Data Protection Statement

Dear visitor, welcome to Colors & Effects and thank you for your interest in our company. Colors & Effects takes data protection seriously. This Privacy Statement describes:

the personal data Colors & Effects collects when you visit our website
the purposes for which Colors & Effects uses such data
the legal basis for the processing of personal data
the recipients of such personal data
the period for which such personal data will be stored
whether you are obliged to provide personal data

Furthermore, we would like to inform you about:

the existence of your rights regarding the processing of your personal data
the Controller in the meaning of data protection laws and, where applicable, our Data Protection Officer

1. What personal data does Colors & Effects collect when you visit our website

1. When you visit our website without contacting us or signing in, your browser transmits the following information automatically to our server:

IP address of your computer
Information about your browser
Website that you were on right before you landed on our website
URL or file requested
Date and time of your visit
Volume of data transmitted
Status information, e.g. error messages

2. If you contact us by email or by contact form on our website, we receive the following information:

Your email address and further information that you provide by email or contact form
Date and time of your message

3. The use of the chat function on our web application requires your name and your email address.

2. To what extend and for what purpose does Colors & Effects process such data?

1. When you visit our website, we your IP address and the other data that your browser transmits automatically to our server (see Section 1 (1)) in order to:

a) send the requested content to your browser. In doing so, we store the complete IP address only to the extent necessary to serve the requested content to you.

b) send your IP address to a service provider to map your public IP address with company and industry related information (no personal information). This company- and industry related information will be processed to our web measurement system. In this process step your IP address is not stored at our service provider or in our system at any time.

c) protect us from attacks and to safeguard the proper operation of our website. In doing so, we store said data transiently and with restricted access for a maximum period of 180 days. Such period may be extended if and to the extent necessary to prosecute attacks and incidents.

Colors & Effects will investigate the user of an IP address only in case of an illegal attack.

2. We store the IP address of your computer after having removed the last octet of the IP address, i.e. in anonymous form, for web audience measuring that allows us to improve our website. We remove the last octet of the IP address immediately after collection. That is why we do not collect personal data about your use of our website.

3. If you contact us by email or by contact form on our website, we use the data under Section 1 (2) to answer and, if possible, to meet your request. We store such data to the extent necessary to answer and meet your request.

4. If you use the chat function on our web application, it is required for the functionality of the chat to enter your name and email address. The chat will be stored for a period of 90 days and deleted afterwards. You can also request to delete the chat on demand.

3. Are you required to provide the data? Are you entitled to object to processing?

When you visit our website, your browser transmits the information under Section 1 (1) automatically to our server. You are free to transmit such data. Without providing such data we are not able to serve you the requested content.

You are not obliged to let us use your anonymized data for web audience measuring. You are also not obliged to let us use your IP address for mapping with your company or industry information.

If you want to contact us by email or by contact form on our website, you are free to transmit the data under Section 1 (2). We will mark mandatory fields, if any, of a contact form. Without providing the required data you may prevent us from answering and meeting your request properly.

If you want to use the chat function on our web application, it is required to enter your name and email address. We cannot guarantee the functionality without the provision of this data.

4. What is the legal basis for the processing?

The legal basis for the processing under Section 2 is the performance of our services or to take steps prior to entering into a contract according to Article 6 (1) (b) General Data Protection Regulation.

5. To what recipients do we transmit your data?

We transmit the data mentioned in Section 1 to Data Processors based in the European Union for the purposes determined in Section 2. Such Data Processors process personal data only on instructions from us and the processing is carried out on behalf of us. We do not intend to transfer your personal data to a third country.

We are using Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA (“AWS”), to host our web application there. The web application is hosted in an AWS data center within the European Union, currently in Frankfurt/Main, Germany.

We are using Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany to host our tracking solution there.

We are using the service of Userlike UG (limited liability), Probsteigasse 44 – 46, 50670 Cologne, to host the chat of our web application.

We are using the service of Youtube, a part of the Google company, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland to provide embedded vidoes on our website.

We are using the service of CleverReachGmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany, to register and de-register from our newsletter.

6. How do we protect your data?

Colors & Effects implemented technical and organizational measures to ensure an appropriate level of security to protect your personal data against accidental or unlawful alteration, destruction, loss or unauthorized disclosure. Such measures will be continuously enhanced in line with technological developments.

7. Do we use cookies on our website?

We will use the following cookies which are necessary to ensure the functionality of our web application.

Cookie	Purpose	End-of-Life
PHPSESSID	Preserves user session state across page requests	Session
ce-cookieSettings	persists the cookie settings of the user	30 days
uslk_e	Identifies the visitor across devices and visits, in order to optimize the chat-box function on the website	1 day
uslk_s	Identifies the visitor across devices and visits, in order to optimize the chat-box function on the website	Session
_pk_id	used to store a few details about the user such as the unique visitor ID	13 months
_pk_ref	used to store the attribution information, the referrer initially used to visit the website	6 months
_pk_ses	short lived cookies used to temporarily store data for the visit	30 minutes
_pk_cvar	short lived cookies used to temporarily store data for the visit	30 minutes
_pk_testcookie	used to check whether the visitor’s browser supports cookies	temporary
MATOMO_SESSID	identifies if the static tracking was opt-out from the user	temporary

You may use your browser settings to decide which cookies to accept and to decline. Please be aware that you may not be able to use all features of our website if you decline cookies. The legal basis for the use of the cookies are our legitimate interests in the meaning of Art. 6 (1) (f) General Data Protection Regulation to provide our service and improve its functionality.

We have established a cookie consent functionality which offers you the possibility to decided which cookies you accept and which not. This can be changed every time while using this link: change cookie settings

8. What rights do you have?

You have certain rights under the General Data Protection Regulation including the right to request a copy of the personal information we hold about you, if you request it from us in writing:

1. Right to access: the right to obtain access to your information (if we are processing it), and certain other information (like those provided in this Privacy Policy);

2. Right to correct: if your personal data is inaccurate or incomplete you have the right to have your personal information rectified;

3. Right to erasure: this is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions. For example, we have the right to continue using your personal data if such use is necessary for compliance with our legal obligations or for the establishment, exercise or defense of legal claims.

4. Right to restrict our use of your information: the right to suspend the usage of your personal information or limit the way in which we can use it. Please note that this right is limited in certain situations: when we are processing your personal information that we collected from you with your consent you can only request restriction on the basis of: (a) inaccuracy of data; (b) where our processing is unlawful and you don not want your personal information erased; (c) you need it for a legal claim; or (d) if we no longer need to use the data for the purposes for which we hold it. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for restriction of the use of their personal information to make sure the restriction is respected in future;

5. Right to data portability: the right to request that we move, copy or transfer (where technically feasible) your personal information in a structured, commonly used and machine-readable format, for your own purposes across different services;

6. Right to object: the right to object to our use of your personal information including where we use it for our legitimate interests, direct marketing;

7. Right to be informed: you have the right to be provided with clear, transparent and easily understandable information about how we use your personal information; and

8. Right to withdraw consent: if you have given your consent to anything we do with your personal information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal information with your consent up to that point is unlawful).

The exercise of these rights is free of charge for you, however you are required to prove your identity with 2 pieces of approved identification. We will use reasonable efforts consistent with our legal duty to supply, correct or delete personal information about you on our files.

To make inquiries or exercise any of your rights set out in this Privacy Policy and/or make a complaint please contact us by emailing or write to us and we will endeavor to respond within 30 days. Contact details can be found in section 10 below.

When we receive formal written complaints, we will contact the person who made the complaint to follow up. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints that we cannot resolve directly.

If you are not satisfied with the way any complaint you make in relation to your personal information is handled by us, then you may refer your complaint to the relevant data protection supervisory authority.

9. Where can you lodge a complaint?

You have the right to lodge a complaint with our Data Protection Officer (for contact details see below) or with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. Alternatively, you may contact:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz

Hintere Bleiche 34
Mainz

https://www.datenschutz.rlp.de/de/general-storage/footer/ueber-den-lfdi/kontakt/

E-Mail: poststelle@datenschutz.rlp.de

10. Who is Controller and Data Protection Officer?

You can find the Controller in the meaning of data protection laws here.

Our Data Protection Officer is:
Armin Fladung
CAD – Institut für Compliance, Arbeitsrecht und Datenschutz
Tel.: 0621-68583357, E-Mail: cad@institut-cad.de

11. Privacy of Children

This Website is intended to be used by persons aged 18 and older. We do not seek to collect information about persons under the age of 18.

No information should be submitted to or posted on the Websites by persons younger than 18 years of age. If such a person submits personal information via the Websites, we shall delete that information as soon as we are made aware of their age and thereafter shall not use it for any purpose whatsoever.