Data protection

Privacy Policy

Thank you for your interest in our website www.prego.de and our company PREGO.

The protection of your personal data is particularly important to us. Below, we would like to inform you in detail about how we handle it.

We process personal data (hereinafter mostly referred to as "data") only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Article 4(1) of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or linking, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing, either alone or jointly with others. Furthermore, we inform you below about the third-party components we use for optimization purposes and to improve the quality of use, insofar as third parties process data under their own responsibility.

Our privacy policy is structured as follows:

  1. Information about us as controllers
  2. Rights of users and data subjects
  3. Information on data processing

1. Information about us as the responsible party

The responsible provider of this website in terms of data protection law is:

PREGO Design GmbH
Hartmannstrasse 28

52062 Aachen

Email: ods@prego.de

Managing Directors: Anday Ergen, Alana Radermacher

For any complaints regarding data protection, please contact:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Cavalry Street 2-4
40213 Düsseldorf
Phone: 0211 38424-61

2. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

  • to confirmation as to whether data concerning them is being processed, to information about the data being processed, to further information about the data processing and to copies of the data (see also Art. 15 GDPR);
  • to rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR);
  • to the immediate erasure of the data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is necessary pursuant to Art. 17 (3) GDPR, to the restriction of processing in accordance with Art. 18 GDPR;
  • to receive the data concerning them and provided by them and to transmit this data to other providers/controllers (see also Art. 20 GDPR);
  • to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).

Furthermore, the provider is obligated to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing pursuant to Articles 16, 17 (1), and 18 GDPR. However, this obligation shall not apply if such notification is impossible or involves disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Likewise, according to Art. 21 GDPR, users and data subjects have the right to object to the future processing of their data, provided that the data is processed by the provider in accordance with Art. 6 (1) (f) GDPR. In particular, an objection to data processing for direct marketing purposes is permissible.

3. Information on data processing

Your data processed when you use our website will be deleted or blocked as soon as the purpose of storage no longer applies, there are no legal retention obligations that prevent the deletion of the data and no other information is given below regarding individual processing procedures.

Cookies

a) Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you use. These cookies process certain information about you on an individual basis, such as your browser or location data or your IP address.

This processing makes our website more user-friendly, effective and secure, as it enables, for example, the display of our website in different languages ​​or the provision of a shopping cart function.

The legal basis for this processing is Art. 6 (1) (b) GDPR, provided that these cookies process data for the purpose of initiating or executing a contract.

If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. The legal basis in this case is Art. 6 (1) (f) GDPR.

When you close your internet browser, these session cookies are deleted.

b) Third-party cookies

Our website may also use cookies from partner companies with whom we work to provide the functionality of our website.

For details, in particular regarding the purposes and legal basis for processing such third-party cookies, please see the information below.

c) Possibility of removal

You can prevent or restrict the installation of cookies by adjusting the settings in your Internet browser. You can also delete cookies that have already been saved at any time. The steps and measures required to do this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, you cannot prevent the processing of cookies via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required to do this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support.

However, if you prevent or restrict the installation of cookies, this may result in not all functions of our website being fully usable.

Contract processing

The data you submit to use our products and/or services will be processed by us for the purpose of contract execution and is necessary for this purpose. Conclusion and contract execution are not possible without providing your data.

The legal basis for the processing is Art. 6 (1) (b) GDPR.

We will delete the data once the contract has been fully processed, but we must observe the retention periods required by tax and commercial law.

As part of the contract processing, we will pass on your data to the transport company commissioned with the delivery of the goods or to the financial service provider, insofar as the transfer is necessary for the delivery of the goods or for payment purposes.

The legal basis for the transfer of data is then Art. 6 (1) (b) GDPR.

Customer account / registration function

If you create a customer account with us via our website, we will collect and store the data you entered during registration (e.g., your name, address, or email address) exclusively for pre-contractual services, for contract fulfillment, or for customer care purposes (e.g., to provide you with an overview of your previous orders with us). At the same time, we will store your IP address and the date and time of your registration. This data will not be shared with third parties.

As part of the registration process, your consent to this processing will be obtained and reference will be made to this privacy policy. The data we collect will be used exclusively to provide the customer account.

If you consent to this processing, Art. 6 (1) (a) GDPR is the legal basis for the processing.

If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 (1) (b) GDPR.

You may revoke your consent to open and maintain your customer account at any time with future effect in accordance with Art. 7 (3) GDPR. To do so, you simply need to notify us of your revocation.

The data collected in this way will be deleted as soon as processing is no longer necessary. However, we must observe retention periods under tax and commercial law.

Newsletter

If you sign up for our free newsletter, the data you provide, i.e., your email address and—optionally—your name and address, will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website, as well as the date and time of your registration. As part of the registration process, we will obtain your consent to send you the newsletter, describe its content in detail, and refer you to this privacy policy. We use the data collected exclusively for sending the newsletter—it will therefore not be shared with third parties.

The legal basis for this is Art. 6 (1) (a) GDPR.

You can revoke your consent to receive the newsletter at any time with future effect, in accordance with Art. 7 (3) GDPR. To do so, simply notify us of your revocation or click the unsubscribe link included in each newsletter.

Contact requests / contact options

If you contact us via contact form or email, the data you provide will be used to process your inquiry. Providing this data is necessary to process and respond to your inquiry; without it, we cannot respond to your inquiry or can only respond to a limited extent.

The legal basis for this processing is Art. 6 (1) (b) GDPR.

Your data will be deleted once your inquiry has been conclusively answered and there are no legal retention obligations that prevent deletion, such as in the case of any subsequent contract processing.

“Facebook” social plug-in

Our website uses plug-ins from the social network Facebook. Facebook is an internet service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, hereinafter referred to as "Facebook."

Through certification under the EU-US Privacy Shield, Facebook guarantees that EU data protection regulations are also adhered to when processing data in the USA. The legal basis for this is Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our online offering. Further information about the possible plug-ins and their respective functions can be found at https://developers.facebook.com/docs/plugins/ .

If the plug-in is stored on one of the pages of our website you visit, your internet browser downloads a representation of the plug-in from Facebook's servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of your visit to our website are also recorded.

If you are logged into Facebook while visiting one of our websites containing the plug-in, the information collected by the plug-in regarding your specific visit will be recognized by Facebook. Facebook may assign the information collected in this way to your personal user account there. Therefore, if you use the Facebook "Share" button, this information will be stored in your Facebook user account and possibly published via the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting our website or use an add-on for your internet browser to prevent the Facebook plug-in from loading.

Facebook provides further information about the collection and use of data as well as your rights and protection options in the privacy policy available at https://www.facebook.com/policy.php .

Use of Google Analytics

We use Google Analytics to analyze website usage. The data obtained is used to optimize our website and advertising efforts.

Google Analytics is provided to us by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes website usage data on our behalf and is contractually obligated to take measures to ensure the security and confidentiality of the data processed.

During your visit to the website, the following data is recorded, among others:

  • Pages visited
  • Orders including sales and ordered products
  • The achievement of "website goals" (e.g. contact requests and newsletter registrations)
  • Your behavior on the pages (e.g., time spent, clicks, scrolling behavior)
  • Your approximate location (country and city)
  • Your IP address (in abbreviated form so that no clear assignment is possible)
  • Technical information such as browser, internet provider, device and screen resolution
  • Source of your visit (i.e. which website or advertising medium you came to us from)

Personal data such as name, address or contact details are never transferred to Google Analytics.

This data is transferred to Google servers in the USA. Please note that the same level of data protection cannot be guaranteed in the USA as within the EU.

Google Analytics stores cookies in your web browser for a period of two years from your last visit. These cookies contain a randomly generated user ID that can be used to recognize you on future website visits.

The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely.

If you do not agree to the collection, you can prevent it by installing the browser add-on to deactivate Google Analytics once or by rejecting cookies via our cookie settings dialog .

Klaviyo - Newsletter

We offer you the opportunity to subscribe to our free newsletter via our website.

To send our newsletter, we use Klaviyo, a service provided by Klaviyo, 125 Summer Street #6, United States of America .

The use of the Klaviyo newsletter tool is based on Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG. Further details can be found in the provider's privacy policy at https://www.klaviyo.com/legal/privacy.

The company is certified under the EU-US Data Privacy Framework (DPF). https://www.dataprivacyframework.gov/list

You can revoke your consent to receive the newsletter at any time with future effect, in accordance with Art. 7 (3) GDPR. To do so, simply notify us of your revocation or click the unsubscribe link included in each newsletter.

Server log files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:

Browser type and version

operating system used

Referrer URL

Hostname of the accessing computer

Time of the server request

IP address

This data will not be merged with other data sources.

The basis for data processing is Art. 6 (1) (b) GDPR, which permits the processing of data to fulfill a contract or for pre-contractual measures.

Web Fonts from Adobe Typekit

This website uses web fonts provided by Adobe Typekit to ensure consistent font display. When you visit a page, your browser loads the required web fonts into your browser cache to display text and fonts correctly.

For this purpose, the browser you use must establish a connection to the Adobe Typekit servers. This allows Adobe Typekit to know that our website was accessed via your IP address. Adobe Typekit Web Fonts are used in the interest of a consistent and appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

For more information about Adobe Typekit Web Fonts, please visit https://typekit.com/ and see the Adobe Typekit Privacy Policy: https://www.adobe.com/de/privacy/policies/typekit.html

Instagram

Our website may incorporate features and content from the Instagram service, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. Users can share content such as images, videos, or text and buttons from this online offering within Instagram. If users are members of Instagram, Instagram can link the access to the aforementioned content and features to the users' profiles there. Instagram's privacy policy: http://instagram.com/about/legal/privacy/.

Pinterest

Our website may integrate features and content from the Pinterest service, offered by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA. Users can share content such as images, videos, or text and buttons from this website within Pinterest. If users are members of Pinterest, Pinterest can link the access to the aforementioned content and features to the users' profiles there. Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy.

Google+

Our website may incorporate features and content from the Google+ platform, offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Users can share content such as images, videos, or text and buttons from this website within Google+. If users are members of the Google+ platform, Google may link access to the aforementioned content and features to the users' profiles there.

Google is certified under the Privacy Shield Framework, providing a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Further information on Google's data usage and settings options can be found in Google's privacy policy (https://policies.google.com/technologies/ads).

Data collection and processing

It is generally not necessary to provide personal data to use our online services. Only non-personally identifiable access data is stored, such as the name of your Internet service provider, the page from which you visit us, the names of the requested files, and the date they were accessed. This data is evaluated solely to improve our services and does not allow any conclusions to be drawn about you personally.

Personal data, however, is only collected if you provide it to us voluntarily. This can happen, for example, when ordering goods, opening a customer account, or registering for our newsletter.

Use and sharing of personal data

If you commission us to provide a service or send goods, your personal data will only be used without your separate consent to the extent necessary to provide the service or execute the contract.

This includes, in particular, the transfer of your data to transport companies, credit companies or other service providers used to provide the service or process the contract.

Once the contract has been fully processed, your data will be blocked for further use and deleted after the retention periods required by tax and commercial law have expired, unless you have expressly consented to further use.

Sample data protection declaration of the law firm Weiß & Partner

Shopify

Our website is provided by Shopify Inc. Shopify provides us with the online e-commerce platform that allows us to sell our products and services to you.

Your data is stored through Shopify's data storage, records, and general Shopify applications. Shopify stores your data on a secure server protected by a firewall. For more information, you can contact Shopify:

Shopify International Limited - Attn: Data Protection Officer - c/o Intertrust Ireland

2nd Floor 1-2 Victoria Buildings - Haddington Road - Dublin 4, D04 XN32 - Ireland

Questions about data protection

If you have any questions or concerns about our privacy policy or data processing, please contact us: ods@prego.de