Preamble

The following information provides you with an overview of the processing of your personal data in connection with the following services and services and informs you about your rights under the European General Data Protection Regulation (GDPR):

• I. General information and your rights as a data subject, 
• II. processing of personal data in the context of general contact, 
• III. processing of personal data in the context of orders, bookings and the use of Cook in The Boxx vending machines and fridges 
• IV. Processing of personal data in connection with and directly following orders and bookings as well as events, 
• V. Processing of personal data in the context of video surveillance within our premises and in the area of our vending machines and refrigerators, 
• VI. processing of personal data in connection with digital offers (newsletter) and existing customer advertising, 
• VII. processing of personal data in the context of order processing and other use of this website; use of payment service providers and cookies

I. General information and your rights as a data subject

1. Controller responsible for data processing

The controller responsible for data processing pursuant to Art. 4 No. 7 GDPR is: 

Cook in the Boxx GmbH & Co KG 
Ludwig-Kirsch-Str. 9 
09130 Chemnitz 

Phone: +49 371 3356226-66
E-mail:  info@cookintheboxx.de

Complete information according to § 5 TMG (Imprint) 

Personally liable partner of Cook in The Boxx GmbH & Co. KG: 

Cook in the Boxx Verwaltungs-GmbH 
Managing Directors of Cook in the Boxx Verwaltungs GmbH: 
Roland Keilholz, Dr. Micaela Schönherr, Susan Hutter 

Complete information according to § 5 TMG (Imprint)

2. contact details of the data protection officer 

You can reach our data protection officer at: 

Cook in the Boxx GmbH & Co. KG
Mrs. Susan Hutter 
Ludwig-Kirsch-Str. 9, 
09130 Chemnitz 

E-Mail: info@cookintheboxx.de

3. Your rights as a data subject 

Any data subject whose personal data is processed has the right to information from the controller about the personal data concerned in accordance with Art. 15 GDPR, the right to rectification in accordance with Art. 16 GDPR, the right to erasure in accordance with Art. 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR, the right to object to processing in accordance with Art. 21 GDPR and the right to data portability in accordance with Art. 20 GDPR. The restrictions pursuant to Sections 34 and 35 BDSG also apply to the right to information and the right to erasure. 

If the processing of your personal data is based on consent given to us, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You also have the right to lodge a complaint with the competent data protection supervisory authority in accordance with Art. 77 GDPR in conjunction with Section 19 BDSG

4. data processing of minors 

Minors may not transmit any personal data to us without the consent of their legal guardians. We do not process any personal data knowingly obtained from minors within the scope of the website

5. Automated decision-making and profiling 

In the establishment and performance of our contractual relationship, you will not be subject to any decision based solely on automated processing, including profiling, in accordance with Art. 22 GDPR, which produces legal effects concerning you or similarly significantly affects you

6. Supplementary information on your right to object pursuant to Art. 21 GDPR 

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests). 

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims;

If your personal data is processed by us for the purpose of advertising to existing customers, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. The objection is possible by using the unsubscribe function in digital media, by using the contact form on the website or informally to the contact details mentioned under point 2. 

7. duration of storage of personal data and criteria for determining this duration 

We process and store your personal data for as long as it is necessary for the fulfillment of our contractual and legal obligations. If the data are no longer required for the fulfillment of contractual obligations, they are regularly deleted, unless their temporary further processing is necessary due to

1. national or regional reporting laws or regulations at the place of data collection or contract execution, 
2. national retention periods under commercial and tax law at the place of data collection or contract execution, 
3. national, regional or local tax regulations (e.g. visitor's tax, tourism tax, etc.) at the place of data collection or contract execution. 

The retention and documentation periods specified there are generally two to ten years. Further information on the storage period of your personal data can be found in the respective sections on processing

8. Documentation of changes and corrections to personal data 

As part of our documentation obligation, we process and store all changes and corrections to your personal data such as

• First and last name
• Residential address and, if applicable, different billing and communication addresses
• Date of birth
• Gender, salutation, title
• E-mail address(es), if several are used or provided
• Telephone number(s), if more than one is used or provided
• Passport data
• General interests, preferences and wishes
• Voluntary information 
  
  

9. Obligation to provide data 

The obligation to provide personal data always exists if it is necessary for implementation or if we are legally obliged to collect it, which applies in particular to

• the execution of contracts for the temporary provision of conference, banquet and event rooms as well as other premises on our part for the organization of events of all kinds, for all other related services and deliveries by us (e.g. provision of food and beverages as well as music, etc.) as well as for services and deliveries on our part in the context of events of all kinds that take place at locations provided by the contractual partner,
• Contracts for the implementation of and participation in cooking and barbecue courses or similar organized by us (hereinafter referred to as Experiences) and for contracts for the purchase of vouchers, 
• Contracts for the purchase of products from our vending machines and refrigerators and
• the fulfillment of the reporting laws and requirements at our registered office. If you do not provide us with the necessary information, we may not be able to provide the services you have requested in full or at all.
  

II. contact 

General contact via the website or by phone, fax and e-mail 

You can contact us via the contact form on the website, by phone / fax or e-mail, among other things

1. processed personal data 

In the course of general contact, we receive, process and store the following personal data in accordance with the requirements of the request: 

• First and last name 
• gender, salutation, title 
• E-mail address(es), if several are used or specified 
• Phone number(s), if several are used or specified 
• Other personal data that you provide voluntarily as part of your request 

2. purposes and legal basis for processing 

Your personal data We process your personal data for the following purposes and based on the following legal bases: 

To process your inquiries, information and complaints, insofar as the processing is related to the performance of a contract or to carry out pre-contractual measures. The legal basis for the processing of your personal data for this purpose is Art. 6 para. 1 sentence 1 lit. a), b) GDPR. In other cases, the legal basis is our legitimate interest in the effective processing of inquiries addressed to us in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR

3. Categories of recipients of the personal data 

If you have questions directly to us, e.g. regarding your order or booking, your request will be processed directly by us. In the case of data protection inquiries, such as requests for information, your request will be forwarded to our data protection department for processing.

4. Duration of storage of personal data 

If you contact us, we will store your personal data. The data is stored solely for the purpose of processing your request and contacting you. Your contact requests are usually deleted after 10 years.

III. Processing of personal data in the context of orders, bookings and the use of Cook in The Boxx vending machines and refrigerators

1. processed personal data 

We process your data for the processing and administration of orders and bookings, for the use of our vending machines and refrigerators and for the provision of our services within the scope of the concluded contracts regarding

• the execution of contracts for the temporary provision of conference, banquet and event rooms as well as other premises on our part for the organization of events of all kinds, for all related further services and deliveries by us (e.g. provision of food and beverages as well as music etc.) as well as for services and deliveries on our part in the context of events of all kinds, which take place at locations provided by the contractual partner,
• regarding contracts for the implementation of and participation in cooking and barbecue courses or similar organized by us,
• Contracts for the purchase of vouchers and
• Contracts for the purchase of products from our vending machines and refrigerators, including the respective contract and payment processing. 

In addition, we are generally obliged to collect the aforementioned personal data as part of the execution of the contract, if necessary within the framework of the applicable reporting laws and regulations. We also process and store information provided voluntarily. Furthermore, we are obliged to inform you of any significant changes as part of the fulfillment of the contract. For this purpose, we use the personal data available to us: 

• First and last name
• Residential address and any different billing and communication addresses
• Date of birth
• Payment and credit card details
• Gender, salutation, title
• E-mail address(es), if several are used or specified 
• Phone number(s), if several are used or specified 
• Passport data 
• Voluntary information 

2. purposes and legal basis for the processing of your personal data 

We process your personal data for the following purposes and based on the following legal bases: 

For the processing and administration of orders and bookings as well as for the provision of our contractual services regarding the contracts mentioned under III, section 1, including contract and payment processing. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b) GDPR. 

We are obliged to inform you of any significant changes as part of the execution of the contract. Communication is preferably by e-mail to the e-mail address provided. If this is no longer valid, we reserve the right to contact you by other means, e.g. by post or telephone. The legal basis for this is the execution of the contracts with you mentioned under III, section 1 in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR

To fulfill a legal obligation to which our company is subject as the controller (e.g. due to reporting laws, tax laws, accounting obligations, etc.). The legal basis for this is Art. 6 para. 1 sentence 1 lit. c) GDPR. 

To fulfill and design your event according to your expectations based on already stored personal data for recognition, at all service contact points (personal and/or digital), e.g. from voluntarily provided data in the context of previous events as well as possible additional services or requirements for the event implementation. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest is to offer you the best possible service

To create, process, manage and update your customer profile and to ensure the correct processing of credits and debits. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b) GDPR. 

To maintain, guarantee and improve the quality of our offers and services, in particular by conducting and analyzing satisfaction surveys and customer comments, by processing your personal data in our database, which enables us to recognize you as a returning customer, to better assess your requirements and wishes, to improve the quality and individuality of our communication with you and to create tailor-made offers for you. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our overriding legitimate interests arise from the existing contract with you, which constitutes a relevant and appropriate relationship within the meaning of Recital 47 of the GDPR, as well as from the fact that this type of data processing is customary in the industry and meets the reasonable expectations of the vast majority of customers

To safeguard domiciliary rights, to prevent and investigate criminal offenses, to assert and defend against legal claims and to safeguard interests in legal disputes, to ensure IT security and IT operations, to identify credit risks - the legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our overriding legitimate interests arise from our obligation to ensure the secure running of the event and from our interest in enforcing our material and immaterial claims and exercising our rights and defending against unjustified claims. Furthermore, the processing of personal data to the extent strictly necessary for the prevention of fraud also constitutes a legitimate interest of our company in accordance with Recital 47 of the GDPR. 

3. Categories of recipients of the personal data 

If and to the extent necessary for the aforementioned purposes, we also disclose your personal data to the following recipients or categories of recipients in accordance with Art. 4 No. 9 GDPR: 

Within our company, only those departments that need your data to fulfill our contractual and legal obligations will have access to it (to the extent necessary in each case)

Service providers we may use to process the order or booking (e.g. as part of order processing in accordance with Art. 28 GDPR) and vicarious agents may also receive personal data for these purposes. These are companies in the categories of credit services and payment processing, IT services, cleaning services, logistics, printing services, telecommunications, debt collection, advice and consulting as well as sales and marketing. The respective service providers can be found in the list of service providers/processors, which is updated regularly

Furthermore, data may be passed on to public bodies and institutions if there is a legal obligation to do so (e.g. tax authorities, law enforcement authorities, registration authorities)

Other data recipients may be those bodies for which you have given us your consent to data transmission

4. Duration of storage of personal data 

We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations. If the data are no longer required for the fulfillment of contractual obligations, they are regularly deleted, unless their temporary further processing is necessary due to commercial and tax retention periods (including the German Commercial Code (HGB), the Tax Code (AO), Federal Registration Act (BMG)). The retention and documentation periods specified there are two to ten years

5. consolidation of your customer profiles 

Your personal data is collected at various points of contact in different forms (handwritten and digital). This may result in you having several different customer profiles in our database with contradictory information. In order to provide you with the best possible service and to ensure that your personal data is processed correctly, we endeavor to merge multiple data into a unique profile using unique characteristics such as first name, surname and address. To merge customer profiles, we use the information that we collect as part of the order or booking as well as the personal data that you have voluntarily provided to us by other means

The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR. Without this automated and sometimes necessary manual merging, we cannot guarantee the proper processing of your personal data. This is our legitimate interest.

IV. Processing of personal data in connection with and directly following orders and bookings as well as events

After your order has been processed and after your stay, you may receive an e-mail message from us asking you to rate the order or the event (satisfaction survey), unless you have previously unsubscribed from this communication by e-mail

1. processed personal data

• First and last name
• Gender, salutation, title
• IP address 
• E-mail address(es), if more than one is used or provided 
• Residence-related preferences and wishes 
• General interests, preferences and wishes 
• Data that you transmit to us as part of the satisfaction survey 
• Other voluntary information 

2. purposes and legal bases for the processing of personal data 

We process your personal data for the following purposes and based on the following legal bases: 

To maintain, guarantee and improve the quality of our products and services, in particular by analyzing complaints, satisfaction surveys and customer and guest comments. The legal basis for this is our legitimate interest in offering our customers the best possible service in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR. 

3. Categories of recipients of the personal data 

The customer satisfaction surveys are carried out by ourselves

4. Duration of storage of personal data 

We store the data as part of the customer satisfaction survey for 3 years. Your IP address will be anonymized after 28 days

5. Data transfer to third countries 

We do not intend to transfer the data to a third country or an international organization.

V. Processing of personal data in the context of video surveillance within our premises and in the area of our vending machines and refrigerators

1. processed personal data 

• Image and video recordings 

2. purposes and legal bases for the processing of personal data 

The video surveillance cameras installed in parts of our premises serve the purpose of exercising domiciliary rights, preventing criminal offenses (e.g. damage to property or theft) and securing criminal prosecution. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. The overriding legitimate interests of our company arise from our obligation to ensure a safe residence and from our interest in enforcing our material and non-material claims and exercising our rights and defending against unjustified claims

3. Categories of recipients of the personal data 

Potential recipients of the data are the law enforcement authorities as well as persons or companies that we commission to exercise our rights (such as lawyers) or service providers that are commissioned for video surveillance. 

4. Data transfer to third countries 

We do not intend to transfer the data to a third country or an international organization. 

5. Duration of storage of personal data 

If the surveillance recordings are recorded, the relevant recordings will be deleted after 72 hours at the latest; after this storage period has expired, only data that is required for the clarification of specific incidents or for the enforcement of claims based on a specific event (e.g. a criminal offense) will be stored. This data is also deleted once the purpose for further storage no longer applies.

VI. Verarbeitung Ihrer personenbezogenen Daten im Zusammenhang mit digitalen Angeboten (Newsletter) sowie Bestandskundenwerbung 

1. Newsletter 

We use the e-mail newsletter to inform you regularly about our offers and services according to your preferences. 

If you would like to receive the e-mail newsletter, we need a valid e-mail address from you. We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within two weeks, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data

1.1. processed personal data 

We process the following personal data as part of sending the newsletter:

• First and last name 
• Residential address and any different billing and communication addresses 
• Date of birth 
• IP address 
• Gender, salutation, title 
• E-mail address(es), if more than one is used or provided 
• General interests, preferences and wishes 
• Voluntary information 

1.2. purposes and legal bases for the processing of personal data 

We process your personal data for the following purposes and based on the following legal bases: 

To send you our e-mail newsletter, including managing your subscription to the newsletter. The legal basis for this is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR As a subscriber to the e-mail newsletter, you can revoke your consent to the processing of your e-mail address for sending the e-mail newsletter at any time. The revocation can be made via the relevant link in each e-mail newsletter or by e-mail with the subject "Unsubscribe" to info@cookintheboxx.de are made  

1.3. categories of recipients of the personal data 

The newsletter is sent by us. 

1.4. duration of storage of personal data 

As soon as you revoke your consent to receive newsletters, your personal data will be deleted

1.5. data transfer to third countries 

We do not intend to transfer the data to a third country or an international organization

1.6. tracking as part of the newsletter dispatch 

We use the system's internal tracking tool to measure the opening and click rates of the emails when sending out newsletters

2. Existing customer advertising 

2.1. advertising to existing customers as part of a stay 

We reserve the right to send you offers from our range of services as existing customer advertising by email. Our legitimate interest in advertising to existing customers lies in being able to offer you individual offers tailored to your target group, which are created on the basis of previous orders and bookings (transactions) or the existing customer relationship. We may process the personal data that you provide to us when placing an order or making a booking within 12 months of a previous transaction in order to send existing customer advertising. If you do not make a new booking or other transaction within this period, your personal data will no longer be processed for the purpose of advertising to existing customers and will be deleted accordingly, unless you have subscribed to a newsletter or your personal data must continue to be stored due to other regulations. You can object to the use of your e-mail address for the purpose of sending advertising to existing customers at any time without incurring any costs other than the transmission costs according to the basic rates. If your personal data is processed by us for the purpose of advertising to existing customers, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising

2.2. processed personal data 

We collect the following personal data as part of our advertising to existing customers:

• First and last name 
• Residential address and any different billing and communication addresses 
• Date of birth 
• Gender, salutation, title 
• E-mail address(es), if more than one is used or provided 
• General interests, preferences and wishes 
• Voluntary information 

2.3. purposes and legal bases for the processing of personal data 

We process your personal data for the following purposes and based on the following legal bases: 

To advertise our offers and services to existing customers. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest in advertising to existing customers is to inform you about the current customer status and to be able to offer you individual and exclusive offers in a target group-oriented manner;

You can object to the use of your e-mail address for the purpose of sending existing customer advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You can find more information on exercising your right to object to the use of your email address for direct marketing purposes in this privacy policy

2.4. categories of recipients of the personal data 

When carrying out existing customer acquisition measures, your personal data will only be disclosed to those employees of our company who have access to our customer profiles

2.5. duration of storage of personal data 

If you do not place a new order or booking or make any other transaction within 12 months, your personal data will no longer be processed for the purpose of advertising to existing customers and will be deleted accordingly, unless you have subscribed to a newsletter or your personal data must continue to be stored due to other regulations

2.6. data transfer to third countries 

We do not intend to transfer the data to a third country or an international organization.

VII. processing of personal data in the context of order processing and other use of this website; use of payment service providers and cookies
 

1. processing of personal data in the context of order processing and other use of this website

a) Processed personal data and the nature and purpose of their use 

When you visit our website www.thecookfamily.de the browser used on your device automatically sends information to the computer on our website. This information is temporarily stored in a so-called log file. The following information is collected without your involvement and stored until it is automatically deleted: 

• IP address of the requesting computer, 
• Date and time of access, 
• Name and URL of the retrieved file, 
• Website from which the access was made (referrer URL), 
• Browser used and, if applicable, the operating system of your computer and the name of your access provider

b) Purposes and legal bases for the processing of personal data

• Ensuring a smooth connection to the website, 
• Ensuring a comfortable use of our website, 
• Evaluation of system security and stability as well as 
• for further administrative purposes. 

The legal basis for data processing is Article 6 (1) sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

c) Duration of the storage of personal data 

We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations. If the data are no longer required for the fulfillment of contractual obligations, they are regularly deleted, unless their temporary further processing is necessary due to commercial and tax retention periods (including the German Commercial Code (HGB), the German Fiscal Code (AO), the German Federal Registration Act (BMG));

d) Categories of recipients of the personal data 

The personal data is processed by us and Hetzner Online GmbH (hoster). The personal data collected on this website is stored on the hoster's servers. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data. In order to ensure data protection-compliant processing, we have concluded an order processing contract with our hoster;

e) Data transfer to third countries 

We do not intend to transfer the data to a third country or an international organization

2. use of payment service providers 

For the processing of online payments, we use the following external payment service providers, via whose platforms you can initiate payment transactions based on your free decision: 

• American Express Payment Service Limited (Theodor-Heuss-Allee 112, 60486 Frankfurt/Main, Deutschland) 
• Mastercard (Mastercard Representative Office Germany, Taunusanlage 9-10, 60329 Frankfurt a.M.) 
• VISA (Visa Europe Management Services Limited, German Branch, Neue Mainzer Strasse 66-68, 60311 Frankfurt a.M.) 
• Paypal S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, 2449 Luxemburg, Luxemburg)
• Stripe Payments Europe, Limited (SPEL) (1 Grand Canal Street Lower Grand Canal Dock Dublin D02 H210 Irland)
  

If you wish to make an online payment, this can be integrated into the booking or ordering process as well as via an e-mail address provided by you by sending a corresponding link. If you use such a link, you will be redirected to the pages of the respective payment platform

3. Cookies 

3.1 Information on cookies 

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity. The use of cookies serves on the one hand to make the use of our offer more pleasant for you; on the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. We use cookies for the following purposes:

Necessary functions: 

These cookies make a significant contribution to improving your browsing and booking experience on our website. Basic functionalities and applications such as shopping baskets or electronic billing procedures are optimized and made easier to use. These cookies do not collect any information about you that can be used for marketing campaigns or statistical analysis. These cookies are necessary for the use of the website, the legal basis for these cookies is Art. 6 para. 1 lit. b) GDPR and § 25 para. 2 Telecommunications Telemedia Data Protection Act (TTDSG). 

Statistical analysis: 

Statistical analysis is the processing and presentation of data on user actions and interactions on websites and apps (e.g. number of page visits, number of unique visitors, number of returning visitors, entry and exit pages, dwell time, bounce rate, button clicks, bookings or voucher / wine orders) and, if applicable, the classification of users into groups based on technical data on the software settings used (e.g. browser type, operating system, language setting, screen resolution). The legal basis for these cookies is consent in accordance with Art. 6 para. 1 lit. a) GDPR and Section 25 para. 1 TTDSG.

Personalized advertising: 

Certain functions of websites and apps are used to display personalized advertising material (ads or commercials) to users in other contexts, for example on other websites, platforms or apps. For this purpose, demographic data, search terms used, context-related content, user behavior on websites and in apps or the location of users are used to draw conclusions about the interests of users. Based on these interests, advertising material will be selected and displayed by other providers of online content in the future. The legal basis for these cookies is consent in accordance with Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TTDSG. 

Personalized advertising incl. data transfer to third countries: 

Certain functions of websites and apps are used to display personalized advertising material (ads or commercials) to users in other contexts, for example on other websites, platforms or apps. For this purpose, demographic data, search terms used, context-related content, user behavior on websites and in apps or the location of users are used to draw conclusions about the interests of users. Based on these interests, advertising material will be selected and displayed by other providers of online content in the future. The legal basis for these cookies is consent in accordance with Art. 6 para. 1 lit. a) GDPR and Section 25 para. 1 TTDSG. In addition, you expressly consent to the transfer of your personal data to third countries (USA) in accordance with Art. 49 para. 1 lit. 
a) GDPR. There is no adequate level of data protection in the third countries listed and there are no suitable guarantees for the protection of your personal data (such as the lack of enforceability of data subjects' rights and possible, disproportionate access to your personal data by government agencies). Your consent to the transfer of your personal data to third countries is voluntary and can be revoked at any time via our privacy policy. Further information on the processing of your personal data, including on third country transfers, can also be found in our privacy policy

3.2 Transfer to third countries 

If you consent to the use of cookies, you also expressly consent to your personal data being transferred to an insecure third country in accordance with Art. 49 (1) lit. a GDPR. The USA in particular is regarded by the European Court of Justice as a country with an inadequate level of data protection. There is a risk that your data will be processed by US authorities for control and monitoring purposes without you having effective legal protection options in this regard;

As can be seen from the list of service providers / processors in detail, our company uses service providers for certain tasks who may have their registered office in a third country or belong to an international group with companies in third countries or who in turn work with service providers based in a third country. A transfer of personal data to such service providers is permitted if the European Commission has decided that an adequate level of protection exists in the third country in question (Art. 45 GDPR). If the Commission has not taken such a decision, our company or the service provider may only transfer personal data to a third country or to an international organization if appropriate safeguards are provided and enforceable rights and effective legal remedies are available (Art. 46 (1) GDPR). If there is neither an adequacy decision pursuant to Art. 45 (3) GDPR nor appropriate safeguards pursuant to Art. 46 GDPR, a transfer of your personal data to a third country is permitted under one of the following conditions, among others: 

• You have expressly consented to the proposed data transfer after having been informed of the potential risks to you of such data transfers in the absence of an adequacy decision and appropriate safeguards;
• the transfer is necessary for the performance of a contract between you and the controller or for the implementation of pre-contractual measures;

3.3 Setting cookies via our Cookie Consent Tool 

To customize your cookie settings, you can use our Cookie Consent Tool at any time. Click on the cogwheel button in the lower left part of your screen to open the tool and select your preferences for the above categories of cookies by giving or denying your consent to the use of these cookies in your browser. Within this privacy policy, you can see which partner companies and third-party providers set cookies on our website and which of the categories they are assigned to 

3.4 Setting cookies via the browser 

You can set your browser so that cookies are only stored if you agree to this. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, if you deactivate cookies completely, you may not be able to use all the functions of our website. If you only want to accept alexxanders cookies, but not cookies from partners, please select "Block third-party cookies" in your browser. The help function in the menu bar of your web browser will show you how to reject new cookies and disable those you have already received. For shared computers that accept cookies and so-called Flash cookies, we recommend that you always log out completely when you have finished. 

3.5 Providers of cookies used Category 

Notwendige Funktionen: … 

a) Odoo

Our website is powered by the open source website module from Odoo (https://www.odoo.com/de_DE) (Odoo S.A. - Data Protection Chaussée de Namur, 40 1367 Grand Rosière Belgium). In this context, the following cookies may be stored on your device when you use our website:

Sitzung & Sicherheit

Dienen der Authentifizierung von Nutzern, dem Schutz von Nutzerdaten und ermöglichen es der Website, die von den Benutzern erwarteten Dienste zu erbringen, z. B. den Inhalt ihres Warenkorbs beizubehalten oder das Hochladen von Dateien zu ermöglichen.

Die Website wird nicht ordnungsgemäß funktionieren, wenn Sie diese Cookies ablehnen oder verwerfen.

• session_id (Odoo)
• td_id (Odoo)
• fileToken (Odoo)

Präferenzen

Store information about the preferred look or behavior of the website, such as your preferred language, region and time zone. If you reject these cookies, your user experience may deteriorate, but the website will continue to function.

• frontend_lang (Odoo)
• cids (Odoo)
• odoo_no_push (Odoo)
• tz (Odoo)
  

Interaktionsverlauf

Used to collect information about your interactions with the website, the pages you have visited and specific marketing campaigns that referred you to the website. If you reject these cookies, we may not be able to provide you with the best service, but the website will still work.

• utm_campaign (Odoo)
• utm_source (Odoo)
• utm_medium (Odoo)

Further information can be found on the following page: https://odoo.com/de_DE/privacy

Category Statistical analysis: 

a) Google Analytics 

We use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"). In this context, pseudonymized user profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website such as 

• Browser type/version, 
• operating system used, 
• Referrer URL (the previously visited page), 
• Host name of the accessing computer (IP address), 
• Time of the server request, 

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking);

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website;

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

Alternativ zum Browser-Add-on, insbesondere bei Browsern auf mobilen Endgeräten, können Sie die Erfassung durch Google Analytics zudem verhindern, indem Sie auf diesen Link klicken. Es wird ein Opt-out-Cookie gesetzt, das die zukünftige Erfassung Ihrer Daten beim Besuch dieser Website verhindert. Der Opt-out-Cookie gilt nur in diesem Browser und nur für unsere Website und wird auf Ihrem Gerät abgelegt. Löschen Sie die Cookies in diesem Browser, müssen Sie das Opt-out-Cookie erneut setzen. Weitere Informationen zum Datenschutz im Zusammenhang mit Google Analytics finden Sie etwa in der Google Analytics-Hilfe ( Google Analytics Help.

b) Integration of Google Maps 

We use the Google Maps service on this website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently;

When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under point 2a) of this declaration is transmitted. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right;

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework). 

c) Use of web fonts 

External fonts, Google Fonts, are used on this website. Google Fonts is a service provided by Google Inc ("Google"). These web fonts are integrated by a server call, usually a Google server in the USA. This tells the server which of our web pages you have visited. The IP address of the browser of the end device of the visitor to this website is also stored by Google. You can find more information in Google's privacy policy, which you can access here: 

www.google.com/fonts#AboutPlace:about 
www.google.com/policies/privacy/

d) further services 

No other services are currently used and there are no plans to use them. 

3.6 Local storage of data 

In order to display the website optimally, the following data is collected and stored locally on your end device (e.g. in the browser): 

Provider/tool:  www.thecookfamily.de / www.Shop.Thecookfamily.de
Category: Necessary functions Storage duration: 365 days 
Purpose: Login, Token, Cat-UID 
Member Level, Currency 

3.7 Integration of services and content from third-party providers (collection of the IP address by third-party services) 

Third-party content (hereinafter referred to as "third-party providers") is integrated within the website. For the use of such content, the transmission of the user's IP address to the respective third-party provider is technically necessary. This is because without the IP address, the third-party providers would not be able to send the content integrated into the website to the respective user's browser. We have no influence on whether a third-party provider stores the IP address, e.g. for statistical purposes, or uses it in any other way. We use the following third-party providers on our website: 

Third party providers: 

Third-party provider name: ... 
Functional description: ... 
Purpose: ... 

Status and update of the privacy policy 

This privacy policy applies from ... 

We will update this Privacy Notice from time to time in the event of relevant changes to our website, the processing of personal data or changes to statutory provisions. The revised version will apply from the published date of entry into force. We will inform you of any significant changes to this data protection notice by posting a notice on our website in good time before the changes come into effect. We may also inform our guests of the changes by email or other means