Privacy Policy – CreativeForge

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data means all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

CreativeForge Miriam Haas
Lenaustraße 20
73776 Altbach
Germany
Tel.: 016097618293
E-Mail: info@creativeforge.solutions

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we collect only the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the moment of access
Amount of data sent in bytes
Source/reference from which you reached the site
Browser used
Operating system used
IP address used (possibly in anonymized form)

Processing is carried out in accordance with Art. 6 (1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

For the hosting of our website and the display of the content, we use a provider who provides its services either on its own or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies – small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow us to save page settings (so-called “persistent cookies”). You can find the duration of storage in the overview of your browser’s cookie settings.

If personal data is processed through individual cookies implemented by us, processing is carried out in accordance with:

Art. 6 (1)(b) GDPR (for contract performance),
Art. 6 (1)(a) GDPR (in case of consent), or
Art. 6 (1)(f) GDPR (for our legitimate interest in optimal website functionality and a user-friendly website experience).

You can configure your browser to notify you about the use of cookies and decide individually on their acceptance or exclude acceptance of cookies in certain cases or in general. Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contact

When contacting us (e.g. via contact form or email), personal data is collected. The specific data collected in the case of a contact form is evident from the respective form. These data are stored and used exclusively for the purpose of responding to your request and for the associated technical administration.

The legal basis for the processing is our legitimate interest in responding to your inquiry pursuant to Art. 6 (1)(f) GDPR. If your contact aims at concluding a contract, Art. 6 (1)(b) GDPR serves as an additional legal basis. Your data will be deleted after final processing of your request, provided that it can be inferred from the circumstances that the matter has been conclusively clarified and there are no legal storage obligations to the contrary.

6) Use of Customer Data for Direct Marketing

6.1 Subscription to our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory data required for sending the newsletter is your email address. The provision of additional data is voluntary and will be used to address you personally. For the dispatch of the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have explicitly confirmed that you agree to receive newsletters. We will then send you a confirmation email asking you to confirm, by clicking on a link, that you wish to receive newsletters in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1)(a) GDPR. At the time of newsletter registration, we store your IP address as provided by your Internet Service Provider (ISP), as well as the date and time of registration, to trace possible misuse of your email address at a later date. The data collected during newsletter registration will be used exclusively for the purpose of promotional communication via the newsletter.

You can unsubscribe from the newsletter at any time via the provided link in the newsletter or by sending a corresponding message to the controller named above. After cancellation, your email address will be promptly removed from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further data use, which is legally permitted and about which we inform you in this policy.

6.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address in connection with the purchase of goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. In this case, we do not need to obtain separate consent from you pursuant to § 7 (3) UWG. Data processing takes place solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 (1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you emails.

You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with future effect by notifying the controller named above. The only costs you incur for this are transmission costs according to the basic rates. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

7) Online Marketing

Amazon Affiliate

We participate in the affiliate program of the following provider:
Amazon EU S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg

In this context, we have placed links on our website that lead to offers on the provider’s websites or third-party websites (“partner sites”). To measure the success of an affiliate link, evaluate orders generated via such a link, and settle commission payments accordingly, the provider uses cookies and/or similar technologies, which are generally set on the partner sites and for which we are not responsible under data protection law. In this process, the provider regularly processes the IP address and, if applicable, other device information.

All the processing described above, particularly the reading or storage of information on the device you are using, will only take place if you have given us your express consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time with future effect by using the cookie consent management options on the partner sites.

8) Web Analytics Services

1&1 IONOS WebAnalytics

This website uses the web analytics service of the following provider:
1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur, Germany

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used such as IP address and browser information, in order to evaluate them for statistical analyses of website usage and to create pseudonymized user profiles. This makes it possible, among other things, to analyze movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page content (e.g. text inputs, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally excludes direct personal reference. A consolidation with other personal data collected in other ways does not take place.

All processing described above, particularly the reading or storage of information on the device used, only takes place if you have given us your express consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service via the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

9) Website Functionalities

9.1 Google Translate

This website uses the translation service “Google Translate” of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) via API integration. In order for the translation in your chosen language to be displayed automatically, your browser connects to Google’s servers. Google uses “cookies”, which are text files stored on your computer that enable analysis of your website use. The information generated by the cookie about your use of this website (including the truncated IP address) is usually transmitted to and stored on a Google server, and may also be transmitted to servers of Google LLC in the USA.

All processing described above, particularly the setting of cookies for reading information on the device used, will only take place if you have given us your express consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

9.2 YouTube

This website uses plugins to display and play videos from the following provider:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA

When you call up a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers at the latest when playing the video, in order to load the content. Certain information, including your IP address, is transmitted to the provider.

When playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your site visit, your data will be directly assigned to your account when you click on a video. If you do not wish this assignment, you must log out before activating the playback button.

All processing described above, particularly the setting of cookies for reading information on the device used, will only take place if you have given us your express consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service via the “Cookie Consent Tool” provided on the website.

9.3 Zapier

We use the services of the following provider for the integration and synchronization of databases and web applications:
Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA

In this context, our processing operations are automated and different workflows are established to efficiently manage and execute internal processes in our processing system. If personal data is processed in this regard, this is done pursuant to Art. 6 (1)(f) GDPR on the basis of our legitimate interest in optimizing our internal organization.

We have concluded a data processing agreement with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

10) Tools and Miscellaneous

10.1 Cookie Consent Tool

This website uses a so-called “Cookie Consent Tool” to obtain valid user consents for cookies and cookie-based applications requiring consent. The “Cookie Consent Tool” is displayed to users in the form of an interactive user interface when the page is accessed, where consent can be given by checking boxes for certain cookies and/or cookie-based applications. With the use of the tool, all cookies/services requiring consent are only loaded when the respective user has given corresponding consent by checking the boxes. This ensures that such cookies are only set on the user’s device in the event of consent.

The tool uses technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.

If, in individual cases, processing of personal data (such as the IP address) is necessary for the purpose of storing, assigning, or logging cookie settings, this is carried out in accordance with Art. 6 (1)(f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website. Further legal basis for processing is Art. 6 (1)(c) GDPR. As controllers, we are legally obliged to make the use of non-essential cookies dependent on the respective user consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

Further information about the provider and the settings of the Cookie Consent Tool can be found directly in the user interface on our website.

11) Data Subject Rights

11.1 Applicable data protection law grants you the following data subject rights vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), whereby the respective legal basis for exercising these rights is referenced:

Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to notification pursuant to Art. 19 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to withdraw consent pursuant to Art. 7 (3) GDPR
Right to lodge a complaint pursuant to Art. 77 GDPR

11.2 Right to Object
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

12) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data based on explicit consent pursuant to Art. 6 (1)(a) GDPR, such data will be stored until you revoke your consent.
If statutory retention periods exist for data processed under Art. 6 (1)(b) GDPR in the context of contractual obligations, these data will be routinely deleted after expiry of the retention periods, provided they are no longer required for contract performance or contract initiation and/or there is no legitimate interest in further storage.
When processing personal data on the basis of Art. 6 (1)(f) GDPR, such data will be stored until you exercise your right to object under Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
When processing personal data for direct marketing purposes on the basis of Art. 6 (1)(f) GDPR, such data will be stored until you exercise your right to object under Art. 21 (2) GDPR.

Unless otherwise stated in the specific information in this policy about individual processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.