CO.NET auf Instagram CO.NET auf Instagram CO.NET auf YouTube CO.NET auf Twitter CO.NET auf Facebook

Data Privacy Policy

 

1. Data protection at a glance

General remarks

The following information provides a simple overview of what happens with your personal data when you visit our website. Personal data is all data by which you can be personally identified. Please find detailed information about the topic of data protection in our Data Privacy Policy that is shown below this text.

Data collection on our website

Who is responsible for the data that is collected on this website?

The data processing on this website is implemented by the website operator. You can find its contact details in the legal notice of this website.

How do we collect your data?

On the one hand, your data is collected when you submit it to us. This can be, e.g. the data that you enter into a contact form.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time when the webpage is called up). This data is collected automatically as soon as you access our website.

For what do we use your data?

A part of the data is collected to ensure the fault-free provision of the website. Other data can be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient and purpose of the personal data that is stored about you. You furthermore have a right to demand the correction, blocking or erasure of this data. For questions about this and other topics relating to data protection, you are welcome to contact us at any time at the address of the website operator specified in the legal notice. In addition, you have a right to lodge complaint with the competent supervisory authority.

You also have the right to request the restriction of processing of your personal data in certain circumstances. Details can be found in the privacy policy under “Right to restriction of processing”.

Analysis tools and tools of third party providers

When visiting our website, your browsing behaviour can be analysed statistically. This is done foremost by means of cookies and so-called analysis programs. The analysis of your browsing behaviour is usually done in anonymous form; the browsing behaviour cannot be traced back to you. You can object to this analysis or prevent it by omitting the use of certain tools. You can find detailed information about this in the Data Privacy Policy below.

You can object to this analysis. We will inform you in this Data Privacy Policy about the options for objection.

 

2. General information and required information

Data protection

The operators of these webpages take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the legal data protection regulations as well as this Data Privacy Policy.

When you use this website, various personal data is collected. Personal data is data by which you can be personally identified. This Data Privacy Policy explains which data we collect and what we use it for. It also explains how and for which purpose this is done.

We inform that data transmission via the internet (e.g. in the communication by email) can have security gaps. Perfect protection of the data against access by third parties is not possible.

Note regarding the data controller

The data controller for the data processing on this website is:

CO.NET Verbrauchergenossenschaft eG
Nindorfer Deichfeld 9
21706 Drochtersen, Germany
Thomas Limberg, Johan Zwart
https://www.conet24.com 
Phone: +49 (0) 4143 999 501
Email: service@conet24.com

Legally mandated Data Protection Officer

We have appointed a Data Protection Officer for our company.

Erich Zimmermann c/o ZiDa-Datenschutz GmbH  Waldhofer Str. 102 69123 Heidelberg, Germany
www.zida-datenschutz.de e.zimmermann@zida-datenschutz.de

Responsible entity is the natural or legal person who, alone or in concert with others, decides on the purposes and means of processing personal data (such as names, e-mail addresses, etc.).
CO.NET Group AG, headquartered in Nidorfer Deichfeld 9, 21706 Drochtersen, is a provider of various services to the CO.NET Verbrauchergenossenschaft eG (e.g. in the area of customer service, Internet services, etc.).

In this context, the CO.NET Group AG has access to the personal data of CO.NET Verbrauchergenossenschaft, stores and processes them.

Revocation of your consent to data processing

Many data processing actions are permissible only with your explicit consent. You can revoke a consent already granted at any time. To do so, it is sufficient to send us a formless message by email. The legality of the data processing up until revocation remains unaffected.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

If the data are processed on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right at any time to object to the processing of your personal data for reasons that arise from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can identify compelling legitimate grounds for processing which override your interests, rights and freedoms, or the processing is for the assertion, exercise or defence of legal claims (objection according to Art. 21 (1) GDPR).

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for the purpose of direct marketing (objection according to Art. 21 (2) GDPR).

Right to lodge complaint with the competent supervisory authority

In the case of violations against the GDPR, the data subjects have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right of appeal is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right that the data that we process in an automated procedure based on your consent or for the fulfilment of a contract is transferred to yourself or a third party in a common, machine-readable format. If you request the direct transfer of the data to another data controller, this will be done only insofar as technically possible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential contents, such as orders or inquiries that you send to us as the website operator, we use SSL or TLS encryption. You can recognise an encrypted connection by the address field of your browser switching from “http://” to “https://” and by the lock symbol next to your browser field.

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

If there is a requirement upon the conclusion of a contract subject to payment that you transmit your payment details (e.g. account number if authorisation for direct debit is given) to us, this data will be required to settle the payment.

The payment transactions using common payment instruments (Visa/MasterCard, direct debit procedure) are executed exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the change in the address field of your browser from “http://” to “https://” and by the lock symbol in your browser field.

In encrypted communication, your payment details that you transmit to us cannot be read by third parties.

Access, blocking, erasure

Within the scope of the applicable legal regulations, you have the right at any time to obtain information free of charge regarding the personal data that has been stored about you, its origin and recipient, and the purpose of the data processing and, if applicable, the right to correction, blocking or erasure of this data. For questions about this and other topics relating to personal data, you are welcome to contact us at any time at the address of the website operator specified in the legal notice.

Right to restriction of processing

You have the right to request the restriction of processing of your personal data. You can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal information stored with us, we generally need time to review it. For the duration of the audit you have the right to request the restriction of processing of your personal data.
  • If your personal data are or have been unlawfully processed, you may request the restriction of data processing instead of erasure.
  • If we no longer need your personal information, but you need it to exercise, defend or assert a claim, you have the right to demand that your personal information be restricted instead of erased.
  • If you have filed an objection under Art. 21 (1) GDPR, a balance must be made between your interests and ours. If it is not clear whose interests prevail, you have the right to demand the restriction of processing of your personal data.

If you have restricted the processing of your personal data, these data, besides their storage, may only be processed with your consent or for the assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

Objection to marketing emails

We hereby object to any transmission of unsolicited advertising and informational materials by using the data that is published in the context of the obligation to provide a legal notice. The operators of the website expressly reserve taking legal steps in the event of an unsolicited transmission of advertising information such as spam emails.

3. Collection of data on our website

Cookies

Some of the webpages use so-called cookies. Cookies do not cause any damage on your computer and do not contain any viruses. Cookies serve the purpose of making our offer more user friendly, more effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies used by us are so-called “session cookies”. They are deleted automatically after the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser again in your next visit.

You can change the settings of your browser, so that you will be informed when cookies are saved and so that cookies are permitted only in individual cases. You can also activate the acceptance of cookies in particular cases only or exclude them in general, as well as set the automatic deletion of cookies when you close the browser. When cookies are deactivated, the functionality of this website may be limited.

Cookies that are required to execute the electronic communication process or to provide certain features requested by you (e.g. shopping cart feature) are stored on the basis of Art. 6 (1) lit. f) GDPR. The website operator has a justified interest in the storing of cookies for the technically fault-free and optimised provision of its services. If other cookies are used (e.g. cookies to analyse your browsing behaviour), these are explained separately in this Data Privacy Policy.

Server log files

The provider of the webpages collects and stores information automatically in so-called server log files, which are transmitted to us automatically by your browser. These are:

  • browser type and browser version,
  • operating system used,
  • referrer URL,
  • host name of the accessing computer,
  • time of the server query,
  • IP address.

This data is not combined with other data sources.

The basis for the data processing is Art. 6 (1) lit. b) GDPR, which permits the processing of data for the fulfilment of a contract or the execution of pre-contractual measures.

The collection of these data is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the error-free technical presentation and optimisation of its website – for this purpose, the server log files must be recorded.

Contact form

If you would like to send us enquiries, your statements based on the enquiry form including the contact details specified by you on the form will be saved by us for the processing of the enquiry and for the case that there are follow-up questions. These data will not be passed on to others without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 (1) lit. a) GDPR). You can revoke this consent at any time. To do so, it is sufficient to send us a formless message by email. The legality of the data processing up until revocation remains unaffected.

The data entered by you in the contact form will remain with us until you request us to erase it or revoke your consent to the storing or when the purpose for the data storage no longer applies (e.g. after completed processing of your inquiry). Compulsory legal regulations – in particular retention periods – remain unaffected.

Processing of data (customer and contract data)

We collect, process, and use personal data only to the extent required for the conclusion, substantive arrangement or change of a legal relationship (existing data). This is done on the basis of Art. 6 (1) lit. b) GDPR, which permits the processing of data for the fulfilment of the contract or the execution of pre-contractual measures. We collect, process, and use personal data on the usage of our webpages (usage data) only to the extent required to facilitate the service or invoice the use of the service to the user.

The collected customer data will be deleted after completion of the contract or termination of the business relationship. Legal retention periods remain unaffected.

Data transmission on the conclusion of contract for online shops, dealers and shipment of products

We transmit personal data to third parties, for example, to the businesses entrusted with the delivery of the products or the credit institution contracted for the payment processing only if this is necessary within the scope of the performance of the contract. No further transfer of data takes place or only if you have given your explicit consent to the transmission. Your data will not be transferred to third parties without your explicit consent, for example, for marketing purposes.

The basis for the data processing is Art. 6 (1) lit. b) GDPR, which permits the processing of data for the fulfilment of a contract or the execution of pre-contractual measures.

Data transmission on the conclusion of the contract for services and digital contents

We transmit personal data to third parties, e.g. to the credit institution contracted for the payment processing, only if this is necessary within the scope of the contract execution.

No further transfer of data takes place or only if you have given your explicit consent to the transmission. Your data will not be transferred to third parties without your explicit consent, for example, for marketing purposes.

The basis for the data processing is Art. 6 (1) lit. b) GDPR, which permits the processing of data for the fulfilment of a contract or the execution of pre-contractual measures.

4. Social media

Our social media presence

Data processing through social networks

We maintain publicly available profiles in social networks. The individual social networks we use can be found below.

Social networks such as Facebook, Google+, etc. can typically fully analyse your user behaviour when you visit their website or a website with integrated social media content (such as ‘Like’ buttons or banner ads). By visiting our social media sites, numerous data protection relevant processing operations are triggered. In detail:

If you are logged in to your social media account and visit our social media site, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, these data are collected, for example, via cookies stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. This means you can be shown interest-based advertising inside and outside of the social media site. If you have an account with the social network, interest-based advertising can be displayed on any device you are or were logged in to.

Please also note that we cannot ascertain all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.

Legal basis

Our social media presence should guarantee the widest possible coverage on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (for example, consent within the meaning of Art. 6 (1) (a) GDPR).

Controller and assertion of rights

When you visit one of our social media sites (e.g. Facebook), we share responsibility for the data processing operations triggered during that visit with the social media platform operator. You can assert your rights (information, rectification, erasure, restriction of processing, data portability and objection) both to us and to the operator of the respective social media portal (e.g. Facebook).

Please note that, despite the shared responsibility with the social media portal operators, we do not have complete influence over the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.

Storage time

The data collected directly from us via our social media presence will be deleted from our systems as soon as the purpose for their storage no longer applies, you ask us to erase them, you withdraw your consent to their storage or the purpose for the data storage no longer applies. Saved cookies remain on your device until you delete them. Compulsory legal regulations – in particular retention periods – remain unaffected.

We have no control over the amount of time your data are stored by the social network operators for their own purposes. For details, please refer to the social network operators directly (e.g. regarding their privacy policies. See below).

5. Analysis tools and advertising

Google Analytics

This website uses features of the advertising analytics service Google Analytics. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your usage of this website is generally transmitted to and saved on a server of Google in the USA.

Google Analytics cookies are stored on the basis of Art. 6 (1) lit. f) GDPR. The website operator has a justified interest in the analysis of the user behaviour in order to optimise both its advertising offer as well as its advertising.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 (1) (f) GDPR. The website operator has a justified interest in the analysis of the user behaviour in order to optimise both its web offer as well as its advertising.

IP anonymisation

We have activated the IP anonymisation feature on this website. This way, your IP address will be truncated within the Member States of the European Union or in other signatory states of the Treaty on the European Economic Zone before transmission to the USA. The complete IP address will only be transmitted in exceptional cases to a server of Google in the USA and it will be truncated there. By order of the operator of this website, Google will use this information to analyse your usage of the website, compile reports about website activities, and perform additional services for the website operator, which relate to the website utilisation and internet use. The IP address transmitted from your browser in the context of Google Analytics will not be combined with other data of Google.

Browser plug-in

You can prevent the storing of the cookies by a corresponding setting of your browser software; however, we inform that you might not be able to use all functions of this website to full extent in that case. In addition, you can prevent the collection of the data that is generated by the cookie about your use of the website (incl. your IP address) from being transmitted to Google, as well as the processing of these data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents that your data is collected in future visits to this website: Deactivate Google Analytics.

You can find more information on the handling of user data at Google Analytics in Google’s Data Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en-GB.

Commissioned data processing

We have concluded a contract with Google for commissioned data processing and we implement the strict requirements of the German data protection authorities to the full extent for the use of Google Analytics.

Demographic attributes at Google Analytics

This website uses the function “demographic attributes” of Google Analytics. By means of this, reports can be drafted that provide information on the age, gender and interests of the visitors to the webpage. This data originates from personalised advertising of Google and from visitor data of third party providers. This data cannot be attributed to any one identifiable person. You can deactivate this function at any time via the display settings in your Google account or you can generally prevent that your data is collected by Google Analytics as described in the Section “Objection to data gathering”.

Google Analytics Remarketing

Our websites use functions of Google Analytics Remarketing in combination with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

This function permits combining the target advertising groups generated using Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. This way, interest-specific, personalised advertising messages that have been customised to you depending on your prior usage and browsing behaviour on an end device (e.g. smartphone) can also be displayed on another one of your end devices (e.g. tablet or PC).

For this purpose and if you have granted a corresponding consent, Google will link your internet search and app browser history to you Google account. This way, the same personalised advertising messages can be activated on each end device that you use to log into your Google account.

To support this function, Google Analytics collects Google authenticated user IDs that are temporarily combined with our Google Analytics data to define and generate target groups for cross-device ad-based marketing.

You can object to the cross-device remarketing/targeting permanently by deactivating personalised advertising in your Google account; to do so, follow this link: https://www.google.com/settings/ads/onweb/.

The collected data in your Google account is combined exclusively on the basis of your consent or revocation of consent, which you can declare to Google (Art. 6 (1) lit. a) GDPR). For data collection processes that are not linked in your Google account (e.g. because you do not have a Google account or have objected to the linking), the collection of the data is based on (Art. 6 (1) lit. f) GDPR. The justified interest results from the website operator having an interest in the anonymised analysis of the website visitors for advertising purposes.

You can find more information about this in the privacy policy of Google at: https://policies.google.com/technologies/ads?hl=en-GB.

6. Newsletter

Newsletter data

If you would like to subscribe to the newsletter offered on the website, we require your email address and information, which permits us to check if you are the owner of the specified email address and if you agree to the receipt of the newsletter. No further data is collected or only on a voluntary basis. We use this data exclusively for mailing the requested information and do not transfer it to third parties.

The data entered in the newsletter subscription form is therefore processed exclusively on the basis of your consent (Art. 6 (1) lit. a) GDPR). You can revoke the consent given for the storing of the data, email address, as well as their use for the mailing of the newsletter at any time, for example, by clicking the link “unsubscribe” that is contained in the newsletter. The legality of the data processing already taken place remains unaffected by the revocation.

The data about you that is stored by us for the purpose of the newsletter subscription will be stored until you unsubscribe from the newsletter and it will be deleted after you have unsubscribed the newsletter. Data that has been stored by us for other purposes (e.g. email addresses for the member area) remains unaffected by this.

7. Plug-ins and tools

YouTube with enhanced data protection

Our website uses plug-ins from the YouTube site. Operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

We use YouTube in enhanced privacy mode. According to YouTube, this mode means that YouTube does not store information about visitors to this site before they watch the video. However, sharing data with YouTube partners is not necessarily excluded by the enhanced privacy mode. So, regardless of whether you watch a video, YouTube connects to the Google DoubleClick network.

As soon as you start a YouTube video on our website, a connection to the servers of YouTube will be established. In the process, the YouTube server will be told which pages you have visited. If you are logged in to your YouTube account, you enable YouTube to attribute your browsing pattern to your personal profile. You can prevent this by logging out of your YouTube account.

In addition, after starting a video, YouTube may store various cookies on your device. With the help of these cookies, YouTube can receive information about visitors to our website. This information will be used to capture video statistics, improve usability, and prevent fraud. The cookies remain on your device until you delete them.

After the launch of a YouTube video, additional data processing operations may be triggered that we have no control over.

YouTube is used in the interest of an attractive display of our online offers. This constitutes a justified interest within the meaning of Art. 6 (1) (f) GDPR.

For more information about privacy on YouTube, please see their privacy policy at: https://www.youtube.com/t/privacy_at_youtube.

Google Web Fonts

For a consistent display of fonts, this website uses the so-called Web Fonts that are provided by Google. When accessing a page, your browser will load the required Web Fonts to your browser cache to display texts and fonts correctly.

For this purpose, the browser used by you has to establish contact with the servers of Google. Google will thereby find out that your IP has accessed our website. Google Web Fonts is used in the interest of a consistent and attractive display of our online offers. This constitutes a justified interest in the definition of Art. 6 (1) lit. f) GDPR.

If your browser does not support Web Fonts, a standard font from your computer will be used.

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in the data privacy policy of Google: https://www.google.com/policies/privacy/.