Data Protection

Personal data (hereinafter referred to simply as "data") is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Article 4, point 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or jointly with others. Furthermore, we inform you below about the third-party components we use for optimization purposes and to improve the user experience, insofar as these components involve third parties processing data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as the data controller
II. Rights of users and data subjects
III. Information on data processing

I. Information about us as the data controller
The data controller for this website, as defined by data protection law, is:

Zandoli Villa,
Pigeon Point Road,
Pigeon Point,
English Harbour,
Antigua WI

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right

to obtain confirmation as to whether or not personal data concerning them is being processed, to access the personal data being processed, to receive further information about the data processing, and to obtain copies of the data (see also Article 15 GDPR);

to rectification or completion of inaccurate or incomplete data (see also Article 16 GDPR);
to the immediate erasure of their personal data (see also Article 17 GDPR), or, alternatively, if further processing is necessary pursuant to Article 17(3) GDPR, to restriction of processing in accordance with Article 18 GDPR;
to receive the personal data concerning them that they have provided and to transmit this data to other providers/controllers (see also Article 20 GDPR);
to lodge a complaint with the supervisory authority if they believe that the processing of their personal data by the provider infringes data protection regulations (see also Article 77 GDPR).

Furthermore, the provider is obligated to inform all recipients to whom personal data have been disclosed by the provider of any rectification or erasure of personal data or restriction of processing carried out pursuant to Articles 16, 17(1), and 18 GDPR. This obligation does not apply, however, if such notification is impossible or would involve disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Users and data subjects also have the right to object to the future processing of their data pursuant to Article 21 GDPR, provided the data is processed by the provider in accordance with Article 6(1)(f) GDPR. In particular, an objection to data processing for direct marketing purposes is permissible.

III. Information on Data Processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, there are no legal retention obligations preventing deletion, and no other information is provided below regarding individual processing procedures.

Cookie Manager
To obtain consent for the use of cookies that are not technically necessary on the website, the provider uses a cookie manager.

When the website is accessed, a cookie containing the settings information is stored on the user's device, so that the consent request does not need to be made on subsequent visits.

The cookie is required to obtain legally compliant user consent.

Users can prevent or disable the installation of cookies through their browser settings.

Cookies

a) Session Cookies

We use cookies on our website. Cookies are small text files or other storage technologies that are placed on your device by your web browser.

These cookies are stored. They process certain information about you, such as your browser or location data, or your IP address, to varying degrees.

This processing makes our website more user-friendly, effective, and secure, as it enables features such as displaying our website in different languages ​​or offering a shopping cart function.

The legal basis for this processing is Article 6(1)(b) GDPR, insofar as these cookies process data for initiating or fulfilling a contract.

If the processing does not serve the purpose of initiating or fulfilling a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is Article 6(1)(f) GDPR.

These session cookies are deleted when you close your internet browser.

b) Third-party cookies
Our website may also use cookies from partner companies with whom we collaborate for advertising, analytics, or to enhance the functionality of our website.

For details, particularly regarding the purposes and legal basis for processing such third-party cookies, please see the information below.

c) Opting Out

You can prevent or restrict the installation of cookies by adjusting your internet browser settings. You can also delete cookies that have already been stored at any time. However, the necessary steps and procedures depend on the specific internet browser you are using. If you have any questions, please use your internet browser's help function or documentation, or contact its manufacturer or support. For so-called Flash cookies, however, processing cannot be prevented via browser settings. Instead, you must change the settings of your Flash Player. The necessary steps and procedures for this also depend on the specific Flash Player you are using. If you have any questions, please use your Flash Player's help function or documentation, or contact its manufacturer or user support.

If you prevent or restrict the installation of cookies, this may result in some features of our website not being fully functional.

However, if you prevent or restrict the installation of cookies, this may result in some features of our website not being fully available.

* . ... Contact Requests / Contact Options

If you contact us via contact form or email, the data you provide will be used to process your request. Providing this data is necessary for processing and responding to your request – without it, we cannot respond to your request or can only do so to a limited extent.

The legal basis for this processing is Article 6 Paragraph 1 Letter b) GDPR.

Your data will be deleted once your request has been fully processed and there are no legal retention obligations that prevent deletion, such as those that may arise from subsequent contract processing.

Customer Account / Registration Function
If you create a customer account with us via our website, we will collect and store the data you entered during registration (e.g., your name, address, or email address) exclusively for pre-contractual services, contract fulfillment, or customer service purposes (e.g., to provide you with an overview of your previous orders or to offer you the "wish list" function). At the same time, we store your IP address and the date and time of your registration. This data will, of course, not be shared with third parties.

As part of the further registration process, your consent to this data processing will be obtained, and you will be referred to this privacy policy. The data we collect will be used exclusively for providing the customer account.

If you consent to this processing, Article 6(1)(a) GDPR serves as the legal basis for the processing.

If the creation of the customer account also serves pre-contractual measures or the fulfillment of a contract, Article 6(1)(b) GDPR also serves as the legal basis for this processing.

You can revoke your consent to the creation and maintenance of the customer account at any time with effect for the future in accordance with Article 7(3) GDPR. To do so, simply inform us of your revocation.

The data collected in this context will be deleted as soon as its processing is no longer necessary. However, we must observe statutory retention periods under tax and commercial law.

Newsletter
If you subscribe to our free newsletter, the data requested from you, i.e., your email address and – o

Optionally, your name and address will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website, as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to receive the newsletter, describe its content in detail, and refer you to this privacy policy. We use the data collected exclusively for sending the newsletter – it will therefore not be passed on to third parties.

The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR.

You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Article 7 Paragraph 3 GDPR. To do so, simply inform us of your revocation or click the unsubscribe link included in every newsletter.

Online Job Applications / Publication of Job Advertisements

We offer you the opportunity to apply to us via our website. For these online applications, your applicant and application data will be collected and processed electronically by us for the purpose of processing your application.

The legal basis for this processing is Section 26 Paragraph 1 Sentence 1 of the German Federal Data Protection Act (BDSG) in conjunction with Article 88 Paragraph 1 of the GDPR.

If an employment contract is concluded following the application process, we will store the data you submitted with your application in your personnel file for the purpose of standard organizational and administrative processes – naturally, in compliance with all applicable legal obligations.

The legal basis for this processing is also Section 26 Paragraph 1 Sentence 1 of the BDSG in conjunction with Article 88 Paragraph 1 of the GDPR.

If an application is rejected, we will automatically delete the data submitted to us two months after notification of the rejection. However, deletion will not occur if legal provisions, such as the burden of proof under the German General Equal Treatment Act (AGG), require longer storage of up to four months or until the conclusion of legal proceedings.

In this case, the legal basis is Article 6 Paragraph 1 Letter f) of the GDPR and Section 24 Paragraph 1 Number 2 of the BDSG. Our legitimate interest lies in the defense and enforcement of our legal rights.

If you expressly consent to the longer-term storage of your data, for example, for inclusion in an applicant or prospective customer database, the data will be processed further based on your consent. The legal basis for this is Article 6(1)(a) GDPR. You can, of course, revoke your consent at any time pursuant to Article 7(3) GDPR by notifying us, with effect for the future.

Server Data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted to us or our web hosting provider by your internet browser. This data, known as server log files, includes information such as the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the pages of our website that you visit, the date and time of each access, and the IP address of the internet connection used to access our website.

... The data collected in this way is temporarily stored, but not together with any other data you provide.

This storage is based on the legal basis of Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in improving the stability, functionality, and security of our website.

The data will be deleted after seven days at the latest, unless further retention is required for evidentiary purposes. Otherwise, the data will be wholly or partially exempt from deletion until an incident has been fully resolved.

Data storage with external hosting

This website is hosted by an external service provider. This means that all personal data collected on this website is stored on the servers of this host.

What data is collected?

This includes, in particular:

IP ​​addresses
Contact details (e.g., for contact requests: names, email addresses)
Contract data
Metadata and communication data
Information about website access

and all other data generated via the website.

Why do we use external hosting and on what legal basis?

We use external hosting for several reasons:

Contractual performance: It serves to fulfill our contracts with potential and existing customers (in accordance with Art. 6 para. 1 lit. b GDPR).

Secure and efficient online service: A professional hosting provider helps us to provide our online service securely, quickly, and efficiently (in accordance with Art. 6 para. 1 lit. f GDPR).

Consent and withdrawal

If we obtain your consent for data processing, the processing will take place exclusively on this basis.

Age (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG). This applies in particular if the consent includes the storage of cookies or access to information on your device (e.g., device fingerprinting). You can withdraw your consent at any time.

Hosting provider's handling of data

Our hosting provider processes data only to the extent necessary to fulfill its contractual obligations and follows our instructions.

Our hosting provider is:

STRATO AG, Berlin

Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google," on our website.

Google Analytics helps us analyze website usage and measure the effectiveness of our marketing campaigns. The legal basis for this is Art. 6 para. 1 lit. a GDPR. Users can withdraw their consent to the use of Google Analytics at any time for the future via the "Cookie Settings" on our website, in accordance with Article 7(3) of the GDPR.

Information such as the time, location, and frequency of website visits, as well as interactions with the website (e.g., click paths, ads viewed/clicked, clicks on links), including the user's IP address, is transmitted to a Google server in the USA and stored there for a maximum of two months.

Google LLC is part of the Data Privacy Framework, for which the European Commission has issued an adequacy decision pursuant to Article 45 of the GDPR:

https://www.dataprivacyframework.gov/list

Google also collects "demographic characteristics" and can generate statistics that provide insights into the age, gender, and interests of website visitors. This is done through the automated analysis of advertising and information from third-party providers.

If the user has enabled personalized ads in their Google account and consents to Google Analytics, Google can analyze usage patterns across devices – that is, across all devices the user has linked to their Google account. Google creates models for cross-device conversions; we only receive anonymous statistics for this purpose, no personally identifiable information.

If the user wishes to deactivate this cross-device analysis, they can disable the "Personalized Ads" feature in their Google account settings at the following link:

https://support.google.com/ads/answer/2662922?hl=de

We use Google Analytics with an anonymization function. This shortens the user's IP address within EU member states or other contracting states of the EEA Agreement.

Google uses the collected data to evaluate the user's website visit and to compile reports on website activity for us. The data is also used to provide other services related to website and internet usage. Google may share this information with third parties if required by law or if third parties process this data on Google's behalf.

According to Google, it will under no circumstances link the user's IP address with other Google data. Further information and options for preventing data usage are available from Google here:

https://www.google.com/intl/de/policies/privacy/partners

If the user does not agree to the data collection, they can also prevent it by installing the browser add-on to deactivate Google Analytics.

Google Tag Manager
We use Google Tag Manager to integrate various functions on our website. This product is from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".

Google Tag Manager is used exclusively to integrate certain content into our website and to enable the management of these functions via an interface provided by Google.

When you access our website, the corresponding functions are loaded from a Google server, which may also be located in the USA. Your IP address is processed in order to provide these functions.

The functions used are listed in our privacy policy. Any consent you have not given for specific functions will also be respected when using Google Tag Manager.

Google LLC is also part of the Data Privacy Framework, for which the EU Commission has issued an adequacy decision pursuant to Article 45 GDPR:

https://www.dataprivacyframework.gov/list

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the optimization and economic efficiency of our website.