Privacy Policy
––––––––––––––––––––
Privacy Policy
––––––––––––––––––––
1) Information on the collection of personal data and contact details of the data controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.
1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Bestattungsinstitut Manuel Kühn eK, Trappenweg 5, 15749 Mittenwalde, Germany, Tel.: 49 30 49806071, E-mail: bestattungen@manuelkuehn.de. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.
2) Data collection when visiting our website
When you simply use our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed this page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.
3) Cookies
To make your visit to our website more enjoyable and to enable the use of certain features, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period and allow us to save your website settings (so-called "persistent cookies"). In the latter case, you can find information about the storage duration in your web browser's cookie settings.
If any of the cookies we use process personal data, this processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the website visit.
You can configure your browser to notify you when cookies are set and allow you to decide whether to accept them individually, or to exclude the acceptance of cookies in certain cases or entirely.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Making contact
When you contact us (e.g., via contact form or email), we process your personal data solely for the purpose of handling and responding to your inquiry and only to the extent necessary. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) GDPR. If your contact relates to a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted when it is clear from the circumstances that the matter has been resolved and provided that no statutory retention obligations apply.
5) Use of customer data for direct marketing
Subscribe to our email newsletter
When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send you the newsletter is your email address. Providing any further information is voluntary and is used to personalize our communications with you. We use the double opt-in procedure for newsletter distribution, which ensures that you only receive newsletters after you have explicitly confirmed your consent to receive them by clicking a verification link sent to the email address you provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a of the GDPR. We store your IP address, which is registered by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the unsubscribe link provided in the newsletter or by sending a corresponding message to the data controller named above. After you unsubscribe, your email address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, about which we inform you in this privacy policy.
6) Data processing for order processing
6.1 - Transmission of image files for order processing via upload function
On our website, we offer customers the option of personalizing products by uploading image files. The submitted image is then used as a template for personalizing the chosen product.
Using the upload form on the website, customers can directly transmit one or more image files from their device's storage to us via automated, encrypted data transfer. We then collect, store, and use the transmitted files exclusively for the production of the personalized product as described in the respective service description on our website. If the transmitted image files are shared with specific service providers for the production and processing of the order, you will be explicitly informed of this in the following paragraphs. No further sharing will occur. If the transmitted files or digital images contain personal data (in particular, images of identifiable individuals), all processing operations described above will be carried out exclusively for the purpose of processing your online order in accordance with Article 6 Paragraph 1 Letter b GDPR. After the order has been fully processed, the transmitted image files will be automatically and completely deleted.
- Transmission of image files for order processing via email
On our website, we offer customers the option of ordering product personalization by submitting image files via email. The submitted image is then used as a template for personalizing the chosen product.
The customer can send us one or more image files from their device's storage via the email address provided on the website. We then collect, store, and use the transmitted files solely for the production of the personalized product as described in the respective service description on our website. If the transmitted image files are shared with specific service providers for the production and processing of the order, you will be explicitly informed of this in the following paragraphs. No further sharing will occur. If the transmitted files or digital images contain personal data (in particular, images of identifiable individuals), all processing operations described above will be carried out exclusively for the purpose of processing your online order in accordance with Article 6 Paragraph 1 Letter b GDPR. After the order has been fully processed, the transmitted image files will be automatically and completely deleted.
6.2 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided during the ordering process (name, address, email address) in order to personally inform you about upcoming updates within the legally prescribed period, in accordance with our legal information obligations pursuant to Art. 6 para. 1 lit. c GDPR, via a suitable communication channel (e.g., by post or email). Your contact details will be used strictly for the purpose of notifying you about updates we owe you and will only be processed by us to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s), who support us in whole or in part in fulfilling concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
7) Web analytics services
- 1&1 IONOS WebAnalytics
This website uses "1&1 IONOS WebAnalytics", a web analytics service provided by 1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur ("1&1 IONOS"), to track and analyze certain user actions. This is done either via a JavaScript-based tracking pixel implemented on our site or alternatively by reading a log file on the user's device.
The tracking pixel and/or the reading of the log file collect certain user information in anonymized form, transmit it to 1&1 IONOS, and analyze it there. This anonymized information includes, among other things, the user's IP address, referrer code of previously visited websites, the type of device used, the browser type, the operating system used, and the timestamp of the access.
All processing described above, in particular the reading of information on the device used via the tracking pixel, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.
You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
8) Page functionalities
- Google Web Fonts
This website uses web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the consistent display of fonts. When you access a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This may also involve the transfer of personal data to the servers of Google LLC in the USA. In this way, Google learns that our website was accessed via your IP address. The processing of personal data during the connection with the font provider will only take place if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/
- Monotype Web Fonts
This website uses web fonts provided by Monotype Imaging Holdings Inc., a Delaware corporation with its principal offices at 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA, for consistent font display. When you visit a page, your browser loads the necessary web fonts into its browser cache to display text and fonts correctly.
For this purpose, the browser you are using must connect to Monotype's servers. This allows Monotype to know that our website was accessed via your IP address. The processing of personal data during this connection with the font provider will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
If your browser does not support web fonts, a standard font from your computer will be used.
Further information about Monotype Web Fonts can be found at https://www.fonts.com/info/legal and in Monotype's privacy policy: https://www.fonts.com/info/legal/privacy
9) Tools and other items
Cookie consent tool
This website uses a "cookie consent tool" to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users upon visiting the site as an interactive interface, where consent for specific cookies and/or cookie-based applications can be granted by ticking boxes. By using this tool, all cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by ticking the boxes. This ensures that such cookies are only placed on the user's device if consent has been given.
This tool uses technically necessary cookies to store your cookie preferences. No personal user data is processed in this process.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
A further legal basis for processing is Article 6(1)(c) GDPR. As data controllers, we are subject to the legal obligation to make the use of cookies that are not technically necessary dependent on the respective user's consent.
Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.
10) Rights of the data subject
10.1 The applicable data protection law grants you the following rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis stated for the respective conditions for exercising these rights:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to information pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
10.2 Right of objection
If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.
If you exercise your right to object, we will cease processing the data in question. However, further processing remains possible if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the purpose of establishing, exercising or defending legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your right to object as described above.
If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.
11) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).
When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws his or her consent.
If statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance of a contract or for initiating a contract and/or we no longer have a legitimate interest in its continued storage.
When processing personal data on the basis of Article 6(1)(f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims.
When processing personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
