Data protection

1. Introduction and presentation

The villeninhaus.de team takes the protection of your personal data very seriously. The following privacy policy therefore informs you in detail about the details of the collection, processing and storage of your data on www.villeninhaus.de. Please contact us at any time if you have any questions about this.

2. Contact details of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as data protection regulations is:

inHAUS SL
Av. Picassent, 12
46440 Almussafes (Valencia). Spain
Tel.: 963519219
E-Mail: marketing@villenihaus.de
Website: www.villeninhaus.de

3. Contact details of the Data Protection Officer

You can reach our data protection officer at: marketing@villeninhaus.de or at our postal address.

4. General information on data processing

4.1.    Scope of processing of personal data
We process the personal data of our users in principle only where this is required to provide a functional website as well as the contents and services offered by us. The personal data of our users is usually only processed with the consent of the user. An exception applies to cases in which prior consent cannot be obtained on factual grounds and the processing of the data is permitted by law.

4.2.    Legal basis for the processing of personal data
Where we obtain the consent of the data subject for the processing of personal data, Article 6 (1) (a) EU General Data Protection Regulation (GDPR) serves as legal basis.
Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, Article 6 (1) (b) GDPR is the legal basis. This also applies to processing operations that are required to take steps prior to entering into a contract. Where the processing of personal data is necessary for the compliance with a legal obligation to which our company is subject, Article 6 (1) (c) GDPR is the legal basis.
If the processing of personal data is required in order to protect the vital interests of the data subject or of another natural person, Article 6 (1) (d) GDPR is the legal basis.
If the processing is required to protect the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interests, Article 6 (1) (f) GDPR is the legal basis for the processing.

4.3.    Data erasure and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. In addition, personal data may be stored if provided for by the European or national legislator in EU regulations, laws, or other regulations to which the controller is subject. The data is also blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion or fulfilment of a contract.

4.4.    Use of service providers
We use service providers for the following services and for the processing of your data:
(1)     for the hosting of our website in a secure computer centre
(2)     the care and maintenance of software and hardware
The service providers process data in the course of so-called job processing Article 28 GDPR exclusively in accordance with our instructions and are obliged to comply with the applicable data protection provisions. All service providers have been carefully selected by us and obtain access to personal data only to the extent and for the duration required to provide the service or as far as you have consented to the use of the data.

Where the registered office of our service providers or partners is located in a country outside the European Economic Area (EEA), we will inform you accordingly.

5. Provision of the website and creation of log files

5.1.    Description and scope of the data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected here:

– Information regarding the browser type and the version used
– The user’s operating system
– The internet service provider of the user
– The IP address of the user
– Date and time of access
– Websites, from which the system of the user reaches our website
– Websites that are called up by the system of the user via our website

The data is also stored in the log files of our system. Storage of this data will not be stored with other personal data of the user.

5.2.    Legal basis for data processing
The legal basis for temporary storage of the data and the log files is Article 6 (1) (f) GDPR.

5.3.    Purpose of the data processing
Temporary storage of the IP address by the system is required to enable the delivery of the website to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session.
Log files are used for the storage in order to ensure the functionality of the website. The data also helps us to optimise the website and to safeguard the security of our IT systems. In this context, the data is not evaluated for marketing purposes.
Our legitimate interest in data processing also lies in these purposes, in accordance with Article 6 (1) (f) GDPR.

5.4.    Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. Where data is collected for the provision of the website, the data is deleted when the respective session is completed.
If the data is stored in log files, it will be deleted within seven days. Continued storage may be possible, in which case the users’ IP addresses are deleted or masked so that association with a website user isnot possible.

5.5.    Option to reject and erase
The capture of the data for the delivery of our website and the storage of the data in log files is imperative for the operation of our website. The user therefore does not have the option to object.

6. Data collection on our website: Cookies

Our website uses so-called “cookies”. Cookies are small text files and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or display advertising.

Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions desired by you (functional cookies, e.g. for the shopping cart function) or to optimise the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 (1) lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (Art. 6 para. 1 lit. a DSGVO); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the framework of this data protection declaration and, if necessary, request your consent.

7. Newsletter

7.1. Description and scope of the data processing
Newsletters are despatched on the basis of the user’s registration on the website:
It is possible to subscribe to a free newsletter via our website. In the process of registering for the newsletter, the data entered on the input screen is transmitted to us.

Data requested: Name, email address, address and telephone number, among others.

In addition, the following data is collected during registration:
–  IP address of the computer making the request
–  Date and time of registration
For the processing of the data, your consent is obtained, and reference is made to this privacy policy as part of the registration process.

Data will not be passed on to third parties in the context of data processing for the sending of newsletters. The data will be used exclusively for sending the newsletter.

7.2. Legal basis for the data processing
If the user’s consent is available, the legal basis for the processing of the data after the user has registered for the newsletter is Article 6 (1) (a) GDPR.

7.3. Purpose of the data processing
The user’s e-mail address is collected in order to send the newsletter.
The purpose of collecting other personal data during the course of the registration process is to prevent the misuse of the services or fraudulent use of the e-mail used.

7.4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The e-mail address of the user will therefore be stored for as long as the subscription to the newsletter is active. The other personal data collected during the registration process is ordinarily deleted after a period of seven days.

7.5. Right to object and erasure
The user concerned may cancel the subscription to the newsletter at any time. A corresponding link for this purpose is provided in every newsletter. This also enables a withdrawal of the consent to the storage of the personal data collected during the registration process.

8. Contact form and contact by e-mail

8.1 Type and purpose of processing:

We offer you the possibility to contact us uncomplicatedly and directly by e-mail. The data entered and transmitted by you will be processed exclusively for the purpose of individual communication with you.

8.2 Legal basis:

The processing of data transmitted by e-mail is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO) in efficient and simple communication with you.

Depending on the nature of your request, the processing of data transmitted by e-mail may serve to implement pre-contractual measures (Art. 6 para. 1 lit. b DSGVO).

8.3 Storage period:

Data will be deleted no later than 6 months after the last contact and final processing of the enquiry.

If there is a contractual relationship and we are subject to statutory retention periods, we will delete your data after these periods have expired.

8.4 Provision mandatory or required:

The provision of your personal data is voluntary. However, we cannot answer your enquiry without providing data.

9. Web analysis through the use of Google Analytics, Google Analytics Remarketing, Google Tag Manager

9.1 Google Analytics and Google Remarketing

Google Remarketing analyses your user behaviour on our website (e.g. clicking on certain products) in order to classify you in certain advertising target groups and subsequently play suitable advertising messages to you when you visit other online offers (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Remarketing can be linked with Google’s cross-device functions. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have a Google account, you can object to personalised advertising at the following link: https://www.google.com/settings/ads/onweb/.

The use of Google Remarketing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in marketing its products as effectively as possible. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

Further information and the data protection provisions can be found in Google’s data protection declaration at: https://policies.google.com/technologies/ads?hl=de.

9.2 Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool with the help of which we can integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States.

The use of the Google Tag Manager is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on his website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

9.3 Target group formation with customer matching

To create target groups, we use, among other things, the customer matching function of Google Remarketing. In this process, we transfer certain customer data (e.g. email addresses) from our customer lists to Google. If the customers in question are Google users and logged into their Google account, they are shown matching advertising messages within the Google network (e.g. on YouTube, Gmail or in the search engine).

9.4 Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google conversion tracking enables Google and us to recognise whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of Google conversion tracking is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

More information on Google conversion tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

9.5.    Integration of YouTube videos

We have YouTube videos integrated on our website. These are stored at www.youtube.com and can be played directly from our website.

When you visit our website, YouTube receives the information that you have accessed the corresponding sub-page. This is done regardless of whether or not you have a YouTube user account through which you are logged in. If you are logged into Google, your data will be associated directly with your account. If you prefer that your activity is not associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for the purposes of advertising, market research and/or the design of its website. Such an analysis is undertaken (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network of your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube if you wish to exercise this right.

For more information on the purpose and extent of the collection and the processing of data by YouTube, please refer to Google’s privacy policy. You will also find further information there about your rights and settings options for the protection of your privacy: www.google.de/intl/de/policies/privacy

Google also processes your personal data in the USA and has agreed to comply with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. 

10. Other web analytics tools

10.1.    Information on social plug-ins
We are currently using social media plug-ins from the following social networks: Facebook, Instagram, Pinterest, Twitter, LinkedIn. These buttons enable you to recommend selected website contents via a social network to other internet users, to add these to your personal profile in a social network or otherwise draw attention to such contents.

The recommend buttons are provided by the operators of the social networks for the purpose of embedding them into other websites. By their integration into our websites, a connection to the servers of the respective social network is made via the cookies saved on your computer system. Via this connection, your IP address is thereby transmitted to the respective social network without clicking the recommend button. You can prevent this with the appropriate browser settings (see clause 4.).

If you are logged into one of the profiles of the aforementioned social networks during your visit to our websites, where appropriate, the operator of this network collects and stores other data regarding the visit to our websites. Should you not wish for this to happen, we recommend logging out of social networks prior to visit our websites.

We have neither any influence on the collected data and data processing procedures, nor knowledge of the full extent of the data collection, the purpose of the processing or the storage periods. We also do not have any information about the deletion of collected data by the provider of the plug-in. Your data that has been collected is stored by the plug-in provider as usage profiles and used by the provider for the purposes of advertising, market research and/or the appropriate design of its website. Such an analysis is undertaken (also for users who are not logged in) in particular for the presentation of targeted advertising and to inform other users of the social network of your activities on our website. You have a right to object to the creation of these user profiles, and you must contact the respective plug-in provider to exercise this right.
Please request information regarding the processing and use of your data from the respective operator of the social networks. Notes from the operators on the respective data protection provisions and, where appropriate, possible settings to protect your privacy are provided here:

Addresses of the respective plug-in providers and URL with their data protection notices:

10.2. Facebook

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA.

For such detailed presentation of the respective processing and the opportunities to object (opt-out), inHAUS refers to the following links in Facebook: Privacy policy: www.facebook.com/about/privacy/, Opt-Out: www.facebook.com/settings and www.youronlinechoices.com.

inHAUS would also like to point out that the most effective way to raise requests for information and assert user rights is to address such issues directly to Facebook. Only Facebook has access to the user data and can directly take appropriate measures and provide information.

10.3. Google

Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.com/policies/privacy/partners/.

Google has agreed to comply with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

10.4. Twitter

Further, the Tweet button by twitter.com has been implemented, for which the company Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107 in the USA (hereinafter “Twitter”) is assuming responsibility.

The privacy policy by Twitter containing further information can be found at:

twitter.com/de/privacy

Twitter has agreed to comply with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

10.5 Linkedin

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; www.linkedin.com/legal/privacy-policy. LinkedIn has agreed to comply with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

10.6 Instagram.

We have a profile on Instagram. The provider is Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, and Meta Platforms Inc, 1 Hacker Way, Menlo Park, California, 94025, USA.

For details on how they handle your personal data, please refer to Instagram’s privacy policy: https://www.facebook.com/help/instagram/519522125107875

10.7 Pinterest

We have a profile on Pinterest. The operator is Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, and Pinterest Inc, 505 Brannan Street, San Francisco, California, 94107, USA. For details on how they handle your personal data, please refer to Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy-policy

10.8 YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in YouTube’s privacy policy: https://policies.google.com/privacy?hl=de

11. Disclaimer

Our websites may contain links to websites of other providers, to which this privacy policy does not extend.
The website contains links to other websites (“external links”). These websites are the responsibility of the respective website operators. At the time of the connection to the external links, there were no legal infringements apparent. The provider does not have any influence on the current and future presentation of the linked sites. In the absence of specific indications of any legal infringements, it is not reasonable for the provider to constantly monitor the external links. As soon as we become aware of any legal infringements, we shall remove the relevant external links immediately.

12. Personal rights and access to data

You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time at the address given in the imprint with regard to this and other questions on the subject of data protection.