Name: Raven Agency
Represented by: Jürgen Hamann
Street and No.: Leopoldstrasse 206 Apt. 3702
ZIP Code, City, Country: 80804 Munich, Germany
E-Mail: info@raven-agency.de
Data Protection Officer: No data protection officer required
Last updated: 14/06/2024
- General Information on Data Processing and Legal Basis
- This privacy policy informs you about the type, scope, and purpose of the processing of personal data within our online offer and the associated websites, functions, and content (hereinafter collectively referred to as “online offer” or “website”). The privacy policy applies regardless of the domains, systems, platforms, and devices (e.g. desktop or mobile) used to access the online offer.
- For definitions of terms such as “personal data” or “processing”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
- The personal data of users processed within the scope of this online offer includes inventory data (e.g. names and addresses of customers), contract data (e.g. services used, names of contact persons, payment information), usage data (e.g. pages visited on our website, interest in our products), and content data (e.g. entries in the contact form).
- The term “user” encompasses all categories of persons affected by data processing. This includes our business partners, customers, prospects, and other visitors to our online offer. The terms used are gender-neutral.
- We process personal data of users only in compliance with relevant data protection regulations. This means that user data is only processed where a legal permission exists. That is, especially if data processing is necessary for the provision of our contractual services (e.g. processing orders) and online services, or required by law, if the user has given consent, or based on our legitimate interests (i.e. interest in the analysis, optimization, and efficient operation and security of our online offer pursuant to Art. 6 para. 1 lit. f GDPR, in particular for reach measurement, profiling for advertising and marketing purposes, as well as the collection of access data and the use of third-party services).
- We point out that the legal basis for consents is Art. 6 para. 1 lit. a and Art. 7 GDPR; the legal basis for processing for the performance of our services and carrying out contractual measures is Art. 6 para. 1 lit. b GDPR; the legal basis for processing to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR; and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR.
- Security Measures
- We take organizational, contractual, and technical security measures in accordance with the state of the art to ensure compliance with data protection laws and to protect the data we process from accidental or intentional manipulation, loss, destruction, or unauthorized access by third parties.
- Security measures include, in particular, the encrypted transmission of data between your browser and our server.
- Disclosure of Data to Third Parties and Third-Party Providers
- Data is only disclosed to third parties within the framework of legal provisions. User data is only passed on to third parties if this is necessary, for example, based on Art. 6 para. 1 lit. b GDPR for contractual purposes or based on legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR in the efficient and economical operation of our business.
- If we use subcontractors to provide our services, we take appropriate legal precautions and corresponding technical and organizational measures to ensure the protection of personal data in accordance with applicable legal regulations.
- If content, tools, or other resources from other providers (hereinafter referred to collectively as “third-party providers”) are used within this privacy policy and their stated headquarters are located in a third country, it is to be assumed that a data transfer to the countries of the third-party providers takes place. Third countries are countries in which the GDPR is not directly applicable law, i.e. generally countries outside the EU or the European Economic Area. Data is transferred to third countries either if an adequate level of data protection, user consent, or another legal permission exists.
- Performance of Contractual Services
- We process inventory data (e.g. names and addresses and contact details of users), contract data (e.g. services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and providing services in accordance with Art. 6 para. 1 lit. b GDPR.
- Users can optionally create a user account, allowing them to view their orders. During registration, the required mandatory information will be communicated to users. User accounts are not public and cannot be indexed by search engines. If users terminate their account, their data will be deleted with respect to the user account, subject to retention required by commercial or tax law under Art. 6 para. 1 lit. c GDPR. It is the responsibility of users to back up their data prior to termination. We …
- As part of the registration and re-login processes, and use of our online services, we store the IP address and the time of the respective user action. Storage is based on our legitimate interests as well as the users’ interests in protection against misuse and other unauthorized use. These data will not be disclosed to third parties unless required to pursue our claims or there is a legal obligation under Art. 6 para. 1 lit. c GDPR.
- We process usage data (e.g. pages visited on our website, interest in our products) and content data (e.g. entries in the contact form or user profile) for advertising purposes in a user profile to, for example, display product information based on previously used services.
- Contacting Us
- When contacting us (via contact form or email), the user’s details will be processed for the purpose of handling the contact request and its processing pursuant to Art. 6 para. 1 lit. b GDPR.
- User data may be stored in our Customer Relationship Management system (“CRM system”) or a comparable inquiry organization.
- Comments and Contributions
- When users leave comments or other contributions, their IP addresses are stored based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR for 7 days.
- This is for our security in case someone leaves illegal content in comments and contributions (e.g. insults, prohibited political propaganda, etc.). In such cases, we may be held liable for the comment or contribution and are therefore interested in the identity of the author.
- Collection of Access Data and Log Files
- We collect data on every access to the server on which this service is located (so-called server log files) based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. Access data includes the name of the accessed webpage, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address, and the requesting provider.
- Log file information is stored for security reasons (e.g. to investigate misuse or fraud) for a maximum of seven days and then deleted. Data that must be retained for evidentiary purposes is exempt from deletion until the respective incident has been fully clarified.
- Cookies & Reach Measurement
- Cookies are information transmitted from our web server or third-party web servers to the user’s web browser and stored there for later retrieval. Cookies can be small files or other forms of information storage.
- We use “session cookies”, which are only stored for the duration of the current visit to our online presence (e.g. to store your login status or shopping cart function). A session cookie stores a randomly generated unique identification number, a so-called session ID. It also contains information on its origin and storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online offer and log out or close your browser.
- Users are informed about the use of cookies for pseudonymous reach measurement within this privacy policy.
- If users do not want cookies to be stored on their device, they should disable the appropriate option in their browser’s system settings. Stored cookies can be deleted in the browser’s system settings. The exclusion of cookies can lead to functional limitations of this online offer.
- You can opt out of the use of cookies for reach measurement and advertising purposes via the deactivation pages of the Network Advertising Initiative (http://optout.networkadvertising.org/), the US website (http://www.aboutads.info/choices), or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/). Please note the conditions when using Google Analytics: IP anonymization must be active (https://support.google.com/analytics/answer/2905384?hl=en) and the “data processing addendum” …
- Integration of Third-Party Services and Content
- Within our online offer, we use content or service offers from third-party providers on the basis of our legitimate interests (i.e. interest in the analysis, optimization, and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f GDPR) in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”). This always requires that the third-party providers of this content perceive the IP address of the user, since …
- The following overview provides information on third-party providers, their content, and links to their privacy policies, which contain further information on data processing and, in some cases, opt-out options:
- Maps by “Google Maps” provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/
- Videos by the “YouTube” platform, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/
- External code of the “jQuery” JavaScript framework, provided by the third-party provider jQuery Foundation, https://jquery.org
- User Rights
- Users have the right to request information free of charge about the personal data that we have stored about them.
- In addition, users have the right to correct inaccurate data, restrict processing, and delete their personal data, if applicable, to exercise their rights to data portability, and to lodge a complaint with the competent supervisory authority if they believe that data processing is unlawful.
- Likewise, users may revoke their consent, generally with effect for the future.
- Deletion of Data
- The data stored by us will be deleted as soon as it is no longer required for its intended purpose and no legal retention obligations prevent deletion. If the users’ data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
- According to legal requirements, data is stored for 6 years in accordance with § 257 para. 1 HGB (e.g. commercial books, inventories, opening balance sheets, annual financial statements, business letters, accounting documents, etc.) and for 10 years in accordance with § 147 para. 1 AO (e.g. books, records, management reports, accounting documents, business and commercial correspondence, documents relevant for taxation, etc.).
- Right to Object
- Users may object to the future processing of their personal data in accordance with legal requirements at any time. The objection may particularly be made against processing for direct marketing purposes.
- Changes to the Privacy Policy
- We reserve the right to change the privacy policy in order to adapt it to changed legal situations or changes to the service and data processing. However, this applies only with regard to declarations on data processing. If user consent is required or components of the privacy policy contain regulations of the contractual relationship with users, changes will only be made with the users’ consent.
- Users are requested to regularly inform themselves about the content of the privacy policy.