Privacy Policy

The marvel services GmbH, Im Vogelsang 21, 71101 Schönaich, takes the protection of your personal data seriously and complies with applicable data protection laws. Personal data is collected on this website only to the extent technically necessary. Under no circumstances will the data collected be sold or passed on to third parties for any other reason. The following statement gives you an overview of how we ensure this protection and what type of data is collected for what purpose.

§ 1   Name and Contact Details of the Data Controller

The data controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is marvel services GmbH:

Address
Im Vogelsang 21
71101 Schönaich
Phone
+49 7031 41069 0
Email
info@marvel-services.de

§ 2   Information on the Collection of Personal Data

(1) The following section explains how we collect personal data when you use our website. Personal data means any information relating to an identified or identifiable natural person, e. g. name, address, email addresses, or user behaviour.

(2) When you contact us by email or via a contact form, the data you provide (your email address and, where applicable, your name and telephone number) will be stored by us in order to answer your enquiry. We will delete the data arising in this context once storage is no longer necessary, or restrict processing where statutory retention obligations apply.

(3) Where we use contracted service providers for individual functions of our offer, or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes, including the specified criteria for the storage period.

§ 3   Your Rights

You have the following rights with regard to the personal data concerning you:

  • Pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us, including the purposes of processing, the categories of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
  • Pursuant to Art. 16 GDPR, the right to immediately request the rectification of inaccurate personal data stored by us, or the completion of incomplete data;
  • Pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless processing is necessary to exercise the right of freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to establish, exercise, or defend legal claims;
  • Pursuant to Art. 18 GDPR, the right to request the restriction of processing of your personal data where the accuracy of the data is disputed by you, the processing is unlawful but you object to erasure, we no longer need the data but you require it to establish, exercise, or defend legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
  • Pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request transmission to another controller;
  • Pursuant to Art. 7(3) GDPR, the right to withdraw your consent at any time. This means that we may no longer continue the data processing based on that consent going forward;
  • Pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work, or our registered office.

§ 4   Collection of Personal Data When Visiting Our Website

(1) When you use our website for information purposes only — i.e. without registering or otherwise transmitting information to us — we collect only the personal data that your browser transmits to our server. When you view our website, we collect the following data that is technically necessary for us to display our website and to ensure stability and security (the legal basis is Art. 6(1)(f) GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Volume of data transferred
  • Website from which the request originates
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

(2) The data listed above is processed by us for the following purposes:

  • Ensuring a smooth connection to the website,
  • Ensuring comfortable use of our website,
  • Evaluating system security and stability, and
  • For further administrative purposes.

Under no circumstances do we use the collected data to draw conclusions about your identity.

(3) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the party that sets the cookie (in this case, us). Cookies cannot execute programmes or transmit viruses to your computer. They serve to make the internet offering as a whole more user-friendly and effective.

Use of cookies:

a) This website uses the following types of cookies or comparable software, the scope and functionality of which are explained below:

  • Transient cookies (see b)
  • Persistent cookies (see c)
  • HTML5 storage objects (see g)

b) Transient cookies are automatically deleted when you close your browser. These include in particular session cookies, which store a session ID that allows various requests from your browser to be assigned to a shared session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.

d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all features of this website.

e) We use cookies to recognise you on return visits if you have an account with us — otherwise you would need to log in again on every visit.

(4) In addition, when you visit our website we use analytics services. Further details are provided below.

§ 5   Use of Our Contact Form

(1) For any enquiries you may have, we offer you the option of contacting us via a form provided on the website. A valid email address is required so that we know who the enquiry is from and can reply. Additional information may be provided voluntarily.

(2) The processing of data for the purpose of contacting us takes place pursuant to Art. 6(1)(a) GDPR on the basis of your voluntarily given consent.

(3) The personal data collected by us for use of the contact form will be automatically deleted once your enquiry has been dealt with.

§ 6   Further Features and Services on Our Website

(1) In addition to the purely informational use of our website, we offer various services (e. g. newsletter) that you may use if you are interested. To do so, you will generally need to provide further personal data which we will use to provide the respective service, and to which the data processing principles set out above apply.

(2) In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.

(3) We may also pass on your personal data to third parties where contracts or similar services are offered jointly by us and partners. You will receive more details when providing your personal data, or in the description of the offer below.

(4) Where our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this in the description of the offer.

§ 7   Use of Blog Features

On our blog, where we publish various posts on topics related to our activities, you can submit public comments. Your comment will be published alongside your chosen username. We recommend using a pseudonym rather than your real name. Providing a username and email address is required; all other information is voluntary. When you submit a comment, we also store your IP address, which we delete after [one week]. Storage is necessary for us to defend against liability claims in the event of potentially unlawful content being published. Your email address is required in order to contact you should a third party object to your comment as unlawful. The legal bases are Art. 6(1)(b) and (f) GDPR. Comments are not reviewed before publication. We reserve the right to delete comments if they are objected to by third parties as unlawful.

§ 8   Use of Our Web Shop

(1) If you wish to place an order in our web shop, it is necessary for the conclusion of the contract that you provide personal data required for the processing of your order. Mandatory information necessary for the processing of contracts is marked separately; further information is voluntary. We process the data you provide to fulfil your order and may pass on your payment data to our bank. The legal basis is Art. 6(1)(b) GDPR. You may optionally create a customer account, allowing us to store your data for future purchases. Data provided when creating an account under "My Account" is stored on a revocable basis. You can delete all further data, including your user account, in the customer area at any time. We may also use the data you provide to inform you about further interesting products from our portfolio, or to send you emails containing technical information.

(2) Due to commercial and tax law requirements, we are obliged to store your address, payment, and order data for a period of ten years. However, after [two years] we restrict processing, meaning your data will only be used to comply with legal obligations.

(3) To prevent unauthorised third-party access to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.

§ 9   Transfer of Data

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties where:

  • you have given your express consent pursuant to Art. 6(1)(a) GDPR,
  • the transfer is necessary pursuant to Art. 6(1)(f) GDPR to establish, exercise, or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed,
  • there is a legal obligation for the transfer pursuant to Art. 6(1)(c) GDPR, or
  • this is legally permissible and necessary pursuant to Art. 6(1)(b) GDPR for the processing of contractual relationships with you.

§ 10   Newsletter

(1) With your consent, you can subscribe to our newsletter, through which we inform you about our current offers of interest. The advertised goods and services are named in the consent declaration.

(2) For newsletter registration we use the double opt-in procedure. This means that after your registration we will send an email to the address provided asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. We also store the IP addresses used and the times of registration and confirmation. The purpose of the procedure is to be able to verify your registration and, if necessary, clarify any possible misuse of your personal data.

(3) The only mandatory detail for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6(1)(a) GDPR.

(4) You can revoke your consent to receive the newsletter at any time and unsubscribe. You can declare revocation by clicking the link provided in every newsletter email, by email to service@spieletastisch.de, or by sending a message to the contact details given in the imprint.

(5) We do not evaluate your user behaviour when sending the newsletter, and do not create a user profile from this data. We also do not use web beacons or tracking pixels.

§ 11   Objection or Revocation Against the Processing of Your Data

(1) If you have given consent to the processing of your data, you may withdraw it at any time. Such a withdrawal affects the permissibility of processing your personal data after you have communicated it to us.

(2) Where we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case where processing is not necessary in particular for the performance of a contract with you, which we describe in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either cease or adjust the data processing, or demonstrate our compelling legitimate grounds for continuing the processing.

(3) You may of course object to the processing of your personal data for advertising purposes at any time.

(4) You can notify us of your objection using the following contact details: spieletastisch.de, Im Vogelsang 21, 71101 Schönaich, Phone: +49 7031 41069-50, Email: service@spieletastisch.de

§ 12   Use of Analytics — Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses cookies — text files stored on your computer that enable analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. If IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide further services relating to website and internet use to the website operator.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

(3) You can prevent the storage of cookies by adjusting your browser software settings; however, please note that in this case you may not be able to use all features of this website to their full extent. You can also prevent the collection of data generated by the cookie relating to your use of the website (including your IP address) by Google, and the processing of this data by Google, by downloading and installing the browser plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the "_anonymizeIp()" extension. This means IP addresses are processed in truncated form, which rules out any personal reference. Where the data collected about you has a personal reference, this is therefore immediately excluded and the personal data promptly deleted.

(5) We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1)(f) GDPR.

(6) Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and privacy policy: http://www.google.de/intl/de/policies/privacy.

(7) This website also uses Google Analytics for cross-device analysis of visitor flows, carried out via a User ID. You can disable cross-device analysis of your usage in your customer account under "My Data" / "Personal Data".

§ 13   Online Advertising — Google AdSense

(1) This website uses the online advertising service Google AdSense, through which interest-based advertising can be presented to you. Our aim is to show you advertising that may be of interest to you, in order to make our website more relevant to you. Statistical information about you is collected for this purpose and processed by our advertising partners. These ads are identifiable by the label "Google Ads" in the respective advertisement.

(2) When you visit our website, Google receives the information that you have accessed it. Google uses a web beacon to set a cookie on your computer. The data referred to in § 3 of this statement is transmitted. We have no influence over the data collected, nor are we aware of the full extent of the data collection and the storage period. Your data is transferred to the USA and evaluated there. If you are logged in to your Google account, your data can be directly associated with it. If you do not wish your data to be associated with your Google profile, you must log out. It is possible that this data may be passed on to Google's contractual partners, third parties and authorities. The legal basis for processing your data is Art. 6(1)(f) GDPR. This website has also enabled Google AdSense advertisements from third-party providers. The aforementioned data may be transferred to these third-party providers (listed at https://support.google.com/dfp_sb/answer/94149).

(3) You can prevent the installation of Google AdSense cookies in various ways:

  • by adjusting your browser software settings accordingly — blocking third-party cookies will in particular result in you not receiving third-party advertisements;
  • by disabling interest-based ads on Google via http://www.google.de/ads/preferences — note that this setting will be deleted if you clear your cookies;
  • by disabling interest-based ads from providers who are part of the "About Ads" self-regulation campaign via http://www.aboutads.info/choices — note that this setting will also be deleted if you clear your cookies;
  • by permanently disabling in your Firefox, Internet Explorer or Google Chrome browser via http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all features of this website to their full extent.

(4) Further information on the purpose and scope of data collection and processing, as well as further information on your rights and settings options to protect your privacy, is available from: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; advertising privacy policy: http://www.google.de/intl/de/policies/technologies/ads. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 14   Use of Google AdWords Conversion Tracking

We use the online advertising programme "Google AdWords" and, within Google AdWords, conversion tracking. Google Conversion Tracking is an analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies expire after 30 days, do not contain personal data, and therefore cannot be used for personal identification. If you visit certain pages of our website while the cookie has not yet expired, both Google and we can recognise that you clicked on the ad and were redirected to that page. Each Google AdWords customer receives a different cookie, making it impossible to track cookies across AdWords customers' websites. The information obtained using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag, but receive no information that could be used to personally identify users. If you do not wish to participate in tracking, you can object by preventing the installation of cookies via the appropriate setting in your browser software. You will then not be included in the conversion tracking statistics. Further information and Google's privacy policy can be found at: http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/

§ 15   Data Security

(1) We use the widely used SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser during your website visit — typically 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed padlock symbol in the status bar of your browser.

(2) We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

§ 16   Use of YouTube

Our website uses plugins from the YouTube site operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube's servers is established. YouTube is thereby informed which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of an attractive presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

marvel services GmbH