EU General Data Protection Regulation (GDPR)
§ 1 The person responsible within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Paris New York CB
Carrer Pursiana 6
07013 Palma
§ 2 Your rights as a user of our online presence
(1) Auskunft über Ihre bei uns gespeicherten Daten und deren Verarbeitung (Art. 15 DSGVO)
(2) Berichtigung unrichtiger personenbezogener Daten (Art. 16 DSGVO)
(3) Löschung Ihrer bei uns gespeicherten Daten (Art. 17 DSGVO)
(4) Einschränkung der Datenverarbeitung, sofern wir Ihre Daten aufgrund gesetzlicher Pflichten noch nicht löschen dürfen (Art. 18 DSGVO)
(5) Widerspruch gegen die Verarbeitung Ihrer Daten bei uns (Art. 21 DSGVO) und39
(6) Datenübertragbarkeit, sofern Sie in die Datenverarbeitung eingewilligt haben oder einen Vertrag mit uns abgeschlossen haben (Art. 20 DSGVO).
(7) Sofern Sie uns eine Einwilligung erteilt haben, können Sie diese jederzeit mit Wirkung für die Zukunft widerrufen.
(8) Sie können sich jederzeit mit einer Beschwerde an die zuständige Aufsichtsbehörde wenden.
(9) Eine Liste der Aufsichtsbehörden (für den nichtöffentlichen Bereich) mit Anschrift finden Sie unter
§ 3 Collection of general information when visiting our website
(1) Type and purpose of processing
Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your Internet browser and recorded in log data (so-called log files). Server log files) saved. This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing takes place on the basis of Art. 6 Paragraph 1 lit. f GDPR from our overriding legitimate interest in ensuring trouble-free operation of our website and improving our offer. This includes ensuring a smooth connection to the website, smooth use of our website, evaluating system security and stability and for other administrative purposes.
We do not use your data to draw conclusions about your person. Information of this type may be statistically evaluated by us in order to optimize our website and the technology behind it.
(2) Legal basis
The processing takes place in accordance with Art. 6 Para. 1 lit .f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
(3) Recipients
Recipients of the data may be technical service providers who are responsible for the operation and the maintenance of our website as a processor.
(4) Storage period
The data will be deleted as soon as they are no longer required for the purpose of collection. This is generally the case for the data used to provide the website when the respective session has ended.
(5) Provision mandatory or required
The provision of the aforementioned personal data Data is not required by law or contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, a contradiction is excluded.
§ 4 comment function
(1) Type and purpose of processing
If users leave comments on our website, the time of their creation and the user name previously selected by the website visitor are saved in addition to this information. This is for our security, as we can be prosecuted for illegal content on our website, even if it was created by users.
(2) Legal basis
The processing of the data entered as a comment takes place on the basis of a legitimate interest (Art. 6 Para. 1 lit. f DSGVO).
By providing the comment function, we would like to enable you to interact in an uncomplicated manner. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
(3) Recipients
Recipients of the data may be processors.
( 4) Duration of storage
The data will be deleted as soon as they are no longer required for the purpose of collection. This is generally the case when communication with the user has been completed and the company can see from the circumstances that the facts in question have been finally clarified.
(5) Provision prescribed or required
The provision of your personal data is voluntary. Without providing your personal data, we cannot grant you access to our comment function.
§ 5 Newsletter
(1) Type and purpose of processing
Your data will only be used to send you the subscribed newsletter by e-mail. Your name is given in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.
Your e-mail address is required to receive the newsletter address sufficient. When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be informed by e-mail about circumstances that are relevant to the service or the registration (e.g. changes to the newsletter offer or technical conditions).
We need a valid e-mail for effective registration -Address. In order to check that the owner of an e-mail address is actually registering, we use the “double opt-in” procedure. To do this, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the response requested here. Further data is not collected. The data will be used exclusively for sending the newsletter and will not be passed on to third parties.
(2) Legal basis
On the basis of your expressly given consent (Art. 6 Para. 1 lit. a DSGVO) , we will regularly send you our newsletter or comparable information by e-mail to the e-mail address you have provided.
Your consent to the storage of your personal data and its use for sending the newsletter can be revoked at any time with effect for revoke the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation via the contact option given at the end of this data protection notice.
(3) Recipients
Recipients of the data may be processors .
(4) Duration of storage
The data will only be processed in this context as long as the corresponding consent has been given. They will then be deleted.
(5) Provision mandatory or necessary
Your personal data is provided voluntarily, solely on the basis of your consent. Unfortunately, we cannot send you our newsletter without your consent.
(1) Type and purpose of processing
The data you enter will be stored for the purpose of individual communication with you. This requires you to provide a valid email address and your name. This is used to allocate the request and then to answer it. Providing further data is optional.
(2) Legal basis
The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR).
By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
If you contact us to request an offer, the data entered in the contact form will be processed to carry out pre-contractual measures ( Article 6 paragraph 1 lit. b GDPR).
(3) Recipients
Recipients of the data may be processors.
(4) Duration of storage< /p>
Data will be deleted no later than 6 months after processing the request.
If there is a contractual relationship, we are subject to the statutory retention periods according to HGB and delete your data after these periods have expired.
(5) Provision mandatory or necessary
The provision of your personal data is voluntary. However, we can only process your request if you give us your name, email address and the reason for the request.
§ 7 Use of Google Analytics
(1) Type and purpose of processing
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses so-called “cookies”, i.e. text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Due to the activation of IP anonymization on this website, however, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The purposes of data processing are to evaluate the use of the website and to compile reports on activities the site. Based on the use of the website and the Internet, further related services should then be provided.
(2) Legal basis
The data is processed on the basis of the user’s consent (Art. 6 Paragraph 1 lit. a GDPR).
(3) Recipient
The recipient of the data is Google as the processor. For this we have concluded the corresponding order processing contract with Google.
(4) Storage duration
The data will be deleted as soon as they are no longer required for our recording purposes.
(5) Third country transfer
Google processes your data in the USA and has submitted to the EU_US Privacy Shieldhttps ://www.privacyshield.gov/EU-US-Framework.
(6) Provision mandatory or required
The provision of your personal data is voluntary, solely on based on your consent. If you prevent access, this can lead to functional restrictions on the website.
(7)Revocation of consent
You can prevent the storage of cookies by setting your browser software accordingly impede; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: Browser Add On to deactivate Google Analytics.
Additionally or as As an alternative to the browser add-on, you can prevent tracking by Google Analytics on our website by click this link. An opt-out cookie will be installed on your device. This will prevent future detection by Google Analytics for this website and for this browser as long as the cookie remains installed in your browser.
(8) Profiling
Using the tracking Google Analytics tools can evaluate the behavior of visitors to the website and analyze their interests. For this purpose we create a pseudonymous user profile.
§ 8 Use of Script Libraries (Google Webfonts)
(1) Type and purpose of processing
In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts.
You can find the privacy policy of the library operator Google here: https://www.google.com/policies/privacy/
(2) Legal basis
Legal basis for the integration of Google Webfonts and the associated data transfer Google is your consent (Art. 6 Para. 1 lit. a DSGVO).
(3) Recipient
Calling up script libraries or font libraries automatically triggers a connection to the operator of the library . It is theoretically possible – although it is currently unclear whether and, if so, for what purposes – that the operator collects Google data in this case.
(4) Storage period
We do not collect any personal data Data through the integration of Google Web Fonts.
You can find more information about Google Web Fonts at https://developers .google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/ policies/privacy/.
(5) Third country transfer
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
(6) Mandatory or Required
p>
The provision of personal data is neither required by law nor by contract. However, it may not be possible to display the content correctly using standard fonts.
(7) Revocation of consent
The programming language JavaScript is regularly used to display the content. You can therefore object to the data processing by deactivating the execution of JavaScript in your browser or by installing a JavaScript blocker. Please note that this can lead to functional restrictions on the website.
§ 9 Use of Google Maps
(1) Type and purpose of processing
We use Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function.
You can find more information about data processing by Googlethe Google privacy policy. There you can also change your personal data protection settings in the data protection center.
Detailed instructions for managing your own data in connection with Google products can be found here.
(2) Legal basis
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a DSGVO).
(3) Recipient
By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account.
If you do not wish to be assigned to your profile on Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
(4) Storage period
We do not collect any personal data through the integration of Google Maps.
(5) Third country transfer
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
(6) Provision mandatory or required
The Your personal data is provided voluntarily, solely on the basis of your consent. If you prevent access, this can lead to functional restrictions on the website.
(7) Revocation of consent
If you do not want Google to collect data about you via our website collects, processes or uses, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website, or only to a limited extent.
§ 10 Google AdWords
(1) Type and purpose of processing
Our website uses Google conversion tracking. The operator of the Google AdWords services is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you came to our website via an ad placed by Google, Google Adwords will place a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an ad placed by Google.
If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the User clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. This means that cookies cannot be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information with which users can be personally identified.
(2) Legal basis
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent ( Article 6 paragraph 1 lit. a GDPR).
(3) Recipient
Every time you visit our website, personal data, including your IP address, is transmitted to Google in the USA . This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties. Our company does not contain any information from Google that could be used to identify the person concerned.
(4) Storage period
These cookies lose their validity after 30 days and are not used for personal identification.
(5) Transfer to third countries
Google processes your data in the USA and has submitted to the EU_US Privacy Shield< a href="https://www.privacyshield.gov/EU-US-Framework">https://www.privacyshield.gov/EU-US-Framework.
(6 ) Mandatory or required
Your personal data is provided voluntarily, solely on the basis of your consent. If you prevent access, this can lead to functional restrictions on the website.
(7) Revocation of consent
If you do not want to participate in the tracking, you can set the required opt-out Reject cookies – for example via browser settings that generally deactivate the automatic setting of cookies or set your browser so that cookies from the “googleleadservices.com” domain are blocked.
Please note that you can use the Opt-out cookies may not be deleted as long as you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.
§ 11 Embedded YouTube Videos
(1) Type and purpose of processing
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to the YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.
If a YouTube video is started, the provider uses cookies that collect information about user behavior.
Other Information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s data protection declaration, where you will also find further information on your rights in this regard and setting options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework
(2) Legal basis
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Article 6 (1) (a) GDPR).
(3) Recipient
The access to YouTube automatically triggers a connection to Google.
(4) Storage period and revocation of consent
Anyone who has deactivated the storage of cookies for the Google Ad program will also be able to view of YouTube videos do not have to reckon with such cookies. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.
You can find further information on data protection at “YouTube” in the provider’s data protection declaration at: https://www.google.de/intl/de/policies/privacy/
(5) Third country transfer
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield. gov/EU-US-Framework.
(6) Mandatory or required
Your personal data is provided voluntarily, solely on the basis of your consent. If you prevent access, this can lead to functional restrictions on the website.
§ 12 Others
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.
The use of contact data published within the scope of the imprint obligation by third parties for the purpose of sending unsolicited advertising and information material is hereby expressly prohibited. The site operators expressly reserve the right to take legal action in the event of unsolicited advertising being sent, such as spam e-mails.
(1) SSL encryption
Um To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
(2) Change to our data protection provisions
We reserve the right to adapt this data protection declaration so that it always corresponds to the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit.
(3) Questions to the data protection officer
If you have any questions about data protection, please send us an e-mail or contact us directly to the person responsible for data protection in our company:
hollys@golightly-group.com