facebook servers, a message is sent to your browser, and the plug-in is run on the Internet page. This is telling the Facebook server which of our pages you have visited. Assuming you are logged on to your Facebook member account while running the Facebook plug-in, Facebook will allocate the information to your personal Facebook user account. Further information collected and allocated by Facebook is the use of plug-in functions (like clicking on the Like button or posting a comment). To prevent this data collection and allocation, you must log off your Facebook user account before running the plug-in.
If you do not wish Facebook to collect and directly allocate the above information to your Facebook profile, you will either have to log off from Facebook before visiting our site or run a "Facebook blocker" which stops the Facebook plug-ins from running on our pages.
To learn more about the collection and use of your personal data by Facebook as well as about your rights and what options you have to protect your privacy, please read Facebook's Privacy Policy at: https://www.facebook.com/policy.php
Use of YouTube
Our website uses YouTube LLC’s function for the embedding of YouTube videos. (901 Cherry Ave., San Bruno, CA 94066, USA; “YouTube”).
YouTube is an affiliated company of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;“Google”).This feature shows YouTube videos in an iFrame on the website. The option “advanced privacy mode” is enabled here. This prevents YouTube from storing information on visitors to the website. It is only if you watch a video that information is transmitted to and stored by YouTube.Further information on the data collected and used by YouTube and Google, your rights and privacy can be found in YouTube’s privacy policy https://www.youtube.com/t/privacy.
Use of GoogleMaps
Our website uses Google Inc.’s feature for the embedding of Google Maps (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).This feature visually represents geographical information and interactive maps. Google also collects, processes and uses data on visitors to the website when they call up pages with embedded Google maps.
Further information on the data collected and used by Google, your rights and privacy can be found in Google’s privacy policy at https://www.google.com/privacypolicy.html. You also have the option of changing your settings in the data protection centre, allowing you to administer and protect the data processed by Google.
Your data may also be transmitted to the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation.For this purpose you must turn off the JavaScript application in your browser. However, we wish to point out that doing this may prevent you from using all of the website’s functions, for example the interactive map display, in full.
Using WebChat
Whitecorals Vertriebs GmbH uses a web chat on the whitecorals.com website. The web chat serves as a further communication option on our website and enables online conversations with Whitecorals Vertriebs GmbH. The conversation is conducted using a chat bot (virtual assistant, software) that answers users' questions, assists with your request or provides you with information.
Which personal data are processed?
When using the web chat, the following personal data will be processed and stored:
• date and time of the call,
• IP address,
• URL of the previously visited website,
• First name Name
• E-mail address
• Chat ID and user token (stored in the browser's local storage)
Depending on the course of the conversation with our chat bot, we process further data from you if you provide it in the course of the conversation depending on your request or the problem you describe to us.
The use of the web chat is voluntary and your data will only be processed in this case.
For what purposes and on what legal basis is the data processed?
We use the above data to offer the web chat, to address users personally, to answer user inquiries and to provide the user with information and/or content.
Legal basis: Our legitimate interest in providing a web chat (Art. 6 Para. 1 S. 1 lit. f. GDPR).
How long is personal data stored? 12 months
Who is data shared with?
A transfer to third parties takes place exclusively in the context of business fulfillment in order to be able to process and answer your request. For this purpose, your data will be passed on to Inbox Solutions GmbH (Pretzfelder Straße 7 - 11, 90425 Nuremberg, Germany) as the technical operator of the web chat and Sellwerk GmbH & Co. KG (Pretzfelder Straße 7 - 11, 90425 Nuremberg, Germany) as an intermediary to the company and to the company you have contacted via the web chat.
We use Google Cloud to store your data and chat history. The data is transferred and stored on servers at the Frankfurt site. Google does not use this data for its own purposes.
We use Google Cloud services on the basis of our legitimate interest in accordance with Article 6 (1) (f) GDPR in order to be able to provide our services using the technical infrastructure. We have concluded an order processing agreement with Google (https://cloud.google.com/terms/data-processing-terms). In the event that personal data is transferred to the USA, we have concluded EU standard contractual clauses with Google (https://cloud.google.com/terms/data-processing-terms). The EU Standard Contractual Clauses are a generally accepted mechanism for lawful cross-border transfers of personal data to countries outside the European Economic Area (EEA).
Learn more about using web chat
By visiting the website whitecorals.com, the chat widget is loaded in the form of a JavaScript file. No data is transferred before you open the chat.
You have two options to open the web chat:
1. Manual click on the button in the directory entry
2. Manual click on the chat icon on the bottom right of the web page
The moment you open the web chat, your chat is created as an object in the background and the chat ID and a token are saved in the browser's local storage. The ID and the token are unique features that allow you to clearly recognize your chat (chat ID) and you as a user (token) even if you visit again and to be able to show you communication history that has already been carried out. As soon as you return to our website, the history of the chat is restored with the saved data in the local storage. You have to open the chat manually.
In addition, the history of web chats is saved. Every message you send is saved. This serves the purpose of being able to display your chat history even if the communication that has started is continued, for example if a company answers you with a delay.
If the company writes to you and you are no longer online, you will receive an email with a link that will take you back to the chat so that you can continue communicating with the company there. If you click on the link in your email, the chat will open automatically. You have the option to interrupt the chat at any time, but your data will not be automatically deleted in this case. If you no longer wish to receive a message from the company (opt-out), simply send "Stop" as a message in the web chat. After that, you will no longer receive messages from the company in the chat and you will no longer be informed by e-mail. Your chat history and your data will be automatically deleted 6 months after the stop message.
For immediate deletion of your data, send an email to support@chatwerk.de. Your data and saved chat histories will then be deleted immediately.
Use of Whatsapp
If you have given your consent, we will process the personal data you have provided or provided (e.g. name, telephone number, e-mail address, messenger ID, profile picture, messages) for communication regarding the preparation and execution of any orders as well as for sending advertising information (e.g. Offers, newsletter) using the instant messaging service “WhatsApp” from WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
An existing messaging account is required to use this service.
We would like to point out that WhatsApp Ireland Limited may also pass on personal data (in particular communication metadata) to WhatsApp Inc., which is also processed on servers in countries outside the EU (e.g. USA) which do not have an adequate level of data protection . WhatsApp may share this data with other companies within and outside the Facebook group of companies. For more information, see the WhatsApp Business (https://www.whatsapp.com/legal/business-policy/) and WhatsApp (https://www.whatsapp.com/legal/#privacy-policy) privacy policies. We have neither precise knowledge nor influence on the data processing by WhatsApp Ireland Limited or WhatsApp Inc., which is responsible for data protection in this respect.
In addition to the recipients specifically named above, we use the help of other service providers (processors) to fulfill our obligations.
We would like to point out that you can revoke your consent at any time without giving reasons for the future by sending us your revocation via Whatsapp with a message with the note REVOCATION or by e-mail to the address in this data protection declaration or our imprint stated e-mail address of the corresponding processing of their personal data.
The above data will be deleted by us in accordance with the legal requirements as soon as your consent to processing is revoked or if the purpose of processing this data no longer applies or it is not required for the purpose.
If the data is not deleted because it is required for other, legally permissible purposes, its processing will be limited to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax reasons or whose storage is necessary to assert, exercise or defend legal claims or to protect the rights of another natural or legal person.
Duration of storage
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.
Rights of the affected person
If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR.
Contact us at any time. Our contact details can be found in our imprint.
Right to complain to the regulatory authority
You have the right to complain to the regulatory authority according to art. 77 GDPR if you believe that your data is not being processed legally.
last update: 01.11.2019