Our Privacy Policy
We at Celbretti UG take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Various pieces of personal data are collected when you use this website. Personal data are data which can be used to identify you personally. This privacy policy explains which data we collect and what we use them for. It also explains how and for what purpose this is done.
We would like to point out that data transfer on the Internet (for example when communicating by email) may have security vulnerabilities. It is not possible to provide 100% protection for your data from access by third parties.
I Responsibility for data processing
The controller responsible for the processing of data on this website under Art. 4 No. 7 GDPR is
Rachel Wright - Managing Director
Celbretti UG
Rheinsberger Str. 76/77
10115 Berlin
Email: hello@celbretti.de
Telephone: +49 1739126872
II Data recording on our website
When you visit our website, we process your personal data as follows:
Server log files
We use Shopify to power our online website. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
Shopify automatically collects and saves information which your browser automatically sends to us in so-called server log files. These are as follows:
- Any personal information you complete in the form masks (email address, name, query)
- IP address
- Date and time of the request
- Referrer URL
- Host name of the accessing computer
- Browser type and browser version
- Operating system and its interface
These data are not combined with other data sources.
Purpose of data processing
The collection of data to provide the website and saving the data in log files is essential for operating the website and for providing our services to customers. There is therefore no right on the part of the user to object to this.
Legal basis
The basis for the data processing is Art. 6 (1) lit. f GDPR. The temporary storage of the IP address is required to enable the website to be delivered to the user’s computer. The user’s IP address must be saved for the duration of the session for this purpose. Log files are saved to ensure the functionality of the website and the security of our information technology systems.
Duration of storage
The data will be erased as soon as they are no longer required to achieve the purpose for which they were collected. For collecting the data to provide the website, this is when the session is ended.
Right to object and deletion option
Due to the fact that the data required for providing the website and the saving of the data in log files is essential for operating the website, users have no right to object to the data being processed.
Cookies
Cookies are small text files which are placed on your computer and are saved by your browser. They are used to make the website more user-friendly, effective and secure. Cookies do not cause any damage to your computer and do not contain viruses.
The website uses various essential cookies to ensure that it functions correctly and to make it easier to navigate for users, as well as cookies which are not essential for the technical functioning of the website, but enable us to carry out various tasks, particularly analyses.
As the user, when you open our website you are notified of the use of essential cookies and of other non-essential cookies. Your consent to process the personal data used in this respect (relating to the non-essential cookies) is both requested and obtained via a pop-up notification. This notification also includes information about this privacy policy.
Further details of the cookies used are also provided in the appropriate paragraphs of this privacy policy.
Legal basis
The legal basis for processing personal data using technically essential cookies is Art. 6 (1) lit. f GDPR. Our legitimate interest is the provision of the website.
Duration of storage, right to object and deletion option
Cookies are saved on the user’s computer and sent from the computer to our site. Therefore, as the user, you have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies for our website are disabled, it is possible that you will be unable to use all the features of this website.
Furthermore, we’d like to draw your attention to the consent tool on our website in which you can select your choice relating to settings for all non-essential cookies.
Email contact and Typeform extension
There are two ways you can contact us on our website. These are:
- Reaching out via the hello@celbretti.de email address
On our website, it is possible to contact us using the provided email address. In this case, your personal data submitted with the email will be saved. The data will not be forwarded to third parties.
- Using the Typeform form to book a picnic
We use a Typeform extension to process our picnic bookings. If you use the form, the data you enter in the input mask will be sent to us and saved when you send them. The following data will be saved:
- Your email address
- Your name
- Your phone number
- The information regarding your booking which you enter into the fields
Your data will be processed exclusively to handle your concern. In the event that you contact us by email, this also comprises the required legitimate interest in processing the data. The other personal data processed when you send your query are used to prevent any abuse of the contact form and ensure the security of our information technology systems.
Legal basis and purpose for data processing
The legal basis for processing the data if the user’s consent has been obtained is Art. 6 (1) lit. a of the GDPR. The legal basis for processing the data sent in an email is Art. 6 (1) lit. f GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for processing the data is Art. 5 (1) lit. b GDPR.
Duration of storage, right to object and erasure option
The data will be erased when they are no longer required to achieve the purpose for which they were collected, in other words when the conversation with you, the user, is ended or the matter has been fully clarified or two months following the delivery of your order.
You have the opportunity at any time to revoke your consent for processing the personal data (see below “Revocation of consent declarations”).
Option to receive updates
It is possible to subscribe to receive updates from us, including the publication of blog posts, sales, and new products. When you opt to receive more information, the data from the input mask are sent to us. You must enter your email address to subscribe to receive updates. Furthermore, the following data are collected during the subscription process:
- Email address
- IP address of the requesting computer
- Date and time of registration
Only your email address is essential for us to send you the updates. You can decide to stop receiving updates from us at any time by selecting the ‘unsubscribe’ link at the bottom of the mailings or by reaching out to hello@celbretti.de.
Legal basis and purpose for data processing
The legal basis for processing the data after a user has subscribed to receive updates is the user’s consent under Art. 6 (1) lit. a GDPR.
Duration of storage, right to object and erasure option
The data you send to us for the purposes of subscribing to updates are used by us to send you such information. If you choose to unsubscribe, they will be erased both from our database.
You can revoke your consent at any time by unsubscribing from the updates we send. The legality of any data processing operations, which have already been performed, will not be affected by this revocation. We provide a link for this purpose at the bottom of each notification sent. You can also unsubscribe from the notifications by sending an email to hello@celbretti.de.
III Your rights
Information, restriction of processing, erasure
Under the current statutory regulations set out in Art. 15 of the GDPR, you have the right at any time to be provided with free of charge information about the personal data, their origin and recipients stored on you, the purpose of the data processing and, if applicable, under Art. 16 of the GDPR, the right to demand the rectification, restriction of processing (Art. 18 GDPR) or erasure of these data (Art. 17 GDPR). For this purpose and if you have any other questions relating to personal data, you can contact us at any time using the address provided above.
Right to data transferability
You have the right to have any data, which we process automatically on the basis of your consent or to fulfil a contract, to be sent to you or a third party in a commonly used, machine-readable format (Art. 20 GDPR). If you request that the data are sent direct to a different controller, this will only be done if it is technically feasible.
Right to complain to the relevant supervisory authority
In the event of breaches of data protection law, the data subject has the right to complain to the relevant supervisory authority (Art. 77 GDPR and Section 19 German Federal Data Protection Act [BDSG]). The relevant supervisory authority in data protection matters is the state data protection officer of the German state in which our company is located (Berlin). A list of data protection officers and their contact details is available using the following link: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Revocation of consent declarations
There are data processing procedures which are only possible with your express consent. You can revoke any consent you have already given at any time. You only need to send an informal notification to us by email for this purpose. The legality of any data processing operations, which have been performed before the revocation, will not be affected by this revocation.
IV Your right to object under Art. 21 GDPR
You have the right, for reasons resulting from your specific situation, to object at any time to us on an informal basis against the processing of your personal data taking place on the basis of Art. 6 (1) lit. e GDPR (data processing in the public interest) and Art. 6 (1) lit. f GDPR (data processing on the basis of a legitimate interest). If you submit an objection, we shall cease to process your personal data unless we can provide evidence that there are compelling grounds, which merit protection, for processing the data which outweigh your interests, rights and freedoms, or the data processing is taking place for the purpose of lodging, exercising or defending legal claims.
V Analysis and advertising tools used
Web analysis by Google Analytics and Facebook
We use Google Analytics to help us understand how our customers use our website. You can read more about how Google uses your personal information here: https://www.google.com/intl/en/policies/privacy/.
Furthermore, you can opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We also use a Facebook Pixel which helps us make our Facebook marketing measures more effective. The Pixel uses cookies to track the users who come to our website via Facebook ads. When you arrive on our website, a pop-up button will ask you to select your preference regarding the use of cookies. You can read more about Facebook’s privacy policy here: Facebook, Inc. (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active)
Users’ personal data are processed to enable us to analyze the surfing habits of our users and to follow up with users via marketing measures. By evaluating these data, we are able to compile information about the use of the various components of our website. This helps us to continuously improve our website and make it more user-friendly as well as to create more effective ways of reaching our customers.
Legal basis for data processing
The basis for the use of Google Analytics is Art. 6 (1) sentence 1 letter f GDPR. Our legitimate interest for its use is that we can improve our website using the statistics acquired through Google Analytics and make our website more interesting for you, the user.
Duration of storage
The data will be erased as soon as they are no longer required for our recording purposes, but at the latest after one year.
Rights to object and deletion option
Cookies are saved on your computer for such analytical purposes (for further details see Section III 2a). The data collected in this way is saved by the controller exclusively on its server in Germany. You can adjust the evaluation by deleting existing cookies and preventing cookies being saved. If you prevent cookies being saved, we would like to point out that it is possible you will be unable to use all the features of this website. You can prevent cookies being saved using a setting in your browser.
VI Social media
Social media links
If you use the social media icons of Facebook and Instagram on our website, your personal data will not automatically be forwarded. To prevent automatic data transfers to the service providers of social media, these services are included on our website by means of Internet links. We have no joint data protection responsibility if your data are processed by these service providers for purposes defined by them.
Our social media sites are part of our public relations work. Our aim is to inform appropriate target groups and exchange information with them.
All our social media service providers are certified under the EU-US Privacy Shield, and this can be viewed by anybody, which means that a legally reasonable level of protection is provided for personal data:
Facebook, Inc. (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active)
VII Additional services
Google conversion tracking
We use so-called conversion tracking as part of our use of the Google AdWords service. If you click on an advertisement inserted by Google, a cookie for conversion tracking is placed on your computer/device. These cookies lose their validity after 30 days, do not contain any personal data and can therefore not be used for personal identification purposes. The information obtained using the conversion cookie is used to prepare conversion statistics for AdWords customers who have chosen to use conversion tracking. Users’ data are processed in pseudonym form as part of the Google Marketing Service. This means that Google, for example, does not save all process users’ name or email address, but instead processes the pseudonym user profiles relevant to the appropriate data cookie. In other words, from Google’s point of view, the advertisements are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly permitted Google to process these data without this pseudonymisation. The information about users collected by Google Marketing Service are transferred to Google and saved on Google’s servers in the USA.
The Google Marketing Services used by us include the online advertising program “Google AdWords”. We particularly use the remarketing function within the Google AdWords service. In the case of Google AdWords, each AdWords customer receives a different “conversion cookie”. This means that cookies cannot be traced using AdWords customers’ websites. The information obtained using the cookie is used to prepare conversion statistics for AdWords customers who have chosen to use conversion tracking. AdWords customers are supplied with the total number of users who have clicked on the advertisement and who have continued to a page with a conversion tracking tag. However, they do not contain any information that allows users to be personally identified.
We use Google’s Remarketing technology. This technology sends users targeted advertising on Google Partner Network’s websites, if they have already visited our website and online services and have shown an interest in these. The advertising is displayed by the use of cookies. The use of these text files enables the behaviour of users to be analysed when they visit the websites and then used for targeted product recommendations and interest-based advertising. No personal data from the visitors to the websites are saved.
Further information about using data for advertising purposes by Google is provided on the summary site: https://www.google.com/policies/technologies/ads, Google’s privacy policy can be viewed at https://www.google.com/policies/privacy.
More information about Google and the Google (Ads) can be viewed at http://www.google.com/privacy/ads/.
Google is certified under the Privacy Shield Convention, thus guaranteeing compliance with European data protection law: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Legal basis for data processing
The data are processed on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest is in enhancing our website.
Right to object and deletion option
You can permanently disable the use of cookies by Google by using the following link and then downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin. You can also disable the appropriate cookies by opening the NAI (Network Advertising Initiative) disabling page at http://www.networkadvertising.org/choices/.
You can disable advertisements on Google and interest-related Google advertisements (within the Google Display Network) in your browser by clicking on the “Off” button at https://adssettings.google.de or disabling it at http://www.aboutads.info/choices. Further information about possible settings and data protection at Google is available at https://www.google.de/intl/de/policies/privacy/?fg=1.
If you would like any information that this privacy policy cannot provide or if you would like more information on a specific point, please contact the controller named above.