Version: 26 April 2024
With the following Privacy Policy, we would like to inform you about the types of your personal data (hereinafter also referred to briefly as "data") that we process, for what purposes and to what extent. The Privacy Policy applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as the "online offering").
The terms used are not gender-specific.
With the following Privacy Policy, we would like to inform you about the types of your personal data that we process, for what purposes and to what extent. The Policy applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences such as our social media profiles.
itelly GmbH
Hauptstr. 27
79256 Buchenbach
Email: info@itelly.de
Legal Notice: https://www.itelly.de/impressum
The following overview summarises the types of data processed and the purposes of their processing and refers to the data subjects.
We set out below the legal bases of the GDPR on the basis of which we process personal data. In addition, national data protection regulations (in particular the BDSG) and any applicable state-level provisions apply.
National data protection regulations in Germany (including the BDSG, § 26 BDSG) and state-level provisions may apply in addition.
We implement technical and organisational measures to ensure a level of protection appropriate to the risk (including access controls, data separation, processes for deletion and data subject rights).
SSL encryption (https): We protect transmitted data by means of SSL encryption. This is recognisable by the https:// prefix in the address bar of your browser.
Data may be transmitted to other entities, companies or service providers (e.g. payment institutions, IT service providers, providers of embedded content). Data protection contracts and agreements are concluded where required by law.
Processing of data in third countries only takes place where legal requirements are met, such as an adequate level of data protection, EU standard contractual clauses or explicit consent.
Information from the EU Commission: international-dimension-data-protection
Processing of data from contractual and business partners for the purpose of contract performance, communication, administration and the assertion of rights. Transfer to third parties only takes place where necessary or based on consent.
Customer accounts may be created. Upon termination, data is deleted, subject to statutory retention obligations.
Provision of software/platform services: data processing for service delivery and security.
Data processed: master, payment, contact, contract, usage and meta/communication data.
Legal bases: Art. 6(1)(b), (c), (f) GDPR.
Services may be offered via third-party platforms; their privacy notices apply.
Data processed: master, payment, contact, contract, usage and meta/communication data. Legal bases: Art. 6(1)(b), (f) GDPR.
Service used: Digistore24 (Privacy Policy: digistore24.com/privacy).
Use of hosting providers for infrastructure, platform, storage, databases and security.
Server log files (including IP address, timestamp, URL, browser, referrer) are collected for security and stability purposes.
Data processed: content, usage and meta/communication data. Legal basis: Art. 6(1)(f) GDPR.
Service: Amazon Web Services (Privacy Policy: aws.amazon.com/privacy).
Processing of reader data only to the extent necessary for presentation, communication or security.
Data processed: master, contact, content, usage and meta/communication data. Legal bases: Art. 6(1)(b), (f) GDPR.
Processing of information from enquiries (e.g. via form, email, telephone, social media) for the purpose of processing and communication.
Data processed: master, contact and content data. Legal bases: Art. 6(1)(b), (f) GDPR.
Use of cloud services (SaaS) for documents, email, collaboration, publications and audio/video conferences.
Providers may store cookies for analysis or settings purposes.
Data processed: master, contact, content, usage and meta/communication data. Legal bases: Art. 6(1)(a), (b), (f) GDPR.
Reach measurement, A/B testing and optimisation based on pseudonymous profiles and, where applicable, cookies. IP masking is used.
Data processed: usage and meta/communication data. Legal bases: Art. 6(1)(a), (f) GDPR.
Services: Adobe Analytics, Google Optimize (Opt-out: GA Opt-Out, Ads Settings).
Creation of user profiles for interest-based content/advertising, including remarketing and conversion measurement. Storage in cookies or comparable procedures; IP masking is used.
Data processed: usage, meta/communication, location and, where applicable, social data. Data subjects: users, interested parties, customers, employees, communication partners. Legal bases: Art. 6(1)(a), (f) GDPR.
Opt-out: provider-specific or via browser settings; aggregated options: Europe youronlinechoices.eu, Canada youradchoices.ca, USA aboutads.info, global optout.aboutads.info.
Services used: Google Tag Manager, Google Analytics, Google Ads/Ad Manager, Facebook Pixel.
Audience building with Google Analytics and Facebook Pixel for interest-based display of advertising and conversion measurement.
Participation in review processes; transmission of required data with consent for verification. Review widgets may process technical data and cookies.
Data processed: contract, usage and meta/communication data. Data subjects: customers, users. Legal bases: Art. 6(1)(a), (f) GDPR.
Integration of third-party content (e.g. graphics, videos, social buttons) requires processing of the IP address. Third-party providers may use pixel tags and cookies for statistical or marketing purposes.
Data processed: usage, meta/communication, master, contact and content data. Data subjects: users. Legal bases: Art. 6(1)(f), (a), (b) GDPR.
Services: Font Awesome, Google Fonts, YouTube.
Data is deleted once consent is withdrawn or purposes cease to exist, provided no other statutory retention obligations preclude this. In such cases, data is blocked and only processed for the permissible purposes.
Please inform yourself regularly about the content. We update this Policy when changes in data processing make this necessary and will provide notification where actions on your part are required.
Overview of terms used (selection): visit action evaluation/conversion tracking, cross-device tracking, IP masking, interest- and behaviour-based marketing, conversion measurement, personal data, profiling, reach measurement, remarketing, tracking, controller, processing, audience building.
Created with the free privacy policy generator at datenschutz-generator.de by Dr Thomas Schwenke