Data protection notice

Privacy Policy according to Art. 13, 14 GDPR for the website: www.k-fee-system.com.

K-fee System (hereafter „K-fee“ or „we“) is committed to protecting your privacy. The collection and processing of your personal data is therefore carried out by our company exclusively within the framework of the existing data protection regulations. On this page, we inform you about the collection and processing of your personal data in accordance with Art. 13, 14 of the General Data Protection Regulation (GDPR).

Data controller is

K-fee System GmbH

Senefelderstraße 44
51469 Bergisch Gladbach
Germany

Phone: +49 (0)2202/105-0
E-Mail: info@k-fee.com

Our data protection officer is

Dr. Philipp Wehler
Hoffmann Liebs Partnerschaft von Rechtsanwälten mbB
Goltsteinstraße 14
40211 Düsseldorf
E-Mail: legal@krueger.de

During your visit of this website www.k-fee-system.com (including its subpages) and the use of the various offers, we process your personal data as described in detail below.

1. Cookies

We use so-called cookies on our website (including its subpages). These are small text files which are transferred via your web browser from our web server to your computer and stored on the permanent memory (hard drive, fixed memory, etc.) of your computer. The information stored in cookies (e.g. IP address, date and time of the request, web browser used and operating system) is read by us. Below you will find further information on individual cookies used by us.

a) Functional Cookies

We currently make use of the following functional cookies:

b) Marketing Cookies

We use cookies (including those of third parties) to collect, combine and otherwise process information about your use of our website and services in order to continuously display advertisements and other content on our website and elsewhere (e.g. on other websites or apps) tailored to your personal interests and preferences (“marketing cookies“). These cookies are also used to compile advertisements and other content relevant to you and to measure the efficiency of such content. For this purpose, we evaluate, among other things, which ads were displayed to you, how often they were shown, when and where they were shown and whether or how you reacted to such content (e.g. by clicking on an ad or purchasing an advertised product).

We currently make use of the following marketing cookies:

2. Server-Logfiles

Each time you visit our website, your browser automatically transmits your IP address, identification (manufacturer, version, operating system) and language settings of your web browser, the time of your visit and visited sub-pages of our website, your referrer URL (i.e. the URL of the page from which you are visiting us), as well as the volume of data generated during your visit to our website (hereinafter “access data“). We process your access data in order to guarantee system security (e.g. to defend against hacker attacks) and to compile usage statistics. These processes are carried out on the basis of our legitimate overriding interest (Art. 6 para. 1 s. 1 lit. f) GDPR). You have neither a legal nor a contractual obligation to provide your access data, nor is this necessary for the conclusion of a contract. However, you must provide us with your access data to be able to access our website and use the offers and services provided on it.

3. Google Analytics

a) Data categories subject to processing, recipients, processing purposes

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google“). As our processor, Google will process the data collected using Google Analytics in order to analyze your use of the websites, compile reports on respective activities and provide us with further services associated with the use of our website. The statistics obtained in this way enable us to improve our content and make it more interesting for you as a user. Google Analytics uses cookies for this purpose, whereby the information generated by these cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

In general, no personal data is processed when using Google Analytics. Your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. If personal data is transferred to the USA, an adequate level of data protection is ensured by appropriate safeguards. EU standard contractual clauses have been concluded with the provider for this purpose. Copies can be obtained from the controller or directly from the European Union under the following link:

https://eur-lex.europa.eu/legal-content/EN/TXT/?qid=1579074030126&uri=CELEX%3A02010D0087-20161217. We point out that on our web pages Google Analytics was extended by the Plug-In “AnonymizeIP”, in order to guarantee an anonymized collection of your IP address also in these exceptional cases, so that your data are not referable to your person.

The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

b) Legal basis, retention period

The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f) GDPR. Sessions end regularly after 30 minutes of inactivity and campaigns end after six months; campaign data can be stored for a maximum of two years.

c) Right to object

If Google Analytics processes your data in personal form, you can object to this at any time – in this case this processing will be stopped immediately.

In particular, you can send your informal objection to our data protection officer:

legal@krueger.de, Krüger GmbH & Co. KG, Legal Department, Senefelderstraße 44, 51469 Bergisch Gladbach, Germany.

You can also exercise your right of objection in particular by preventing the storage of cookies used by Google Analytics by configuring your browser software accordingly (further information on this can be found here); however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Please note that you are leaving our website by doing so.

d) Information of Google

Google Dublin, Google Ireland Ltd.

Gordon House, Barrow Street, Dublin 4, Ireland

Fax: +353 (1) 436 1001.

• Terms of use for Google Analytics: https://policies.google.com/terms?gl=US&hl=en
• Privacy policy (a.o.) for Google Analytics:

https://policies.google.com/technologies/partner-sites

Google’s General Privacy Policy: https://policies.google.com/privacy?hl=en&gl=de

4. Google Maps

On this website we use the services of Google Maps. This enables us to display interactive maps directly on the website and enables you to use the map function conveniently.

By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. This is necessary due to technical reasons, i.e. to embed the map functions. We do not have information if Google merges your google maps data with any other data.

We have a legitimate interest (improvement and user friendliness of our website) in using the Google maps service within the meaning of Art. 6 para. 1 s. 1 lit. f) GDPR.

You have neither a legal nor a contractual obligation to provide your access data, nor is this necessary for the conclusion of a contract. However, you must provide us with your access data to be able to access our website and use the offers and services provided on it. We store your access data only during your visit of the Google Maps subpage to be able to embed the Google maps service.

Google Maps is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also processes your personal data in the United States. If personal data is transferred to the USA, an adequate level of data protection is ensured by appropriate safeguards. EU standard contractual clauses have been concluded with the provider for this purpose. Copies can be obtained from the controller or directly from the European Union under the following link:

https://eur-lex.europa.eu/legal-content/EN/TXT/?qid=1579074030126&uri=CELEX%3A02010D0087-20161217 For further information on the purpose and scope of data collection and processing by the plug-in provider please see Google’s privacy policy https://www.google.de/intl/en/policies/privacy.

5. Contact and customer complaints

You have the option of contacting us directly via a contact form provided on our website. In this case, you must provide your name, e-mail address and a subject for your request. We also offer you the opportunity to contact us directly via e-mail. If you click on the “E-Mail” button on our website, your e-mail program will open and you can send us a message to our pre-entered e-mail address. If you contact us via e-mail or web form, we will also collect your IP address and the time at which you send us your message. We use the information you send us via contact form or e-mail exclusively to process your request.

You are neither legally nor contractually obliged to provide us with your data, without providing such data though, we cannot deal with your query. The legal basis for this processing is Art. 6 para. 1 s. 1 lit. b) GDPR. We process your IP address and the time of your request in order to identify and defend against automated access and hacker attacks. The legal basis for this processing is Art. 6 para. 1 s. 1 lit. f) GDPR. In principle, we delete this data at the end of one week after your request has been answered or otherwise dealt with; in individual cases, however, we keep this data for longer if we are legally entitled or obliged to do so (e.g. by virtue of commercial or tax retention periods).

6. Facebook Fanpage

For further information on K-fee, our products, and special offers, please visit also our Facebook fanpage https://www.facebook.com/Kfeesystem/ hereafter „fanpage“).

We are using the Facebook service “Insights“ for evaluation of our Facebook fanpage. When you visit our fanpage, we are processing your data in joint controllership with Facebook provided via the Facebook service „Insights“. Such data includes information on your action and interaction on and in connection with our fanpage, thus the collected data can be personal data.

Meta Platforms Ireland Limited collects such data in compliance with your data privacy rights pursuant to Article 3 of the EU-GDPR. If personal data is transferred to the USA, an adequate level of data protection is ensured by appropriate safeguards. EU standard contractual clauses have been concluded with the provider for this purpose. Copies can be obtained from the controller or directly from the European Union under the following link:

https://eur-lex.europa.eu/legal-content/EN/TXT/?qid=1579074030126&uri=CELEX%3A02010D0087-20161217 For further information on the processing of your personal data in connection with the Facebook service Insights, please visit www.facebook.com/legal/terms/ information_about_page_insights_data). For further information on your rights in terms of data privacy pursuant to the EU-GDPR, please see also Facebook’s data privacy policy under www.facebook.com/about/privacy. To execute your rights, you are also free to contact us.

Please note that we do not have information on Facebook’s data processing. Thus, when visiting our fanpage or when sharing and linking our fanpages with other users and fanpages, Facebook might track your actions and collect your personal data for its own purposes

7. Data subject rights

In the following we would like to inform you about the further rights to which you are entitled as a data subject according to Art. 15-21 and Art. 77 para. 1 GDPR. In order to assert these rights, you can contact our data protection officer legal@krueger.de by e-mail in particular.

a) Right of access:

Pursuant to Art. 15 GPDR, you have the right to obtain information on data processing and a copy of the data processed. Within this context you also have the right to receive a copy of your personal data processed by us in accordance with Art. 15 para. 3-4 GDPR.

b) Right to rectification:

In accordance with Art. 16 GDPR, you have the right to demand that we correct or complete your personal data.

c) Right to erasure:

In accordance with Art. 17 para. 1 GDPR you have the right to demand that we erase your personal data. If we have published your personal data, you also have the right, in accordance with Art. 17 para. 2 GDPR, to request that we inform other controllers of your request to delete all links to and/or copies or replications of your personal data.

d) Right to restriction of processing:

In accordance with Art. 18 para 1-3 GDPR, you have the right to demand that we restrict the processing of your personal data.

e) Right to data portability:

Pursuant to Art. 20 GDPR, you have the right to receive the personal data about yourself that you have provided to us in a structured, commonly used and machine-readable format and to request the transfer of this data to another controller.

f) Right to withdraw consent:

If you have given us your consent to process your personal data, you can withdraw this consent at any time, in its entirety or with regard to individual processing purposes, in each case without giving reasons.

Please note that a lawful processing of your personal data, which has taken place until the time of your revocation, will not be retroactively unlawful by this.

You may withdraw your consent in particular by send a respective e-mail to legal@krueger.com.

In the event of withdrawal of your consent given for a specific service, you can no longer use the corresponding service; beyond that, you will not suffer any disadvantages.

If you wish to withdraw your consent only for certain processing and usage purposes, we would like to ask you to indicate this by naming the corresponding purpose when you withdraw your consent (e.g. as “withdrawal of consent with regard to the contact form” if you wish to withdraw your consent only with regard to the processing of your data for this purpose). If you do not specify your revocation in more detail or if you expressly declare it to be comprehensive, we will assume that you will revoke your consent to all collections, processes and uses explained in this privacy policy.

g) Right to object:

Pursuant to Art. 21 GDPR, you have the right to object to the processing of your personal data by us insofar as this is carried out for the purpose of direct advertising and/or on the basis of a “legitimate interest” within the meaning of Art. 6 para. 1 s. 1 lit. f) GDPR.

h) Lodging a complaint with a supervisory authority:

According to Art. 77 para. 1 GDPR, you have the right to lodge a complaint with a supervisory authority against the processing of your personal data by us if you are of the opinion that the processing of your personal data violates data protection regulations.

The competent supervisory authority for the federal state of North Rhine-Westphalia (Nordrhein-Westfalen) is the:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf

Deutschland (Germany)

Phone.: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle@ldi.nrw.de

Additionally, you have the option of asserting other legal remedies to which you are entitled (e.g. with courts or authorities).

8. Youtube

On our website we use YouTube. This is a video portal of YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as “YouTube”.

YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only referred to as “Google”.

We use YouTube in conjunction with the “Privacy Enhanced Mode” feature to display videos to you. According to YouTube, the function ” Privacy Enhanced Mode ” means that the data described in more detail below will only be transmitted to YouTube’s server if you actually start a video; i.e. all these plug-ins are deactivated as long as you do not activate the relevant click field with a mouse click. Your IP address and referrer URL (hereinafter “social media data“) will only be transmitted to YouTube or Google when you click on them. This also applies if you do not have a Google account or are not logged in. If you are logged in at Google, your social media data collected by us will be directly assigned to your existing account at Google. We recommend that you log out regularly after using a social network, especially before activating the click field, as this will help you avoid being assigned to your profile on Google.

We use YouTube to show you videos about our products, etc., so that we can improve our offering and make it more interesting for you as a user. Legal basis for the use of YouTube by us is Art. 6 Para. 1 S. 1 lit. f) EU-GDPR. If personal data is transferred to the USA, an adequate level of data protection is ensured by appropriate safeguards. EU standard contractual clauses have been concluded with the provider for this purpose. Copies can be obtained from the controller or directly from the European Union under the following link:

https://eur-lex.europa.eu/legal-content/EN/TXT/?qid=1579074030126&uri=CELEX%3A02010D0087-20161217You have neither a legal nor a contractual obligation to provide your social media data, nor is this necessary for the conclusion of a contract.

YouTube/Google stores your social media data in user profiles created for you personally in order to process them for the purposes of advertising, market research and/or the needs-based design of your websites. Such an evaluation is carried out in particular (also for users who are not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective provider to exercise this right.

We have no influence on the data collected and data processing operations of YouTube/Google, nor are we aware of the full scope of data collection, the purposes of processing or storage periods. We also do not have any information on the deletion of the collected data by YouTube/Google. Further information on the purpose and scope of data collection can be found in the data protection declarations listed below. There you will also find further information on your rights in this regard and setting options to protect your privacy:

• Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA. Google has submitted to the EU-US Privacy Shield. The provider provides further information on data processing here:

https://policies.google.com/technologies/partner-sites?hl=en.

• YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The provider provides further information on data processing here:

https://policies.google.com/privacy?hl=en&gl=en,
https://www.youtube.com/intl/de/yt/about/policies/#community-guidelines,
https://www.youtube.com/t/terms.

date: October 2019