Privacy Policy

1. Introduction to data protection

We are very pleased that you are interested in our services.
The protection of your personal data during your visit is important to us.
We protect your privacy and your personal data. We collect, process and use your personal data in accordance with the contents of this Privacy Policy and the applicable data protection regulations, especially the General Data Protection Regulation (GDPR), the Federal Data Protection Act, the Telecommunications and Telemedia Data Protection Act (TTDSG) and the Telemedia Act.
This Privacy Policy regulates the personal data which we collect, process and use about you. We therefore ask you to read the following statement carefully.

2. Information about the responsible party

2.1. Contact details of the controller

If you have any questions about data protection, you will find the contact details of the controller or responsible party below.
The responsible party is the natural or legal person who decides solely or jointly with others about the purpose and means of processing personal data (i.e. names, email addresses, etc.).

2.2. Contact details

You can contact the data protection officer/controller at:
kameon GmbH
The Data Protection Officer/Controller
Gürtelstraße 30
10247 Berlin
or by email to: privacy@kameon.de.

Simple request via online form

3. Storage period

Unless a more specific storage period has been specified in this Privacy Policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for erasure or revoke your consent to data processing, your data will be erased, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the erasure will take place after these reasons cease to apply.

4. Data collection on our web pages

4.1. How do we record your data?

One way we collect your data is from you directly. This could concern data which you have, for example, entered into a contact form.
Other data is recorded automatically or with your consent by our IT systems when you visit our website. This is mainly technical data (e.g. internet browser, operating system or time of page view). This data is recorded automatically as soon as you visit our website.

4.2. What do we use your data for?

Part of the data is collected in order to guarantee the faultless provision of the website. Other data can be used to analyse your user behaviour.

4.3. What rights do you have in regard to your data?

You have the right to receive information about the origin, recipient and purpose of your saved personal data at any time and free of charge. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent for the future at any time. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time if you have any questions on the issue of data protection.

5. General information and compulsory information

5.1. General

The controller takes the protection of your personal data very seriously. We treat your personal information confidentially and according to the legal data protection provisions as well as those of this Privacy Policy.
When you use our services, various personal data is collected. Personal data is data by which you can be personally identified. This Privacy Policy explains which data we collect and what we use it for. It also explains what the purpose of this is.
We would like to point out that internet data transfer (i.e. communication by email) can present with security loopholes. Complete protection of data against third party access is not possible.

5.2. Information on the legal bases for processing data

If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, if special categories of data are processed pursuant to Art. 9 (1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1) (a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g. via device fingerprinting), the data processing is additionally based on Section 25 (1) TTDSG. Consent may be revoked at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) (b) GDPR. Furthermore, we process your data on the basis of Art. 6 (1) (c) GDPR if this is necessary for the fulfilment of a legal obligation.
The data can also be processed on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Information on the relevant legal basis in each individual case is provided in the following sections of this Privacy Policy.

5.3. Revocation of your consent to data processing?

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

5.4. Right to object against data collection in special cases as well as against direct advertising (Art. 21 GDPR)?

If the data is processed on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. You can find the respective legal basis for the processing in this Privacy Policy. If you raise an objection, we will no longer process your personal data, unless we can prove compelling legitimate reasons for such processing which prevail over your interests, rights and freedoms, or if the processing serves to establish, exercise or defend legal claims (objection according to Art. 21 (1) GDPR).
If your personal data is processed in order to pursue direct advertising, you have the right to raise objections at any time against the processing of personal data relating to you for the purposes of such advertising; this also applies for profiling, provided it is in connection with such direct advertising. If you object, your personal data will then no longer be used for direct advertising purposes (objection according to Art. 21 (2) GDPR).

5.5. Right of appeal at the relevant supervisory authority.

In the event of violations of the GDPR, the data subject has a right to appeal at the supervisory authority, in particular in the member state in which the person usually resides, their place of work or the location of the suspected violation. The right to appeal exists irrespective of any other administrative proceedings or legal remedies.

Please address your complaint to the following supervisory authority:

5.6. Right to data portability

You have the right to request that the data which we process automatically on the basis of your consent or in the fulfilment of a contract, is issued to you or a third party in a standard, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

5.7. SSL and TLS encryption

Our privacy information portal uses SSL and TLS encryption for security reasons and to protect the transfer of confidential content, such as orders or requests which you send to us as a site operator. You can recognize an encrypted connection from the address line in the browser which changes from “http://” to “https://” and from the lock symbol in your browser line.
Data which you send us cannot be read by third parties if SSL and/or TLS encryption is enabled.

5.8. Information, erasure and correction

In the scope of the applicable legal provisions, you have the right to information regarding your personal data, its origin and recipients, and the purpose of data processing as well as the existence of a right to the rectification or erasure of this data, free of charge. You can contact us at any time if you have any questions on the issue of personal data.

5.9. Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time in this regard. The right to restriction of processing exists in the following instances:

• If you dispute the correctness of the personal data stored by us, we generally require some time to check this. You have the right to request the restriction of the processing of your personal data during this time.
• If your personal data was/is processed illegally, you can request the deletion or restriction of data processing.
• If we no longer require your personal data but you require it to exercise, defend or enforce legal claims, you have the right to request the restriction of processing of your personal data, rather than deletion.
• If you have raised an objection according to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or to enforce, exercise or defend against legal claims or for the protection of rights of another natural or legal person or for reasons of important public interest of the European Union or its member states.

5.10. Objection to advertising mails

We hereby expressly contradict the use of published contact data in the scope of the duty to publish an imprint for sending advertising or information materials that we have not expressly requested. The controller of the website expressly reserves the right to pursue legal steps in the event of unsolicited sending of advertising information, e.g. in the form of spam emails.

6. Special data collection

6.1. Cookies

Our website uses so-called cookies. Cookies are small text files and do not cause any damage to your end device. They are either temporarily stored on your end device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.
In some cases, third-party cookies can also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain services of the third party company (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behaviour or display advertisements.
Cookies which are required to carry out the electronic communication process (necessary cookies) or to provide certain functions which you have requested (functional cookies, e.g. for the shopping basket function) or to optimise the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimised provision of their services. If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG); this consent may be revoked at any time.
You can set your browser in such a way that you are informed when cookies have been placed and can accept cookies in individual cases only, so that you can forbid the acceptance of cookies either in certain cases or in general, and you can also enable automatic deletion of cookies when closing the browser. The functionality of this website may be limited if cookies are disabled.
Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you of this separately as part of this Privacy Policy and request your consent if necessary.

6.2. Contact form

If you send us a request via a contact form, your details from the request form, including the contact data you enter there, is saved by us in order to process the request and in the event of follow-up questions. We do not pass this data on to others without your consent.
The data is processed on the basis of Art. 6 (1) (b) GDPR, provided your request is required in connection with the fulfilment of a contract or for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), provided that this consent has been requested.
The data you enter in the contact form stays with us until you request its deletion, revoke your consent for its storage or there is no longer a purpose for the data storage (for example, after your request has been fully processed). Compulsory legal provisions - in particular, storage periods - remain unaffected.

6.3. Other processing activities

6.3.1. Video

If the service area is monitored by video cameras, these serve to monitor areas accessible to the public for the protection of domiciliary rights, access control, deterrence as well as the prosecution of criminal offences to the detriment of the visitors to the service area or the operator.
The legal basis for the temporary storage of data to improve the security of the company is the protection of legitimate interests according to Art. 6 (1) (f) GDPR. Those affected are respectable visitors to the service area on the important routes and in places which are high-risk, as well as potential criminals who gain access to company premises which are not open to the public. Image and video data is recorded, but no audio documents, no biometric evaluation is carried out and filming is never carried out in sanitary facilities or changing areas. No data is transferred to third countries outside the EEA or international organisations. Video data is deleted after 72 hours if there is no incident. The data will be used for prosecution purposes and passed on to the criminal prosecution authorities in cases of legitimate requests. You can object to this processing by lodging an objection with the controller.

6.3.2. Payment

The POS data is archived for 10 years for tax and other accounting purposes.