Privacy Policy

Data privacy policy

We attach great importance to protecting your data and safeguarding your privacy. We would like to explain below which data we process, when and for what purpose and on what legal basis. This should explain how our services work and how the protection of your personal data is guaranteed.

According to Art. 4 No. 1 DSGVO, personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified directly or indirectly. Further information on this can be found in Art. 4 No. 1 DSGVO, among others.
Insofar as we cite our legitimate interest or a legitimate interest of a third party (Art. 6 (1) (f) DSGVO) as the lawful basis for processing personal data, you have a right of objection pursuant to Art. 21 DSGVO.


1. definitions
The data protection declaration of Heavy 1 World GmbH is based on the notions used by the European Directive and Ordinance when issuing the Data Protection Regulation (DS-GVO). Our data protection declaration should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.
We use the following terms, among others, in this data protection declaration:


a) personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 

b) Data subject
Data subject means any identified or identifiable natural person whose personal data are processed by the controller.


c) Processing
Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.


d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.


e) Profiling
Profiling is any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.


f) Pseudonymization
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separate and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

 

g) Controller or data controller
The controller or person responsible for processing is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.


h) Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.


i) Recipient
Recipient means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients.


j) Third Party
Third party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.


k) Consent
Consent is any expression of will in the form of a statement or other unambiguous affirmative act, given voluntarily by the data subject for the specific case in an informed manner and in an unambiguous manner, by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.


In accordance with Art. 21 DSGVO, you have the right to object to the processing of personal data at any time. We will then no longer process the personal data for direct marketing purposes or any related profiling.
We will also not process your personal data for other purposes after an objection, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims (see, for example, Art. 21(1) DSGVO, so-called “limited right of objection”). In this case, you must provide reasons for the objection that arise from your particular situation.
You may also object to the processing of your personal data on grounds relating to your particular situation for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) DSGVO, unless the processing is necessary for the performance of a task carried out in the public interest (cf. Article 21(6) DSGVO).

 

We will also refer you to the right to object separately in the individual sections (e.g. by stating: “You have a right to object”), if this right exists. There you will also find further information on how to exercise your right to object.


In order to keep the following privacy policy clear, we refer at various points by links to information and privacy notices located on external websites (see also section “Social networks & external links” in this privacy policy). We make every effort to keep the links that we list in this data protection declaration up to date. Nevertheless, due to the constant updating of the websites, it cannot be ruled out that links do not function correctly. If you notice such a link, we would be pleased if you let us know so that we can add the current link.


2) Responsible person
The person responsible within the meaning of Art. 4 No. 7 DSGVO for the processing of personal data is:
Heavy 1 World GmbH
Westerwaldstr. 14-16
53757 Sankt Augustin
E-mail: Info@heavy1.de


3) Log files
Each time you visit our website, we automatically collect data and information from the system of your device and store it in so-called server log files. This data is information that relates to an identified or identifiable natural person (here: website visitor). The data is automatically transferred by your respective browser when you call up our website. 


This includes the following data:
The time of the call to our website (request to the server of the host provider),
URL of the website from which you called up our website,
the operating system you are using
Type and version of the browser you are using,
IP address of your computer.
The purpose of this processing is the retrievability of our website from your device and to enable a correct display of our website on your device or in your browser. Furthermore, we use the data to optimize our website and to ensure the security of our systems. An evaluation of this data for marketing purposes does not take place.
The legal basis for the processing is Art. 6 para. 1 lit. f) DSGVO. We have a legitimate interest in presenting you with a website optimized for your browser and in enabling communication between our server and your terminal device. For the latter, the processing of your IP address in particular is necessary.
The processed information is only stored for as long as necessary for the intended purpose or as required by law.
The recipient of the data is our server host, which acts on our behalf within the framework of an order data agreement.


Right of objection
You have a right of objection. You can send or inform us of your objection at any time (e.g. by e-mail to datenschutz@heav1.de).
The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide the data may mean that you cannot use our website or cannot use it to its full extent.

 

4) Cookies
Our website uses cookies. Cookies are text files that are stored on your device, e.g. to make the use of a website more comfortable or to recognize the user’s device and save settings or similar. Cookies can be used to store entries and settings on a website so that you do not have to enter them again each time you visit a website. Cookies contain a so-called cookie ID, which makes it possible to assign the device in which the cookie was stored. In detail, we use the following cookies:
Cookies that contain a randomly generated, concrete identification number that makes you or your device identifiable during your visit to our website. These cookies are automatically deleted at the end of your visit.
Cookies that contain a randomly generated, concrete identification number that makes you or your device identifiable on our website. These cookies are used, for example, to store your consent to the cookie banner. These cookies are automatically deleted after one year.
The purpose of this processing is to make the use of our website comfortable for you and to offer the possibility to save settings.
The legal basis for the processing is Art. 6 para. 1 lit. f) DSGVO. We have a legitimate interest in presenting you with a website that saves your personal settings and makes it easier for you to visit our website.


Right of objection
You are entitled to a right of objection.
In your browser settings, you can restrict or completely prevent the setting of cookies. You can also arrange for the automatic deletion of cookies when closing the browser window.
You can find out how to delete cookies in the most common browsers and change the cookie settings here, among other things:
Google Chrome: https://support.google.com/chrome/answer/95647
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Apple Safari: https://support.apple.com/kb/PH21411?locale=de_DE
Microsoft Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies


The provision of personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide such data could result in you not being able to use our website or not being able to use it to its full extent.
Other services used by us also use cookies. We will inform you separately about the use of cookies in the individual services.


5) Information about Google services
We use various services on our website provided by Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
For more information on the individual concrete services of Google that we use on this website, please refer to the further privacy policy.
By integrating Google services, Google may collect information (including personal data) and process it. In doing so, it cannot be ruled out that Google also transmits the information to a server in a third country.
As can be seen from Google’s Privacy Shield certification (available at https://www.privacyshield.gov/list under the search term “Google”), Google has committed to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework on the collection, use and storage of personal data from the member states of the EU and Switzerland, respectively. Google, including Google LLC and its wholly owned subsidiaries in the U.S., has declared by certification that it complies with the Privacy Shield Principles. For more information, please visit https://www.google.de/policies/privacy/frameworks/.
We ourselves cannot influence what data Google actually collects and processes. However, Google states that, in principle, the following information (including personal data) may be processed, among others:

  • Log data (especially the IP address)
  • Location-related information
  • Unique application numbers
  • Cookies and similar technologies

If you are logged into your Google account, Google may add the processed information to your account depending on your account settings and treat it as personal data, cf. in particular https://www.google.de/policies/privacy/partners/.
Google states the following in this regard, among other things:
“We may link personal data from one service with information and personal data from other Google services. This makes it easier for you to share content with friends and acquaintances, for example. Depending on your account settings, your activities on other websites and apps may be linked to your personal data to improve Google’s services and ads served by Google.” (https://www.google.com/intl/de/policies/privacy/index.html)
You can prevent this data from being added directly by logging out of your Google account or also by making the appropriate account settings in your Google account. Furthermore, you may refuse the use of cookies – if Google sets them – by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can find out how to delete cookies in the most common browsers here:
Google Chrome: https://support.google.com/chrome/answer/95647
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Apple Safari: https://support.apple.com/kb/PH21411?locale=de_DE
Microsoft Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies


You can find more detailed information in Google’s privacy policy, which you can access here:
https://www.google.com/policies/privacy/
Information on Google’s privacy settings can be found at https://privacy.google.com/take-control.html.


6) Use of Google Web Fonts
We use external fonts, so-called Google Fonts, on our website. Google Fonts is a service of Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The integration of the web fonts takes place via an interface (“API”) to the Google services. By integrating the web fonts, Google may collect information (including personal data) and process it. In doing so, it cannot be ruled out that Google also transmits the information to a server in a third country.
Information on the existing Privacy Shield certification of Google and other relevant data on data processing by Google in the context of the use of Google services can be found in this privacy policy under the section “6) Information on Google services”.
We ourselves do not collect any data, in the context of providing the Google Fonts.
By integrating Google Fonts, we pursue the purpose of being able to display uniform font types on your device.
The legal basis for the processing of personal data described here is Art. 6 (1) lit. f) DSGVO. Our legitimate interest required for this lies in the great benefit that a uniform display of fonts offers. Through the possibility of a uniform presentation, we keep the design effort lower than if we had to react to font standards of different operating systems or browsers with our own graphically adapted web pages. Google also has a legitimate interest in the collected (personal) data in order to improve its own services.

Right of objection
You have a right of objection. You can send or inform us of your objection at any time (e.g. by e-mail to Info@heavy1.de).
The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide the data could result in you not being able to use our website or not being able to use it to its full extent and the presentation of the website may change.
You can find more information in Google’s privacy policy, which you can access here:
google.com/fonts#AboutPlace:about
https://developers.google.com/terms/
google.com/policies/privacy/
You can find information on Google’s privacy settings at https://privacy.google.com/take-control.html?categories_activeEl=sign-in.

 


7) Contacting us
You have the possibility to contact us by phone or by e-mail.
If you contact us via this option, we will process your telephone number or e-mail address and the information that results from the text of the message.
The purpose of processing your telephone number or e-mail address is to process the contact request and to be able to contact the inquirer in order to respond to the request.
The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest is to offer you the possibility to contact us at any time and to be able to answer your inquiries.
The personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.


Right of objection
You have a right of objection. You can send or inform us of your objection at any time (e.g. by e-mail to Info@heavy1.de).


The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it would, under certain circumstances, result in you not being able to use the option to contact us.


8) Social networks & external links
In addition to this website, we also maintain presences in various social media, which you can access via corresponding buttons on our website. Insofar as you visit such a presence, personal data may be transmitted to the provider of the social network. It is possible that, in addition to the storage of the data specifically entered by you in this social medium, further information will also be processed by the provider of the social network.
Furthermore, the provider of the social network may process the most important data of the computer system from which you visit it – for example, your IP address, the processor type and browser version used, including plug-ins.
If you are logged in with your personal user account of the respective network while visiting such a website, this network can assign the visit to this account.
The purpose and scope of the data collection by the respective medium as well as the further processing of your data there as well as your rights in this regard can be found in the respective provisions of the respective responsible party, e.g. under:
Facebook: https://de-de.facebook.com/about/privacy/
We would also like to point out that our website contains further links to external third-party websites, whereby we have no influence on the processing of data on these third-party websites.

 

9) Data security
We secure our website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. However, despite regular checks, complete protection against all dangers is not possible.


10) Changes to the data protection declaration
Changes in the law or changes to our internal company processes may make it necessary to amend this data protection declaration.
In the event of such a change, we will notify you 4 weeks before the planned change above the heading “Privacy Policy”.


11) Revocation
You have the right to revoke consent once given with effect for the future at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.


12) Data subject rights
In principle, you have the following rights:
Right to information (Art. 15 DSGVO).
Right to rectification (Art. 16 DSGVO)
Right to object (Art. 21 DSGVO)
Right to erasure (Art. 17 DSGVO)
Right to restriction of processing (Art. 18f. DSGVO)
Right to data portability (Art. 20 DSGVO)


For requests of this nature, please contact us at Info@heavy1.de. Please note that when making such requests, we must ensure that it is indeed the data subject.
You have the right to lodge a complaint with a data protection supervisory authority, without prejudice to any other administrative or judicial remedy.
Automated decision-making does not take place on our website.


Privacy policy on the use and application of Facebook
Facebook Ireland Ltd (“Facebook”) provides us as Facebook Fanpage operators with so-called “Facebook Insights” (“Insights”). The Insights are various statistics that provide us with information about the use of our Facebook Fanpage. Detailed information on this can also be found at https://www.facebook.com/business/a/page/page-insights.
In order to create these statistics, various information provided by you (including personal data) is processed by Facebook. In this context, the personal data is processed by Facebook and us as joint controller within the meaning of Art. 26 DSGVO. In the following, we provide you with the essential information of the agreement concluded between Facebook and us (https://www.facebook.com/legal/terms/page_controller_addendum) pursuant to Art. 26 DSGVO.


I.Designation of the jointly responsible persons
Jointly responsible for the processing are
Facebook Ireland Ltd.
4 Grand Canal Square
Dublin 2
Ireland

and

Heavy 1 World GmbH
Westerwaldstrasse 14-16
53757 Sankt Augustin

 

II. Responsibility with regard to the processing of Insights data
Facebook has assumed primary responsibility (assumption of all obligations under the GDPR) for data processing. This means in particular:
Facebook assumes the necessary information obligations (e.g. Art. 13 DSGVO).
Data subject rights can be asserted against Facebook (e.g., right to information or deletion, objection to data processing or revocation of any consent given; see also section “V. Data subject rights”)
Ensuring the technical and organizational measures of data processing.
Facebook provides comprehensive information with regard to data processing at www.facebook.com (Art. 13 DSGVO). In order to provide you with an overview of the essential information, we also refer to the content provided by Facebook within the scope of this data protection notice.
Notwithstanding Facebook’s agreed primary responsibility, you can of course also assert your rights under the GDPR directly against us. We will immediately forward this request to Facebook via a form provided for this purpose.


Legal basis for processing
You can view the legal basis and the purposes of Facebook’s processing at https://www.facebook.com/about/privacy/legal_bases and at https://de-de.facebook.com/policy.php.
Our legal basis for processing Insights data is our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO. We have a legitimate interest in being able to track user behavior on our Facebook fan page. In particular, this enables us to record the reach and effectiveness of our campaigns, postings and other activities through processed statistics. This enables us to continuously optimize our website and our offer in line with demand. This also represents the purpose of the processing for us.


Facebook may process the following data in particular:

  • User interaction (click behavior, postings, likes, viewing videos, page views, etc.)
  • Cookies
    Demographic characteristics (age, gender, state, etc.)
  • IP address
    System and device information (e.g., browser type, operating system, etc.)
  • The exact processing of your data when visiting our Facebook fan page depends on whether you have a Facebook account or not. If you have a Facebook account, Facebook can permanently assign the data to your account in order to learn more about you in this way.
    Even if you do not have an account with Facebook, Facebook can store your data. This can happen through the use of cookies. These are mostly small text files that are stored on your respective device. Various information is written to this text file, which can be read out again at a later time. This makes it possible for Facebook to store and process information about you even without you having a Facebook account. You can find more detailed information about Facebook’s cookies at https://de-de.facebook.com/policies/cookies/.
    As part of Insights usage, we only receive anonymized statistics from Facebook about the use of our fan page. For us, it is only recognizable how many users have carried out certain interactions, but not which user has carried out a certain action. The statistics of the Insights data do not allow us to draw any conclusions about a person.

  • Data subject rights
    In principle, you have the following rights:

    Right to information (Art. 15 GDPR)
    Right to rectification (Art. 16 DSGVO)
  • Right to object (Art. 21 DSGVO)
  • Right to erasure (Art. 17 DSGVO)
  • Right to restriction of processing (Art. 18f. DSGVO)
  • Right to data portability (Art. 20 DSGVO)

You have the right to revoke consent once given at any time with effect for the future without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
You can assert these rights directly against Facebook or against us (see section “II. Responsibility with regard to the processing of Insights data”). If you wish to assert your rights against us, please contact us at the email address Info@heavy1.de and describe your specific concern in as much detail as possible.
With regard to the processing by cookies, you have the right to object. You can exercise this, for example, as follows:
In your browser settings, you can restrict or completely prevent the setting of cookies. You can also arrange for the automatic deletion of cookies when closing the browser window.
You can find out how to delete cookies in the most common browsers and change the cookie settings here, among other things:
Google Chrome: https://support.google.com/chrome/answer/95647
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Apple Safari: https://support.apple.com/kb/PH21411?locale=de_DE
Microsoft Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
At https://de-de.facebook.com/policies/cookies/ you can also adjust your settings for the use of cookies. Here you will find under the sections “If you have a Facebook account” (Facebook account available) and “Public” (no Facebook account available), you will find information on how to object to Facebook processing.
You can determine the storage period of the cookies via your browser by displaying the cookies (usually by clicking on the “i” next to the address bar, e.g. in Firefox or Google Chrome).

 


13.) Privacy policy on the use and application of Instagram
The controller has integrated components of the service Instagram on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and, moreover, to redistribute such data in other social networks.
The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time one of the individual pages of this website operated by the controller is called up and on which an Instagram component (Insta button) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Instagram component to download a representation of the corresponding component from Instagram. Within the scope of this technical procedure, Instagram receives knowledge about which specific subpage of our website is visited by the data subject.
If the data subject is logged in to Instagram at the same time, Instagram recognizes which specific sub-page the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject activates one of the Instagram buttons integrated on our website, the data and information thus transmitted will be assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.
Instagram always receives information via the Instagram component that the data subject has visited our website if the data subject is simultaneously logged into Instagram at the time of calling up our website; this takes place regardless of whether the data subject clicks on the Instagram component or not. If the data subject does not want this information to be transmitted to Instagram, he or she can prevent the transmission by logging out of his or her Instagram account before accessing our website.
Further information and the applicable data protection provisions of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

Login

Lost your password?

WordPress Cookie Notice by Real Cookie Banner