Legal Notice and Privacy Policy

1) Introduction and Contact Details of the Responsible Person

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data here are all data with which you can be personally identified.

1.2 The responsible party for data processing on this website in terms of the General Data Protection Regulation (GDPR) is Smart Cave Solutions KG, Münsterstr. 38, 40476 Düsseldorf, Germany, Tel.: +49 211 580041210, Fax: +49 211 580041219, Email: info@smartcave-solutions.de. The responsible person for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 In the case of merely informative use of our website, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• Used IP address (if applicable: in anonymized form)

The processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to retrospectively check the server log files should concrete evidence point to unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible person), this site uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser line.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, small text files that are stored on your device. Some of the cookies we use are deleted after the browser session, i.e., after closing your browser (so-called “session cookies”). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). The storage duration of these can be found in the overview of cookie settings in your web browser.

If individual cookies implemented by us also process personal data, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the execution of the contract, in accordance with Art. 6 (1) lit. a GDPR in the case of a given consent, or according to Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

You can set your browser in such a way that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general.

Please note that the functionality of our website may be limited if cookies are not accepted.

4) Contacting

As part of contacting us (e.g., via contact form or email), personal data is processed – solely for the purpose of handling and responding to your inquiry and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your inquiry according to Art. 6 (1) lit. f GDPR. If your contact aims at concluding a contract, then additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after your request has been finalized, provided that there are no legal storage obligations to the contrary.

5) Data Processing for Order Handling

Insofar as necessary for contract execution purposes related to delivery and payment, the personal data collected by us are transmitted according to Art. 6 (1) lit. b GDPR to the commissioned transport company and the commissioned credit institution.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data transmitted by you at the order (name, address, email address) to personally inform you in due time about upcoming updates within the legally provided period in an appropriate communication way (such as by post or email), according to our statutory information obligations pursuant to Art. 6 (1) lit. c GDPR. Your contact details are strictly used for the purpose of notifying about updates we owe and processed only to the extent necessary for the respective information.

To process your order, we also work together with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data is transmitted to these service providers according to the following information.

6) Web Analysis Services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, when visiting the website, Google (Universal) Analytics sets cookies, small text pieces stored on your device, collecting certain information, including your IP address. However, Google truncates the IP address to exclude direct personal reference.

The information is transmitted to Google’s servers and processed there. This may also involve transmissions to Google LLC located in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics and truncated will not be merged with other Google data. The data collected as part of the use of Google (Universal) Analytics is stored for two months and then deleted.

All the processing described above, especially the setting of cookies on the used device, only takes place if you have given us your express consent according to Art. 6 (1) lit. a GDPR.
Without your consent, Google (Universal) Analytics will not be used during your site visit. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service via the “Cookie-Consent-Tool” provided on the website.

We have concluded a data processing agreement with Google, which ensures the protection of our visitors’ data and prohibits unauthorized data transmission to third parties.

Further legal information on Google (Universal) Analytics can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic Features
Google (Universal) Analytics uses the special feature “demographic characteristics” and can thereby generate statistics that provide information about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This can identify target groups for marketing activities. However, the collected data cannot be attributed to a specific person and is deleted after being stored for two months.

Google Signals
As an extension to Google (Universal) Analytics, Google Signals can be used on this website to allow cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including cross-device conversions, subject to your consent to the use of Google Analytics according to Art. 6 (1) lit. a GDPR. We do not receive personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can deactivate the “Personalized advertising” function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de More information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google (Universal) Analytics, the “UserIDs” feature can be used on this website. If you have consented to the use of Google (Universal) Analytics according to Art. 6 (1) lit. a GDPR, created an account on this website, and log in on various devices with this account, your activities, including conversions, can be analyzed across devices.

For data transmissions to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on a decision of adequacy by the European Commission.

7) Page Functionalities

7.1 Vimeo

This website uses plugins to display and play videos from the following provider: Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. This transmits certain information, including your IP address, to the provider.

If the playback of embedded videos via the plugin is started, the provider also sets cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your site visit, your data will be directly associated with your account when you click on a video. If you do not want the association with your account, you must log out before activating the playback button.

All the aforementioned processing, especially the setting of cookies for reading information on the used device, only occurs if you have given us your express consent according to Art. 6 (1) lit. a GDPR. You can revoke the given consent at any time with effect for the future by deactivating this service via the “Cookie-Consent-Tool” provided on the website.

For the transmission of data to the USA, the provider relies on the European Commission’s standard contractual clauses, which are supposed to ensure compliance with the European level of data protection.

7.2 Youtube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. This transmits certain information, including your IP address, to the provider.

If the playback of embedded videos via the plugin is started, the provider also sets cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your site visit, your data will be directly associated with your account when you click on a video. If you do not want the association with your account, you must log out before activating the playback button.

All the aforementioned processing, especially the setting of cookies for reading information on the used device, only occurs if you have given us your express consent according to Art. 6 (1) lit. a GDPR. You can revoke the given consent at any time with effect for the future by deactivating this service via the “Cookie-Consent-Tool” provided on the website.

For data transmissions to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on a decision of adequacy by the European Commission.

8) Rights of the Data Subject

8.1 The applicable data protection law grants you vis-à-vis the controller with respect to the processing of your personal data the following rights of data subjects (rights of access and intervention), with reference to the respective legal basis for the prerequisites for exercising these rights:

• Right to access according to Art. 15 GDPR;
• Right to rectification according to Art. 16 GDPR;
• Right to erasure according to Art. 17 GDPR;
• Right to restriction of processing according to Art. 18 GDPR;
• Right to be informed according to Art. 19 GDPR;
• Right to data portability according to Art. 20 GDPR;
• Right to withdraw consent given according to Art. 7 (3) GDPR;
• Right to lodge a complaint according to Art. 77 GDPR.

8.2 RIGHT TO OBJECT

IF YOUR PERSONAL DATA IS PROCESSED BASED ON LEGITIMATE INTERESTS IN ACCORDANCE WITH ART. 6 (1) LIT. F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

9) Duration of the Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – if relevant – additionally by the respective legal retention period (e.g., commercial and tax retention periods).

If personal data are processed based on an explicit consent according to Art. 6 (1) lit. a GDPR, this data is stored until the person revokes their consent.

If there are statutory retention periods for data that is processed within the framework of legal or legal-like obligations based on Art. 6 (1) lit. b GDPR, these data will routinely be deleted after the retention periods expire, provided they are no longer required for the fulfillment or initiation of a contract and/or there is no longer any legitimate interest on our part in their further storage.

When processing personal data on the basis of Art. 6 (1) lit. f GDPR, this data is stored until you exercise your right of objection according to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is for the assertion, exercise, or defence of legal claims.

When processing personal data for direct marketing purposes on the basis of Art. 6 (1) lit. f GDPR, this data is stored until you exercise your right of objection according to Art. 21 (2) GDPR.

Unless otherwise indicated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Cookie Overview

Cookie	Description
_ga	Calculates visitor, session, and campaign data, and tracks website usage for reports of Google Analytics. The cookie stores information anonymously.
_ga_KJJ5DKLSQR	Set by Google Analytics to enable data analysis and link it to the correct account.
_lscache_vary	Used to ensure functioning caching.
cookielawinfo-checkbox-analytics	Set to capture user consent for cookies in the "Analytics" category.
cookielawinfo-checkbox-necessary	Set to capture user consent for cookies in the "Necessary" category.
CookieLawInfoConsent	Records the default state of the corresponding category and the status of CCPA/GDPR. It only functions in coordination with the primary cookie.
pll_language	Set locally by our multilingual plugin to identify which language is currently active on the website.
viewed_cookie_policy	Stores whether the user has consented to the use of cookies or not. It does not store any personal data.