General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. Detailed information on the topic of data protection can be found in our privacy policy below this text.
Data Collection on This Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. The contact details can be found in the imprint of this website.
How do we collect your data?
Your data is collected in two ways: first, by providing it to us. This could be data you enter into a contact form.
Other data is collected automatically or after your consent when you visit the website by our IT systems. These are primarily technical data (e.g., web browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Other data can be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to obtain free information at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of your data. If you have given consent for data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority.
For this and other questions regarding data protection, you can contact us at any time at the address provided in the imprint.
Analysis Tools and Third-Party Tools
Your surfing behavior may be statistically analyzed when visiting this website. This is primarily done using so-called analysis programs.
Detailed information about these analysis programs can be found in the following privacy policy.
2. Hosting and Content Delivery Networks (CDN)
External Hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This primarily includes IP addresses, contact requests, meta- and communication data, contract data, contact details, names, website visits, and other data generated through a website.
The use of the host is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of secure, fast, and professional provision of our online services (Art. 6 Para. 1 lit. f GDPR).
Our host will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data.
We use the following host:
ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
D-02742 Friedersdorf
Conclusion of a Data Processing Agreement
To ensure GDPR-compliant processing, we have concluded a data processing agreement with our host.
3. General Information and Mandatory Details
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains which data we collect and for what purpose. It also explains how and for what purpose this occurs.
We point out that data transmission over the Internet (e.g., when communicating via email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Responsible Party
The responsible party for data processing on this website is:
CM1 GmbH
Urlasstr. 40
91207 Lauf a.d. Pegnitz
Phone: +49 172 3657217
Email: info@cm-one.de
The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses).
Storage Duration
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing is fulfilled. If you assert a justified request for deletion or revoke consent for data processing, your data will be deleted, provided we do not have another legally permissible reason to store your personal data (e.g., tax or commercial law retention periods). In the latter case, deletion occurs after these reasons cease.
Data Transfer to the USA
This website uses tools from companies based in the USA. When these tools are active, your personal data may be transferred to the respective companies’ US servers. We point out that the USA is not a safe third country under EU data protection law. US companies are obliged to provide personal data to security authorities without you being able to take legal action. It cannot be excluded that US authorities (e.g., intelligence services) may process, analyze, and permanently store your data on US servers. We have no influence on these processing activities.
Revocation of Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke already given consent at any time. The legality of data processing carried out until the revocation remains unaffected.
Objection to Data Collection in Special Cases and Against Direct Advertising (Art. 21 GDPR)
If data processing is based on Art. 6 Para. 1 lit. e or f GDPR, you have the right to object at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis can be found in this privacy policy. If you object, your personal data will no longer be processed, unless we can prove compelling legitimate grounds for processing that override your interests, rights, and freedoms or the processing serves the assertion, exercise, or defense of legal claims (objection under Art. 21 Para. 1 GDPR).
If your personal data is processed for direct advertising purposes, you have the right to object at any time against the processing of your personal data for such advertising; this also applies to profiling in connection with such direct advertising. If you object, your personal data will no longer be used for direct advertising (objection under Art. 21 Para. 2 GDPR).
Right to Lodge a Complaint with the Supervisory Authority
In case of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority, especially in your habitual residence, place of work, or the place of the alleged infringement.
Right to Data Portability
You have the right to receive data we process based on your consent or in fulfillment of a contract in a structured, commonly used, and machine-readable format, and to transmit it to another responsible party.
SSL or TLS Encryption
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries sent to us as the site operator. A secure connection is indicated by changing the browser address from “http://” to “https://” and the lock icon in the browser bar.
4. Data Collection on This Website
Cookies
Our websites use so-called „cookies.“ Cookies are small text files and do not cause any damage to your device. They are either temporarily stored for the duration of a session (session cookies) or permanently on your device (permanent cookies).
Session cookies are automatically deleted after your visit ends. Permanent cookies remain on your device until you delete them yourself or automatic deletion occurs through your web browser.
Sometimes, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These allow us or you to use certain services of the third party (e.g., cookies for processing payment services).
Cookies serve different functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., shopping cart function or video display). Other cookies serve to evaluate user behavior or display advertising.
Cookies required to conduct electronic communication or to provide certain requested functions (functional cookies, e.g., for the shopping cart) or to optimize the website (e.g., cookies to measure web traffic) are stored based on Art. 6 Para. 1 lit. f GDPR, unless another legal basis is indicated. If consent is requested, cookies are stored only based on that consent (Art. 6 Para. 1 lit. a GDPR) and can be revoked at any time.
You can configure your browser to be informed about setting cookies and to allow cookies only in individual cases or generally, and to delete cookies automatically when closing the browser. Deactivating cookies may limit the functionality of this website.
If cookies from third parties or for analysis purposes are used, you will be informed separately in this privacy policy and, if necessary, consent will be requested.
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files that your browser automatically transmits to us. These include:
-
Browser type and version
-
Operating system used
-
Referrer URL
-
Hostname of the accessing computer
-
Time of server request
-
IP address
This data is not merged with other data sources. Collection of this data is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in technically error-free presentation and optimization of the website, for which server log files must be recorded.
Contact Form
If you send inquiries via the contact form, your information including contact details will be stored to handle the request and for follow-up questions. This data is not shared without your consent.
Processing of this data is based on Art. 6 Para. 1 lit. b GDPR if the request relates to contract fulfillment or pre-contractual measures, or on legitimate interest (Art. 6 Para. 1 lit. f GDPR) or consent (Art. 6 Para. 1 lit. a GDPR) if obtained.
Data from the contact form remains with us until deletion is requested, consent is revoked, or the purpose ends (e.g., after processing). Legal retention periods remain unaffected.
Inquiry via Email, Phone, or Fax
If you contact us via email, phone, or fax, your data is stored and processed for handling the inquiry. It is not shared without consent. The same legal bases as above apply.
5. Social Media
Facebook Plugins (Like & Share Button)
This website uses plugins from Facebook. Provider: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Data may also be transferred to the USA and other third countries.
Facebook plugins are recognized by the Facebook logo or „Like“ button. A direct connection is established between your browser and Facebook servers, transmitting your IP address and visited pages. We have no knowledge of the transmitted data content.
The use is based on Art. 6 Para. 1 lit. f GDPR. Consent, if requested, can be revoked anytime (Art. 6 Para. 1 lit. a GDPR). Data transfer to the USA relies on EU Commission Standard Contractual Clauses.
More info: Facebook Plugins and EU Data Transfer Addendum
Twitter Plugin
Functions of Twitter are included. Provider: Twitter International Company, Dublin 2, Ireland. Using Twitter or Retweet links visited websites to your account. Data transfer relies on EU Standard Contractual Clauses.
More info: Twitter Privacy and Data Transfers
Instagram Plugin
Instagram functions provided by Facebook Ireland Limited. Logging in links website visits to your Instagram account. Storage and analysis based on Art. 6 Para. 1 lit. f GDPR; consent revocable anytime. Data transfer relies on EU Standard Contractual Clauses.
More info: Instagram Privacy
6. Newsletter
Newsletter Data
To receive the newsletter, we require an email address and verification of consent. Other data is collected voluntarily. Data is used exclusively for sending the requested information and not shared with third parties.
Processing is based on consent (Art. 6 Para. 1 lit. a GDPR). Consent can be revoked anytime via the unsubscribe link. Already processed data remains lawful.
Email addresses remain until unsubscribed. They may be stored in a blacklist to prevent future mailings.
7. Plugins and Tools
YouTube
Videos from YouTube are embedded. Provider: Google Ireland Limited, Dublin 4, Ireland. Visiting a page creates a connection to YouTube servers, transmitting the visited page. Logged-in users can have visits associated with their profile.
Use based on Art. 6 Para. 1 lit. f GDPR; consent revocable (Art. 6 Para. 1 lit. a GDPR).
More info: YouTube Privacy
Vimeo
Videos from Vimeo embedded. Provider: Vimeo Inc., New York, USA. Connection transmits page visits and IP addresses. Logged-in users may have visits associated with their profile. Consent revocable. Data transfer to the USA based on Standard Contractual Clauses.
More info: Vimeo Privacy
Google Web Fonts
Fonts loaded from Google servers. Browser connection transmits the IP address. Use based on Art. 6 Para. 1 lit. f GDPR; consent revocable.
More info: Google Fonts FAQ and Google Privacy
Google Maps
Maps by Google Ireland Limited. IP address required; transmitted to the USA. Use based on Art. 6 Para. 1 lit. f GDPR; consent revocable.
More info: Google Maps GDPR Terms
OpenStreetMap
Maps by OpenStreetMap Foundation, UK. IP addresses and behavior may be transmitted. Location can be collected if enabled. Provider has no influence.
More info: OSM Privacy