This data protection declaration clarifies the type, scope and purpose of the processing of personal data within our online offer and the associated websites, functions and content as well as external online presences, such as our social media profile. (hereinafter jointly referred to as “online offer”).
“Personal data” is any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more special features, are an expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Insofar as “data” is mentioned in the following, this always means personal data.
“Processing” is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data. The term is broad and encompasses practically every handling of data.
The “responsible person” is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data.
The visitors and users of our online offer are referred to as “users”.
“GDPR” is the General Data Protection Regulation.
|Street, No.:||Überkinger Straße 4|
|Postal code, City, Country:||70372 Stuttgart|
|Managing Director:||Deborah Köngeter and Tobias Köngeter|
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected here:
If a contract is concluded, we also collect and process the following data:
As far as the use of our website is concerned, we only process personal data of our users insofar as this is necessary to provide a functional website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in such cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by statutory provisions.
As far as the provision of contractual services is concerned, we process inventory data (e.g. names and addresses as well as contact details of users), contract data (e.g. services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6 paragraph 1 letter b. GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract.
When using our online services, we store the IP address and the time of the respective user action. The storage takes place on the basis of our legitimate interests, as well as the user's protection against misuse and other unauthorized use. In principle, this data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 (1) (c) GDPR.
We process usage data (e.g. the websites of our online offer visited, interest in our products) and content data (e.g. entries in the contact form or user profile) for advertising purposes in a user profile, in order to show the user product information based on the services they have used so far, for example.
The data will be deleted after statutory warranty and comparable obligations have expired, the necessity of storing the data is checked every three years; in the case of legal archiving obligations, deletion takes place after they have expired (usually 10 years). Information in any customer account remains until it is deleted.
Insofar as we obtain the consent of the person concerned for the processing of personal data, Art. 6 Para. 1 lit. a GDPR serves as the legal basis.
When processing personal data that is required to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first interest, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for the processing.
In accordance with Art. 32 GDPR, we take appropriate technical measures, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons and organizational measures to ensure a level of protection appropriate to the risk; The measures include, in particular, securing the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, input, transfer, securing availability and their separation. Furthermore, we have set up procedures that ensure the exercise of data subject rights, deletion of data and reaction to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Article 25 GDPR).
The security measures include, in particular, the encrypted transmission of data between your browser and our server.
If, as part of our processing, we disclose data to other people and companies (processors or third parties), transmit it to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if the data is transmitted to third parties, as to payment service providers, pursuant to Art. 6 Para. 1 lit. b GDPR is required for the fulfillment of the contract), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties to process data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this happens in the context of using third-party services or disclosure or transmission of data to third parties, this only takes place if it is to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. This means that the processing takes place e.g. on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to that of the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
If personal data is processed by you, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:
You can request confirmation from the person responsible as to whether personal data relating to you is being processed by us. If such processing is present, you can request information from the person responsible for the following information:
You have the right to request information as to whether your personal data is being transmitted to a third country or to an international organization. In this context, you can request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.
You have a right to correction and/or completion to the person responsible if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.
Under the following conditions, you can request the restriction of the processing of your personal data:
If the processing of personal data concerning you has been restricted, this data — apart from its storage — may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State are processed. If the restriction of processing has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.
You can request the person responsible to delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:
The right to erasure does not exist if processing is necessary
You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format.
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 Para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
The person responsible no longer processes the personal data relating to you unless he can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object to the processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data is contrary to violates the GDPR.
The supervisory authority responsible for us is:
Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information Baden-Württemberg), PO Box 10 29 32, 70025 Stuttgart or Königstraße 10a, 70173 Stuttgart, telephone: 07 11/61 55 41-0, fax: 07 11/61 55 41-15, email: firstname.lastname@example.org.
“Cookies” are small files that are stored on users' computers. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offer. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the content of a shopping cart in an online shop or a log-in status can be saved. “Permanent” or “persistent” refers to cookies that remain stored even after the browser is closed. For example, the login status can be saved if users visit it after several days. The interests of the users can also be stored in such a cookie, which are used for range measurement or marketing purposes. “Third-party cookies” are cookies that are offered by providers other than the person responsible for operating the online offer (otherwise, if they are only their cookies, we speak of “first-party cookies”).
We can use temporary and permanent cookies and explain this in our data protection declaration. In our case, the cookies are used to recognize returning visitors and to restore the existing configuration of the editor.
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser's system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
The data processed by us will be deleted or their processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated otherwise in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons. According to legal requirements in Germany, storage takes place in particular for 6 years in accordance with Section 257 (1) HGB (books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and for 10 years in accordance with Section 147 (1) AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant to taxation, etc.).
We delete email inquiries and contacts via our website within a reasonable period of time, within which a contract or the like can no longer be expected.
We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to be able to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated in our data protection declaration, we process user data if they communicate with us within social networks and platforms, e.g. write posts on our online presence or send us messages.
As part of the range analysis by Matomo, the following data is processed on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. GDPR): the type of browser you are using and the browser version, the operating system you are using, your country of origin, the date and time of the server request, the number of visits, the length of time you have spent on the website and the external links you have activated. The IP address of the users is anonymized before it is saved.
Users can object to the anonymous collection of data by the Matomo program at any time with effect for the future by clicking on the link below. In this case, a so-called opt-out cookie is stored in your browser, which means that Matomo no longer collects any session data. However, if users delete their cookies, this means that the opt-out cookie is also deleted and must therefore be reactivated by the users.
Here you can decide whether a unique web analysis cookie may be stored in your browser to enable the operator of the website to collect and analyze various statistical data.
If you wish to decide against this, click on the following link to store the Matomo deactivation cookie in your browser.
Deactivation done! Your visits to this website will no longer be recorded by the web analysis.
Please note that the Matomo deactivation cookie of this website will also be deleted if you remove the cookies stored in your browser. Also, if you use a different computer or web browser, you'll need to go through the opt-out procedure again.
Unfortunately, the status cannot be changed. This may be due to your browser's privacy settings. Please change the status at matomo.bitandblack.com.
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers.
We use the Trustpilot review portal operated by TrustPilot A/S, Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark. In order to constantly improve our service, we offer our customers the opportunity to rate us via this independent portal, without us being able to influence this in any way.
An invitation to submit a review is generated for every order placed via our website. For this purpose, your surname, first name, email address and a reference number (order number for clear assignment) are sent to Trustpilot. Trustpilot does not use this data itself or pass it on to third parties. A review of our company can be found on de.trustpilot.com/review/calidar.io. The verification of the rating is based on the reference number (order number) using a specially created link. Submitting a review is voluntary.
In order to submit a rating or collect customer feedback, it is necessary to create/open a user profile on Trustpilot. In addition to a rating for the inviting company, ratings for any company can also be entered on the Trustpilot rating portal.
If a rating is submitted by clicking on the link contained in the invitation, a user profile is automatically created on TrustPilot after entering the personal data (name and email address for verification). This entails agreeing to the data protection provisions and general terms and conditions of Trustpilot. These can be viewed on the Trustpilot website at: de.legal.trustpilot.com/end-user-privacy-terms.
By placing an order via our website, you agree to the aforementioned transmission of the reference data to Trustpilot and the automated dispatch of a review invitation from this application in accordance with Article 6(1)(a) GDPR.
The review profile for Calidario can be viewed at: de.trustpilot.com/review/calidar.io.
With rapidmail, among other things, the sending of newsletters is organized and analyzed. The data you enter for the purpose of subscribing to the newsletter will be stored on the rapidmail servers in Germany. If you do not want an analysis by rapidmail, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. For the purpose of analysis, the emails sent with rapidmail contain a so-called tracking pixel, which connects to the rapidmail servers when the email is opened. In this way it can be determined whether a newsletter message has been opened. Furthermore, with the help of rapidmail, we can determine whether and which links in the newsletter message are clicked on. All links in the email are so-called tracking links, with which your clicks can be counted.