§ 1 Information on the collection of personal data

(1) Data protection and the secure handling of your data are important to us. We therefore process your data exclusively on the basis of the statutory provisions: Art. 12 and 13 of the EU GDPR.

In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is

Kletterparadies GmbH
Bahnhofstrasse 4
D-01259 Dresden
Phone: +49 (0) 351 21 07 20-0
E-Mail: marketing@kletterparadies.net

Kletterparadies GmbH is a company of the eibe group (https://shop.eibe.de/datenschutzerklaerung/). You can contact our data protection officer (Group Data Protection Officer of the eibe Group) at datenschutz@kletterparadies.net or our postal address with the addition “the data protection officer”.

(3) When you contact us by e-mail or via the contact form on the website, the data you provide (mandatory information is: Your e-mail address, your name, subject, content of your message) will be stored and processed by us in accordance with Art. 6 para. 1 lit. a) GDPR in order to answer your questions. The processing of the data is lawful as long as you do not revoke your consent by e-mail. datenschutz@kletterparadies.net to assert your rights. We may also process the data you provide in order to inform you about other interesting products from the portfolio of Kletterparadies GmbH and the eibe Group or to send you e-mails with technical information. This contact is based on Art. 6 para. 1 lit. f) GDPR in conjunction with recital 47 GDPR (direct advertising as a legitimate interest of Kletterparadies GmbH). You can object to the processing of your data for advertising purposes at any time by sending an email to datenschutz@kletterparadies.net without incurring any costs other than the transmission costs according to the basic rates. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.

(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.

(5) Data transmission is encrypted using an SSL certificate.

§ 2 Your rights

You have the following rights under the EU General Data Protection Regulation:

• information on categories of processed data, processing purposes, any recipients of the data, the planned storage period (Art. 15 GDPR);
• the rectification or completion of incorrect or incomplete data (Art. 16 GDPR);
• a given consent at any time with effect for the future (Art. 7 para. 3 GDPR);
• in certain cases within the framework of Art. 17 GDPR the erasure of data – in particular if the data is no longer required for the intended purpose or is processed unlawfully, or if you withdraw your consent in accordance with Art. 7 para. 3 GDPR revoke your consent or object in accordance with Art. 21 GDPR;
• under certain conditions the restriction of data if erasure is not possible or the obligation to erase is disputed (Art. 18 GDPR);
• to data portabilityi.e. you can receive the data you have provided to us in a commonly used, machine-readable format, such as CSV, and transmit it to others if necessary (Art. 20 GDPR;)
• complain to the competent supervisory authority about data processing complain

Please send all requests for information, deletion and correction, requests for information, requests for data portability or objections to data processing by e-mail datenschutz@kletterparadies.net or by post to

Kletterparadies GmbH
personal/confidential
Data protection officer
Bahnhofstrasse 4
D-01259 Dresden
Phone: +49 (0) 351 21 07 20-0
E-Mail: datenschutz@kletterparadies.net

We would also like to point out that you can object to the future processing of your personal data at any time in accordance with the legal requirements pursuant to Art. 21 GDPR. In particular, you may object to processing for direct marketing purposes without incurring any costs other than the transmission costs according to the basic rates.

§ 3 Collection of personal data when visiting our website

(1) When using the website for information purposes only, we only collect the personal data that your browser transmits to our server, provided that no other information is transmitted to us, e.g. via the contact form. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 lit. b) and f) GDPR):

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.

2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk and assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.

(3) Use of cookies:

(3a) Technically necessary cookies

The legal basis for the use of technically necessary cookies is Art. 6 para. 1 lit. b) and f) GDPR. The legitimate interest in this case is the security and functionality of our website. Insofar as the use of cookies is absolutely necessary, the storage of information or access to existing information in your terminal equipment takes place on the legal basis of Section 25 (2) TDDDG.

(3b) Statistics Cookies collect information anonymously. This information helps us to understand how our visitors use our website.

The legal basis for the use of statistics cookies is Art. 6 para. 1 lit. a) GDPR, your consent given via cookie banners, and the legal basis for the storage of information and/or access to existing information on your end device is § 25 para. 1 TDDDG. You can revoke your consent at any time with effect for the future by making settings in our cookie banner again.

(3c) Third-party cookies, content from video platforms and social media platforms are blocked by default. If cookies from external media are accepted in the cookie banner, access to this content no longer requires manual consent.

The legal basis for the use of third-party cookies is Art. 6 para. 1 lit. a) GDPR, your consent given via cookie banners, and the legal basis for the storage of information or access to existing information on your end device is § 25 para. 1 TDDDG. In order to meet the legal requirements, we use the BorlabsCookie cookie management system. The use of BorlabsCookie serves to obtain the necessary consent in accordance with the legal provisions for the use of cookies. The provider is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany. The legal basis for this results from Art. 6 para. 1 lit. c GDPR. You can revoke your consent at any time with effect for the future by making settings in our cookie banner again.

§ 4 Data protection information for applicants

Kletterparadies GmbH takes data protection very seriously. You can contact Kletterparadies GmbH by post at the following address

Bahnhofstrasse 4
D-01259 Dresden
Personnel department (confidential)

or by unencrypted e-mail (bewerbung@kletterparadies.net) apply.

We process your data in our IT systems as part of the application process.
The legal basis for this is Art. 6 para. 1 lit. b) GDPR.

If you send us your application documents and personal data by unencrypted e-mail, you consent to this method of transmission. You also consent to us communicating with you in the application process by unencrypted e-mail, for example to confirm receipt by unencrypted e-mail. The legal basis for the communication channel is Art. 6 para. 1 lit. a), b) and f) GDPR.

You can revoke your consent to unencrypted e-mail communication at any time by sending an e-mail to bewerbung@kletterparadies.net with effect for the future.

After a successful job interview, an extended certificate of good conduct may be requested, depending on the position, if the requirements of Section 30 a of the Federal Central Criminal Register Act (BZRG) are met. The legal basis for this is Art. 6 para. 1 b), c) and f) GDPR.

Your data will be deleted no later than 6 months after completion of the application process, provided that there are no legal retention periods to the contrary, or – in the event of recruitment – transferred to the personnel administration of Kletterparadies GmbH. The legal basis for this is Art. 6 para. 1 lit. b) GDPR.

Rights of the data subjects
In accordance with the GDPR and the Federal Data Protection Act, you have the right to information, rectification, erasure, restriction of processing and data portability. If you wish to assert your rights, you can contact our HR department directly or by email at bewerbung@kletterparadies.net. Further information, for example about data processing when visiting our website, can be found here www.kletterparadies.net/datenschutz

§ 5 Recipients of the data

In order to fulfill our contractual and legal obligations, we sometimes use external service providers (e.g. we use Raidboxes GmbH for hosting our website) with whom we have concluded an order processing contract in accordance with Art. 28 GDPR or other data protection agreements. Kletterparadies GmbH remains responsible for the protection of your data even in this case. Due to legal obligations, we are obliged in certain cases to transmit certain data to the requesting body in accordance with Art. 6 para. 1 lit. c) GDPR.

§ 6 Deletion periods

Your personal data will be erased or anonymized unless statutory retention obligations prevent this, if you have asserted a claim for erasure, if the data is no longer required to fulfill the purpose for which it was stored or if its storage is inadmissible for other legal reasons.

§ 7 Use of Google Ads

This website uses the online marketing tool “Google Ads” from Google. Google Ads is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting).

Google Ads uses cookies to display ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. In addition, Google Ads can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Google Ads ad and later visits the advertiser’s website with the same browser and makes a purchase there. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once.

According to Google, Google Ads cookies do not contain any personal information.

If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out your IP address and store it.

You can prevent participation in this tracking process in various ways:

by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any ads from third-party providers;

by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, see https://adssettings.google.com. However, this setting will be deleted if you delete your cookies;

by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers under the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this website to their full extent.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found at https://policies.google.com/privacy/frameworks. The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

§ 8 Use of Google Fonts

We use Google Fonts on our website. These are the “Google fonts” of Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google Fonts is an important component in ensuring the quality of our website. All Google fonts are automatically optimized for the web. This saves data volume and is a great advantage, especially for use on mobile devices. When you visit our site, the low file size ensures a fast loading time. Furthermore, Google Fonts are secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can sometimes visually distort texts or entire websites.

Thanks to the fast Content Delivery Network (CDN), there are no cross-platform problems with Google Fonts. Google Fonts supports all major browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). We therefore use Google Fonts so that we can display our entire online service as uniformly as possible.

No cookies are stored in your browser. The files are requested via Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you do not need to worry that your Google account data will be transmitted to Google while using Google Fonts. The data is only stored locally on our servers, so that your data is not transmitted to external Google servers and thus data transfer to third countries is excluded. The legal basis for the use of Google Fonts is Art. 6 para. 1 lit. f) GDPR (legitimate interest in the uniform presentation of our websites).

Your data is processed in Germany and in other European countries. In some cases, your data is also processed in countries outside the EU (so-called third countries). Processing in third countries takes place if you have expressly consented to this or if it is necessary for the provision of our services to you or if it is provided for by law in accordance with Art. 49 GDPR).

§ 9 Use of reCAPTCHA

(1) reCAPTCHA is a captcha service that protects websites from spam software and misuse by non-human visitors. reCAPTCHA is owned by Google LLC. The company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland), fax: +353 (1) 436 1001, user conditions: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy, is responsible for the European area. reCAPTCHA can be used to determine whether it is a human or a bot or other spam software. This service is most frequently used when filling in forms. It is a kind of automatic Turing test designed to ensure that an action on the Internet is being carried out by a human being. The tool uses modern risk techniques. A JAVAScript element is integrated into the source code.

(2) Personal data is collected. This means that IP addresses and other data required by reCAPTCHA may be sent to Google. IP addresses are almost always truncated within the member states of the EU or other signatory states to the Agreement on the European Economic Area before the data is sent to a server in the USA. The IP address is not combined with other Google data unless you are logged in with your Google account while using reCAPTCHA. First, the reCAPTCHA algorithm checks whether Google cookies from other Google services have already been placed on your browser. Then reCAPTCHA places an additional cookie in your browser and takes a snapshot of your browser window. reCaptcha collects the referrer URL, IP address, information about the operating system, cookies, mouse and keyboard behavior, date and language settings, all Javascript objects and screen resolution.

(3) By integrating reCAPTCHA, your data is transferred to the Google servers. Despite repeated requests, Google has not clearly stated where exactly this data is stored. Without an explicit confirmation from Google, it can be assumed that information such as mouse interactions, time spent on the website or language settings are stored on the European or American Google servers. The IP address that your browser sends to Google is generally not combined with other Google data from various Google services. However, if you are logged in to your Google account while using the reCAPTCHA plug-in, the data will be merged, in which case Google’s privacy policy will apply.

§ 10 Use of Mouseflow

(1) We use the Mouseflow software on this website so that we can improve our offering and ensure meaningful, ergonomic user guidance when visiting our website. This involves recording and evaluating user activities on the Kletterparadies website. The data collected is stored anonymously. Keystrokes are not recorded. The purpose of the processing is to record user activities on the Kletterparadies GmbH website. The activities are collected using cookies.

(2) When you visit a website that uses Mouseflow, this information is collected: Clicks, mouse movements, hovering, scrolling, browser, device (desktop/tablet/mobile), language, operating system, screen resolution, visit duration, navigation (URLs), page content (HTML), ISP & location (city, state/region, country), keystrokes (only for non-EU/EEA data subjects in non-EU/EEA accounts and never for passwords, numbers or excluded fields, referrer URL, visitor type (first-time visitor/returner), individual tags or variables, responses in the feedback tool

The data is stored for 1-12 months depending on the customer’s plan.

The legal basis for this is Art. 6 para. 1 lit. a) GDPR and Art. 25 para. 1 TDDDG. You can revoke your consent at any time via the cookie settings.

(3) The processing company is Mouseflow Aps, Flaesketorvet 68, 1711 Copenhagen V, Denmark. The e-mail address of Mouseflow’s data protection officer is datenschutz@mouseflow.com. The place of processing is Denmark. The recipients of the data collected are Mouseflow Aps and Kletterparadies GmbH. The non-personal data will be deleted if it is no longer required for the purpose of processing. The data processor’s privacy policy can be found at https://mouseflow.com/legal/visitor/privacy-policy/ to find.

(4) What can I do?

Data access

If you would like a copy of your data*, please contact the operator of the website on which the data was collected (the data controller). If they are unable to process the request or do not respond within a reasonable time, please contact us at datenschutz@mouseflow.com.

Data correction

If you wish to correct your data*, please contact the operator of the website on which the data was collected/collected (the data controller). If they are unable to process the request or do not respond within a reasonable time, please contact us at datenschutz@mouseflow.com.

Data deletion

If you wish to have your data* deleted, please contact the operator of the website on which the data was collected (the data controller). If they are unable to process the request or do not respond within a reasonable time, please contact us at datenschutz@mouseflow.com.

Revocation of consent

If you have given consent for information to be processed by Mouseflow (in our feedback widget) and wish to withdraw this consent, please contact the operator of the website on which the data was collected (the data controller) and us at datenschutz@mouseflow.com.

Opt Out

If you do not wish to be tracked, you can use the following opt-out:

mouseflow.com/en/opt-out/By using the opt-out, a corresponding cookie is set on your device until it is deleted.

* Our customers are contractually obliged not to collect any personally identifiable data. Therefore, the data stored by Mouseflow is generally anonymous. This could change your rights above and/or limit our ability to provide, correct or delete your data as there is no way to associate it with you.

§ 11 Use of matomo

(1) We use the open source software tool Matomo (formerly PIWIK) on our website to analyze the surfing behavior of our users. Matomo is deactivated when you visit our website. Your usage behavior is only recorded anonymously if you actively consent to this. As a user, you therefore also have full control over the use of cookies. The tool creates user profiles based on pseudonyms. Permanent cookies are stored on your end device for this purpose. Cookies are text files that are stored on your computer and enable Kletterparadies to analyze the use of its website. For this purpose, the usage information obtained by the cookie is transmitted to the Kletterparadies server and stored so that usage behavior can be evaluated. Your IP address is immediately anonymized. Your IP address is an anonymous identifier for us; we have no technical means of identifying you as a registered user. You remain anonymous as a user. The information generated by the cookie about your use of this website is not passed on to third parties.

(2) Data processing is based on your consent in accordance with Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR, provided that you have given your consent via our banner. You can withdraw your consent at any time.

(3) If you consent to web analysis using Matomo, the following data, among others, will be collected when you access individual pages of our website:

• 4 bytes of the IP address of the user’s accessing system
• The website called up
• The website from which the user accessed the website (referrer)
• The subpages that are accessed from the accessed website
• The time spent on the website
• The frequency of visits to the website
• Timestamp (date and time of the hit)
• Type of request
• Client information (type of client, client version))
• Operating system of the user (device, OS version of the device)

The data is deleted as soon as it is no longer required for our recording purposes. The generated statistics and underlying data are not deleted.

(4) Further information on Matomo’s terms of use and data protection regulations can be found at: https://matomo.org/privacy/

§ 12 Data protection notice for our LinkedIn fan page

Kletterparadies GmbH operates a fan page on LinkedIn. The operation of this page is based on our legitimate interests in a contemporary and supportive information and interaction opportunity for and with our users and visitors in accordance with Art. 6 para. 1 lit. f) GDPR, the consent given pursuant to Art. 6 para. 1 lit. a) and Art. 6 para. 1 lit. b) GDPR (inter alia pursuant to Art. 26 GDPR. If you have given us your consent for optional cookies, the legal basis for the storage of information or access to existing information on your end device is Section 25 (1) TDDDG. If the use of cookies is absolutely necessary, the storage of information or access to existing information in your end device is based on the legal basis of Section 25 (2) TDDDG. Apart from direct access to our fan page by entering the homepage URL, you have the option of accessing it by clicking on the icon on our website. This will take you away from the Kletterparadies GmbH website and directly to the linked fan page. The data below will be transmitted directly to LinkedIn.

Each time the LinkedIn fan page is accessed, various data is collected, such as the amount of data transferred, the IP address used or the time of access. LinkedIn uses cookies to store and further process this information, i.e. small text files that are stored on the user’s various end devices. If the user has a LinkedIn profile and is logged in to it, the information is also stored and analyzed across devices.

The technical access and further use of this data, which is generated when accessing the fan page, is generally the responsibility of LinkedIn. Kletterparadies GmbH does not have access to the usage data collected, nor can we determine how this data is used by LinkedIn.

We would also like to point out that data processing by LinkedIn may take place outside the EU or the European Economic Area. Further details on the handling of data by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy?_l= .

§ 13 Data protection notice for our Instagram page

Instagram is an online service for sharing photos and videos that belongs to the Meta Group, formerly Facebook. Kletterparadies GmbH uses the technical platform and services of Meta Platforms Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland.

We would like to point out that you use the Instagram page and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, rating).

(1) Processing of personal data by Meta

When visiting our Instagram page at the address https://www.instagram.com/#### and Meta collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. This information is used to provide Kletterparadies GmbH, as the operator of the Instagram page, with anonymized statistical information about the use of the Instagram page.

The data collected about you in this context will be processed by Meta Ltd. and may be transferred to countries outside the European Union. What information Meta receives and how it is used is described in Meta’s data usage guidelines. There you will also find information on how to contact Meta and on the settings options for advertisements. The data usage guidelines are available at the following link: https://privacycenter.instagram.com/policy . The complete data policy of the Instagram service can be found here: https://help.instagram.com/581066165581870/?helpref=hc_fnav .

Meta provides information on the use of cookies in the cookie policy for the Instagram service: https://help.instagram.com/1896641480634370/?helpref=hc_fnav

We would like to point out that Meta Ireland is able to track your user behavior (across devices for registered users) beyond the Instagram service on other websites by means of the cookies used. This applies both to those registered with the Instagram service and to those not registered there.

Meta states that it stores data until it is no longer needed to provide the Services and Meta Products or until the User’s account is deleted, whichever comes first. This depends on the circumstances of the individual case, in particular the type of data, why it is collected and processed and the relevant legal or operational storage requirements. You can find more information on the storage of data at https://privacycenter.instagram.com/policy

(2) Instagram page insights

Meta processes a range of personal data of page visitors for its own purposes in its so-called Page Insights. The processing takes place regardless of whether page visitors are registered with Facebook or Instagram or not and regardless of whether page visitors are members of the Facebook or Instagram network. Users who access the Instagram pages without being registered or logged in to Instagram also have the option of influencing the scope of data processing by means of a cookie banner set by Meta. You can find more information about Meta’s cookies at https://www.facebook.com/privacy/policies/cookies

Page Insights are summarized, anonymized statistics. Site operators themselves do not have access to the personal data that is processed in this context, but only to the summarized, anonymized Page Insights. You can find more information at https://www.facebook.com/help/instagram/788388387972460

(3) Rights of the data subject

The Instagram page offers you the opportunity to react to our posts, comment on them and send us private messages. Please check carefully what personal data you share with us via our Instagram page. If you wish to prevent Meta from processing personal data that you have transmitted to us, please contact us by other means, for example via our e-mail address: datenschutz@kletterparadies.net

If users’ personal data is processed, they have the right to information, correction, objection, transferability and deletion of the data in accordance with the EU General Data Protection Regulation. Meta Ireland is obliged to respond to requests from data subjects. Meta provides further information on the rights of data subjects here: https://www.facebook.com/help/2069235856423257

Inquiries from users about data processing when visiting an Instagram page that is the sole responsibility of Meta Ireland will be forwarded by us to Meta Ireland. Users can contact Meta’s data protection officer themselves at the following link https://www.facebook.com/help/contact/540977946302970

Meta also provides information about privacy-friendly profile settings for Instagram profiles: https://help.instagram.com/811572406418223/?helpref=hc_fnav

§ 14 Data protection information for our Facebook fan page

§ 15 Data protection notice for Leadinfo