Imprint

HABA Digital GmbH
Linienstr. 121
10115 Berlin

CEOs: Verena Pausder and Karl Fischer
E-Mail: verena@digitalwerkstatt.de

Handelsregister:
Amtsgericht Charlottenburg
HRB 168019B

Verantwortlich für eigene Inhalte der HABA Digital GmbH gem. § 55 RStV: Verena Pausder und Karl Fischer

Privacy Policy

Name and contact details of the controller and of the company data protection officer

This privacy policy applies to data processing by the following controller:

HABA Digital GmbH

Linienstr. 130

10115 Berlin

Germany

(hereinafter “we”)

Email: antonia@digitalwerkstatt.de

Phone: 0170-8141260

 

Data protection officer:

Antonia Borek

HABA Digital GmbH

Linienstrasse 130, 10115 Berlin

Email: antonia@digitalwerkstatt.de

Phone: 0170-8141260

 

Collection and retention of personal data as well as type and purpose of their use

When you access our website, www.digitalwerkstatt.de, the browser used on your terminal device automatically sends information to our website’s server. Such information is temporarily stored in a so-called logfile. In the course of this procedure, the following information is captured and stored, without any action on your part, until it is automatically deleted:

  • IP address of the requesting computer,
  • date and time of access,
  • name and URL of the retrieved file,
  • website from which access takes place (referrer URL) and
  • browser used and, where appropriate, your computer’s operating system and the name of your access provider.

The indicated data are processed by us for the following purposes:

  • ensuring the establishment of a smooth connection to the website,
  • ensuring comfortable use of our website,
  • evaluating system security and stability, and
  • other administrative purposes.

The legal basis for data processing is Art. 6 (1), sentence 1, point (f) of the GDPR. Our legitimate interest follows from the purposes of data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions concerning your person.

When you visit our website, moreover, we use cookies and analytical services. Please refer to sections 4 and 5 of this privacy policy for more information.

 

Contact form and email contact

Should you have questions of any kind, we offer you the possibility of contacting us using a form provided on the website. This requires providing a valid email address so that we know who the source of the inquiry is and so that we can respond to it. Further information can be provided voluntarily.

The data processing for the purpose of contacting us takes place under Art. 6 (1), sentence 1, point (a) of the GDPR on the basis of your voluntarily given consent.

The personal data collected by us when using the contact form are automatically deleted after your inquiry has been handled.

 

Registering for our newsletter

If you have expressly consented under Art. 6 (1), sentence 1, point (a) of the GDPR, we use your email address to regularly send you our newsletter. The provision of an email address is sufficient in order to receive the newsletter.

If you register for our email newsletter, we regularly send you information on our product offerings. The only information required to send the newsletter is your email address. The provision of any other data is voluntary, and such data are used so that we can address you personally. We use the so-called double opt-in method for sending the newsletter. This means that we send you an email newsletter only after you have expressly confirmed to us that you consent to the sending of newsletters. We then send you a confirmation email asking you to confirm, by clicking a provided link, that you wish to receive newsletters in the future.

By activating the confirmation link, you grant us your consent to the use of your personal data pursuant to Art. 6 (1), sentence 1, point (a) of the GDPR. When you register for the newsletter, we retain your IP address as recorded by your Internet service provider (ISP) as well as the date and time of registration in order to allow us to track a possible misuse of your email address at a later time. The data collected by us when you register for the newsletter are used exclusively for promotional purposes by way of the newsletter.

You can cancel the newsletter at any time using the link provided in the newsletter. Alternatively, you are also free at any time to email your cancel request to antonia@digitalwerkstatt.de. Once you have cancelled, your email address is immediately deleted from our newsletter distribution list, unless you have expressly consented to another use of your data or we have reserved the right to use data in a different way that is permitted by law and about which we have informed you in this policy.

 

Disclosure of data

Your personal data are not transmitted to third parties for any purposes other than those specified in the following.

We disclose your personal data to third parties only if:

  • you have granted your express consent to that under Art. 6 (1), sentence 1, point (a) of the GDPR,
  • the disclosure is necessary under Art. 6 (1), sentence 1, point (f) of the GDPR for the establishment, exercise or defence of legal claims and there is no reason to consider that you have an overriding legitimate interest in the nondisclosure of your data,
  • there is a legal obligation to disclose under Art. 6 (1), sentence 1, point (c) of the GDPR, and
  • disclosure is permitted by law and necessary for the execution of contractual relations with you under Art. 6 (1), sentence 1, point (b) of the GDPR.

 

Cookies

We use cookies on our website. Cookies are small files that your browser automatically generates that are stored on your terminal device (laptop, tablet, smartphone or similar) when you visit our website. Cookies are not harmful to your terminal device and contain no viruses, Trojan horses, or other malware.

The cookie contains information about the specific terminal device in use. However, this does not mean that we directly gain knowledge of your identity through cookies.

The purpose of cookies is, on the one hand, to make your use of our product offerings more pleasant. We use so-called session cookies to detect whether you have previously visited individual pages on our website. Such cookies are automatically deleted after you leave our website.

In order to optimise user-friendliness, we also use temporary cookies, which are stored on your terminal device for a specific defined time. If you visit our website again in order to make use of our services, the fact that you were there previously is automatically recognised, together with your entries and settings, thus avoiding the need to re-enter them.

On the other hand, we use cookies in order to track statistics on the use of our website and optimise our product offerings for you (see section 5). When you return to our website, these cookies allow us to automatically recognise that you were there previously. Such cookies are automatically deleted after a defined time.

The data processed by cookies are necessary for the indicated purposes of our legitimate interests or those of third parties under Art. 6 (1), sentence 1, point (f) of the GDPR.

Most browsers accept cookies automatically. However, you can configure your browser not to retain cookies on your computer or to always have a prompt appear before a new cookie is stored. Fully deactivating cookies could, however, mean that you are unable to use all of our website’s functions.

 

Analytical/tracking tools

The tracking measures that we use as indicated in the following are carried out on the basis of Art. 6 (1), sentence 1, point (f) of the GDPR. The intention behind our use of these tracking measures is to ensure that our website is designed in keeping with the users’ needs and can be continually optimised. On the other hand, we use tracking measures to track statistics on the use of our website and to evaluate the website for purposes of optimising our product offerings. These interests must be regarded as legitimate within the meaning of the above provision.

The respective data processing purposes and data categories can be inferred from the corresponding tracking tools.

 

Matomo (formerly PIWIK)

We use the Matomo (formerly PIWIK) open source software tool on our website to analyse our users’ surfing behaviour. This involves the use of cookies (see section 4). The information about website use generated through the cookie is transferred to our servers and summarised in pseudonymous usage profiles. The information is used to evaluate use of the website and allow us to design our website in keeping with user’s needs. The information is not disclosed to third parties.

In no case is the IP address associated with other user-related data. The IP addresses are anonymised, which makes it impossible to attribute them (IP masking).

Your visit on this website is currently being recorded by the Matomo web analytics tool. Click here (https://matomo.org/docs/privacy/) to end the recording of your visit.

 

Social media plugins

Based on Art. 6 (1), sentence 1, point (f) of the GDPR, we use social plugins of the Facebook, Twitter and Instagram social networks on our website to make our firm better known by those means. The underlying promotional purpose must be regarded as a legitimate interest within the meaning of the GDPR. The responsibility for operating in conformity with data protection requirements must be borne by the respective providers. We integrate these plugins using the so-called two-click method in order to offer our website visitors the best possible protection.

 

Facebook

Our website uses so-called social plugins (“Plugins”) of the Facebook social network, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). The Plugins are identified by a Facebook logo or the words “social plugin of Facebook” or “Facebook Social Plugin”. Information about Facebook Plugins and what they look like can be found here: https://developers.facebook.com/docs/plugins

When you access a page of our website containing such a Plugin, your browser establishes a direct connection to Facebook’s servers. The contents of the Plugin are transmitted directly to your browser by Facebook and integrated into the website by your browser. Through integration of the Plugin, Facebook receives the information that your browser accessed the respective page of our website, even if you do not have a Facebook account or are not logged into Facebook at the time. That information (including your IP address) is directly transmitted by your browser to a Facebook server in the USA and is retained there.

If you are logged into Facebook, Facebook can directly assign the visit on our website to your Facebook account. When you interact with the Plugins, for example by clicking on the “LIKE” or “SHARE” button, the respective information is also transmitted directly to a Facebook server and is retained there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook can use this information for the purpose of advertising, market research and designing Facebook pages in keeping with the needs of users. For that purpose, Facebook generates usage, interest and relationship profiles, e.g., to evaluate your use of our website with respect to the adverts displayed to you on Facebook, to inform other Facebook users of your activities on our website and to provide other services related to the use of Facebook.

If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.

Regarding the purpose and scope of data collection and the further processing and use of data by Facebook as well as your rights in this regard and the configuration options for protecting your privacy, please consult Facebook’s privacy notices (https://www.facebook.com/about/privacy/).

 

Twitter

Plugins of the Twitter Inc. short message network (“Twitter“) are integrated into our website. The Twitter plugins (tweet button) can be recognised by the Twitter logo on our website. Information about tweet buttons can be found here (https://about.twitter.com/resources/buttons).

When you access a page of our website containing such a plugin, a direct connection between your browser and the Twitter server is established. In this way, Twitter receives the information that you have visited our website with your IP address. If you click on the Twitter “tweet button” while you are logged into your Twitter account, you can link the contents of our pages to your Twitter profile. Through this, Twitter can assign the visit on our pages to your user account. Please note that as provider of the pages we have no knowledge of the contents of the transmitted data or of their use by Twitter.

If you do not want Twitter to assign the visit on our pages, please log out of your Twitter user account. Further information can be found in the Twitter privacy policy (https://twitter.com/privacy).

 

Instagram

Our website also uses so-called social plugins (“Plugins”) of Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

The Plugins are identified by an Instagram logo, for example in the form of an “Instagram camera”.

When you access a page of our website containing such Plugin, your browser establishes a direct connection to Instagram’s servers. The contents of the Plugin are transmitted directly to your browser by Instagram and integrated into the website. Through this integration, Instagram receives the information that your browser accessed the respective page of our website, even if you do not have an Instagram profile or are not logged into Instagram at the time.

That information (including your IP address) is directly transmitted by your browser to an Instagram server in the USA and is retained there. If you are logged into Instagram, Instagram can directly assign the visit on our website to your Instagram account. When you interact with the Plugins, for example by clicking on the “Instagram” button, that information is also transmitted directly to an Instagram server and is retained there.

The information is also published in your Instagram account and displayed to your contacts there.

If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website.

Further information on this can be found in the Instagram privacy policy (https://help.instagram.com/155833707900388 ).

 

Rights of data subjects

You have the right:

  • to obtain, pursuant to Art. 15 of the GDPR, information about your personal data that are being processed by us. In particular, you can request information about the purposes of the processing, the category of the personal data, the categories of recipients to which your data have been or will be disclosed, the envisaged storage time, the existence of the right to rectification, erasure, restriction of processing or objection, the existence of the right to lodge a complaint, the source of their [sic] data in the case of data not collected by us, and the existence of automated decision-making, including profiling, and where applicable meaningful information about the particulars thereof;
  • to obtain, pursuant to Art. 16 of the GDPR, without undue delay the rectification of inaccurate personal data stored by us or to have incomplete personal data completed;
  • to obtain, pursuant to Art. 17 of the GDPR, the erasure of your personal data stored by us, if the processing is no longer necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, on the grounds of public interest or for the establishment, exercise or defence of legal claims;
  • to obtain, pursuant to Art. 18 of the GDPR, the restriction of processing of your personal data, if the accuracy of the data is contested by you, the processing is unlawful but you oppose their erasure and we no longer need the data but they are required by you for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21 of the GDPR;
  • to receive, pursuant to Art. 20 of the GDPR, your personal data that you have provided to us in a structured, commonly used and machine-readable format or to obtain transmission to another controller;
  • to withdraw at any time, pursuant to Art. 7 (3) of the GDPR, your consent granted to us. This means that from that time on we are no longer allowed to continue the data processing based on that consent and
  • to lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR. As a rule, you can do so with the supervisory authority in your habitual residence or place of work or where our firm has its registered office.

Right to object

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 (1), sentence 1, point (f) of the GDPR, you have the right, pursuant to Art. 21 of the GDPR, to object to the processing of your personal data if there are grounds for doing so relating to your particular situation or the objection relates to direct marketing. In the latter case, you have a general right to object, which is implemented by us without specification of a particular situation.

Your right to withdraw or object may be exercised by sending an email to antonia@digitalwerkstatt.de.

 

Data security

Within the visit on our website, we use the popular SSL (secure socket layer) method in conjunction with the highest level of encryption supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we revert to 128-bit v3 technology instead. You can tell whether a particular page of our website is being transferred in encrypted form from the closed form of the key or lock symbol in your browser’s lower status bar.

We also apply appropriate technical and organisational measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised third-party access. Our safety measures are continually improved in keeping with technological advances.

 

Status of and changes in this privacy policy

This privacy policy is up to date as of May, 22nd 2018.

Enhancements in our website and product offerings or changes in statutory or regulatory requirements can make it necessary to amend this privacy policy. You can always access and print out the current privacy statement that is in effect at any given time at https://www.digitalwerkstatt.de/impressum-datenschutz/ .