This privacy policy explains how we process personal data when you use our website or get in touch with us. Personal data means any information relating to an identified or identifiable natural person.
Controller and data protection contact
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
MARKETINGCASE
Dr. Anke Tripp
c/o whyit GmbH
Wienburgstr. 207
48159 Münster
Germany
For questions about data protection, please contact us at kontakt@marketingcase.de.
We have not appointed a data protection officer because, based on our current assessment, there is no legal obligation to do so.
Processing principles and legal bases
We process personal data only where it is necessary to provide this website, deal with your enquiries, maintain technical security or improve our offering, or where you have consented to the processing.
The legal basis depends on the purpose of the processing:
- Art. 6(1)(a) GDPR — consent.
- Art. 6(1)(b) GDPR — performance of a contract or implementation of pre-contractual measures.
- Art. 6(1)(c) GDPR — compliance with legal obligations.
- Art. 6(1)(f) GDPR — protection of legitimate interests, provided that your interests or fundamental rights and freedoms do not override them.
The German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG) applies in addition when information is stored on or read from your device, for example through cookies or comparable browser-storage technologies such as local storage. Storage or access that is not technically necessary takes place only with your consent under Section 25(1) TDDDG. Technically necessary storage is based on Section 25(2) TDDDG.
Provision of the website and hosting
When you visit our website, we process technically necessary connection data in order to deliver it, operate it reliably and protect it from attacks. This can include in particular:
- accessed domain and URL,
- date and time of access,
- amount of data transferred,
- referrer information,
- browser and operating-system information or user agent,
- IP address.
This processing is based on our legitimate interest in a secure, stable and error-free website under Art. 6(1)(f) GDPR. If our hosting or infrastructure provider processes personal data on our behalf in this context, it does so under a data processing agreement pursuant to Art. 28 GDPR.
We retain server log data only as long as it is required for operation, security and error analysis. The precise period depends on the settings and standard retention periods of the hosting environment used at ALL-INKL.COM. Where possible, IP addresses are shortened or processed anonymously.
SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons. An encrypted connection is indicated by “https://” at the beginning of your browser’s address line.
Contact options
Contact form
When you use our contact form, we process the information you enter. This includes in particular your name, email address, telephone number, subject, message, company or organisation, and any further details you voluntarily provide. To ensure the security and traceability of the enquiry, we also process technical data, in particular your IP address, the time of the enquiry and the user agent of the browser used.
We process this information to deal with your enquiry. Where it concerns the conclusion or performance of a contract, the legal basis is Art. 6(1)(b) GDPR. In all other cases, the processing is based on our legitimate interest in answering your enquiry pursuant to Art. 6(1)(f) GDPR.
The mandatory fields are needed for us to handle and answer your enquiry; optional information is voluntary. Providing the form data is neither a statutory nor contractual requirement. However, we cannot handle your enquiry through the form without the mandatory information. Information sent through the form is forwarded to us by email and stored in the email mailbox at ALL-INKL.COM. We do not generally pass it to third parties unless this is necessary to handle your enquiry, required by law or you have consented. Please do not submit particularly confidential information or special categories of personal data through the contact form unless your enquiry requires it.
Contact by email and telephone
If you contact us by email or telephone, we process the personal data you provide to handle your request and communicate with you. Art. 6(1)(b) GDPR is the legal basis where the communication serves pre-contractual or contractual measures; otherwise, Art. 6(1)(f) GDPR applies.
Emails are received and stored through mailboxes hosted by ALL-INKL.COM. Complete data security during transmission cannot be guaranteed for unencrypted email communications.
Cookies and browser storage
Our website may use cookies and comparable browser-storage technologies such as local storage. Cookies are small text files stored on your device, while local storage allows settings to be saved locally in your browser.
Our consent banner lets you choose categories that require consent. You may change or withdraw your choice at any time with effect for the future. Storing that choice is technically necessary so that it can be observed on subsequent page views.
Necessary cookies and browser storage
These storage operations are required for the website to operate or for functions that you have expressly requested. They include, in particular, your cookie settings and security- and function-related settings. Processing is based on Section 25(2) TDDDG and Art. 6(1)(f) GDPR.
Functional storage
Functional storage makes the website more convenient to use, for example by retaining display or operating settings. It may also include settings from the accessibility module. If this storage is not technically necessary, it takes place only with your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Statistics
Statistical reach measurement takes place only when you enable the “Statistics” category in the consent banner. We do not currently use third-party analytics cookies for that purpose. Instead, this website’s reach measurement is carried out exclusively through local server statistics (see “Local reach measurement”).
Marketing
Marketing cookies or comparable tracking technologies could be used to measure the effectiveness of advertising activities or show personalised content. They are currently used only if the relevant technologies have been technically integrated and approved by you in the consent banner. The legal basis would be Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Services and functions used
Google Fonts (local hosting)
We use Google Fonts to display fonts consistently. The fonts are hosted locally on our server, so accessing the website does not establish a connection to Google servers.
Local reach measurement
If you consent to the “Statistics” category, we operate a local reach-measurement system to assess use of our website in aggregated form and improve our offering technically and in terms of content. In particular, we process:
- pages accessed and times of access,
- clicks on correspondingly marked buttons and completed contact enquiries,
- referrer host,
- UTM parameters, if they are included in the URL,
- device class and bot/crawler classification derived from the user agent,
- language/region signals from the browser language,
- time zone,
- technical website performance values, in particular loading times, visual stability and interaction delays.
The technical performance values enable us to identify display and performance issues on the website. We process them only together with the accessed URL, device class and a pseudonymous session identifier that changes daily.
The IP address is not stored in plain text in the statistics database. It is shortened or anonymised on the server and processed with technical browser data and a server-side salt to create a pseudonymous session identifier that changes every day. This identifier serves solely to summarise page views statistically within a single day. It does not enable recognition across several days or across other websites.
Data is processed solely on our own server or in our own hosting environment at ALL-INKL.COM. It is not passed to analytics providers or other third parties and is deleted no later than 90 days after collection. The legal basis is your consent under Art. 6(1)(a) GDPR. The reach measurement itself does not set analytics cookies or store or read information on your device for analytics purposes. Your choice in the consent banner is stored separately as a technically necessary local setting. We therefore consider that no additional consent under Section 25(1) TDDDG is required for the reach measurement. If your browser has “Do Not Track” enabled, we honour it and do not transmit the corresponding events.
Recipients, processors and third-country transfers
We disclose personal data only where legally permitted, where you have consented, where we are legally obliged to do so, or where disclosure is necessary to protect legitimate interests. Where required, service providers processing personal data for us are bound by a data processing agreement pursuant to Art. 28 GDPR.
The website and email mailboxes are hosted by ALL-INKL.COM – Neue Medien Münnich. In its role as hosting and email provider, ALL-INKL.COM may process connection data, server log data and email content.
We transfer personal data to countries outside the European Union or the European Economic Area only when the conditions of Art. 44 et seq. GDPR are met — for example, through an adequacy decision by the European Commission, standard contractual clauses or explicit consent.
Retention and erasure of data
We delete personal data as soon as the purpose for processing no longer exists, provided that statutory retention periods or other legitimate grounds for continued storage do not apply. Where statutory retention obligations exist, processing is restricted accordingly.
As a rule, contact and contractual communications are retained only for as long as necessary to handle your request. If this results in a business relationship, or if statutory retention duties apply, commercial and business letters and tax-relevant documents may be retained for longer in accordance with the statutory periods.
Your rights as a data subject
Subject to the statutory requirements, you have the following rights in relation to us:
- Right of access to the data processed about you (Art. 15 GDPR).
- Right to rectification of inaccurate or incomplete data (Art. 16 GDPR).
- Right to erasure (Art. 17 GDPR).
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability (Art. 20 GDPR).
- Right to object to processing based on Art. 6(1)(e) or Art. 6(1)(f) GDPR (Art. 21 GDPR).
- Right to withdraw consent granted with effect for the future.
- Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
A list of data protection supervisory authorities can be found here.
Where we process data on the basis of legitimate interests, you may object to that processing on grounds relating to your particular situation. You may withdraw consent at any time with effect for the future.
No automated decision-making
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.
Updates to this privacy policy
We update this privacy policy if legal requirements, technical processes or our services change. The version current at the time of your next visit applies.