Data protection

 

Privacy Policy

General note and mandatory information

Designation of the responsible body

The controller responsible for data processing on this website is:

Infinity Flowerbox GmbH
Doebelner Str. 1
12627 Berlin

The controller decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.). 

Scope of application

This data protection declaration informs users about the type, scope and purpose of the personal data collected and processed by us, Infinity Flowerbox GmbH, Doebelner Str. 1, 12627 Berlin (= responsible body within the meaning of Section 3 (7) BDSG, hereinafter also referred to as "us" or "we") in the context of your use of our websites under the domain https://infinity-flowerbox.com (hereinafter also referred to as "offer"). The legal basis for data protection can be found in particular in the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).
Below we provide information about the data collected and processed by us:  

General privacy policy

By using our website, you consent to the collection, processing and use of data in accordance with the following description. Our website can generally be visited without registration. Data such as pages called up or the name of the file called up, date and time are stored on the server for statistical purposes without this data being directly related to your person. Personal data, in particular name, address or e-mail address, are collected on a voluntary basis as far as possible. No data will be passed on to third parties without your consent.

Privacy policy for cookies

Our website uses cookies. These are small text files that make it possible to store specific user-related information on the user's device while they are using the website. Cookies make it possible, in particular, to determine the frequency of use and number of users of the pages, to analyze the behavior of page use, but also to make our offer more customer-friendly. Cookies remain stored at the end of a browser session and can be called up again when you visit the site again. If you do not wish this to happen, you should set your Internet browser to refuse to accept cookies. 

Right to information, correction, blocking, deletion

As a data subject, you have the following rights:
- in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
- in accordance with Art. 16 GDPR, the right to immediately request the correction of incorrect or incomplete personal data stored by us;
- in accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest or - for the establishment, exercise or defense of legal claims;

- in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data if
- the accuracy of the data is disputed by you;
- the processing is unlawful, but you refuse to delete it;
- we no longer need the data, but you need it to assert, exercise or defend legal claims or
- you have lodged an objection to the processing in accordance with Art. 21 GDPR;

- in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller;

Revocation of your consent to data processing

Some data processing operations are only possible with your express consent. You can withdraw your consent at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation. 

Right to lodge a complaint with the competent supervisory authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html. 

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and the lock symbol in the browser line.server log files The website provider automatically collects and stores information that your browser automatically transmits to us in server log files. These are

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

 

Data transmission upon conclusion of a contract for the purchase and shipment of goods

Personal data will only be transmitted to third parties if this is necessary in the context of contract processing. Third parties may be, for example, payment service providers or logistics companies. No further transmission of the data takes place or only if you have expressly consented to this. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Registration on this website

You can register on our website to use certain functions. The data transmitted is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full. Otherwise we will refuse registration. In the event of important changes, for example for technical reasons, we will inform you by e-mail. The e-mail will be sent to the address provided during registration. The data entered during registration is processed on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing that has already taken place remains unaffected by the revocation. We store the data collected during registration for the period that you are registered on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected. 

Contact form

Data transmitted via the contact form, including your contact details, will be stored in order to process your request or to be available for follow-up questions. This data will not be passed on without your consent. The data entered in the contact form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time. An informal notification by e-mail is sufficient for revocation. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. Data transmitted via the contact form will remain with us until you ask us to delete it, revoke your consent to storage or there is no longer any need to store the data. Mandatory statutory provisions - in particular retention periods - remain unaffected. 

Newsletter data

We require an e-mail address from you in order to send you our newsletter. Verification of the e-mail address provided is necessary and you must consent to receiving the newsletter. Additional data is not collected or is voluntary. The data is used exclusively for sending the newsletter. The data provided when registering for the newsletter will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time. To withdraw your consent, simply send us an informal email or unsubscribe via the "Unsubscribe" link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation. Data entered to set up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.

What data do we pass on to third parties?

We take your legitimate interests into account in accordance with the statutory provisions and only pass on your PI to third parties in the cases listed below:

Privacy policy for Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses "cookies". These are small text files that your web browser stores on your end device and enable website usage to be analyzed. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.
Google Analytics cookies are set on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the analysis of user behavior in order to optimize our website and, if necessary, advertising.

IP anonymization
We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google truncates your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and truncates it there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics will not be merged with other Google data.

Browser plugin
The setting of cookies by your web browser can be prevented. However, this may restrict some functions of our website. You can also prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. You can do this by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to our website: Deactivate Google Analytics.
You can find details on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing
We have concluded an order processing contract with Google in order to fully comply with the statutory data protection requirements.
Demographic features of Google Analytics
Our website uses the "demographic features" function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section "Objection to data collection".
You can find out more at http://www.google.com/intl/de/analytics/privacyoverview.html. 

Privacy policy for Google AdSense

Our website uses Google AdSense, a service for integrating advertisements from Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google AdSense uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to analyze information such as visitor traffic on these pages. The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. 

Privacy policy for Google AdWords and Google Conversion Tracking

Our website uses Google AdWords. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.
AdWords is an online advertising program. As part of the online advertising program, we work with conversion tracking. After clicking on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your end device. Google AdWords cookies lose their validity after 30 days and are not used to personally identify users. The cookie allows Google and us to recognize that you have clicked on an ad and have been redirected to our website.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. AdWords customers learn how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that allows users to be personally identified. If you do not wish to participate in tracking, you can object to its use. In this case, the conversion cookie must be deactivated in the user settings of the browser. This also prevents inclusion in the conversion tracking statistics.
"Conversion cookies" are stored on the basis of Article 6(1)(f) GDPR. As the website operator, we have a legitimate interest in analysing user behaviour in order to optimize our website and our advertising.
You can find details about Google AdWords and Google conversion tracking in Google's privacy policy: https://www.google.de/policies/privacy/.
You can use a modern web browser to monitor, restrict or prevent the setting of cookies. Deactivating cookies may result in limited functionality of our website.

Privacy policy for Google +1

Our website uses social media functions from Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you access our pages with Google plug-ins, a connection is established between your browser and Google's servers. Data is already transmitted to Google in the process. If you have a Google account, this data can be linked to it. If you do not wish this data to be linked to your Google account, please log out of Google before visiting our site. Interactions, in particular the use of a comment function or clicking on a "+1" or "Share" button, are also passed on to Google. You can find out more at http://www.google.de/intl/de/policies/privacy.

Privacy policy for Facebook

Our website uses functions from Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. When you access our pages with Facebook plug-ins, a connection is established between your browser and the Facebook servers. Data is already transmitted to Facebook in the process. If you have a Facebook account, this data can be linked to it. If you do not wish this data to be linked to your Facebook account, please log out of Facebook before visiting our site. Interactions, in particular the use of a comment function or clicking on a "Like" or "Share" button, are also passed on to Facebook. You can find out more at https://de-de.facebook.com/about/privacy. 

Privacy policy for Facebook Pixel, Facebook Custom Audiences and Facebook Conversion

Within our online offer, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used.
With the help of the Facebook pixel, it is possible for Facebook to determine you as a visitor to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

Privacy policy from Facebook

The processing of data by Facebook takes place within the framework of Facebook's data usage guidelines. Accordingly, general information on the display of Facebook ads can be found in Facebook's data usage policy (https://www.facebook.com/policy.php). 

You can find specific information and details about the Facebook pixel and how it works in the Facebook help section(https://www.facebook.com/business/help/651294705016616) EU-US Privacy Shield

Facebook is certified under the Privacy Shield Agreement(https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active) and thus offers a guarantee of compliance with European data protection law.

Basis

The use of Facebook Pixel and the storage of "conversion cookies" is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in analyzing user behavior in order to optimize both our website and our advertising.

Order data processing contract

For the processing of data for which Facebook acts as a commissioned data processor, we have concluded a commissioned data processing agreement with Facebook, in which we oblige Facebook to protect our customers' data and not to pass it on to third parties.

Contradiction

Although we declare legitimate interests in the use of the Facebook pixel and the storage of "conversion cookies", we offer you opt-out options. You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To set which types of ads are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based advertising(https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fads%2Fpreferences%2F%3Fentry_product%3Dad_settings_screen). The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices. You can also object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative(http://optout.networkadvertising.org/?c=1#!/) and additionally the US website aboutads.info(http://optout.aboutads.info/?c=2#!/) or the European website youronlinechoices.com(http://www.youronlinechoices.com/uk/your-ad-choices).

 

Privacy policy for Twitter

Our website uses functions of Twitter, Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA. When you access our pages with Twitter plug-ins, a connection is established between your browser and the Twitter servers. Data is already transmitted to Twitter. If you have a Twitter account, this data can be linked to it. If you do not wish this data to be associated with your Twitter account, please log out of Twitter before visiting our site. Interactions, in particular clicking on a "Re-Tweet" button, are also forwarded to Twitter. You can find out more at https://twitter.com/privacy.
Twitter plugin Our website uses functions of the Twitter service. The provider is Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When you use Twitter and the "Re-Tweet" function, websites you visit are linked to your Twitter account and published in your Twitter feed. This involves the transmission of data to Twitter. We have no knowledge of the content of the transmitted data or the use of this data by Twitter. Details can be found in Twitter's privacy policy: https://twitter.com/privacy. You can change your data protection settings on Twitter: https://twitter.com/account/settings

Privacy policy for Pinterest plugin

Our website uses functions of the social network Pinterest. The provider is Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103-490, USA. When you access a page with Pinterest functions, your browser establishes a direct connection to the Pinterest servers. Log data is transmitted to the Pinterest servers. The servers are located in the USA. The log data may allow conclusions to be drawn about your IP address, websites visited, browser type and settings, date and time of the request, your use of Pinterest and cookies. You can find details on this in Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy.

Privacy policy for PayPal

Our website enables payment via PayPal. The provider of the payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you pay with PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You can withdraw your consent at any time. Data processing operations carried out in the past remain effective in the event of a revocation. 

Privacy policy for Sofortüberweisung

Our website enables payment via "Sofortüberweisung." The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany. With the help of the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to fulfill our obligations. When paying by "Sofortüberweisung", your PIN and TAN are transmitted to Sofort GmbH. The payment provider then logs into your online banking account, automatically checks your account balance and makes the transfer. This is followed by an immediate transaction confirmation. Your turnover, the credit limit of your overdraft facility and the existence of other accounts and their balances are also automatically checked after logging in. In addition to PIN and TAN, the transmission to Sofort GmbH also includes payment data and personal data. Your personal data includes your first and last name, address, telephone number(s), email address, IP address and any other data required for payment processing. This data transfer is necessary in order to establish your identity beyond doubt and to prevent attempts at fraud. The transfer of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You can withdraw your consent at any time. Data processing operations in the past remain effective in the event of a revocation. Details on payment with Sofortüberweisung can be found at: https://www.sofort.de/datenschutz.html.