The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is
cove GmbH & Co. KG
Ronsdorfer Str. 74
40233 Düsseldorf
Düsseldorf, Germany
Phone: +49(0)211/1712801
E-mail: info(at)ballroom-outfitters.com
The data protection officer of the controller is
Mr Ulrich Hesse
Ronsdorferstraße 74 (Hall23)
40223 Düsseldorf
Düsseldorf, Germany
Phone: +49(0)211/1712801
E-mail: datenschutz(at)cove.de
Scope of the processing of personal data
We only process the personal data of our users to the extent necessary to provide a functional website, to improve the user experience and to improve our content and services.
The processing of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
Data erasure and storage duration
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Server log files
You can visit our website without providing any personal data. Every time you access our website, usage data is transmitted by your Internet browser and stored in log data (server log files). This stored data includes
- Information about the browser type and operating system
- Internet service provider and an anonymised IP address
- Date and time of access and, if applicable, the original website of a link to our website
It is not possible to assign this data to a specific person and is regulated by Art. 6 para. 1 lit. F GDPR for the temporary storage of data. The data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system.This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The following data, which enables an analysis of the user's surfing behaviour, is stored and transmitted in these cookies:
- Language setting, search terms, frequency of page views, use of website functions and log-in information
The processing is carried out on the basis of Section 15 (3) TMG and Art. 6 (1) lit. f GDPR from the legitimate interest in the above-mentioned purposes. The user data collected in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to the calling user/person. The data is not stored together with other personal user data.
When accessing our website, users are informed about the use of cookies for analysis purposes by an information banner and referred to this privacy policy. In this context, there is also a reference to how the storage of cookies can be prevented in the browser settings. The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you based on Art. 6 (1) f GDPR.
Cookies are stored on your computer, which is why you have full control over their use. By selecting the appropriate technical settings in your Internet browser, you can prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.
You can find out how to manage (including deactivating) cookies in the most important browsers by clicking on the links below:
- Chrome browser: https://support.google.com/accounts/answer/61416?hl=de (https://support.google.com/accounts/answer/61416?hl=de)
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies (https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies)
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen (https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen)
- Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac (https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac)
When you use the contact form, we only collect your personal data (name, email address, message text) to the extent that you provide it. The processing of the personal data from the input mask serves us solely to process the contact. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. By sending your message, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent until revocation. Your data will then be deleted unless you have consented to further processing and use.
We use your e-mail address, which we have received as part of the sale of goods via our online shop, for the electronic transmission of advertising for our own goods or services that are similar to those that you have already purchased from us, unless you have objected to this use. The provision of the e-mail address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR from the legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising your objection can be found in the legal notice. You can also use the link provided for this purpose in the advertising email.
We use the web analysis service Google Analytics from Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‘Google’) on our website. The purpose of data processing is to analyse this website and its visitors. For this purpose, Google will use the information obtained on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Google Analytics uses cookies that enable your use of the website to be analysed. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymisation is activated on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Your data may be transmitted to the USA. The European Commission has issued an adequacy decision for data transfers to the USA. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR from the legitimate interest in the needs-based and targeted design of the website. You have the right to object to this processing of your personal data based on Art. 6 (1) f GDPR at any time for reasons arising from your particular situation.
You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de). You can set an opt-out cookie to prevent Google Analytics from collecting data across all devices. Opt-out cookies prevent the future collection of your data when you visit this website. You must opt out on all systems and devices used for this to be fully effective.
You can find more information on terms of use and data protection at (https://www.google.com/analytics/terms/de.html) or at (https://www.google.de/intl/de/policies/).
We use the remarketing or ‘similar target groups’ function of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‘Google’) on our website. This function serves the purpose of analysing visitor behaviour and visitor interests.
Google uses cookies to analyse website usage, which forms the basis for the creation of interest-based advertisements.
Cookies are used to record visits to the website and anonymised data on the use of the website. No personal data of visitors to the website is stored. If you subsequently visit another website in the Google Display Network, you will be shown adverts that are highly likely to take into account previously accessed product and information areas. Your data may also be transferred to the USA. The European Commission has issued an adequacy decision for data transfers to the USA.
Processing is carried out on the basis of Art. 6 (1) lit. f GDPR for the legitimate interest of targeting visitors to the website with advertising by displaying personalised, interest-based advertisements to visitors to the provider's website when they visit other websites in the Google Display Network.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) f GDPR.
You can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: (https://support.google.com/ads/answer/7395996?hl=de)
Alternatively, you can deactivate the use of cookies by third-party providers by accessing the deactivation page of the Network Advertising Initiative at (https://www.networkadvertising.org/choices/) and implementing the further information on opt-out mentioned there.
You can find more information on Google Remarketing and the associated privacy policy at: https://www.google.com/privacy/ads/ (https://www.google.com/privacy/ads/)
We use the online advertising programme ‘Google AdWords’ on our website and, in this context, conversion tracking (visit action analysis).
Google Conversion Tracking is an analysis service of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‘Google’). When you click on an advert placed by Google, a cookie for conversion tracking is stored on your computer.These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification.If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page.Each Google AdWords customer receives a different cookie.It is therefore not possible for cookies to be tracked via the websites of AdWords customers.
The information obtained with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our adverts and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR from the legitimate interest in targeted advertising and analysing the impact and efficiency of this advertising.
You have the right to object to this processing of your personal data based on Art. 6 (1) f GDPR at any time for reasons arising from your particular situation.
To do so, you can prevent the storage of cookies by selecting the appropriate technical settings in your browser software. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You will then not be included in the conversion tracking statistics.
You can also deactivate personalised advertising for you in the Google advertising settings. You can find instructions on how to do this at (https://support.google.com/ads/answer/2662922?hl=de). You can also deactivate the use of cookies by third-party providers by visiting the deactivation page of the Network Advertising Initiative (https://www.networkadvertising.org/choices/) and implementing the further information on opt-out mentioned there.
Further information and Google's privacy policy can be found at (https://www.google.de/policies/privacy/)
On the website, we use technologies from Bing Ads (bingads.microsoft.com), which are provided and operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (‘Microsoft’). Microsoft places a cookie on your end device if you have reached our website via a Microsoft Bing advert. In this way, Microsoft and we can recognise that someone has clicked on an ad, has been redirected to our website and has reached a predetermined target page (‘conversion site’). We only learn the total number of users who clicked on a Bing advert and were then forwarded to the conversion site. Microsoft collects, processes and uses information via the cookie, from which user profiles are created using pseudonyms. These user profiles are used to analyse visitor behaviour and are used to display advertisements. No personal information about the identity of the user is processed.
If you do not want information about your behaviour to be used by Microsoft as explained above, you can refuse the setting of a cookie required for this - for example, by using a browser setting that generally deactivates the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by declaring your objection at the following link http://choice.microsoft.com/de-DE/opt-out. Further information on data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website https://privacy.microsoft.com/de-de/privacystatement.
We use the remarketing function ‘Custom Audiences’ of Facebook Inc (1601 S. California Ave, Palo Alto, CA 94304, USA; ‘Facebook’) on our website.
This function is used to target visitors to the website with interest-based advertising on the Facebook social network.
The Facebook remarketing tag has been implemented on the website for this purpose. This tag is used to establish a direct connection to the Facebook servers when the website is visited. This tells the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the Facebook social network, you will then be shown personalised, interest-based Facebook ads. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR for the legitimate interest in the above-mentioned purpose. You have the right to object to this processing of your personal data based on Art. 6 (1) f GDPR at any time for reasons arising from your particular situation.
You can find more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's privacy policy at (https://www.facebook.com/about/privacy/).
We use social network plug-ins on our website. To ensure that you retain control over your data, we use the privacy-safe ‘Shariff’ buttons. Without your express consent, no links to the servers of the social networks are established and consequently no data is transmitted.
‘Shariff’ is a development by the specialists at the computer magazine c't. It enables more privacy on the Internet and replaces the usual ‘Share’ buttons of social networks. You can find more information about the Shariff project here (https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html).
When you click on the buttons, a pop-up window appears in which you can log in to the respective provider with your data. A direct connection to the social networks is only established after you have actively logged in.
By logging in, you consent to the transfer of your data to the respective social media provider. Among other things, your IP address and information about which of our pages you have visited will be transmitted. If you are connected to one or more of your social network accounts at the same time, the information collected will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons. The social networks named below are integrated using the ‘Shariff’ function.
For more information on the scope and purpose of the collection and use of the data and your rights and options for protecting your privacy in this regard, please refer to the linked data protection notices of the providers.
Google+ of Google Inc (1600 Amphitheatre Parkway, Mountain View, California, 94043 USA) https://www.google.com/intl/de/+/policy/+1button.html (https://www.google.com/intl/de/+/policy/+1button.html)
Facebook of Facebook Inc (1601 S. California Ave, Palo Alto, CA 94304, USA) https://www.facebook.com/policy.php (https://www.facebook.com/policy.php)
Once the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then in accordance with statutory retention periods, in particular under tax and commercial law, and then deleted after this period has expired, unless you have consented to further processing and use.
If the legal requirements are met, you have the following rights in accordance with Art. 15 to 20 GDPR:
- Right of access, right to rectification, right to erasure, right to restriction of processing and right to data portabilityRight to information
You can request confirmation from the controller as to whether personal data concerning you is being processed by us.If such processing is taking place, you can request the following information from the controller
- The purposes for which the personal data is processed;
- the categories of personal data being processed
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed
- the envisaged period for which the personal data concerning you will be stored, or, if specific information on this is not possible, the criteria used to determine that period
- the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- all available information about the origin of the data if the personal data is not collected from the data subject
- the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right vis-à-vis the controller to be informed about these recipients.
Right to restriction of processing
Under the following conditions, you may request that the processing of your personal data be restricted
- if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, or
- if you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.
If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
Right to erasure
1) Obligation to erase
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
- The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
- You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
- The personal data concerning you has been processed unlawfully.
- The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
- The personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
2) Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) GDPR, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
3) Exceptions
The right to erasure does not apply if the processing is necessary
- to exercise the right to freedom of expression and information
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
- for the establishment, exercise or defence of legal claims.
Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right vis-à-vis the controller to be informed about these recipients.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where
- the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
- the processing is carried out by automated means.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right to object by automated means using technical specifications.
Right to revoke the declaration of consent under data protection law
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
- is necessary for the conclusion or fulfilment of a contract between you and the controller
- is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
- with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
Right to lodge a complaint with the supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR
last update: 09.05.2018
