Privacy Policy

1. Privacy at a Glance

Data Controller

General Information

The following information provides a simple overview of what happens to your personal data when you visit our websites. Personal data is any data that can be used to personally identify you.

2. General Information and Mandatory Information

Data Protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Legal Basis

The legal basis for processing your data derives from the EU General Data Protection Regulation (GDPR):

• Art. 6(1)(a) GDPR: Your consent
• Art. 6(1)(b) GDPR: Contract fulfillment and pre-contractual measures
• Art. 6(1)(c) GDPR: Legal obligation
• Art. 6(1)(f) GDPR: Legitimate interests

Data Transfer to Third Countries

We use tools from companies based in the USA (Google Analytics, Facebook Pixel). These companies have submitted to the EU-US Data Privacy Framework. Further information can be found for each respective tool.

Storage Duration

We only store your personal data for as long as necessary for the purposes for which it was collected, or as required by law (e.g., tax retention periods of 10 years).

3. Data Collection on Our Websites

Server Log Files

The provider of our sites automatically collects and stores information in server log files:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of server request
• IP address (anonymized)

Legal basis: Art. 6(1)(f) GDPR (Legitimate interests in the security of our systems)

Storage duration: 7 days

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (Contract initiation) or Art. 6(1)(f) GDPR (Legitimate interests)

Storage duration: 6 months after completion of the inquiry, unless statutory retention obligations exist

Registration/Community Area (Elora)

Registration is required to use our community features. We collect:

• Email address
• Username
• Password (encrypted)
• Optional: Name, profile picture

Legal basis: Art. 6(1)(b) GDPR (Contract fulfillment)

Storage duration: Until deletion of your account

4. Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device. They do not cause any damage and do not contain viruses.

Cookie Categories

5. Analytics Tools

Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: Analysis of user behavior to improve our services

Data processed:

• Anonymized IP address
• Device information
• Browser information
• Usage behavior (pages visited, time spent, clicks)
• Approximate location (country/city)

Legal basis: Art. 6(1)(a) GDPR (Your consent)

Storage duration: 14 months

Opt-out: You can prevent Google Analytics tracking by installing the browser add-on for disabling Google Analytics: Google Analytics Opt-Out

6. Marketing Tools

Meta Pixel (Facebook Pixel)

We use the "Meta Pixel" from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Purpose:

• Measuring the effectiveness of our advertisements
• Remarketing/Retargeting
• Creating Custom Audiences

Data processed:

• Cookie ID
• Device information
• Usage behavior
• Hashed email address (if applicable, for newsletter signup)

Legal basis: Art. 6(1)(a) GDPR (Your consent)

Opt-out: Facebook Ad Settings

7. Newsletter and Email Marketing

KlickTipp

We use KlickTipp from KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd's Bush Road, London W6 7NJ, United Kingdom for sending our newsletter.

Data processed:

• Email address
• Name (optional)
• IP address at signup
• Time of signup
• Opening and click behavior

Double Opt-In: Registration is done using the double opt-in procedure. After registration, you will receive an email for confirmation.

Legal basis: Art. 6(1)(a) GDPR (Your consent)

Withdrawal: You can withdraw your consent at any time, e.g., via the unsubscribe link in each email.

8. Payment Service Providers

Digistore24

We use Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany for payment processing and our affiliate system.

Data processed for purchases:

• Name and address
• Email address
• Payment information
• IP address
• Order data

Data processed in the affiliate system:

• Affiliate ID
• Click and conversion tracking
• Commission statements

Legal basis: Art. 6(1)(b) GDPR (Contract fulfillment)

Digistore24 Privacy Policy: Digistore24 Privacy

9. Hosting and Content Delivery

DomainFactory (JiffyBox)

For most of our websites, we use the hosting services of DomainFactory GmbH, Oskar-Messter-Straße 33, 85737 Ismaning, Germany.

ALL-INKL.COM

For elora.one, we use ALL-INKL.COM - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

Data Processing Agreement: We have concluded a data processing agreement with both providers.

10. Your Rights

You have the following rights regarding your personal data:

Right to Information (Art. 15 GDPR)

You have the right to request information about your personal data processed by us.

Right to Rectification (Art. 16 GDPR)

You have the right to demand immediate correction of incorrect or completion of your personal data stored by us.

Right to Erasure (Art. 17 GDPR)

You have the right to demand the deletion of your personal data stored by us, unless processing is necessary to fulfill a legal obligation.

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to demand the restriction of processing of your personal data.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, common, and machine-readable format.

Right to Object (Art. 21 GDPR)

Right to Withdraw Consent (Art. 7(3) GDPR)

You have the right to withdraw your consent at any time.

Right to Complain (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority. In Romania, this is:

11. Data Security

SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

Technical and Organizational Measures

We implement technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.

12. Third-Party Services

YouTube Videos

We embed YouTube videos in enhanced privacy mode. According to YouTube, this mode means that YouTube does not store information about visitors to this website before they watch the video.

Google Fonts

We use Google Fonts embedded locally. No connection to Google servers is established.

External Links

Our websites contain links to external third-party websites. We have no influence on the content of these directly or indirectly linked websites.

13. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply to your next visit.

Version: 1.0 - November 2024