Data policy

 

Thank you for your interest in the Parador website. The protection of your privacy is very important to us. Below we provide comprehensive information concerning the handling of your personal data. We generally act in compliance with the General Data Protection Regulation (GDPR), the German Data Protection Act (BDSG) updated version, and other legal regulations.

 

Table of contents

1. Names and contact data

2. Data protection officer contact information

3. Purposes, legal basis of data processing and legitimate interests

4. Data recipients

5. Transmission to third countries

6. Duration of data retention

7. Right to information, rectification, erasure, restriction of processing

8. Right to objection, data transferability, and withdrawal of consent

9. Right to complain to the supervisory authority

10. Necessity of providing data

11. Processing of personal data

12. Use and forwarding of personal data, purpose

13. Links, cookies, tracking, social media plugins

14. Security

15. Questions, comments, and information

 

1. Name and contact details
Parador GmbH is the controller can be reached under the following contact details:

Millenkamp 7 – 8
48653 Coesfeld

Managing directors: David Mc Neely Bradham, Pier Vincenzo Marozzi and Lutz Michaelsen

2. Contact details of the data protection officer
Email: Datenschutz@Parador.de

 

3. Purposes, legal basis of data processing and legitimate interests

3.1 Accessing our website

3.1.1 Log files
You can visit our website without disclosing personal data. We retain only your access data in so-called server log files, e.g. the name of the file requested by you, date and time of the retrieval, transmitted data volume, and the inquiring provider. These data are evaluated solely to ensure trouble-free operation of the site and to improve our service and do not allow us to draw any conclusions about your person.
You can revoke your consent to the storage of your customer data (e.g. on the contact page) at any time with effect for the future by email: Datenschutz@Parador.de.

3.1.2 Cookies, tracking, social media plugins
see Section 13 Links, cookies, tracking, social media plugins

3.2 Data processing for advertising purposes

 

3.2.1 Newsletter
On our website we offer you the option of subscribing to our newsletter. In order to be sure that no mistakes were made when entering the email address, we use the so-called double-opt-in procedure (DOI procedure). After you have entered your email address in the registration field for the newsletter, we will send you a confirmation link to the email address provided. When you click on this confirmation link, your email address will be added to our mailing list for sending out our newsletter. The legal basis for this data processing is Art. 6 Para. 1 (a) GDPR.

 

3.2.2 Product recommendations by email

As a regular customer of our webshop, you will regularly receive product recommendations from us by email. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. We use the names and email addresses you provide as part of your order to promote our own products, which are similar to those you have already purchased from us based on an order you have already placed.

 

The legal basis for this data processing is §7 UWG (3) (German Act against Unfair Competition).

 

Reference to right of objection

You may object to data processing for the above-mentioned purposes at any time, separately for the respective communication channel and with effect for the future. For this purpose, please send an email to
Datenschutz@Parador.de 

If you object, the data will be blocked for further commercial data processing. We would like to point out that, in exceptional cases, promotional material may be sent for a short time even after receipt of your objection. This is technically due to the necessary lead time within the selection process and does not mean that we have not implemented your objection.

 

3.3 Data processing for contact inquiries, creation of a customer account, order processing, reservation from a dealer as well as customer service
We collect personal data when you send us these voluntarily in the context of your sample and catalogue order, when contacting us (e.g. via contact form or email), when opening a customer account, when processing orders and tracking deliveries, or in the context of after-sales service (e.g. handling complaints).
In addition, personal data is collected when requesting a consultation appointment as part of the dealer search and when requesting goods to be reserved at a local partner. For the further handling of these processes, your inquiry including your personal data will be forwarded to the retail partner you have chosen.
Which data is collected can be seen from the respective input forms. Entering your personal data is necessary for ordering samples and catalogues as well as for ordering products through a customer account, for so-called "guest orders", when requesting a consultation appointment or reserving goods at a local retail partner. We use the data disclosed by you to process orders for samples/catalogues or products and to process your inquiries. 

The legal basis for this data processing is Art. 6 para. 1 letter a), b) DSGVO.

Reference to the right of objection
You can object to data processing for the above-mentioned purposes at any time with effect for the future. To do so, please send an email to Datenschutz@Parador.de.

 

3.4 Data processing as part of your application
We collect personal data when you voluntarily provide us with this information as part of your application by contacting us (by post, email or career portal). Which data is collected can be seen from the input form on the career portal. The input of personal data is necessary to process the application. We use the data disclosed by you exclusively for the purpose of processing your application (see DS notes in the Career Portal).

The legal basis for this data processing is Art 88 GDPR in conjunction with §26 Para.1 BDSG (Federal Data Protection Act).

 

3.5 Data processing when purchasing products through our eBay Internet sales platform

We collect personal data when you purchase our products offered on the eBay Internet sales platform (hereinafter referred to as "eBay"), for the purpose of processing the purchase contract and delivery tracking or in the context of after-sales service (e.g. handling complaints) as well as to assert any claims against you in connection with the respective purchase contract. We process data that you have submitted when setting up your eBay account or in the course of the conclusion and processing of the purchase transaction.

The legal basis for this data processing is Art. 6 Para. 1 Clause 1 (b), (f) GDPR.

 

3.6 Data processing when purchasing products via our internet sales platform Amazon

We collect personal data when you purchase our products offered on the Internet sales platform Amazon (hereinafter referred to as "Amazon") for the purpose of processing the purchase contract and delivery tracking or in the context of follow-up (e.g. complaint processing) as well as for asserting any claims against you in connection with the respective purchase contract. In this context, we process data that you have transmitted to us in the context of the conclusion and processing of the purchase transaction.

The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b), f) DSGVO.

 

4. Data recipients

 

4.1 Parador website

  • Internal departments
  • Partner companies within the scope of subcontracting

Your data is forwarded to third parties only if this is necessary to perform and process the respective service. To process your sample, catalogue or product orders, we forward your data to the shipping company tasked with delivery only insofar as this is necessary for delivery. To process the arrangement of a consultation appointment or to reserve goods at one of our local retail partners, we forward your personal data to the partner selected by you.

After forwarding your data to the retail partner selected by you for a consultation appointment, to reserve goods at one of our local retail partners, or for forwarding to the retailer online shop, the further use of your data is stipulated by the privacy policy of the respective retail partner. 

For the handling of payments we forward the necessary personal data to the respective partner.

For this purpose we cooperate with PAYONE GmbH, Lyoner Strasse 9, 60528 Frankfurt am Main, Germany (hereinafter "PayOne") and Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna").

In cooperation with Klarna, we offer the following payment options. Payment is made to Klarna in each case:

Invoice: the payment period is 14 days from the date of despatch of the goods/tickets/ or, in case of other services, from the date the service is made available. The full terms and conditions for the countries where this payment method is available can be found here: Germany.

The use of the invoice payment method requires a positive credit check. In this respect, we will forward your data to Klarna for the purpose of address and creditworthiness checks as part of the pre-purchase process and handling of the purchase contract. Please understand that we can only offer you those payment methods that are permitted based on the results of the credit check.

More information and Klarna's terms of use can be found here. General information about Klarna is available here. Your personal data will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection provisions.

If you choose the payment methods of credit card (Master or Visa card) and immediate bank transfer, Parador assigns the payment claim to PayOne. If the customer chooses one of these payment methods, it agrees to the transfer of their personal data and the data of the order to PayOne as part of their order, for the purpose of identity and credit checks as well as for the execution of the contract. The data required for the means of payment chosen by the customer will be requested by Parador during the ordering process as mandatory data. Parador uses the SSL transmission method to encrypt the customer's personal data. Parador reserves the right to offer only certain types of payment depending on the customer's creditworthiness.

Once you have selected the payment method you wish to use, the further use of your data will be governed by the data protection provisions of the respective partner (Klarna, PayOne, etc.). 

 

4.2 Internet sales platform eBay and Amazon

  • Internal departments
  • eBay
  • Amazon
  • Partner companies within the scope of subcontracting (shipping company, partner for payment processing)

Your data will be passed on to third parties to the service partners involved in the execution of the contract, insofar as this is necessary for the fulfilment and execution of the respective sales contract. We pass on your data to the shipping company commissioned with the delivery, as far as this is necessary for the delivery.

For payment processing, we forward the required personal data to our partner PayOne. The further use of your data will then be governed by PayOne's data protection provisions.

 

5. Transfer to third countries

USA (use of Google Analytics, Google Maps, Mailchimp, Vimeo, Issuu, New Relic, Google Tag Manager on our website).

 

6. Duration of data retention
The data controller processes and retains personal data of the data subject only for as long as necessary to achieve the purpose of retention. Furthermore, data may be retained if this has been provided for by the European or national legislator in EU ordinances, laws or other regulations to which the data controller is subject.As soon as the purpose of retention ceases to apply or a retention period prescribed by the aforementioned regulations expires, the personal data is routinely blocked, anonymised or erased.

Duration of retention:

  • Within the scope of business relations for the duration of this relationship
  • Customer account for registered customers (B to C) until revoked
  • If you wish to shop with us as a guest (B to C) instead of using a personal customer account, your data will be retained for a maximum of three months after receipt of your order and then made anonymous.
  • Information relevant to accounting within the scope of the German Fiscal Code 10 years
  • Application documents: for the duration of the selection procedure, max. 6 months after rejection. 12 months in case of an unsolicited application and inclusion in the applicant pool.

 

7. Right to information, rectification, erasure, restriction of processing
The customers, prospective customers, and employees of Parador GmbH have the right to information, rectification, erasure, or restriction of processing with regard to the personal data retained by us. The data is erased if no retention obligations exist. Processing can be restricted as long as retention obligations exist.

8. Right to object, data transferability and withdrawal of consent

Customers, interested parties and employees have the right to object to processing and the right to data transferability. Insofar as the processing is based on consent, e.g. in case of consent to establish contact by email to Datenschutz@Parador.de, this consent can be withdrawn at any time with future effect.

9. Right to complain to the supervisory authority

Data subjects have the right to complain to the supervisory authority responsible for them. The contact information for the supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
PO box 20 04 44
40102 Düsseldorf
Tel.: +49 (0)211/38424-0
poststelle@ldi.nrw.de

10. Necessity of providing data

The provision of personal data is necessary to carry out the business relationship. If this data is not provided, the business relationship with Parador GmbH may be impossible in full or in part. We do not automate the decision-making process in this context and we do not perform profiling.

11. Processing of personal data
We collect, process or use your personal data within our internet offer only if you send us an inquiry by email as well as the data necessary to process your request. You yourself can decide whether and which data you transmit to us.

 

12. Use and disclosure of personal data, purpose

When you send us an email, personal data is generated. Therefore, we take the necessary precautions to protect this data accordingly and we then process this data exclusively for the purpose of processing the contract and to safeguard our own legitimate business interests (pursuant to Art. 6 Para. 1 (f) GDPR). All systems where your data are retained are password-protected and accessible only to specific persons. Our employees are obliged to comply with the data protection requirements of the General Data Protection Regulation (GDPR). We do not forward our customers' personal data to unauthorised third parties. 

 

13. Links, cookies, tracking, social media plugins


13.1 Links to other Internet offerings
If we use links to refer to other internet pages within the scope of our internet offer, the operators of the external offers or pages are responsible for data protection regulations.

 

13.2 Use of cookies
We use so-called cookies on various pages to make your visit of our website more attractive and to enable the use of specific functions Cookies are small text files that are stored on your terminal device. Some of the cookies used by us are deleted after the end of your browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain stored on your terminal device and allow us to recognise you at your next visit (persistent cookies). This creates the technological opportunity to create so-called "user profiles". We expressly inform you that by confirming the privacy policy you are consenting to the use of cookies. You can adjust your browser settings so that you are informed of the placement of cookies and can decide to accept them in each individual case or exclude the acceptance of cookies in specific cases or in general. The functionality of our website might be limited if cookies are not accepted.

In the tracking settings (accessible by clicking on "cookies" at the bottom of the footer) you can customise your consent preferences for any tracking technology that helps us achieve the functions and activities described below:

Simple interactions and functionalities (ID 2): Google Tag Manager, GetSitecontrol, chat window

Improved user experience (ID 3): room designer, 3D view, embedded YouTube videos

Evaluation (ID 4): Google Analytics, Google Optimize, Mouseflow

 

13.3 Analytics services

Use of Google Analytics for web analysis

This website uses Google Analytics, a web analysis service of Google Inc. (www.google.de). Google Analytics uses so-called “cookies” - text files that are stored on your computer - that allow an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to and stored at a Google server in the USA. If IP anonymisation is activated on this website, then your IP address within member states of the European Union or other contracting parties to the Agreement on the European Economic Area is first abbreviated by Google. The full IP address is transmitted to a Google server in the USA and abbreviated there only in exceptional cases. IP anonymisation is activated on this website. Google uses this information on behalf of the operator of this website to evaluate your use of the website, to create reports concerning website activities, and to provide other services in connection with website use and Internet use vis-à-vis the website operator. The IP address transmitted from your browser within the scope of Google Analytics is not combined with other data held by Google. You can prevent the placement of cookies through a corresponding setting of your browser software; however, this may result in your inability to fully use all functions of our website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http: //tools.google.com/dlpage/gaoptout?hl=de  

Alternatively to the browser plugin, you can click here to prevent data collection through Google Analytics on this website in the future. This places an opt-out cookie on your terminal device. If you delete your cookies, you must once again click on the link.

 

Use of Mouseflow

This website uses Mouseflow, a web analysis tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected individual visits (only with anonymous IP address). This creates a log of mouse movements and clicks with the intention of randomly replaying individual website visits and deriving potential improvements for the website. The information is not personal and will not be shared. If you do not want visits to be recorded, you can deactivate this on all websites that use Mouseflow by clicking on the following link: www.mouseflow.de/opt-out/

 

Use of Google Maps
We use the "Google Maps" component on our website. "Google Maps" is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter "Google".Each time this component is called up, Google sets a cookie in order to process user settings and data when displaying the page on which the "Google Maps" component is integrated. As a rule, this cookie is not deleted by closing the browser, but expires after a certain period of time, unless you manually delete it beforehand.If you do not agree to this processing of your data, you have the option of deactivating the "Google Maps" service and thus preventing the transfer of data to Google. To do this, you must deactivate the Java Script function in your browser. However, we would like to point out that in this case you will not be able to use "Google Maps" or only to a limited extent.The use of "Google Maps" and the information obtained via "Google Maps" takes place in accordance with the Google terms of use

www.google.com/intl/en/policies/terms/regional.html

and the additional terms and conditions for "Google Maps

www.google.com/intl/en/help/terms_maps.html

If you are logged in with your personal account when you call up the "Google Maps" page, Google may record the information thus obtained as well as your IP address and other browser-related information and link it to your account. If you wish to prevent this transmission and storage of data about you and your behaviour on our website by Google, you must log out of these providers before visiting our site.

 

Use of New Relic

We use the software NewRelic on our website. This enables us to analyse how you use our website. The information stored by the cookie about the use of this website (including your IP address) is transmitted to a NewRelic server in the USA.

We process the data on the basis of our legitimate interest in the optimal marketing of our online offer in accordance with Art.6 para. 1 lit.f DSGVO.

NewRelic will use the stored information to evaluate your use of the website, compile reports on website activity for website operators and provide other services relating to website activity and internet usage.

 

Use of Google Tag Manager

This website uses the Google Tag Manager. Through this service, website tags can be managed via an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.

 

Use of Microsoft Clarity

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.”

 

Use of MailChimp

The newsletter is sent to our end customers using "MailChimp", the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308,USA.
The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on MailChimp servers in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, MailChimp may use this data to optimise or improve its own services, e.g. for the technical optimisation of the dispatch and the presentation of the newsletters or for economic purposes in order to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.MailChimp undertakes to comply with EU data protection regulations. Furthermore, we have concluded a "Data Processing Agreement" and the EU's standard contractual clauses with MailChimp. These are contracts with which MailChimp undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties.

 

Use of Matomo

We use Matomo for web analysis by means of cookie technology. To protect your data, we have configured Matomo in such a way that your IP address is only recorded in abbreviated form. We therefore process your personal usage data anonymously. It is not possible for us to draw any conclusions about your person. Further information on the Matomo terms of use and the data protection regulations can be found at: https://matomo.org/privacy/.

 

Use of ipstack

We use a geolocation application on our website based on your IP address transmitted when you access the site. For this purpose, we use the ipstack.com web service, which is provided by apilayer Data Products GmbH, Elisabethstrasse 15/5, A-1090 Vienna/Austria. We use geolocation exclusively to show you, when you call up a page, either the relevant version of our website based on the requesting IP address or a preview page via which you can select the version of the website that is relevant to you.

 

13.4 Use of social plugins (Facebook, Twitter, Pinterest, Instagram) 

Our website uses so-called social plugins ("Plugins") of the social networks Facebook and Google+ and of the microblogging service Twitter as well as Pinterest and Instagram. These services are offered by the companies Facebook Inc., Google Inc., and Twitter Inc., and Pinterest and Instagram ("Providers"). Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). An overview of Facebook Plugins and their appearance is available here: https://developers.facebook.com/docs/plugins

 

Twitter is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103. An overview of the Twitter buttons and their appearance can be found here: https: www.twitter.com

 

Pinterest is operated by Pinterest, 808 Brannan St., San Francisco, CA 94103-4904, USA. Further information is available on the Internet at www.pinterest.com

 

Instagram is offered by Facebook. Further information is available on the Internet at www.instagram.com

 

If you retrieve a page from our website that contains such a Plugin, your browser establishes a direct connection to the servers of Google, Facebook, Twitter, Pinterest, or Instagram. The content of the Plugin is transmitted by the respective Provider directly to your browser and is integrated into the page. By integrating the Plugins, the Providers receive the information that your browser has retrieved the respective page of our internet presence, even if you do not have a profile with the respective social network or are currently not logged in. This information (including your IP address) is transmitted from your browser directly to a server of the respective Provider (e.g. to the USA) and stored there. If you are logged into one of the social networks, the Providers can directly allocate your visit of our website to your profile, e.g. on Facebook or Google+ or Twitter. If you interact with the Plugins, e.g. by clicking on the "Like" button or the "+1" button, then the respective information is also directly transmitted to a server of the Providers and stored there. The information is furthermore published in the social network and is shown to your contacts there. Purpose and scope of data collection and further processing or use of the data by the Providers as well as your rights and setting options in this regard to protect your privacy are available in the privacy notice of the Providers.

Facebook privacy policy: http://www.facebook.com/policy.php     

Twitter privacy policy: https://twitter.com/privacy

Pinterest privacy policy: http://about.pinterest.com/de/privacy-policy-0

Instagram privacy policy: http://instagram.com/about/legal/privacy/

If you do not wish that Facebook, Twitter, Pinterest, or Instagram directly allocate the data collected through our website to your profile with the respective social network, then you must log out of the respective network prior to visiting our website. You can use browser add-ons to completely prevent the loading of Plugins, e.g. with the script blocker "NoScript"

 

14. Security
We take technical and organisational measures to guarantee the security of your personal data. Your data is protected against loss, destruction, tampering, manipulation, and unauthorised access. If you wish to send us confidential data and prefer a secure communication channel, please send us an S/MIME encrypted email. We will send you our public key [S/MIME Public Key] by email. Our websites are also available with TLS encryption [https].


15. Questions, comments and information
In case of questions concerning the collection, processing, or use of your personal data, in case of information, correction, blocking, or erasure of data as well as withdrawal of possibly granted consent or objection against a specific use of data, please contact our data protection officer by
email: Datenschutz@Parador.de

 

Status 03/2022