Prodigee Privacy Policy websites and services

last updated: 09.06.2023

1. About us
2. Why we process your data
   
3. Which data we collect and process from you
   
4. Who has access to your data and to whom we transmit your data
   
5. Storage periods
   
6. Your rights
   
7. Use of our website – profiling, cookies and web tracking
   
8. Supplementary notes and provisions on individual services

1. About us

Our website address is: https://prodigee.eu

Prodigee is responsible for the collection, processing and storage of your data. You can find details about us in our imprint.

The careful handling of your personal data has the highest priority for us. In processing, we comply with the statutory provisions, e.g. the General Data Protection Regulation (GDPR) and the associated national provisions.

This data protection declaration applies to all websites of our company that can be accessed under our domains (https://prodigee.eu). If you follow links to other websites from ours, their own data protection regulations apply, for whose contents the respective owners of these websites are responsible.

If separate or additional conditions apply to individual services or we ask you for your consent, we will point this out to you separately before using the respective service (e.g. for newsletter subscription or purchases in our online shop).

We also take various security measures to protect your personal data. For example, transmission between your web browser and our servers is always transport encrypted; in addition, we maintain a variety of technical and organizational measures to always protect your data.

2. Why we process your data

You can use our website without disclosing your identity. If you would like to register for one of our personalised services, use our online shop or subscribe to our newsletter, we will ask you for your name and other personal information. It is your free decision whether you enter this (extended) data. Data that we absolutely need from you to provide our services are marked as such.

Your personal data is collected and processed for the following purposes on the basis of the following legal bases:

– Contract initiation pursuant to Art. 6 para. 1 lit. a) and b) GDPR
– Contract execution in accordance with Art. 6 Para. 1 lit. b) GDPR
– Customer management in accordance with Art. 6 para. 1 lit. b) and c), f) GDPR
– communication and data exchange pursuant to Art. 6 para. 1 lit. a), b), c), f) GDPR
– external presentation and advertising pursuant to Art. 6 para. 1 lit. a), f) GDPR
– Implementation of declarations of consent pursuant to Art. 6 para. 1 lit. a) GDPR
– Ensuring the proper operation of a data processing system in accordance with Art. 6 para. 1 lit. c) and f) GDPR
– Applicant selection procedures within the framework of personnel and resource management on the basis of Art. 6 para. 1 lit. a), b) GDPR

3. Which data we collect and process from you

We collect different categories of personal data from you. Personal data is all information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified directly or indirectly, in particular by assignment to an identifier such as a name. Personal data includes, for example, information such as your name, your address, your telephone number and your date of birth (if stated). Statistical information that cannot be directly or indirectly associated with you – such as the popularity of individual websites of our offer or the number of users of a page – is not personal data. Data is collected directly and indirectly. In both cases, data will only be collected to the extent necessary; the data will only be processed for the purposes stated under point 2. It is your decision whether you want to transmit data to us that optimizes the use of our services for you, but is not necessary for this. Corresponding data fields are marked as ‘voluntary’.

The data collected includes:

• Title and name
•  Mail address and, if applicable, a password chosen by you, e.g. for the purpose of subscribing to the newsletter or using your customer account
  – Address data
  – Data that you actively and consciously transmit to us when using our services,
  – Further data that you voluntarily submit to us, e.g. data fields filled in by you and marked as ‘voluntary’

In addition, the following data about you is collected indirectly when using our services:

Technical connection data, e.g. the page called up on our website, your IP address, shortened by the last three digits (except for payment transactions, where we must transfer the complete IP address to our payment provider for security reasons), date and time of the call, terminal device used. This is done to verify the authorization of actions and the authentication of the requesting user of our services. The legal basis is Art. 6 para. 1 lit. c) in conjunction with Art. 32 and Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to secure our web server, for example to defend ourselves against attacks, and to ensure the functionality of our services.
– Data collected as part of website tracking and e-mail/newsletter tracking
– Data that we receive from our service providers as part of order processing in our online shop, e.g. information on payment probabilities and payment disruptions or delivery notifications.

Minors:

Our website is not directed at minors and we do not knowingly collect personal information from minors.

If persons under the age of 16 transmit personal data to us, this is only permitted if the parent/guardian himself has consented or has consented to the consent of the young person. In accordance with Art. 8 Para. 2 GDPR, the contact details of the legal guardian must be provided in order to convince us of the consent or consent of the legal guardian. These data as well as the data of the minor will then be processed in accordance with this data protection declaration.

If we determine that a minor under the age of 16 has sent us personal data without the consent of the parent or guardian himself or herself or without the consent of the minor, we will delete the data immediately.

4. Who has access to your data and to whom we transmit your data

a) Access

Access to your personal data stored by us is limited to our employees and the service providers commissioned by us, who have to deal with this personal data due to their tasks.

If third parties gain access to your data, we have obtained your permission or there is a legal basis for this.

We also use service providers to provide services and process your data (including hosting, newsletters, delivering ordered goods, processing payments, sending letters or e-mails and maintaining and analyzing databases, website optimization and further developments, securing our web servers or for website tracking). Insofar as these special provisions apply, we have carried them out for you in the following for the respective service. The service providers process the data exclusively on our instructions and are obliged to comply with the applicable data protection regulations. All processors have been carefully selected and will only have access to your data to the extent and for the time required to provide the services or to the extent to which you have consented to the processing and use of your data.

b) Data exchange within the group of companies

Data exchange within the group of companies to which we belong takes place within the EU/EEA and serves internal administrative purposes only. Insofar as personal data is transferred to our companies in third countries, this will take place on the basis of the EU Standard Treaty 2010 pursuant to Art. 46 para. 2 lit. c GDPR in conjunction with the decision of the EU Commission of 05.02.2010 (2010/87/EU).

By group of companies we mean affiliated companies within the meaning of Art. 4 No. 19 GDPR.

c) Transfer to third countries and legal basis

The servers of some of the service providers we use are located in the USA and other countries outside the European Union. Companies in these countries are subject to a data protection law that does not generally protect personal data to the same extent as is the case in the Member States of the European Union. If your data is processed in a country that does not have a recognised high level of data protection such as the European Union, we use contractual regulations or other recognised instruments to ensure that your personal data are adequately protected. We expressly point this out to you again within the scope of the individual services.

If personal data is transferred to third countries, this will be done on the basis of the EU Standard Treaty 2010 pursuant to Art. 46 para. 2 let. c GDPR in conjunction with the decision of the EU Commission of 05.02.2010 (2010/87/EU) or your consent pursuant to Art. 49 para. 1 let. a) GDPR.

d) Transmission to law enforcement and criminal investigation authorities

In exceptional cases we transmit personal data to law enforcement and criminal investigation authorities. This is done on the basis of corresponding legal obligations, e.g. from the Code of Criminal Procedure, the Fiscal Code, the Money Laundering Act or state police laws.

5. Storage periods

We store personal data within the framework of legal regulations or your consent.

We use the following criteria to determine the concrete storage period:

We store the personal data until the purposes for which they were collected cease to apply (e.g. upon termination of a contractual relationship or through the last activity, if there is no continuing obligation, or in the event of a revocation of your consent for the specific data processing). 

Further data will only be stored if

– legal storage obligations (e.g. according to AO and HGB) exist;
– the data is still needed to assert and exercise legal claims or to defend against legal claims, e.g. due to technological and forensic requirements to defend against attacks on our web servers and their prosecution;
– the deletion would be contrary to the legitimate interest of the data subjects;
– another exception pursuant to Art. 17 para. 3 GDPR applies.

6. Your rights

You have a number of legal rights to which we would like to draw your attention below. Of course, our data protection officer is also available to answer any questions you may have about your personal data that we have collected and processed using the contact details given below.

a) Right to information and data transferability

You have the right to obtain information about the personal data we process concerning you at any time.

If the data processing is based on your consent or on a contract pursuant to Art. 6 para. 1 b) GDPR, you may also request, pursuant to Art. 20 para. 1 GDPR, to receive the personal data stored about you in a structured, current and machine-readable format. At your request, we will also forward the data directly to the recipient of your choice.

b) Right to rectification, restriction and deletion

Furthermore, in accordance with Articles 16 to 18 GDPR, you may request us to correct, restrict (block) or delete your personal data if we have processed the data incorrectly, if there is a reason for restricting further data processing, or if data processing has become illegal for various reasons, or if its storage is inadmissible for other legal reasons. We would like to point out that your right to deletion may be restricted by legal retention periods.

c) Right of objection

If our data processing is based exclusively on our legitimate interest pursuant to Art. 6 para. 1 f) GDPR, you may object to this processing pursuant to Art. 21 para. 1 GDPR. Then we will stop processing your data unless we can demonstrate legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend a legal claim. Furthermore, you always have the right to object to the use of your data for the purpose of direct advertising with effect for the future pursuant to Art. 21 para. 2 GDPR.

d) Right of revocation

If you have allowed us to process your personal data by giving your consent, you have a right of revocation with effect for the future pursuant to Art. 7 Para. 3 GDPR.

e) Right of appeal to the Supervisory Authority

You are free to complain to a supervisory authority if you believe that our processing of your personal data violates the European Data Protection Regulation or or Righther national and international data protection laws.

f) Contact Data

To exercise your rights, you can send us an informal message to the following contact details. Likewise, please address the revocation of your consent to the following contact details, indicating which declaration of consent you would like to revoke:

7. Use of our website – profiling, cookies and web tracking

a) Basic information on cookies and opt-out options

We use so-called cookies in some areas of our website, e.g. to recognize the preferences of visitors and to be able to design the website accordingly. This facilitates navigation and a high degree of user-friendliness of a website. Cookies also help us to identify particularly popular areas of our website. Cookies are small files that are stored on a visitor’s device. They allow information to be stored for a certain period of time and to identify the visitor’s device. For better user guidance and individual service presentation, we use permanent cookies.

We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you.

We only use non-technically necessary cookies after your express consent, which you can of course revoke at any time.

As part of our cookie information on our website, you have agreed to the following statement in this regard:

This website uses tracking cookies or tracking software to provide you with the full functionality of our website and thus a better online experience. You can find more detailed information on the cookies and web tracking procedures used by us and the consents you have given us in our data protection declaration under Privacy Policy. However, technically unnecessary cookies or our tracking software will not be activated until you have given us your consent. [I Agree]

If you completely exclude the use of cookies, you cannot use certain functions of our website – including the possibility of cookie-based opt-out from tracking. Please allow the opt-out cookies of those services for which you wish to prevent tracking.

Please also note that deleting all cookies will also delete opt-out cookies. You may therefore have to reset them. Cookies are also browser-bound, i.e. they must be set separately for each browser you use on each device you use. You will find the necessary links in the description of the respective service below.

The following cookies are used by us – if you allow this and have not set one or more opt-out cookies – for a more detailed purpose:

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Targeting Cookies

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

b) Google Analytics

This website uses Google Analytics, a web analysis service of Google LLC (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other countries party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website usage and Internet usage. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. One way to object to web analysis by Google Analytics is to set an opt-out cookie that instructs Google not to store or use your data for web analysis purposes. Please note that with this solution the web analysis will only not take place as long as the opt-out cookie is stored by the browser. If you would like to set the opt-out cookie now, please click https://developers.google.com/analytics/devguides/collection/gajs/?hl=en#disable.

You may also refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link. The current link is: http://tools.google.com/dlpage/gaoptout?hl=en.

Recipient of the Data: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Privacy-Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

c) Social Media Buttons

Our website uses social media buttons (Facebook, YouTube, Instagram) to enable you to interact with third parties.

These social media buttons are not integrated as plug-ins via a so-called iFrame, but are stored as links. By clicking the social media buttons you will be redirected to the page of the respective provider. The relevant provider is then responsible for compliance with the data protection regulations and for the correctness, up-to-dateness and completeness of the information provided there for data processing within the meaning of Art. 4 No. 17 GDPR.

d) Facebook Pixel

We use the “visitor action pixel” of Facebook Inc. within our internet presence.

This allows the behavior of registered Facebook users to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows us to measure the effectiveness of Facebook ads for statistical and market research purposes. The personal data information we collect is anonymous to us, which means we do not see the personally identifiable information of individual users. However, this data is stored and processed by Facebook and we will inform you about this according to our level of knowledge. Facebook may link this information to your Facebook account and may also use it for its own promotional purposes, in accordance with Facebook’s Privacy Policy https://www.facebook.com/about/privacy/. You may enable Facebook and its affiliates to serve advertisements on and off Facebook. A cookie may also be stored on your computer for these purposes.
The legal basis for the use of this service is Art. 6 para. 1 sentence. 1 lit a) GDPR. You have also agreed to this cookie within the scope of your consent to the setting of cookies. You can object as follows: (Link to deactivate consent) As a registered user, you can also object to the collection by Facebook pixels and use of your data to display Facebook ads at the following address: https://www.facebook.com/settings?tab=ads. Recipient of the data: (1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are resident in the EU, Facebook Ireland (Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”)))
Privacy-Shield https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active 

8. Supplementary notes and provisions on individual service

a) Newsletter

At your explicit request, we will send you our newsletter on the topics you have chosen as well as information about our company. Please note that delivery can only take place once you have expressly confirmed your subscription request again in the course of our double opt-in process.

The personal data collected within the scope of the newsletter registration will be used exclusively for sending and personalising the newsletter (e.g. to address you by your name). You can revoke your consent to the storage of personal data that you have given us for sending the newsletter at any time with effect for the future. For the purpose of revoking your consent, each newsletter contains an appropriate link; alternatively, you are welcome to contact us directly so that we can implement your revocation. Details of the consent given to us were communicated to you in the Double-Opt-In-Mail.