for all hosting, server, and cloud solutions
1.1 The following provides information about how we handle your personal data when you use our website. Personal data means all data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
creoline GmbH
Bergstraße 9a
48341 Altenberge
Germany
Tel.: +49 2507 900 80 - 00
Fax: +49 2507 900 80 - 09
E-mail: info@creoline.com
Data Protection Officer
Nils Volmer
meibers.datenschutz GmbH
Haus Sentmaring 9
48151 Münster
Tel.: +49 (0) 251 203197 - 0
Fax: +49 (0) 251 203197 - 99
E-mail: privacy@creoline.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.
When you use our website for informational purposes only—that is, if you do not register or otherwise transmit information to us—we only collect the data your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data that is technically necessary for us to display the website to you:
Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is neither passed on nor used in any other way. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.
To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. Cookies are small text files that are stored on your device. All cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies).
In some cases, cookies help simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit). If personal data is also processed by individual cookies implemented by us, processing is carried out pursuant to Art. 6(1)(b) GDPR for the performance of a contract or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
Please note that you can set your browser to inform you about the setting of cookies and to decide individually on their acceptance, or to exclude the acceptance of cookies for specific cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
When you contact us (e.g., via contact form or e-mail), personal data is collected. The specific data collected in the case of a contact form can be seen from the respective form. This data is stored and used solely for the purpose of responding to your inquiry and for the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after final processing of your inquiry, which is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
Pursuant to Art. 6(1)(b) GDPR, personal data is also collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The data collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the controller at the address specified above. We store and use the data you provide for contract processing. After the contract has been fully performed or your customer account has been deleted, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further data use which is permitted by law and about which we inform you below.
Sending e-mail newsletters to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers by e-mail for similar goods or services from our range to those already purchased. For this, we do not need separate consent from you pursuant to § 7(3) UWG (German Unfair Competition Act). Data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6(1)(f) GDPR. If you initially objected to the use of your e-mail address for this purpose, no e-mails will be sent by us. You are entitled to object at any time to the use of your e-mail address for the aforementioned advertising purpose with effect for the future by notifying the controller named at the beginning. You will only incur transmission costs according to the basic rates. After receipt of your objection, we will immediately stop using your e-mail address for advertising purposes.
7.1 To process your order, we work with the service provider(s) listed below who support us in whole or in part in executing concluded contracts. In accordance with the following information, certain personal data is transmitted to these service providers.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we explicitly inform you about this below. The legal basis for forwarding the data is Art. 6(1)(b) GDPR.
Klarna Sofortüberweisung (SOFORT)
If you select the “SOFORT” payment method, payment processing is carried out via the payment service
provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (“SOFORT”), to whom we transmit the
information you provided during the ordering process together with information about your order pursuant
to Art. 6(1)(b) GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46,
11134 Stockholm, Sweden). Your data will be passed on exclusively for the purpose of payment processing
with the payment service provider SOFORT and only to the extent necessary for this purpose. Further
information on SOFORT’s privacy policy can be found at:
https://www.klarna.com/sofort/datenschutz
8.1 Applicable data protection law grants you comprehensive rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data, about which we inform you below:
Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about
your personal data processed by us, the purposes of processing, the categories of personal data
processed, the recipients or categories of recipients to whom your data has been or will be disclosed,
the planned storage period or the criteria used to determine the storage period, the existence of a
right to rectification, erasure, restriction of processing, objection to processing, the right to lodge
a complaint with a supervisory authority, the source of your data if it was not collected by us from you,
the existence of automated decision-making including profiling and, where applicable, meaningful
information about the logic involved and the significance and envisaged consequences of such processing
for you, as well as your right to be informed about the appropriate safeguards pursuant to Art. 46 GDPR
when your data is transferred to third countries;
Right to rectification pursuant to Art. 16 GDPR: You have the right to have inaccurate data concerning
you corrected without undue delay and/or to have incomplete data stored by us completed;
Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal
data under the conditions of Art. 17(1) GDPR. However, this right does not apply in particular if
processing is necessary for exercising the right of freedom of expression and information, for
compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise,
or defense of legal claims;
Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request restriction
of processing of your personal data as long as the accuracy of your data contested by you is being
verified, if you refuse erasure of your data due to unlawful data processing and instead request
restriction of processing, if you need your data for the establishment, exercise, or defense of legal
claims after we no longer need this data for the purpose pursued, or if you have objected due to your
particular situation, as long as it has not yet been determined whether our legitimate grounds
override yours;
Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification,
erasure, or restriction of processing against the controller, the controller is obliged to notify all
recipients to whom the personal data concerning you has been disclosed of this rectification or erasure
of the data or restriction of processing, unless this proves impossible or involves disproportionate
effort. You have the right to be informed about those recipients.
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data that
you have provided to us in a structured, commonly used, and machine-readable format, or to request the
transmission to another controller, where technically feasible;
Right to withdraw consent pursuant to Art. 7(3) GDPR: You have the right to withdraw consent once given
to the processing of data at any time with effect for the future. In the event of withdrawal, we will
delete the data concerned without delay, unless further processing can be based on a legal ground for
processing without consent. The lawfulness of processing based on consent prior to its withdrawal
remains unaffected;
Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of your personal
data infringes the GDPR, you have the right—without prejudice to any other administrative or judicial
remedy—to lodge a complaint with a supervisory authority, in particular in the Member State of your
habitual residence, place of work, or place of the alleged infringement.
8.2 RIGHT TO OBJECT
WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS WITHIN THE
FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR
PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER
PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH
OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE,
OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
The duration of storage of personal data is determined by the respective statutory retention period (e.g., retention periods under commercial and tax law). After expiry of the period, the corresponding data is routinely deleted, provided it is no longer required for contract fulfillment or contract initiation and/or there is no legitimate interest on our part in continued storage.
