Privacy policy

 

 

Click on the Link to deaktivate Google Analytics.

Disable Google Analytics

 

Privacy policy for the website www.creano.com

It is our aim that you feel comfortable on our website. The protection of your privacy and your personal rights are therefore important to us. Therefore we would like to ask you to read the following summary about the functionality of our website carefully. You can rely on a transparent and fair data processing and we strive for a careful and responsible handling of your data.

The following data protection information is intended to inform you how we use your personal data. In doing so, we comply with the strict provisions of German data protection law and the requirements of the European Data Protection Basic Regulation (DS-GVO).

Responsible person and contact Data protection officer

The person responsible within the meaning of the DS-GVO, other data protection laws applicable in the member states of the EU and other provisions of a data protection nature:

Creano GmbH, In der Wanne 1, 31832 Springe, Germany
Phone: 05041-7795111
E-mail: info@creano.com

You can reach the data protection officer of the responsible person at:
E-mail: gruendler@creano.com

Scope of the processing of personal data

We collect and use personal data from you only to the extent necessary to provide a functional website and our content and services, e.g. when you register on our website or log into an existing customer account or when you order products. The collection and use of your personal data is regularly carried out only with your consent. An exception applies in those cases in which prior consent is not possible for actual reasons and the processing of the data is permitted by law.

The security of your personal data has a high priority for us. We therefore protect your data stored with us through technical and organizational measures to effectively prevent loss or misuse by third parties. In particular, our employees who process personal data are obliged to observe data secrecy. In order to guarantee the permanent protection of your data, the technical security measures are regularly checked and, if necessary, adapted to the state of the art. These principles also apply to companies that process and use data on our behalf and in accordance with our instructions.

Processing purposes and legal basis for the processing of your personal data

We collect, process and use your personal data for the following purposes:

Establishment and execution of contractual relationships
Newsletter dispatch
Marketing measures, e.g. for the implementation of lotteries
Customer service and support
Provision of telemedia, e.g. for the order processing of our online offer of goods and services

The processing of your personal data may be based on the following legal bases:

Art. 6 para. 1 lit. a DS-GVO serves us as a legal basis for processing operations in which we obtain your consent for a specific processing purpose.
Art. 6 para. 1 lit. b DS-GVO, insofar as the processing of personal data is necessary for the fulfilment of a contract, e.g. when you purchase a product. The same applies to such processing operations that are necessary to carry out pre-contractual measures, such as inquiries about our products or services.
Art. 6 para. 1 lit. c DS-GVO, insofar as we are subject to a legal obligation that requires the processing of personal data, such as to fulfil tax obligations.
Art. 6 para. 1 lit. d DS-GVO in the event that vital interests of you or any other natural person necessitate the processing of personal data.
Art. 6 para. 1 lit. f DS-GVO applies on the basis of our legitimate interests, e.g. when using service providers in the context of order processing, such as shipping service providers or when carrying out statistical surveys and analyses as well as recording registration procedures. Our interest is directed to the use of a user-friendly, appealing and secure presentation and optimization of our website, which serves both our business interests and your expectations.

Duration of storage and routine deletion of personal data

We process and store your personal data only for the period of time necessary to fulfil the storage purpose or if this was provided for in laws or regulations. Your personal data will be deleted or blocked once the purpose has ceased to exist or been fulfilled. In the event of blocking, the data will be deleted as soon as legal, statutory or contractual retention periods do not prevent this, there is no reason to assume that deletion would impair your interests worthy of protection and that deletion would not cause disproportionately high expenditure due to the special type of storage.

Collection of general data and information, so-called log files

Our website collects a series of general data and information with each call on the basis of Art. 6 para. 1 lit. f DS-GVO, which are temporarily stored in log files of a server. A log file is created in the course of an automatic protocol of the processing computer system. Can be captured:

Access to the website (date, time and frequency)
How you got to the website (previous page, hyperlink, etc.)
Amount of data sent
Which browser and which browser version you use
The operating system you are using
Which Internet Service Provider You Are Using
Your IP address, which your Internet access provider assigns to your computer when you connect to the Internet.

The collection and storage of this data is necessary for the operation of the website in order to ensure the functionality of the website and to correctly deliver the contents of our website. The data is also used to optimise our website and to guarantee the security of our IT systems. For this reason, the data is stored for a maximum of 7 days as a technical precaution.

Dispatch of information about our offers and special offers as well as other news, e.g. newsletters.

We use your data for the dispatch of information ordered by you about our offer and other actions by us to the e-mail address given by you. This will only be done with your consent or legal permission. Consent to dispatch is given on the basis of Art. 6 Para. 1 lit. a, Art. 7 DS-GVO and § 7 Para. 3 UWG.

a) Newsletter registration on our website

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input mask will be transmitted to us, i.e. at least your e-mail address. The registration takes place by means of the so-called Double-Opt-In procedure. After registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with external e-mail addresses. Your consent will be obtained for the processing of your data during the registration process and reference will be made to this data protection information.

b) Shipping due to the sale of goods and services

If you purchase goods or services on our website, we may also send you information about our own similar goods and services to your email address without your consent.

c) Postal Shipping

We may also use your data to send you information about our offers and promotions by post.

We want you to enjoy reading our e-mails. Therefore, we try to include only those contents in which you are probably interested. We therefore measure and store opening and click rates in your user profile, i.e. if and when you open our e-mails, which contents of the e-mails you click on when and if and why our e-mails could possibly not be delivered. We also use this data for statistical purposes.

Of course, you can unsubscribe from receiving our information at any time, i.e. revoke your consent with effect for the future. To do this, you will find a corresponding unsubscribe link in every e-mail or newsletter and can confirm the unsubscribe on our website. You can also contact us at any time to revoke your consent:

By e-mail: gruendler@creano.com By post: Creano GmbH, In der Wanne 1, 31832 Springe, Germany

Certain information messages, which are necessary for the contract execution and the function of our web page, for example to the service (e.g. registration confirmation, information of the customer service) or to a liable to pay the costs package (e.g. order confirmation, contract documents, payment completion) cannot be canceled. These messages will be sent to the contact information provided by you.

Processing of personal data when establishing contact, registration or guest order

(a) establishment of contact

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input mask will be transmitted to us, i.e. at least your e-mail address. The registration takes place by means of the so-called Double-Opt-In procedure. After registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with external e-mail addresses. Your consent will be obtained for the processing of your data during the registration process and reference will be made to this data protection information.

b) Shipping due to the sale of goods and services

If you purchase goods or services on our website, we may also send you information about our own similar goods and services to your email address without your consent.

c) Postal Shipping

We may also use your data to send you information about our offers and promotions by post.

We want you to enjoy reading our e-mails. Therefore, we try to include only those contents in which you are probably interested. We therefore measure and store opening and click rates in your user profile, i.e. if and when you open our e-mails, which contents of the e-mails you click on when and if and why our e-mails could possibly not be delivered. We also use this data for statistical purposes.

Of course, you can unsubscribe from receiving our information at any time, i.e. revoke your consent with effect for the future. To do this, you will find a corresponding unsubscribe link in every e-mail or newsletter and can confirm the unsubscribe on our website. You can also contact us at any time to revoke your consent:

By e-mail: gruendler@creano.com By post: Creano GmbH, In der Wanne 1, 31832 Springe, Germany

Certain information messages, which are necessary for the contract execution and the function of our web page, for example to the service (e.g. registration confirmation, information of the customer service) or to a liable to pay the costs package (e.g. order confirmation, contract documents, payment completion) cannot be canceled. These messages will be sent to the contact information provided by you.

Processing of personal data when establishing contact, registration or guest order

(a) establishment of contact

When you contact us by telephone, e-mail or via a contact form, the data you provide will be stored by us on the basis of Art. 6 para. 1 lit. a DS-GVO in order to answer your questions. The establishment of contact is logged in order to be able to prove the establishment of contact in accordance with the legal requirements. Your consent will be obtained for the processing of the data within the framework of the contact form and reference will be made to this data protection information. We will delete the data arising in this context once the respective conversation with you has ended and the relevant facts have been finally clarified.

b) Registration when ordering

On our website we offer you the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The registration serves the fulfilment of a contract or the implementation of pre-contractual measures and is therefore based on Art. 6 para. 1 lit. b DS-GVO.

For the conclusion and processing of contracts, we require contact details, such as name, delivery and billing address and e-mail address, as well as details of the type of means of payment you have chosen, depending on the individual case. In addition, we use your data to maintain our customer database so that only the relevant data is stored there. In order to avoid typing errors and to ensure that your ordered items also reach you, we check the completeness and correctness of your address when you enter them.

c) Miscellaneous

Based on Art. 6 para. 1 lit. c and f DS-GVO, we use and store your personal data and technical information to the extent necessary to prevent or pursue misuse or other illegal conduct on our website, e.g. to maintain data security in the event of attacks on our IT systems. This is also done to the extent that we are legally obliged to do so, e.g. due to official or court orders, and for the exercise of our rights and claims as well as for legal defence.

Passing on personal data to third parties

Passing on personal data to third parties

When passing on your personal data, we always pay attention to the highest possible level of security. For this reason, your data will only be passed on to service providers and partner companies that have been carefully selected and contractually obligated in advance. In addition, your data will only be forwarded by us to locations within the European Economic Area which are therefore subject to strict EU data protection legislation or which are obliged to comply with an appropriate level of protection. A transfer of data to third countries is not currently taking place and is not planned.

c) Transfer to service companies pursuant to Art. 6 Para. 1 lit. b and f DS-GVO

For the operation as well as for the optimization of our web page as well as our services and for the contract winding up various service enterprises become active for us. Some of these companies work for us by way of order processing and may therefore only use the data provided in accordance with our instructions. In this case, we are legally responsible for appropriate data protection precautions at the companies commissioned by us. We therefore agree concrete data security measures with these companies and monitor them regularly. In contrast to order processing, in the following cases we transmit data to third parties for their own use for contract processing:

For the delivery of goods to logistics companies and the postal service specified in the order.
When paying for goods to the payment service provider specified in the order or a financing bank.

During payment, we do not collect or store any payment transaction information such as credit card numbers or bank details.

d) Disclosure to other third parties pursuant to Art. 6 Para. 1 lit. c and f DS-GVO

Finally, we will pass on your data to third parties or government agencies within the framework of the existing data protection laws, if we are legally obliged to do so, e.g. due to official or court orders, or if we are entitled to do so, e.g. because this is necessary to prosecute criminal offences or to exercise and enforce our rights and claims.

Your rights

It goes without saying that you have rights with regard to the collection of your data, about which we are happy to inform you. If you would like to make use of one of the following free rights, just send us a simple message. You can use the following contact data for this purpose without incurring any costs other than the transmission costs according to the basic tariff:

By e-mail: gruendler@creano.com
By mail: Creano GmbH, In der Wanne 1, 31832 Springe, Germany

For your own protection, we reserve the right, in the event of an existing request, to obtain further information necessary to confirm your identity and, if identification is not possible, to refuse to process the request.

a) Right of access

You have the right to request information from us about the personal data stored about you.

b) Right to correction

You have the right to request immediate rectification and/or completion of the personal data concerning you.

c) Right to limit the processing

You have the right to demand the restriction of the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection against the processing.

d) Right to cancellation

You have the right to demand the deletion of your personal data stored by us, unless the exercise of the right to freedom of expression and information, processing to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is necessary.

e) Right to information

If you have exercised the right to rectification, cancellation or limitation of processing, we will notify all recipients to whom the personal data concerning you have been disclosed of such rectification, cancellation or limitation of processing, unless this proves impossible or involves a disproportionate effort.

f) Right to transfer data

You have the right to have personal data that you have provided to us delivered to you or to a third party in a structured, common and machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done as far as it is technically feasible.

g) Right of objection

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f DS-GVO, you have the right to object to such processing at any time pursuant to Art. 21 DS-GVO.

h) Right of revocation of consents

You have the right to revoke your consent to the collection of data at any time with effect for the future. The data collected up to the legal force of the revocation remain unaffected by this. Please understand that the implementation of your revocation may take a little time for technical reasons and that you may still receive messages from us during this time.

i) Right to complain to a supervisory authority

If the processing of your personal data violates data protection law or if your data protection claims are otherwise violated in any way, you can complain to the supervisory authority. Modification of the data protection information

 

Google Analytics

If you have given your consent, this website uses Google Analytics, a web analysis service provided by Google Ireland Limited (“Google”). The use includes the “Universal Analytics” mode of operation. This makes it possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus to analyse the activities of a user across all devices.

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. We would like to point out that on this website Google Analytics has been extended to include IP anonymisation in order to guarantee anonymous collection of IP addresses (so-called IP masking). The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=en.

Purposes of processing
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

Legal basis
The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 Para. 1 S.1 lit. a DSGVO.

Recipients / Categories of recipients
The recipient of the collected data is Google.

Transmission to third countries
The personal data will be transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission’s adequacy decision. You can download the certificate here.

Duration of data storage
The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

Rights affected
You can revoke your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting in your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to the full extent.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting your data across multiple devices, you must opt-out of all systems you use. If you click here, the opt-out cookie will be set:

Disable Google Analytics

We reserve the right to make changes at any time in order to ensure that our data protection information always complies with the current legal requirements. This also applies in the event that the data protection information has to be adapted due to new or revised offers or services.