Deutsch The privacy statement should be updated. We recommend incorporating the following privacy statement to fully replace the previous statement:
“Privacy Policy
You can find further details about us in our
2. personal data, purposes of their processing and legal basis
As a rule, it is possible to use our website without having to provide personal data. The provision of personal data is voluntary.
Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the identity of that natural person.
The purpose of the processing of data is the operation of this website with information on our range of services together with contact options and online application options.
Personal data is only collected on our website if this is necessary
for the use of the website (legal basis: Art. 6 para. 1 p. 1 lit. a) and/ or Art. 6 para. 1 p. 1 lit. b) of the German Data Protection Regulation (DSGVO),
to protect our interest in improving the user experience and maintaining the security of use (legal basis: Art. 6 para. 1 p. 1 lit. f) DSGVO),
for the use of the services offered on the website as well as pre-contractual measures, in particular for form entries (legal basis: Art. 6 para. 1 p. 1 lit. a) and/or Art. 6 para. 1 p. 1 lit. b) DSGVO) or
for the conclusion and performance of a contract (legal basis: Art. 6 para. 1 p. 1 lit. a) and lit. b) DSGVO).
is necessary.
Further details on the processing of data can be found below under corresponding headings:
3. access data/server log files.
When you visit our website, the servers automatically store the information that your browser sends, so-called server log files. The information includes
Name of the website accessed,
file,
Date and time of the retrieval,
message about successful retrieval,
browser type and version,
Operating system of the user,
referrer URL,
provider.
A combination of this data with other data sources does not take place. The information is used according to Art. 6 para. 1 p. 1 lit. f) DSGVO exclusively for the analysis and maintenance of the technical operation of the servers and the network.
4. cookies
Our website stores cookies. Cookies are small files that allow specific information related to the device to be stored on the user’s access device (PC, smartphone or similar). On the one hand, they serve the user-friendliness of websites and thus the users (e.g. storage of login data). On the other hand, they serve to collect statistical data on website usage and to be able to analyze it for the purpose of improving the offer. The legal basis for this is Art. 6 para. 1 p. 1 lit. f) DSGVO.
As a user, you can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies.
completely prevented. However, it is pointed out that the use and especially the user comfort will be limited without cookies.
You can manage many online ad cookies from companies through the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/].
5. contact via e-mail
If you send us inquiries via e-mail, the information you provide there from the e-mail, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and for the case of follow-up questions in accordance with Art. 6 para. 1 p. 1 lit. b) DSGVO. We never pass on this data without your consent. We will treat the data voluntarily provided by you as strictly confidential. We will store and use personal data voluntarily provided by you, i.e. to the extent necessary for further correspondence with you.
6. user profile
(1) If you register on our website, we require the data from you that is marked as mandatory in the registration form. When registering, you can choose a user name and password. These mandatory details are required in order to use our offer.
When you create the user profile, we process the data you provide to enable the selection and ordering of the selected products, along with their payment and delivery to you. The data processing is based on the requirement of the implementation of pre-contractual measures or the execution of the contract in accordance with Art. 6 para. 1 p. 1 lit. b) DSGVO. You can revoke the publication of your data at any time by sending an e-mail to: kontakt@girls-in-town.de.
7. google analytics
Our website uses Google Analytics. The provider is Google LLC., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, in order to analyze our website and usage and thus make it more user-friendly and effective, as well as to advertise and offer our services more optimally. The legal basis for this is Art. 6 para. 1 p. 1 lit. f) DSGVO or, if you have given your consent to the use of cookies on the basis of a notice issued by us on the website (“cookie banner”), the legality of the use is based on Art. 6 para. 1 p. 1 a) DSGVO. Google LLC is certified under the US-EU data protection agreement “Privacy Shield” and thus undertakes to comply with EU data protection requirements.
For users who have their habitual residence in the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, EU is the responsible controller for the Google services (hereinafter: “Google”). Google Ireland Limited is a company affiliated with Google LLC whose services we embed and that must also comply with the General Data Protection Regulation.
Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, the IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. IP anonymization is activated on our website. Your IP address will thus be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us.
You can give your consent to the use of Analytics via the Cookie Policy in the cookie setting by means of opt-ins (activation). You may also refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading the browser plugin available at the link: https://tools.google.com/dlpage/gaoptout?hl=de download and install the browser plugin: For more information on Google’s terms of use and privacy policy, please click here or there.
8. newsletter
You can also subscribe to our newsletter via our website.
If you would like to receive the newsletter, we require a valid email address from you as well as information that allows us to verify that you are the owner of the specified email address or that the owner agrees to receive the newsletter. Further data will not be collected. This data is only used for sending the newsletter and will not be passed on to third parties. The legal basis for the sending is Art. 6 para. 1 p. 1 lit. a) DSGVO. You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. The revocation can be made via a link in the newsletters themselves or by e-mail to: kontakt@girls-in-town.de.
9. recipients of personal data
Personal data is communicated to the following categories of recipients at our company:
To our employees and to the hoster of our website. The hoster is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg Attn: AWS EMEA Legal. Beyond that, your personal data will not be disclosed to third parties without your express consent, unless we are legally obliged to do so within the meaning of Art. 6 (1) p. 1 lit. c) DSGVO or the disclosure of data is mandatory for the performance of a contractual relationship pursuant to Art. 6 (1) p. 1 lit. b) DSGVO.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.
10. duration of storage
We delete your personal data immediately after the purpose has been achieved. Thus, we store your data from your emails until your request is fully processed and completed. After that, the information is usually deleted. We delete your user profile after termination of the contract. Otherwise, we check on an annual basis whether the data stored by you can be deleted.
Session cookies are automatically deleted by us after your website visit. Access data and server log files are deleted after one week.
Please note that for certain data there are retention obligations under commercial and tax law of at least six (§ 257 HGB) or ten (§147 AO) years.
11. rights of the persons concerned
You are not legally obliged to provide your personal data. However, the provision may be necessary for the conclusion of a contract or for functions of the website. Thus, if not provided, a contract or a function on the website may not be offered.
There is no automated decision-making on the website, profiling does not take place.
The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 DSGVO and from §§ 32 to 37 Bundesdatenschutzgesetz (BDSG)-neu.
With regard to your personal data, you have the right to
Information, Art.15 DSGVO
Correction, Art. 16 DSGVO
Deletion, Art.17 DSGVO
Restriction of processing, Art.18 DSGVO
Portability, Art.20 DSGVO.
If you have given consent to the processing of personal data, you have the right of
Revocation, Art. 7 DSGVO
with effect for the future.
You also have the right to object to the processing of personal data
Objection, Art. 21 DSGVO
to raise.
1. you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) p. 1 lit. f) DSGVO (data processing on the basis of a balance of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
2. in individual cases, we process personal data to conduct direct marketing. If this is the case with you, you have the right to object at any time to the processing of data concerning you for the purpose of such advertising.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be made form-free and should preferably be addressed to us, see above under 1.
If you are of the opinion that the processing of personal data concerning you violates data protection law, you always have the
Right to lodge a complaint
with the competent supervisory authority, cf. Art. 77 DSGVO. Without prejudice to any other administrative or judicial remedy, you have this right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
The contact details of the data protection officers in the federal states, the supervisory authorities for the non-public sector, broadcasting, churches, in Europe and the rest of the world, as well as the Virtual Data Protection Office can be found there:
The supervisory authority responsible for us is the State Commissioner for Data Protection of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.
Further:
Regarding Google Analytics and other tracking tools that may still be used in the future:
At the latest since the BGH ruling of May 28, 2020, Case No. I ZR 7/16 in the Planet49 case, the discussion as to whether active consent is required for tracking cookies or whether invoking the legal basis of Art. 6 (1) sentence 1 lit. f) DSGVO is sufficient is now over. In order to comply with the requirements of the ruling and to avoid action by the supervisory authorities against your company, you should always take the safe route and always obtain active consent from users. Until this is granted, tracking tools are not allowed to start.
Also, on Google in general:
As you may have read in the press, the ECJ has declared the main basis for data transfers between the EU and the US invalid in its ruling of 16.7.2020, Ref. C-311/18 “Schrems II”. Therefore, a data transfer between Germany and the USA is currently not possible with legal certainty, unless standard contractual clauses are agreed. Google is probably currently working on a solution as to how the not merely formal use of the clauses can be implemented. In the current state, the use of Google and other US tools is therefore not entirely risk-free. The supervisory authorities have already announced that they will not allow any grace periods to apply. Of course, the individual risk is still not extremely high, but it should be considered to stop using the tools for the time being if this is not absolutely necessary.