You will also find information about your rights in this connection. We take the protection of your personal data and privacy very seriously and, of course, we comply with the relevant provisions of data protection legislation, in particular the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
The data controller is:
tolingo GmbH, Winterstraße 2, 22765 Hamburg,
Tel. +49 0 40 413 583 100, firstname.lastname@example.org
Managing Director: Jens Völkel
You can reach the data protection officer of Tolingo GmbH under the following contact details:
Withdrawal of consent and right of objection
Withdrawal of your consent to data processing and right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
Many data processing operations are only possible with your explicit consent or a legitimate interest pursuant to Art. 6(1) point (f) GDPR. You may withdraw the consent you have given previously at any time. To do so, simply send an email to email@example.com. The lawfulness of the data processing carried out until the withdrawal remains unaffected.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21(2) GDPR).
If you wish to exercise your right to object, simply send an email to firstname.lastname@example.org.
Data processing in the context of your visit to our website
We process personal data about you when you visit this website. As a matter of principle, it is possible to visit our website without providing any personal data. Our website is designed to collect as little information as necessary about you. Data is collected for the purposes and to the extent described below. We pass your data on to third parties only as described below.
Collection and processing of personal data
Provision of our website
This website is operated by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter referred to as “Shopify”).
Shopify is a provider offering creation and hosting of websites and online stores. When you visit our website, Shopify collects your IP address and information about the device and browser you are using. Shopify also analyses visitor numbers, traffic sources, and customer behaviour, and generates user statistics from this data. If you make a purchase on our website, Shopify will also collect your name, e-mail address, shipping and billing addresses, payment information and other data relating to the purchase (e.g. phone number, amount of sales made and similar information). Shopify stores cookies in your browser in order to carry out the aforementioned analyses.
The use of Shopify is based on Art. 6(1) point (f) GDPR. Our legitimate interest arises from the aforementioned data processing purposes. This ensures that we can offer you our website and the services provided through it in a technically correct and secure way that is optimised for your needs. If consent was requested, processing is then based exclusively on Art. 6(1) point (a) GDPR. Consent may be revoked at any time.
Quotations and orders
In order to process orders, we collect and process the following data that is required to fulfil the contract properly on both sides. We collect and process your personal data only if you provide it voluntarily and with your knowledge. This includes:
- First and last name
- Shipping and billing address: street, town/city, post code, country
- E-mail address
The legal basis for processing data for the purposes of placing an order/commissioning us is Art. 6(1) point (a) GDPR on the basis of your voluntary consent and Art. 6(1) point (b) GDPR for fulfilment of the contract. The personal data we collect is stored until the end of the statutory retention period expires and is then erased, unless we are obliged to store it for a longer period because of retention and documentation obligations relating to tax and commercial law (based on the German Commercial Code, Tax Code or Financial Code) pursuant to Article 6(1) sentence (1) point (c) GDPR or you have consented to a longer storage period pursuant to Art. 6(1) sentence (1) point (a) GDPR.
We use the email addresses of our existing customers – i.e. only those who already have a business relationship with us – for marketing purposes via e-mail in the form of special offers and similar advertising. This processing is based on Article 6(1) point (f) GDPR in conjunction with Section 7(3) of the German Act Against Unfair Competition (UWG). Our legitimate interest lies in the fact that this is a simple and inexpensive advertising approach directed at our existing customers. This is carried out in compliance with the requirements of Section 7(3) UWG.
You have the right to object to the use of your e-mail address for these purposes at any time. Please send your objection by e-mail to email@example.com.
The client transfers the files to be translated to us, which we store and make available to the translator for processing. Unless otherwise agreed, tolingo uses freelance service providers in this connection, some of whom may be service providers outside the EU. When the order has been completed, the source and target files are stored in accordance with the statutory retention periods.
The legal basis for processing the documents sent by you for translation is Art. 6(1) point (b) GDPR.
We use so-called cookies on our website. Most of the cookies used by us are erased automatically from your hard drive at the end of the browser session (and are therefore also referred to as session cookies). However, there are also some cookies that remain on your hard drive. If you visit the site again, they recognise that you have already been on the site and remember the inputs and settings you prefer (so-called persistent cookies). These persistent cookies therefore mean that you do not have to enter your password or fill out forms with your details again if you place another order.
You can disable cookies in your browser settings. If you do not accept cookies, however, it may be that some functions of our website work only to a limited extent or not as usual.
The legal basis for processing your data in the form of cookies is Article 6(1) sentence (1) point (f) GDPR.
Use of tracking and analytical services
This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
IP anonymisation is activated on our website, so that your IP address is first truncated by Google within Member States of the European Union and other countries that are signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. In these exceptional cases, such processing takes places pursuant to Art. 6(1) point (f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
Google uses this information on our behalf to evaluate your use of the website, compile reports about website activities and provide other services associated with use of the website and the internet to us as the website operator. The IP address transmitted by your browser in the context of Google Analytics is not combined with any other Google data.
You can prevent storage of cookies by adjusting the settings in your browser software. However, we wish to point out that in this case you may not be able to use all functions of this website to their full extent. In addition, you can prevent collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google and processing of that data by Google by downloading and installing the browser plugin available via the following link: .https://tools.google.com/dlpage/gaoptout?hl=en.
Alternatively you can prevent collection of data by Google Analytics by setting a so-called opt-out cookie by clicking here. If you delete the cookies in your browser, you will then have to click on this link again.
Google LLC, which is based in the USA, is certified under the US-European “Privacy Shield” data protection agreement, which ensures compliance with the level of data protection in the EU.
We use Google Ads and Google Conversion Tracking for statistical recording of the use of our website and for optimisation of our website. Google Ads is an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Ads places a cookie on your computer if you have come to our website via a Google advertisement.
These cookies usually cease to be valid after 30 days and are not used for personal identification. If the user visits certain pages of the website of the Ads customer and the cookie has not yet expired, Google and the customer can recognise that the user has clicked on the advertisement and has been forwarded to this page.
Every Ads customer is given a different cookie. Cookies cannot therefore be tracked via the websites of Ads customers. The information collected with the help of conversion cookies is used to compile conversion statistics for Ads customers who have opted for conversion tracking. Ads customers are provided with the total number of users who have clicked on the advertisement and have been forwarded to a page with a conversion tracking tag. However, they are not given any information by means of which users can be identified in person.
“Conversion cookies” are stored on the basis of Art. 6(1) point (f) GDPR. We have a legitimate interest in the analysis of user behaviour to optimise both our web service and our advertising.
Our website uses the remarketing function of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
The function is used to display advertising to website visitors within the Google advertising network based on their interests. A so-called “cookie” is stored in the website visitor’s browser, which makes it possible to recognise the visitor when they access websites that belong to the Google advertising network. Advertisements can be displayed to the visitor on these pages which relate to content that the visitor has accessed previously on websites that use Google’s remarketing function.
Google Remarketing is used on the basis of Art. 6(1) point (f) GDPR. We have a legitimate interest in the analysis of user behaviour to optimise both our web service and our advertising.
Google states that it does not collect any personal data in this process. If, however, you do not want to participate in Google’s Remarketing function, you can disable it by adjusting your settings at www.google.com/settings/ads
Where users have consented for their web and browser history to be linked by Google to their Google account and for information from their Google account to be used to personalise advertisements that they see on the web, Google uses data from these registered users together with Google Analytics data to draw up and define target group lists for cross-device remarketing. Google Analytics creates Google-authenticated IDs for these users to support this function. This personal data from Google is temporarily linked with our Google Analytics data to create target groups.
Google Campaign Manager
This website uses the online marketing tool Campaign Manager from Google. Google Campaign Manager is a program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google Campaign Manager is used on the basis of Art. 6(1) point (f) GDPR. We have a legitimate interest in the analysis of user behaviour to optimise both our web service and our advertising.
You can prevent storage of cookies by adjusting the settings in your browser software; in addition, you can prevent collection of the data generated by the cookie and relating to your use of websites by Google and processing of that data by Google by downloading and installing the browser plugin available via the following link: https://adssettings.google.com/install.
Google Tag Manager
The use of Google Tag Manager enables us simply to integrate the services described by implementing the other cookies/tags. Google Tag Manager does not record any personal data.
Right to information
Pursuant to Art. 15 GDPR, you have the right to receive information from us about whether we process data about you and, if so, which data we process. This includes, among other things, details about how long and for what purpose we process the data, where it originates and the recipients or categories of recipients to whom we pass it on. We can also provide you with a copy of this data.
Right to rectification
Pursuant to Art. 16 GDPR, you have the right to demand that we rectify incorrect information about you or information that is no longer correct. You can also demand completion of incomplete personal data about you. If required by law, we also notify third parties about such rectification if we have passed your data on to them.
Right to erasure ("right to be forgotten")
Pursuant to Art. 17 GDPR, you have the right to demand immediate erasure of your personal data by us if one of the reasons specified in Art. 17 GDPR applies.
Right to restriction of processing (blocking)
Pursuant to Art. 18 DSGVO, you have the right to demand that we restrict the processing of your personal data if one of the conditions set out in Art. 18 DSGVO applies.
Right to withdraw consent
Pursuant to Art. 7(3) GDPR, you may withdraw consent that you have given to us at any time, with effect from that point forward. This withdrawal may be made in the form of a message sent to the contact address above.
Right to data portability
Pursuant to Art. 20 GDPR, you have the right to receive personal data about you and that you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another party. You will find further details and restrictions in Art. 20 GDPR. Exercising this right does not affect your right to erasure.
Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.
Right to object
Pursuant to Article 21 GDPR, you have the right to object to processing of your personal data. If the conditions for a valid objection are met, we shall no longer process your personal data.
Exercise of your rights
To exercise your rights, please contact the following e-mail address (informally if you wish):
Help with the terms of data protection legislation
Processor: This is a natural or legal person, public authority, agency or other body which processes personal data on behalf of a controller.
Data subject: This is any identified or identifiable natural person whose personal data are processed by the controller.
Browser: This is a programme for displaying websites on the Internet.
Third party: This is a natural or legal person, public authority, agency or other body authorised to process the personal data.
Consent: Dies ist jede von der betroffenen Person freiwillig für den bestimmten Fall in informierter Weise und unmissverständlich abgegebene Willensbekundung in Form einer Erklärung oder einer sonstigen eindeutigen bestätigenden Handlung, mit der die betroffene Person zu verstehen gibt, dass sie mit der Verarbeitung der sie betreffenden personenbezogenen Daten einverstanden ist.
Recipient: This is a natural or legal person, public authority, agency or another body to which the personal data is disclosed, whether a third party or not.
IP address: This is an address that is assigned to your device (e.g. smartphone or computer) on the Internet so that your device can be addressed and reached there.
Personal data: This is any information relating to an identified or identifiable natural person (also referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Pseudonymisation:This is the processing of personal data in such a manner that it can no longer be attributed to a specific data subject without the use of additional information. This is particularly the case when such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data cannot be attributed to an identified or identifiable natural person without unreasonable effort.
Processing: This is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Controller or person responsible for processing: This is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Your personal data are transmitted by us in encrypted form. We make use of the SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption system in this context.
We implement technical and organisational measures to protect your data from misuse, loss, destruction or access by unauthorised persons. Our security measures are based on the latest technology and undergo continuous improvement as technology develops.