Data protection

Responsible party

The party responsible in accordance with Art. 4 Section 7 of the EU’s General Data Protection Regulation (GDPR) is

KARE Design GmbH

Zeppelinstr. 16

85748 Garching-Hochbrück, Germany

Telefon: +49 (0)89 / 320 82 1000 - Fax: +49 (0)89 / 320 82 1880 - E-Mail: info@kare.de

Represented by: Jürgen Reiter, Peter Schönhofen

The data protection officer is

Felix Gebhard

FX Data UG (limited liability)

 Ottobrunner Str. 28

82008 Unterhaching

E-Mail: dsb@fx-data.de

Collection, processing and use of personal data

The legal basis for the collection, storage and processing of personal data can be found in particular in the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Personal data is information that relates to an identified or identifiable natural person (Art. 4 No. 1 of the GDPR). This includes in particular names, address data, telephone numbers or email addresses. However, information about preferences, memberships or previously visited websites, for example, can also constitute personal data.

Contacting us

If you contact us (e.g. by email or via our contact form), the data you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions. The legal basis for the processing is Art. 6 Para. 1 lit. b of the GDPR. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are legal obligations to retain the data.

Your rights

In relation to us you have the following rights with regard to your personal data:

• The right to information,
  
• The right to rectification or deletion,
  
• The right to restriction of processing,
  
• The right to object to processing,
  
• The right to data portability.

Revocation of consent and objection to the processing of your data

We hereby inform you that you can revoke any consent you may have given for the processing of your data at any time.

However, your revocation has no influence on data processing that has already taken place, but is effective exclusively for the future. Insofar as we base the processing of your personal data on a balancing of interests within the meaning of Art. 6 Para. 1 lit. f GDPR, you may object to the processing. A balancing of interests is carried out in particular if the processing is not necessary for the fulfilment of a contract with you. You can find the legal basis of the respective processing procedures in this privacy policy. When you exercise such an objection, we will ask you to explain the reasons for it. In the event of a justified objection, we will review the situation and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Furthermore, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us of your objection to advertising using the contact details above.

B2B Login

As a retailer, you have the option of setting up a B2B customer account via our B2B login. This gives you access to the KARE B2B website and allows you to order our products on dealership terms. In addition, you can view and track orders and other transactions online in the B2B area. To register, you must provide the data requested in the input mask. This includes general company data as well as personal data such as the name of a contact person and their contact details. We store and process this data exclusively for the purpose of providing the B2B login and for the performance of contractual and pre-contractual obligations. The legal basis is Art. 6 Para. 1 lit. b of the GDPR. You can delete your B2B login by requesting us to delete it via the contact details provided. We will then delete any personal data that is no longer required. If there are retention obligations under commercial or tax law, the required data will be stored for a period of ten years. Data processing is restricted to the extent that only the data required to fulfil our legal obligations will remain stored.

Server-Log-Files

Each time our website is accessed, information is stored in a log file by our hosting provider. These so-called log files contain information about accessed files, status codes, time stamps and system information. This data is not personal and does not allow any conclusions to be drawn about a specific person.

IP addresses are also stored in log files. For us, these cannot be easily assigned to a specific person. If you wish to view our website, we collect the above-mentioned data, which is technically necessary for us to display our website to you and to ensure its stability and security. The legal basis for the processing is the necessity to protect our legitimate interests in accordance with Art. 6 Para. 1 lit. f of the GDPR.

Use of cookies

Our website uses so-called cookies. These are small files that are stored on your access device (computer, smartphone, tablet or the like) and saved by your browser. They serve to increase the user-friendliness, effectiveness and security of our website.

In addition, cookies can be used to collect statistical data on website usage and analyse it to improve our services. We only use such cookies with your express consent. For this purpose, you will be asked in an input window when you access our website for the first time whether you agree to the saving of such cookies. There you can select individual settings for the various cookies. You can revoke your consent at any time by clicking on the fingerprint button and adjusting your settings. The legal basis is Art. 6 Para. 1 lit. a of the GDPR.

Cookies do not contain viruses and do not cause any damage to your access device. You can block the storage of cookies in your browser. Most web browsers allow some control over most cookies through the browser settings. You can find more information on the blocking of cookies at allaboutCookies.org. However, we would like to point out that certain functions of our website may no longer be available to you, or only to a limited extent, after you have blocked them.

In order to delete/deactivate all cookies stored on your computer, most browsers offer you the option to completely prevent the use of cookies or to delete cookies generated by specific domains/websites. You will find corresponding instructions on the help page of your browser.

Google Analytics 4 

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables us to analyze your usage of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address, but Google truncates the last digits to exclude direct personal identification.

The information is transferred to and processed on Google's servers. Transfers to Google LLC in the United States are also possible.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website usage and internet usage. The IP address transmitted by your browser through Google Analytics is not merged with other Google data. The data collected through Google Analytics 4 is stored for a period of two months and then deleted.

All the processing activities described above, especially the setting of cookies on the device you use, only occur if you have given us your explicit consent in accordance with Art. 6(1)(a) of the General Data Protection Regulation (GDPR). Google Analytics 4 will not be used during your visit to our website without your consent. You can revoke your consent at any time for future effect. To exercise your right to revoke, please disable this service using the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with Google, which ensures the protection of data of our website visitors and prohibits unauthorized disclosure to third parties. For the transfer of data to the United States, Google relies on the European Commission's Standard Contractual Clauses, which are designed to ensure compliance with the European level of data protection. For further legal information about Google Analytics 4, including a copy of the mentioned Standard Contractual Clauses, please visit https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites.

Demographic Characteristics: Google Analytics 4 uses the special feature "demographic characteristics" to create statistics that provide insights into the age, gender, and interests of website visitors. This is done through the analysis of advertising and information from third parties. This allows for the identification of target audiences for marketing activities. However, the collected data cannot be attributed to any specific individual and is deleted after a storage period of two months.

Google Signals: As an extension to Google Analytics 4, this website may utilize Google Signals to generate cross-device reports. If you have enabled personalized advertising and linked your devices to your Google account, Google, subject to your consent to use Google Analytics under Art. 6(1)(a) of the GDPR, can analyze your cross-device usage behavior and create database models, including cross-device conversions. We do not receive any personally identifiable information from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized Advertising" feature in your Google account settings. Please follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en. For more information on Google Signals, please visit the following link: https://support.google.com/analytics/answer/7532985?hl=en.

UserIDs: As an extension to Google Analytics 4, this website may utilize the "UserIDs" feature. If you have consented to the use of Google Analytics 4 under Art. 6(1)(a) of the GDPR, have set up an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.

Integration of Google Maps

On our website, maps from the provider Google Maps are integrated. This is done to make our website more appealing and to facilitate our customers in locating our branches. The legal basis for this is Art. 6(1)(f) of the General Data Protection Regulation (GDPR).

By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. Additionally, other data such as your IP address is transmitted to Google, regardless of whether you are logged into a Google user account or if you do not have an account. If you are logged into your Google account, your data will be directly associated with your account. If you do not wish for this association with your Google profile, you should log out of your account before accessing our website. Google stores your data as usage profiles and utilizes them for advertising, market research, and/or personalized website design. Such evaluation is carried out, in particular (even for non-logged-in users), for the purpose of providing personalized advertising and informing other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.

For more information about the purpose and scope of data collection and its processing by Google, please refer to Google's privacy policies. There, you will also find additional information about your rights and privacy protection settings: http://www.google.com/policies/privacy.

Google processes your personal data in the United States and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Integration of YouTube videos

We have integrated YouTube videos into our website, which are stored on YouTube.com and can be played directly from our website. These videos are integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in the next paragraph be transferred. We have no influence on this data transmission.

When you visit the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google/YouTube, your data will be directly assigned to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website to meet your needs. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy of YouTube under the following link: https://www.youtube.com/intl/en_us/howyoutubeworks/user-settings/privacy/.

Integration of Vimeo videos

We have integrated videos from the Vimeo service on our website, which are stored on vimeo.com and can be played directly from our website. Vimeo is operated by Vimeo, LLC with headquarters at 555 West 18th Street, New York, New York 10011. When you play the videos, the data mentioned in the next paragraph is transferred to Vimeo. We have no influence on this data transmission.

When you visit our website, Vimeo receives the information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether you are logged into a Vimeo user account or not. If you are logged in to Vimeo, your data is directly assigned to your account. If you do not wish your data to be associated with your Vimeo profile, you should log out before accessing our website. Vimeo stores your data as usage profiles and uses it for the purposes of advertising, market research and/or designing its website to meet your needs. You have the right to object to the creation of these user profiles, although you must contact Vimeo to exercise this right.

Vimeo also processes your personal data in the USA. For this reason, to cover the exceptional cases in which personal data is transferred to the USA you are requested, together with your consent to the use of Google Maps, to also give your consent to the transfer of data to the USA in accordance with Art. 49 Para. 1 Sentence 1 lit. a of the GDPR. We would like to point out that the transfer of data to the USA is associated with specific risks, as US service providers in particular cannot effectively prevent the data processed there from being intercepted and evaluated by US security authorities.

Further information on data processing by Vimeo and its and privacy policy can be found at https://vimeo.com/privacy.

Google Web Fonts

We use Google Web Fonts on our website for the uniform display of fonts. When you access the website server, your browser loads the required web fonts in order to display the texts and fonts correctly. In doing so, your browser establishes a connection to Google's servers, which informs Google that an end device with your IP address is visiting our website. The use of Google Web Fonts and the associated data processing serve our interest in the attractive presentation of our website. The legal basis is Art. 6 Para. 1 lit. f of the GDPR.

If your browser does not support the display of web fonts, a standard font will be used instead.

For more information on Google Web Fonts, please visit https://fonts.google.com/ and the Google privacy policy at https://policies.google.com/privacy?hl=en

Links to other websites

Our website may contain links to other websites. We have no influence on whether their operators comply with data protection regulations.

Valid from: 20.05.2023