Data privacy notice


This website is operated by carbovation gmbh, Otto-Lilienthal-Str. 15, Friedrichshafen, Germany.
Carbovation gmbh takes data protection seriously and aims to ensure that your privacy is protected when using our website. That is why carbovation gmbh has published this statement explaining the way it processes your data. Please read it carefully before using the website, as one of the things it explains is how we process personal data.
We have used the terminology set out Article 4 of GDPR (General Data Protection Regulation).
If you use this website and/or provide carbovation gmbh with your personal data, carbovation gmbh assumes that you consent to the processing of that personal data in the way specified in this privacy statement.

Controller
The Controller responsible for processing personal data pursuant to Article 4(7) GDPR is:

carbovation gmbh
Otto-Lilienthal-Straße 15
88046 Friedrichshafen
Germany


You will find further information about our company in our legal details link (link).
Data Protection Officer
You can contact our Data Protection Officer at:

carbovation gmbh
Otto-Lilienthal-Straße 15
88046 Friedrichshafen
Germany

Tel.: +49 (0) 2 31 20 609-148
or
by email at:
gdpr(at)carbovation.de

Section 1 PERSONAL DATA
We only process and use your personal data with your consent or if the law permits. We collect, process and use the personal data that we need in order to provide our services and for you to use them, and that you provide us with voluntarily.
Personal data means any data containing information about the personal or factual circumstances of an identified or identifiable customer. This includes their email address, delivery address, gender, date of birth, telephone number and age.
The legal basis for this data processing is Article 6 (1) (1) f) GDPR. The purpose of processing is to operate this website. Our legitimate interest is to achieve the protection aims of confidentiality, integrity and availability of data.

Section 2 PURPOSE OF COLLECTING PERSONAL DATA
We need your personal data for the following purposes:

Section 2.1 Contact form
We provide a contact form on our website which you can use to request information about our products or just to get in touch. As well as providing mandatory details, which are marked with asterisks, and your message, you can also give us voluntary information.
We need these details to process your request, address you correctly and send you a reply.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR (performance of a contract and activities prior to entering into a contract).

Section 2.2 Email communication
If you provide us with your email address, we will correspond with you by email. As a rule, we will not pass on your email address to third parties without your consent. If you send an email to carbovation, personal data may be sent automatically, depending on your email program’s settings. Carbovation will also treat that data confidentially. Please note, however, that unless encrypted, an email is like a postcard: it can be read by people who don’t have permission. So you should always send confidential information to us by post or as an encrypted email attachment.

Section 2.3 Request for quotation
As well as the general contact form, there is a form for requesting a quote.
To make you an offer, we need more information than the general contact form provides.
Enquiries received via our website’s quotation request form are emailed to a dedicated department. After checking the request and consulting with the customer, we create a customer record and save it in our CRM system (unless one already exists) so that we can draw up an offer.
We regularly check the CRM system to see if data can be deleted. If data are no longer needed for an existing or prospective customer relationship, or if the customer has conflicting interests that outweigh their retention, we delete the relevant data, provided we are not obliged to keep them by law.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR. Data is processed in order to perform pre-contractual activities such as advising customers and preparing offers.

Section 2.4 Registration form (lightweight.info website only)
As well as the general contact form, there is a form for registering or re-registering your Lightweight product to claim Lightweight wheel protection and for warranty or crash replacements. As well as providing mandatory details, which are marked with asterisks, you can also give us voluntary information.
We need these details to process your registration or re-registration and to send you a confirmation.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR (performance of a contract and activities prior to entering into a contract).

Section 2.5 Newsletter (lightweight.info website only)
By giving your consent you can subscribe to our newsletter, which will keep you up to date about our products, promotions, competitions and news on an irregular basis, and no more than 12 times a year.
We use a double-opt-in procedure to register people for our newsletter. This means that once you have registered, we send you an email to the address you provided, asking you to confirm that you want to receive the newsletter.
The only information you have to provide to receive the newsletter is your email address. Once you have confirmed, we store your email address so that we can send you the newsletter.
You can cancel your consent to receive the newsletter and unsubscribe at any time. To do this, click on the link provided in every newsletter email, or send a message to the contact details provided in the legal section. If you register for our newsletter, your email address will be used for our advertising purposes until you unsubscribe from it.
The legal basis for this data processing is Article 6 (1) (1) a) GDPR.

Section 2.6 Customer account (shop.lightweight.info site only)
When you register for our web shop, we process your first name, surname, email address and password for the purpose of creating a customer account and enabling access to it (legal basis: Article 6 (1) (1) b) GDPR).
If a customer account is set up, we store this data while you remain registered with us. The data are also stored for longer if there is a legal obligation to retain them.
Once you have registered and start to use your customer account, we process data that you voluntarily provide us with in the process of configuring it (legal basis: Article 6 (1) (1) b) GDPR). We store this data while you remain registered with us. We also process the data we need to fulfil the web shop / customer account services that you use (legal basis: Article 6 (1) (1) f) GDPR). This may sometimes include particular types of personal data such as PayPal payment approval (legal basis: Article 6 (1) (1) b) GDPR).

Section 2.7 Order processing (shop.lightweight.info site only)
We collect data in order to process your product orders/deliveries and provide web shop services. (Your email address, physical address, surname, first name, telephone number and a delivery address, if different).
If you have created a customer account, this data will be stored there permanently. Provided there is no legal reason to retain them and provided you have not requested their deletion, your personal data will be deleted once they are no longer needed to fulfil the purpose for which they were stored, or if their storage becomes inadmissible for other legal reasons.
If you pay by credit card, please read Section 5.1 ‘Payment by credit card’, and if you pay by PayPal, please read Section 5.2 ‘Payment by PayPal’.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR. The purpose of collecting, storing and processing the data is to process your order.

Section 3 Cookies
Cookies are used on our websites. Cookies are small text files which your browser stores automatically on your device. Cookies are needed to enable certain features on our websites. We use session cookies, which are automatically deleted by your browser as soon as you leave the website. We also use persistent cookies for website analytics.
You can prevent cookies from being stored by setting your browser accordingly. But if you do, some of the features of our website may not work. Cookies do not install or launch any programs or other applications on your computer.
The legal basis for this data processing is Article 6 (1) (1) a) GDPR.

Matomo
Description of Service
This is an open source web analytics service.
Processing company
InnoCraft
150 Willis St, 6011 Wellington, New Zealand
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
privacy@matomo.org
Data Purposes
This list represents the purposes of the data collection and processing.
• Analytics
• Optimization
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
• Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
• Anonymised IP address
• Browser information
• Date and time of visit
• Device information
• Files clicked or downloaded
• Geographic location
• Links to outside domain clicked
• Number of visits
• Page title
• Referrer URL
• Screen resolution
• Time of users first visit
• Time of users previous visit
• Time zone
• Usage data
• User agent
• User ID
• Page URL
Legal Basis
In the following the required legal basis for the processing of data is listed.
• Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
In the following the recipients of the data collected are listed.
• InnoCraft
Click here to read the privacy policy of the data processor
https://matomo.org/privacy-policy/
Click here to read the cookie policy of the data processor
https://matomo.org/privacy-policy/
Click here to opt out from this processor across all domains
https://matomo.org/privacy-policy/#optout
Storage Information
• Maximum age of cookie storage: 30 years, 7 days
Stored Information
• Name: _pk_id; This is used to store a few details about the user such as the unique visitor ID; Type: cookie; Duration: 1 year, 1 month;
• Name: _pk_ref; This is used to store the attribution information, the referrer initially used to visit the website; Type: cookie; Duration: 6 months;
• Name: _pk_ses; This is used to temporarily store data for the visit; Type: cookie; Duration: 30 minutes;
• Name: _pk_cvar; This is used to temporarily store data for the visit; Type: cookie; Duration: 30 minutes;
• Name: _pk_hsr; This is used to temporarily store data for the visit; Type: cookie; Duration: 30 minutes;
• Name: _pk_testcookie; This is used to check whether the visitor’s browser supports cookies; Type: cookie; Duration: Session;
• Name: mtm_consent; This is used to remember that consent was given (or removed) by the user. ; Type: cookie; Duration: 30 years, 7 days;
• Name: mtm_cookie_consent; This is used to remember that consent for storing and using cookies was given by the user.; Type: cookie; Duration: 30 years, 7 days;

Google Analytics (lightweight.info website only)
Description of Service
This is a web analytics service. With this the user can measure the advertising ROI as well as track Flash, video, and social networking sites and applications.
Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
• Marketing
• Analytics
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
• Cookies
• Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
• App updates
• Click path
• Date and time of visit
• Device information
• Downloads
• Flash version
• Location information
• IP address
• JavaScript support
• Pages visited
• Purchase activity
• Referrer URL
• Usage data
• Widget interactions
• Browser information
Legal Basis
In the following the required legal basis for the processing of data is listed.
• Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The Retention Period depends on the type of the saved data. Each client can choose how long Google Analytics retains data before automatically deleting it.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
• United States of America,Singapore,Chile,Taiwan
Data Recipients
In the following the recipients of the data collected are listed.
• Google Ireland Limited, Alphabet Inc., Google LLC
Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://tools.google.com/dlpage/gaoptout?hl=de
Storage Information
• Maximum age of cookie storage: 2 years
Stored Information
• Name: _ga; This is used to distinguish users.; Type: cookie; Duration: 2 years;
• Name: _gid; This is used to distinguish users.; Type: cookie; Duration: 1 day;
• Name: _gat ; This is used to throttle request rate.; Type: cookie; Duration: 1 minute;
• Name: _dc_gtm_xxx; This is used to distinguish users.; Type: cookie; Duration: 1 minute;
• Name: _gat_gtag_xxx; This is used to distinguish users.; Type: cookie; Duration: 1 minute;
• Name: _gac_xx; This contains information about which ad was clicked.; Type: cookie; Duration: 2 months, 29 days;
• Name: IDE; Through this ID, Google can recognize the user across different websites and domains and display personalized advertising.; Type: cookie; Duration: 1 year;

Google Ads Conversion Tracking (lightweight.info website only)
Description of Service
This is a conversion tracking service.
Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/troubleshooter/7575787?hl=en
Data Purposes
This list represents the purposes of the data collection and processing.
• Advertisement
• Conversion Tracking
• Analytics
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
• Cookies
• Pixel
• Web beacons
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
• Browser language
• Browser type
• Clicked advertisements
• Cookie ID
• Cookie information
• Date and time of visit
• IP address
• Referrer URL
• Usage data
• Web request
Legal Basis
In the following the required legal basis for the processing of data is listed.
• Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
• United States of America,Singapore,Taiwan,Chile
Data Recipients
In the following the recipients of the data collected are listed.
• Google Ireland Limited
• Google LLC
• Alphabet Inc
Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/
Storage Information
• Maximum age of cookie storage: 1 year
Stored Information
• Name: test_cookie; Set as a test to check whether the browser allows cookies to be set. Does not contain any identification features.; Type: cookie; Duration: 15 minutes; Domain: doubleclick.net;
• Name: IDE; Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.; Type: cookie; Duration: 1 year; Domain: doubleclick.net;
• Name: _gcl_au; Contains a randomly generated user ID. ; Type: cookie; Duration: 2 months, 29 days;
• Name: _gcl_aw; This cookie is set when a user clicks on a Google ad to reach the website. It contains information about which ad was clicked, so that successes achieved, such as orders or contact requests, can be assigned to the ad.; Type: cookie; Duration: 2 months, 29 days;

Google Tag Manager (lightweight.info website only)
Description of Service
This is a tag management system. With this the user can update measurement codes and related code fragments collectively known as tags on the users website or mobile app.
Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
• Tag Management
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
• Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
• Aggregated data about tag firing
Legal Basis
In the following the required legal basis for the processing of data is listed.
• Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted after 14 days of retrieval.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
• United States of America,Singapore,Taiwan,Chile
Data Recipients
In the following the recipients of the data collected are listed.
• Alphabet Inc., Google LLC, Google Ireland Limited
Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

Facebook Pixel (lightweight.info website only)
Description of Service
This is a Tracking technology offered by Facebook and used by other Facebook services such as Facebook Custom Audiences.
Processing company
Meta Platforms Ireland Ltd.
4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://www.facebook.com/help/contact/540977946302970
Data Purposes
This list represents the purposes of the data collection and processing.
• Analytics
• Marketing
• Retargeting
• Tracking
• Advertisement
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
• Cookies
• Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
• Ads viewed
• Content viewed
• Device information
• Geographic location
• HTTP-header
• Interactions with advertisement, services, and products
• IP address
• Items clicked
• Marketing information
• Non-sensitive custom data
• Pages visited
• Pixel ID
• Referrer URL
• Success of marketing campaigns
• Usage data
• User behaviour
• Facebook cookie information
• Facebook user ID
• Usage/click behaviour
• Browser information
Legal Basis
In the following the required legal basis for the processing of data is listed.
• Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted the latest after 720 days.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
• Singapore,United Kingdom,United States of America
Data Recipients
In the following the recipients of the data collected are listed.
• Meta Platforms Ireland Ltd., Meta Platforms Inc.
Click here to read the privacy policy of the data processor
https://www.facebook.com/privacy/explanation
Click here to read the cookie policy of the data processor
https://www.facebook.com/policies/cookies
Storage Information
• Maximum age of cookie storage: 1 year
Stored Information
• Name: _fbp; Cookie from Facebook used for website analytics, ad targeting and ad measurement.; Type: cookie; Duration: 1 year; Domain: facebook.com;
• Name: act; Cookie from Facebook used for website analytics, ad targeting and ad measurement.; Type: cookie; Duration: 1 year; Domain: facebook.com;
• Name: c_user; Cookie from Facebook used for website analytics, ad targeting and ad measurement.; Type: cookie; Duration: 1 year; Domain: facebook.com;
• Name: datr; Cookie from Facebook used for website analytics, ad targeting and ad measurement.; Type: cookie; Duration: 1 year; Domain: facebook.com;
• Name: fr; Cookie from Facebook used for website analytics, ad targeting and ad measurement.; Type: cookie; Duration: 1 year; Domain: facebook.com;
• Name: m_pixel_ration; Cookie from Facebook used for website analytics, ad targeting and ad measurement.; Type: cookie; Duration: 1 year; Domain: facebook.com;
• Name: pl; Cookie from Facebook used for website analytics, ad targeting and ad measurement.; Type: cookie; Duration: 1 year; Domain: facebook.com;
• Name: presence; Cookie from Facebook used for website analytics, ad targeting and ad measurement.; Type: cookie; Duration: 1 year; Domain: facebook.com;
• Name: sb; Cookie from Facebook used for website analytics, ad targeting and ad measurement.; Type: cookie; Duration: 1 year; Domain: facebook.com;
• Name: spin; Cookie from Facebook used for website analytics, ad targeting and ad measurement.; Type: cookie; Duration: 1 year; Domain: facebook.com;
• Name: wd; Cookie from Facebook used for website analytics, ad targeting and ad measurement.; Type: cookie; Duration: 1 year; Domain: facebook.com;
• Name: xs; Type: cookie; Duration: 1 year; Domain: facebook.com;

Google Maps
Description of Service
This is an integrated map service.
Processing company
Google Ireland Limited
Gordon House, 4 Barrow St, Dublin 4, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/troubleshooter/7575787?hl=en
Data Purposes
This list represents the purposes of the data collection and processing.
• Displaying Maps
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
• APIs
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
• Date and time of visit
• Location information
• IP address
• URL
• Usage data
• Search terms
• Geographic location
Legal Basis
In the following the required legal basis for the processing of data is listed.
• Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
• United States of America,Singapore,Taiwan,Chile
Data Recipients
In the following the recipients of the data collected are listed.
• Google Ireland Limited, Google LLC, Alphabet Inc
Click here to read the privacy policy of the data processor
http://www.google.com/intl/de/policies/privacy/
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

YouTube Video (lightweight.info website only)
Description of Service
This is a video player service.
Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
• Displaying Videos
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
• Cookies (if Privacy-Enhanced Mode is not activated)
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
• Device information
• IP address
• Referrer URL
• Videos viewed
Legal Basis
In the following the required legal basis for the processing of data is listed.
• Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
• Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
• Alphabet Inc.
• Google LLC
• Google Ireland Limited
Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/
Storage Information
• Maximum age of cookie storage: 10 years, 2 days
Stored Information
• Name: PREF; This cookie stores your preferences and other information, in particular preferred language, how many search results you wish to be shown on your page, and whether or not you wish to have Google’s SafeSearch filter turned on.; Type: cookie; Duration: 10 years, 2 days;
• Name: VISITOR_INFO1_LIVE; This cookie measures your bandwidth to determine whether you get the new player interface or the old.; Type: cookie; Duration: 6 months;
• Name: use_hitbox ; This cookie increments the ‘views’ counter on the YouTube video.; Type: cookie; Duration: Session;
• Name: YSC; This is set on pages with embedded YouTube video.; Type: cookie; Duration: Session;

fonts.com
Description of Service
This is a web font service.
Processing company
Monotype Imaging Holdings Inc.
600 Unicorn Park Drive, Woburn, Massachusetts 01801, United States of America
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
privacy@monotype.com
Data Purposes
This list represents the purposes of the data collection and processing.
• Providing fonts
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
• Referrer URL
• Customer ID
• URL
• Identifiers
• Anonymised IP address
Legal Basis
In the following the required legal basis for the processing of data is listed.
• Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The collected User data will be stored for up to 30 days from the date of collection.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
• United States of America
Data Recipients
In the following the recipients of the data collected are listed.
• Monotype Imaging Holdings Inc.
Click here to read the privacy policy of the data processor
https://www.monotype.com/legal/privacy-policy

Usercentrics Consent Management Platform (lightweight.info website only)
Description of Service
This is a consent management service. Usercentrics GmbH is used on the website as a processor for the purpose of consent management.
Processing company
Usercentrics GmbH
Sendlinger Str. 7, 80331 Munich, Germany
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
datenschutz@usercentrics.com
Data Purposes
This list represents the purposes of the data collection and processing.
• Compliance with legal obligations
• Consent storage
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
• Local storage
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
• Opt-in and opt-out data
• Referrer URL
• User agent
• User settings
• Consent ID
• Time of consent
• Consent type
• Template version
• Banner language
Legal Basis
In the following the required legal basis for the processing of data is listed.
• Art. 6 para. 1 s. 1 lit. c GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The consent data (given consent and revocation of consent) are stored for three years. The data will then be deleted immediately.
Data Recipients
In the following the recipients of the data collected are listed.
• Usercentrics GmbH
Click here to read the privacy policy of the data processor
https://usercentrics.com/privacy-policy/

Section 4 SOCIAL PLUGINS (lightweight.info website only)
Social plugins are not used on our website. All we provide are links to the following social media services:

Section 4.1 Facebook
Service provider: Facebook Inc., 1601 S. California Ave, Palo Alto, CA, 94304, USA
To find out which data are collected and how they are used, please refer to Facebook’s privacy policy: https://www.facebook.com/help
You can find ways to protect your privacy on Facebook at: https://www.facebook.com/policy.

Section 4.2 YouTube
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
To find out which data are collected and how they are used, please refer to Google’s privacy policy: https://ww.google.com/privacy
You can find ways to protect your privacy on at: https://www.google.com/dashboard.

Section 4.3 Twitter
Service provider: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA, 94107, USA
To find out which data are collected and how they are used, please refer to Twitter’s privacy policy: https://www.twitter.com/privacy
You can find ways to protect your privacy at: https://www.twitter.com/settings.

Section 4.4 Instagram
Service provider: Instagram LLC, 1601 Willow Rd, Menlo Park, CA, 94025, USA
Please read Instagram’s privacy policy to find out what data are collected and how they are used: https://instagram.com/about/legal/privacy/

Section 4.5 Strava
Service provider: Strava, Inc., 208 Utah Street, San Francisco, CA, 94103, USA
Please read Strava’s privacy policy to find out what data are collected and how they are used: https://www.strava.com/legal/privacy

Section 5 RECIPIENTS / PASSING ON OF DATA
Personal data that you provide us with are not passed on to third parties for advertising or any other purposes except the ones stated. Processing your order may sometimes entail sending your personal data to third parties. For instance, we provide our shippers with the data they need to deliver goods to you.
We use service providers to run this website and for other products of ours. It may be that they come to obtain personal data. We choose our service providers carefully, especially in view of data protection and security, and we do everything we have to under data protection law to ensure that our data processing is legal.
The legal basis for this data processing can be Article 6 (1) (1) b) GDPR (contract performance), Article 6 (1) (1) f) GDPR (legitimate interest), or processing done by a service provider, if they process personal data on our behalf (Article 28 GDPR).

Section 6 PAYMENT PROCEDURE
As part of contractual and other legal relationships, on account of legal obligations, and on the basis of other legitimate interests, we offer our customers efficient and secure payment methods, for which we employ payment service providers.

These payment transactions are governed by the terms and conditions and data protection policies of the payment service providers concerned, which can be viewed on their websites and transaction apps. Please refer also to these for further information and if you wish to exercise your rights as a data subject, such as those of cancellation and information.

Section 6.1 Payment by credit card
We use a module provided by VR Payment GmbH, Saonestraße 3a, 60528 Frankfurt am Main, as our credit card payment processor.
• The purposes of this processing are to provide contractual services and customer service.
• The legal basis for this is Article 6 (1) (1) b) GDPR (contract fulfilment and pre-contractual enquiries) and Article 6 (1) (1) f) GDPR (legitimate interest).
Your payment details are sent to the credit card company for the processing of credit card payments. Data disclosed to third parties are used by them only to fulfil the duties and tasks assigned to them.
Nor are your personal data sold to or shared with third party businesses for their use without your prior consent.
They will only be passed to state agencies or authorities if national legislation makes it absolutely necessary.

Section 6.2 Payment by PayPal
If you opt to pay using the online payment service provider PayPal when ordering on our website, the contact details collected when you do so are transferred to PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. In this respect, PayPal acts as a custodian and online payment service provider, and offers buyer protection services.
• The legal basis for this is Article 6 (1) (1) b) GDPR (contract fulfilment and pre-contractual enquiries) and Article 6 (1) (1) f) GDPR (legitimate interest).
The personal data sent to PayPal are first name, surname, address, telephone number and email address. Other data relating to the order, such as payment details, invoice amount and invoice details, percentage tax rate, number of items and product numbers are also transmitted, as are metadata and communication data (device information, IP address).
This data has to be sent in order to process your order with your chosen payment method, in particular to confirm your identity, process your payment and establish your customer relationship with PayPal.
If you choose PayPal as your payment method, the data privacy policy governing your PayPal account also applies during the payment process. You can view it at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Section 7 DURATION OF DATA STORAGE
We have a policy of avoiding and minimising data storage where possible. We therefore only store your personal data for as long as we need to for achieving the purposes stated, or for the various storage periods stipulated by law. Once a purpose no longer applies or a storage period expires, your personal data are routinely blocked or deleted in accordance with the law.

Section 8 RIGHTS OF THE DATA SUBJECT
Information, correction, blocking, deletion and objection
You have the right to be told about the personal data being processed by carbovation at any given time. You also have the right to have these data corrected or erased, and to restrict their processing, unless they have to be stored to perform business transactions. You can request your personal data to be sent to you in a structured, common, machine-readable format.
Furthermore, you have the right to object to the processing of your personal data, provided you do so on the legal basis of legitimate interests.
If you wish to exercise any of your rights, please contact the Data Protection Officer (contact details can be found at the beginning of this Privacy Notice).

Section 9 CONSENT
If we process your personal data on the basis of your consent, you have the right to revoke that consent at any time, without affecting the legality of processing carried out on its basis until you do so.
You can revoke your consent by notifying the Data Protection Officer (contact details can be found at the beginning of this Privacy Notice).

Section 10 COMPLAINING TO THE SUPERVISORY AUTHORITY
If you think our company is not treating your personal data properly, you have the right to complain. To do this, you can contact the supervisory authority responsible. To identify which supervisory authority is responsible for you, please click here:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Section 11 VIDEO MONITORING
If you visit us at our company premises, please note that they are under video surveillance. You can obtain more information at reception.

END OF DATA PRIVACY
Date: 20/01/2022