Information Obligations under the General Data Protection Regulation (GDPR)

 

Preamble

 

The protection of your privacy and your data is very important to us and is always taken into account in all business transactions. 

 

In principle, you can use our website without providing any personal data. However, other regulations may apply to individual services, which we will point out to you separately below.

 

General

 

The purpose of processing your personal data (hereinafter referred to as "data") is to provide information on the topic of grilling and to present and offer products in this area. In this privacy policy, we inform you, among other things, about

 

  • the name and contact details of the controller
  • all purposes for which your data is processed
  • the legal bases on which the processing activities are based, including, if applicable, our legitimate interest
  • all recipients of your data
  • any potential transfer of your data to a third country and the presentation of the legal basis for this
  • the storage period of your data or the criteria for determining this period
  • the categories of your data that are processed
  • the source of your data
  • the rights of the data subjects

 

Responsible for data protection is

 

BR Commerce GmbH, Bahnhofstrasse 19, A-4563 Micheldorf, Email: support@grillart.com.

 

No data protection officer has been appointed, as this is not legally required.


 

Your Rights

 

You have the following rights towards us regarding your personal data:

 

  • Right to access
  • Right to rectification or erasure
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability
  • Right to withdraw your consent

 

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

 

For this purpose, as well as for further questions on the topic of personal data, you can contact us at any time.

 

Right to access

 

You have the right to obtain from us at any time free-of-charge information about the personal data stored about you and a copy of this information, including information on

 

  • the purposes of processing
  • the categories of personal data being processed
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly in the case of recipients in third countries or international organizations
  • if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration
  • the existence of a right to rectification or erasure of your personal data or to restriction of processing by us, or a right to object to this processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • if the personal data is not collected from the data subject: all available information about the source of the data
  • the existence of automated decision-making, including profiling, in accordance with Art 22 (1) and (4) GDPR and — at least in these cases — meaningful information about the logic involved as well as the significance and the intended consequences of such processing for the data subject.

 

Furthermore, you have a right to obtain information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to obtain information about the appropriate safeguards relating to the transfer.

 

Right to rectification

 

You have the right to demand the immediate rectification of inaccurate personal data concerning you.

 

Furthermore, taking into account the purposes of the processing, you have the right to demand that incomplete personal data be completed — including by means of a supplementary statement.

 

Right to erasure

p> 

You have the right to demand that we erase your personal data without undue delay, provided that one of the following reasons applies and processing is not necessary:

 

  • The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
  • You withdraw your consent, on which the processing was based according to Art 6 (1) lit a GDPR or Art 9 (2) lit a GDPR, and there is no other legal basis for the processing.
  • You object to the processing according to Art 21 (1) GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing according to Art 21 (2) GDPR.
  • The personal data has been processed unlawfully.
  • The erasure of the personal data is required for compliance with a legal obligation under Union or Member State law to which the controller is subject.
  • The personal data was collected in relation to information society services offered in accordance with Art 8 (1) GDPR.

 

Right to be forgotten

 

If we have made the personal data public and our company, as the controller, is obliged to erase the personal data pursuant to Art 17 (1) GDPR, we shall take reasonable measures, including technical measures, taking into account the available technology and the cost of implementation, to inform other controllers processing the published personal data that you have requested the erasure by these other controllers of any links to, or copy or replication of, such personal data, insofar as the processing is not required. 

 

Right to restriction of processing

 

You have the right to demand that we restrict processing if one of the following conditions is met:

 

  • The accuracy of the personal data is contested by you for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful, you oppose the erasure of the personal data and request the restriction of its use instead.
  • We no longer need the personal data for the purposes of processing, but you require them for the establishment, exercise or defense of legal claims.
  • You have objected to processing pursuant to Art 21 (1) GDPR and it is not yet clear whether our legitimate grounds override yours.

 

Right to data portability

 

You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format.

 

You also have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art 6 (1) lit a GDPR or Art 9 (2) lit a GDPR or on a contract pursuant to Art 6 (1) lit b GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

 

Furthermore, in exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

 

Right to object

 

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, which is based on Art 6 (1) lit e or f GDPR. This also applies to profiling based on these provisions. 

 

In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

 

If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling, insofar as it is related to such direct marketing.

 

If you object to us processing your data for direct marketing purposes, we will no longer process your personal data for these purposes.

 

In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Art 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

 

Automated individual decision-making, including profiling

 

You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you, provided that the decision (1) is not necessary for entering into, or the performance of, a contract between you and us, or (2) is authorized by Union or Member State law to which we are subject and which lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or (3) is based on your explicit consent.

 

Right to withdraw consent under data protection law

 

You have the right to withdraw your consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

 

Minors

 

Our website and our services are not intended for use by minors, and we do not intend to collect data from minors. If a parent or guardian of a minor believes that their child may have provided us with personal data, please contact us using the contact details provided below, and we will then erase this personal data subject to applicable law and this policy.

 

Data security

 

We use appropriate technical and organizational measures and security precautions (TOMs) designed to prevent unauthorized access, unlawful processing, and unauthorized or accidental loss of your data.

 

This includes, for example, encrypting your communication with us via this website based on the Secure Socket Layer (SSL) encryption protocol.

 

You can check the quality of our encryption here: https://www.ssllabs.com/ssltest

 

It is important to point out that data transmission on the Internet can have security gaps, as complete protection against access by unauthorized third parties is not possible.

 

Web host

 

Our website is hosted by Shopify Inc., 151 O’Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada, represented by Shopify International Limited, c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.

 

For further details, please refer to https://www.shopify.de/legal/datenschutz.

 

Server log files

 

Every time you access our website, an automated system collects a series of general data and information.

 

This general data and information is stored in the log files of our server at Shopify Inc.

 

The following can be collected:

 

  • browser types and versions used
  • the operating system used by the accessing system
  • the website from which an accessing system reaches our website (so-called referrers)
  • the sub-websites that are accessed via an accessing system on our website
  • the date and time of access to the website
  • an Internet Protocol address (IP address)
  • the Internet service provider of the accessing system
  • other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

 

When using this general data and information, we do not draw any conclusions about you.

 

This information is required to:

 

  • deliver the contents of our website correctly
  • optimize the contents of our website as well as the advertising for them
  • ensure the long-term viability of our information technology systems and the technology of our website
  • provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.

 

We analyze this anonymously collected data and information statistically and also with the aim of increasing data protection and data security in our company, in order to ultimately ensure an optimal level of protection for you. In any case, we are permitted to process this data based on our legitimate interest according to Art 6 (1) lit f GDPR.

 

The logs are stored separately from all personal data provided by you and are also deleted after a maximum of 90 days.

 

Cookies

 

When visiting and using this website, cookies (Google Analytics, Google Fonts, Google reCAPTCHA, Facebook Pixel/Connect, Session) are processed.

 

Cookies are small text files that are stored on the local computer.

p> 

This website uses the following types of cookies, the scope and functionality of which are explained below:

 

Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

 

Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete cookies in the security settings of your browser at any time.

 

First-party cookies are cookies that are stored by the website visited. These are, for example, session cookies (to ensure the functionality of the website), webshop cookies (to store temporary information for the shopping cart; we do not use these), or Google Analytics cookies (to track website activity).

 

You can configure your browser settings according to your preferences and, for example, refuse the acceptance of third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.

 

Further details on Google Analytics, Google Fonts, Google reCAPTCHA, and Facebook Pixel/Connect can be found below.

 

How do we collect your data?

 

At the current time, you can order from our online shop, use the contact form, send us an email, and contact us by phone or in person. Please note that unencrypted emails sent via the internet are not sufficiently protected against unauthorized access by third parties.

Customer account and orders

If you wish to order in our webshop, it is necessary for the conclusion of the contract that you provide the personal data listed below, which we require for the processing of your order. To prevent unauthorized access by third parties to your personal data, especially financial data, the ordering process is encrypted using SSL technology.

Website contact form

If you would like to send us a message, it is necessary that you provide the personal data listed below, which we require for processing your request. To prevent unauthorized access by third parties to your personal data, the ordering process is encrypted using SSL technology.

Newsletter

We currently do not offer a newsletter service

Why do we process your data?

When you contact us, e.g., simply to obtain information from us, we process your data for this purpose. When you contact us, e.g., to conclude a contract, we process your data for this purpose.

Contract processing, including customer service

When you provide your order data on our website, by phone, in person, or via email, the data you have provided, including your personal data, will be processed by us and the recipients mentioned below within the framework of our business relationship with you for (pre-)contractual processing in order to process and manage your order and to provide you with customer support.

If you wish to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of the contract. We process the data you have provided only for the purpose of executing the contract.

This data is required for the fulfillment of the contract or for the implementation of pre-contractual measures. Without this data, we cannot conclude the contract with you.

If you voluntarily provide further data that is not necessary for the conclusion of the contract, we will process this data to personalize your request.

Customer account

You can voluntarily create a customer account in our webshop, which allows us to store your data for future purchases. When creating an account under "My Account," the data you provide will be stored in a revocable manner.

Website contact form

We process the data you provide in order to answer your request in the best and most personalized way possible and to determine from which country/location a request originates.

Newsletter

We inform our customers at regular intervals via a newsletter about company offers.

The data collected as part of your registration for the newsletter is used exclusively for sending our newsletter.

Furthermore, subscribers to the newsletter could be informed by email if this is necessary for the operation of the newsletter service or a registration related to it, as could be the case in the event of changes to the newsletter offer or a change in technical conditions.

Marketing (general)

For the purpose of initiating business and intensifying the business relationship with existing and potential customers.

Why are we allowed to process your data?

If you contact us, e.g., merely to obtain information from us, we are permitted to process your data based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 6(1)(f) GDPR. If you contact us, e.g., to conclude a contract, we are permitted to process your data based on Art. 6(1)(b) GDPR and, if applicable, to store it based on Art. 6(1)(c) GDPR.

Customer account, order

The processing of your data, including the personal data you have provided, is carried out by us and the recipients listed below on the legal basis of Art. 6(1) sentence 1(b) GDPR in order to identify you as a customer, to properly process the contract in question, and for correspondence with you. Data processing is carried out at your request and is required for the stated purposes for the appropriate handling of the contract. Data that is not required for contract processing and is provided by you voluntarily is processed on the legal basis of your consent according to Art. 6(1)(a) GDPR. You have the right to revoke this at any time. Further details can be found under your rights above.

Website contact form

When we receive a message from you, the legal basis depends on the content of the message: Art. 6(1)(a), Art. 6(1)(b), or Art. 6(1)(f) GDPR.

Newsletter

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You have the right to revoke this at any time. Further details can be found under your rights above.

Marketing (general)

The legal basis is our legitimate interest pursuant to Art. 6(1) sentence 1(f) GDPR. The legitimate interest is our interest in initiating business and intensifying the business relationship with existing and potential customers.

What data do we process?

In general, we expressly ask you not to disclose data to us that is likely to have little or no relevance to the intended purpose; this applies in particular to special categories of personal ("sensitive") data. The provision of information by you is on a purely voluntary basis.

Inquiry

When you contact us merely to obtain information from us, we process the data you provide.

Customer account, orders

Mandatory fields necessary for the execution of the contracts are marked separately; further information is voluntary.

Website contact form

When we receive a message from you, our web host logs and stores the date/time of registration and the IP address from which the registration was received. This serves solely for evidentiary purposes in the event that an email address is used by an unauthorized person. The necessary mandatory fields are marked separately. The provision of further information is voluntary.

Newsletter

Which personal data is transmitted to us when ordering the newsletter results from the input mask used for this purpose.

The only mandatory information for sending the newsletter is your email address.

When registering for the newsletter, we also store the IP address assigned by the internet service provider (ISP), the computer system you are using at the time of registration, as well as the date and time of registration.

The collection of this data is necessary to be able to trace the (possible) misuse of your email address at a later date and therefore serves as our legal safeguard.

Marketing (general)

Depending on what you have voluntarily provided to us, your data processed by us may contain the following:

  • Your contact details (name, address, telephone number, email address, etc.)
  • Content of the previous contractual relationship

To whom is your data disclosed?

Your data can be disclosed in whole or in part, but always only to the extent necessary, to the following controllers:

  • Banks and payment service providers (payment transactions)
  • Tax advisors (accounting – Austria)
  • Collection agencies (debt collection – Austria)
  • Legal representatives (legal enforcement – Austria)
  • Courts (legal enforcement – Austria)
  • Administrative authorities (Austria)

Furthermore, your data may be disclosed to the following recipients as processors; we have concluded a data processing agreement with all of them and have verified the appropriate technical and organizational measures (TOMs):

  • Shopify Inc (web hosting, webmail - Canada)
  • MailChimp Inc (newsletter distribution - USA)

How long do we process your data?

Your data is stored in a form that allows your identification only for as long as is necessary for the purpose for which it is processed.

Inquiry

By providing your data via the contact form or email, or by contacting us by phone or in person, you expressly consent to your data, including the personal data you provide and any special categories of personal data you may have provided unsolicited and voluntarily, being processed by us and the recipients listed above for the duration of processing the inquiry in question.

If you contact us merely to obtain information from us, your data will therefore either be deleted immediately depending on the content of the communication or deleted after the expiry of a reasonable period appropriate to the content.

Upon revocation of your declaration of consent, we will delete (or have deleted) all of your data – including any aggregated data – from all databases.

Customer account, orders

After the purchase process is aborted, the data stored by us will be deleted.

You can delete all further data, including your user account, at any time in the customer area.

If you register on our website, we will store your data in any case for as long as your account exists.

Due to corporate and tax law requirements, we are obliged to store your address, payment, and order data for a period of 7 years. If you contact us to conclude a contract, the data will be deleted at the end of the 7th year after the posting of the last document (Section 132 of the Federal Tax Code - BAO). In the event of a contract conclusion, all data from the contractual relationship will therefore be stored until the expiry of this period.

However, after 2 years we will restrict processing, i.e., your data will only be used to comply with legal obligations.

Legal/statutory retention obligations or contractual obligations, e.g., towards customers regarding warranty or damages or towards contractual partners, are a further basis for continuing to store your data. (Art. 6(1)(c) GDPR; Art. 17(3)(e) GDPR).

The data categories name, address, purchased goods, and purchase date are stored beyond this until the expiry of product liability (10 years).

Newsletter

Your data provided for the newsletter is only stored by us as long as you wish to receive the newsletter and, beyond that, only as long as we require data for the assertion or defense of legal claims.

You can revoke your consent to the newsletter at any time with effect for the future by clicking on the link provided in every newsletter email, or in writing via email or letter to our contact address. The revocation of consent does not affect the lawfulness of the processing of your data carried out on the basis of your consent until the revocation. After revocation of consent, the participant's collected and stored personal data will be deleted immediately.

Marketing (general)

Marketing data is kept for up to 3 years after the last contact.

Blog features

In the blog, where various articles on the topic of grilling are published, you can post public comments as a registered or logged-in user.

Your comment will be published with your specified username next to the post.

We recommend using a pseudonym instead of your real name.

When you post a comment, we also store your IP address.

Storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content.

We require your email address to contact you should a third party complain that your comment is illegal.

The legal bases are Art. 6(1) sentence 1(b) and (f) GDPR. We have a legitimate interest in being able to effectively defend ourselves against liability claims in the event of the publication of illegal content.

Comments are not checked before publication.

We reserve the right to delete comments if they are claimed by third parties to be illegal.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses cookies, which are stored on your computer, to allow an analysis of the use of the website.

The purpose is the counting and measurement of visits to our website and the content published there. On our behalf, Google uses the collected information to evaluate your use of our website, to compile reports on website activity, and to provide further services to us related to website and internet usage.

As the legal basis for the use of Google Analytics, we use our legitimate interest pursuant to Art. 6(1) sentence 1(f) GDPR in improving our range of information and services and our web presence, reach measurement, and access counting for the marketing of advertisements. In this regard, you have a right to object at any time.

On this website, Google Analytics has also been extended by the code "anonymize_IP" to ensure anonymized collection of IP addresses (so-called IP masking). Your IP address is therefore shortened by Google by the last three digits and collected in a pseudonymized form. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened and pseudonymized there.

Due to the shortened collection of the IP address and its pseudonymization, only a rough localization of where our website was accessed from is possible. The shortened IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data by Google.

The information generated by the cookie about your use of this website (shortened pseudonymized IP address, website title, browser-specific information, information about website usage) is generally transmitted to a Google server in the USA and stored there.

You can also prevent the storage of cookies by adjusting your browser software settings; however, please note that in this case, you may not be able to use all the features of this website to their full extent.

Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy.

Google Web Fonts

 

This page uses so-called web fonts provided by Google for the uniform display of fonts.

 

As the legal basis for the use of Google Web Fonts, we rely on our legitimate interest according to Art. 6 (1) (f) of the GDPR in improving our range of information and services as well as our website. When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. You have the right to object to this at any time.

 

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

 

Google reCAPTCHA

 

We use the reCAPTCHA function of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") on this website.

 

This function is primarily used to distinguish whether an input is made by a natural person or is misused by machine and automated processing.

 

The service includes sending the IP address and, if necessary, other data required by Google for the reCAPTCHA service to Google.

 

Further information on Google reCAPTCHA as well as Google's privacy policy can be viewed at: https://www.google.com/intl/de/policies/privacy/.

 

Google Fonts are automatically loaded for reCaptcha; this cannot be prevented and its use is covered by the legitimate interest in using reCaptcha and its purpose. In the interest of data minimization, no Google Fonts are used on this website other than for reCaptcha.

 

Further information on Google Web Fonts can be found at https://developerSgoogle.com/fonts/faq.

 

Facebook Pixel/Connect

 

On our website, we use a web tracking service from the company Facebook, Inc., 1601 Willow Road, 94024 Menlo Park, USA (hereinafter: Facebook Connect). As part of web tracking, Facebook Connect uses cookies, which are stored on your computer and allow an analysis of your use of our website and your browsing behavior.

 

As the legal basis for the use of Facebook Connect, we rely on our legitimate interest according to Art. 6 (1) (f) of the GDPR in improving our range of information and services and our website, as well as in constantly optimizing our online offering and making it more available. You have the right to object to this at any time.

 

When using our website, data such as your IP address and your user activities are transmitted to servers of Facebook Connect and processed and stored outside the European Union, e.g., in the USA.

 

The data is deleted as soon as the purpose for its collection has been fulfilled.

 

Further information on how the transmitted data is handled can be found in the privacy policy of Facebook Connect https://www.facebook.com/privacy/explanation

 

You can prevent the collection and forwarding of personal data (in particular your IP address) as well as the processing of this data by disabling the execution of script code in your browser, installing a script blocker in your browser (e.g., at www.noscript.net or www.ghostery.com) or by activating the "Do Not Track" setting in your browser.

 

Use of Social Media Plugins

 

We only use a link to the YouTube channel, the Facebook and Instagram page, and do not use any plugins or cookies in compliance with the GDPR.

 

Addresses of the respective sites including the URL to their privacy notices:

 

Facebook, Inc., 1601 Willow Road, 94024 Menlo Park, USA, https://www.facebook.com/policy.php ,https://www.facebook.com/policies/cookies https://www.facebook.com/legal/terms/page_controller_addendum#.

 

Facebook Page

 

We operate a Facebook page at

 

https://www.facebook.com/grillart.official

 

The corresponding provisions supplementing this privacy policy can be found here:

 

https://www.facebook.com/policy.php

https://www.facebook.com/policies/cookies

https://www.facebook.com/business/news/updates-for-page-admins-in-the-eu-and-the-eea

https://www.facebook.com/legal/terms/page_controller_addendum#

 

Instagram Profile

 

We operate an Instagram profile at

 

https://www.instagram.com/grillart_official/

 

The corresponding provisions supplementing this privacy policy can be found here:

 

https://help.instagram.com/519522125107875

https://help.instagram.com/1896641480634370

 

YouTube Channel

 

We operate a YouTube channel at

 

https://www.youtube.com/channel/UCj4tq42sFpe2ox0M4zt6tlA

 

The corresponding provisions supplementing this privacy policy can be found here:

 

https://policies.google.com/privacy?hl=de&gl=de

 

Klarna Data Protection Notice


If you decide to use Klarna's payment services, we ask for your consent to transmit the data necessary for the processing of the payment and an identity and credit check to Klarna. In Germany, the credit agencies mentioned in Klarna's privacy policy can be used for the identity and credit check. You can revoke your consent to this use of personal data vis-à-vis Klarna at any time.

UPTAIN

To improve interaction with our visitors, we use a Java-Script plugin from uptain GmbH ("uptain plugin" https://www.uptain.de). This allows us to analyze your use of the website and improve customer communication (e.g., through a dialog window). For this purpose, we collect information about your usage behavior, i.e., cursor movement, duration of stay, clicked links, and, if applicable, information provided. The legal basis for processing is our legitimate interest in direct marketing and the provision of our website (Art. 6 (1) (f) GDPR). In this context, uptain GmbH is strictly bound to our instructions as a processor. The information collected will not be passed on to third parties unless we are legally obliged to do so. Insofar as the information collected by the uptain plugin contains personal data, it will be deleted immediately after your visit to our website.

You can deactivate the use of the uptain plugin at any time via the following link: https://www.grillart.com/datenschutz?__up_tracking_unsubscribe