Privacy Policy of frag zapf GmbH
frag zapf GmbH is subject to the provisions of EU Regulation 201/679 (Data Protection Regulation - GDPR). Therefore, all data you transmit to us is protected by this law. It is a matter of course for us to handle your personal data responsibly.
When you use this website, various categories of personal data is collected. Personal data is data with which you can be personally identified. In the following section, we would like to explain to you how we use your personal data, for what purposes and in what way we process this data and what rights you have.
We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of the data against access by third parties is not possible.
We secure our website and other systems with up-to-date technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons.
1. Data controller
The controller is the natural person or legal entity who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.). The data controller for this website is:
frag zapf GmbH
Bugker Chaussee 3
15859 Storkow (Mark)
Phone: 030 6106 1
E-mail: zapf@zapf.de
2. Data protection officer
We have appointed a data protection officer for our company.
RA Ole-Hagen Zachriat
Fasanenstraße 73
10719 Berlin
E-mail: zachriat@zachriat.eu
3. Data collection and processing on our website
On the one hand, your data is collected by you providing it to us. This can be, for example, data that you enter into a form. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of accessing the website). This data is collected automatically as soon as you enter our website. Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your behaviour as a user.
Processing of data when contacting us via one of the forms (customer and contract data)
There are contact forms on the website that can be used for electronic contact. If a user makes use of this option, the data he or she enters in the input mask will be transmitted to the controller and processed. This includes:
- Name
- First name
- Street
- House number
- Postcode
- Place
- Phone number
- E-mail address
- Details of the household effects
- Message in the free text field, if applicable
We collect, process and use personal data insofar as it is necessary for the justification, development or modification of the legal relationship (inventory data) on the basis of Article 6 (1) point b of the GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. The personal data will be stored or processed by us exclusively for the purpose of processing your enquiry, preparing an offer or processing the order, and to respond to any follow-up questions.
Processing of data when visiting the website - cookies
The internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit to the website. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Article 6 (1) point f of the GDPR. The website operator has a legitimate interest in storing cookies to ensure technically error-free and optimised provision of his services. Insofar as other cookies are stored (e.g. cookies to analyse your surfing behaviour), these are dealt with separately in this privacy policy.
Display cookie settings
Processing of data when visiting the website - server log files
The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data will not be merged with other data sources. The basis for data processing is Article 6 (1) point b of the GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data concerning the use of our Internet pages (usage data) only insofar as this is necessary to enable the user to access the service or to enable us to charge for this usage.
Use of the email addresses
Alternatively, it is possible to contact us via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be processed. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The legal basis for the processing of data transmitted in the course of sending an e-mail is Article 6 (1) point f of the GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for processing of the data is Article 6 (1) point b of the GDPR.
Newsletter - Description and scope of data processing
On our website you have the possibility to subscribe to a free newsletter. When subscribing to the newsletter, the data from the input mask will be transmitted to us. This concerns the name and the e-mail address.
In addition, the following data is collected during subscription and statistical evaluation:
- Data entered (name, e-mail)
- IP address
- Referrer URL
- Browser type and version
- Operating system used
- Time of the server request
No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data will only be used for sending the newsletter.
Purpose of data processing with regard to the newsletter
The user's email address is collected to enable us deliver the newsletter.
The collection of other personal data as part of the subscription process serves to prevent misuse of our services or the e-mail address used.
Newsletter subscription procedure
We use the so-called double-opt-in procedure for you to subscribe to our newsletter. This means that after your subscription, we will send you a message using the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your subscription within [hours], your information will be blocked and automatically deleted after one month. In addition, we will store your IP addresses and the times of subscription and confirmation. The purpose of this procedure is to enable us prove your subscription and, if necessary, to clarify any possible misuse of your personal data.
Legal basis for data processing with regard to the newsletter
The legal basis for the processing of data after subscription to the newsletter by the user is Article 6 (1) point a of the GDPR, if the user has given his consent.
In connection with your newsletter subscription, we also store your registration data (see above) so that we can trace and prove the subscription at a later date. The legal basis for this storage is legitimate interest in accordance with Article 6 (1) point f and Article 7 (1) of the GDPR. The legitimate interest is based on the obligation to prove consent.
Material shop
The online material shop on this page is operated solely and exclusively by zapf umzüge AG, Nobelstr. 66 in 12057 Berlin. You will find data protection regulations regarding the handling of your data in the shop operator's privacy policy.
4. Recipients of personal data (third parties)
We transmit personal data to third parties as service providers within the framework of our franchise system in order to answer your enquiry as best as possible. Third parties are exclusively the zapf houses visible on the website. Furthermore, the personal data of the following categories submitted as part of the price enquiry will be made available on an intranet.
- Name
- First name
- Street
- House number
- Postcode
- Place
- Phone number
- E-mail address
- Details of the household effects
- Message in the free text field, if applicable
Only the above-mentioned third parties have access to this intranet. Safeguarding of the intranet is done by means of technical organisational measures.
External service providers that we use to operate the website or to handle certain services on our website process personal data exclusively on our behalf and are contractually obliged to comply with the applicable legal provisions on data protection and data security. They are not considered third parties in the sense of data protection law.
Furthermore, we only transmit personal data to third parties if this is necessary within the framework of contract processing, for example to companies entrusted with the delivery of goods or to the credit institution entrusted with payment processing. No further transmission of the data will take place unless you have expressly consented to such transmission.
5. Duration of storage of personal data
Our aim is to process your personal data only to the minimum extent possible. The data collected when visiting the website is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected for purposes of availing the website, deletion is done when the respective session has ended.
Personal data obtained from the input masks in forms and data sent by e-mail is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data obtained from input masks in forms and data sent by e-mail, deletion takes place six weeks after the initial enquiry or six weeks after completion of the contractually agreed services. This deletion period serves the purpose of making follow-up questions, post-contractual questions or possible legal disputes comprehensible. The deletion period is based on Artcle 6 (1) point f of the GDPR which is aimed at protecting the legitimate interests of the website operator.
Mandatory statutory provisions - in particular retention periods - remain unaffected.
Newsletter
We store your email address so that we can send you the newsletter; this will run until you unsubscribe or we stop sending the newsletter to you. After unsubscribing from the newsletter, your subscription data will remain stored for up to 3.5 years, limited to the purpose of securing evidence. Non-confirmed users will be deleted 7 days after subscription.
6. Your rights as a data subject
Revocation of data processing
The data processing operations are possible with your explicit consent or at your request. You can revoke any consent you have already given or your request at any time. All you need to do is send us an informal message by e-mail. The legality of the data processing carried out until revocation remains unaffected by the revocation.
Newsletter objection and removal option
The subscription to the newsletter can be cancelled by the user concerned at any time. We have provided a link in every newsletter for this purpose.
This link also enables revocation of consent to the storage of personal data collected during the subscription process.
Right of appeal to the competent supervisory authority
In the event of violations of data protection laws, the data subject has a right of appeal to the competent supervisory authority. The competent supervisory authority in matters of data protection law is the State Data Protection Commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be accessed via the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a conventional, machine-readable format. If you request the direct transfer of your data to another controller, this will only be done insofar as it is technically feasible.
Information, blocking, deletion
Within the scope of Article 15 of the GDPR ff., you have the right, at any time, to obtain free information about your stored personal data, its origin and recipient(s) and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data. For this purpose, and for any further questions on the subject of personal data, you can contact the above-mentioned controller at any time.
Objection to promotional e-mails
The use of contact data published within the framework of the imprint obligation for the transmission of unsolicited promotional and information material is herewith explicitly rejected. The operators of the website expressly reserve the right to take legal action in the event that unsolicited promotional information is sent, for example through spam e-mails.
7. Analysis tools, plugins and advertising
When visiting our website, your surfing behaviour can be statistically evaluated. This is done mainly with cookies and the so-called analysis programmes. The analysis of your surfing behaviour is usually anonymous; your surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. For details, please refer to our privacy policy under the heading "Third-party modules and analysis tools".
You can object to this analysis. Analysis data is stored for 26 months.
Statistical evaluation and analyses of the newsletter
In the process of accessing the newsletter, information is collected on whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients, but the data is only evaluated anonymously for the purpose of recognising the habits of the users and optimising our content.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://” to "https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"), on our website. In this context, pseudonymous user profiles are created and cookies are used. These are text files that are stored on your computer and enable an analysis of your use of the website.
The information generated by the cookie about your use of our website (such as the IP address of the accessing device, time of access, referrer URL, browser and operating system information) is transmitted to and processed by Google servers in the United States.
The use of Google Analytics is based on your consent pursuant to Art. 6(1)(a) of the General Data Protection Regulation (GDPR). Google processes the information on our behalf to evaluate the use of the website, compile reports on website activities, and provide us with additional services related to website usage and internet usage for the purposes of market research and the tailored design of these web pages.
We have entered into a data processing agreement with Google for the use of Google Analytics. Under this agreement, Google assures that they will process the data in compliance with the GDPR and ensure the protection of the rights of the persons concerned.
We only use Google Analytics with IP anonymization enabled. This means that the IP address of users is truncated by Google within member states of the European Union or other contracting parties to the Agreement on the European Economic Area. The IP address is not merged with other data from Google.
We do not use the Universal Analytics with User ID offered by Google.
If required by law or if third parties process the data on our behalf, the collected data may be transferred to third parties.
User data collected through cookies will be automatically deleted after 14 months.
The information generated by the cookies set by Google Analytics about the use of our website is transmitted to and processed by Google servers in the United States. The transmitted data is pseudonymous, and it is not possible to draw conclusions about your name. We have entered into a contract with Google that includes the EU Standard Contractual Clauses, ensuring that a level of protection equivalent to that in the EU is provided (see also section 3b regarding data transfers to the US).
In addition, we will only transfer your data if you expressly consent to the processing by Google. In this case, you consent, with knowledge of the risks described in section 3b, to the transfer of your data to the United States in accordance with Art. 49(1)(a) of the GDPR.
You can revoke your consent at any time for the future: Show cookie settings
For more information about data protection in connection with Google Analytics, please refer to the Google Analytics Help. Information about data usage by Google can be found in their privacy policy.
YouTube
Our website uses plugins from YouTube, a website operated by Google. The operator of the website is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
When you visit one of our webpages equipped with a YouTube plugin, a connection will be established to YouTube's servers. This tells the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in the interest of making our online offers more appealing to the users. This constitutes a legitimate interest within the meaning of Article 6 (1) point f of the GDPR.
For more information on the handling of user data, please refer to YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.
Google Maps
This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this website has no influence on this data transmission.
We use Google Maps in the interest of making our online offers more appealing and being able to find the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Article 6 (1) point f of the GDPR.
You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.