§1 General Information
(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data related to you personally, for example, name, address, e-mail addresses and user behaviour.
(2) The Data Controller pursuant to article 4 para. 7 of the General Data Protection Regulation (GDPR) is:
Charmant UK Co., Ltd
Unit 1 Kendal Court
Kendal Avenue Acton London W3 0RU
Phone: +44 208 992 9222
Our Data Protection Officer can be reached at:
Bugl & Colleagues GmbH
93055 Regensburg, Germany
Phone: +49 941/63049789
(3) When contacting us by e-mail or via a contact form, the data you provide (your e-mail address, where required your name and telephone number) will be stored by us in order to answer your questions. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to article 6 para. 1(f) GDPR. If the purpose of your contact is to conclude a contract, the additional legal basis for the processing is article 6 para. 1(b) GDPR. We delete data arising in this context after storage is no longer necessary or restrict processing if there are legal storage obligations.
(4) Should we, for specific supply purposes, wish to use contracted service providers or use your data for advertising purposes, we will inform you below in detail about the respective processes. We will also specify the criteria for the storage period.
§2 Your Rights
(1) You have the following rights with regard to your personal data:
– Right to be informed
– Right to rectification and erasure
– Right to restrict processing
– Right to object to processing
– Right to data portability
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
Bavarian State Office for Data Protection Supervision (BayLDA)
91511 Ansbach, Germany
§3 Visiting the Website
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Contents of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request originates
Operating system and interface
Language and version of the browser software
Storage of your consent to storage of cookies
We collect and store this data for a limited time period on the basis of our legitimate interest in order to induce derivation of personal data in the event of unauthorised access or attempted access to local servers (article 6 para. 1(f) GDPR).
(1) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the location that sets the cookie (in this case here – by us). They serve to make the website more user-friendly and effective.
(2) We distinguish between two categories of cookies: (a) essential cookies, without which the functionality of our website would be restricted and (b) optional cookies for website analysis and marketing purposes.
The use of optional cookies is based on your consent (article 6 para. 1(a) GDPR). Optional cookies are stored for a maximum of three months. Under the following link at the bottom of this page you can adjust the cookie settings at any time.
In the following paragraphs, we describe the optional cookies used on this website in detail:
Use of Google Analytics
a) This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called “cookies”. The information generated by the cookie about your use of the website is generally transmitted to and stored by Google on servers within the EU. On behalf of the operator of this website, Google uses this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
b) The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
d) This website uses Google Analytics with the extension “anonymizeIP”. This means that IP addresses are shortened for further processing and that it is not possible to identify you personally. If the data collected about you is related to a person, this is excluded immediately and personal data is immediately deleted.
e) We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our services and make them more interesting for you as a user. The legal basis for the use of Google Analytics is article 6 para. 1(a) GDPR.
f) Information on third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.
General information on data protection: policies.google.com/privacy
Integration of YouTube videos
g) On some of our websites we embed Youtube videos that are stored on www.YouTube.com and can be played directly from our website. These are all embedded in the “extended data protection mode”, which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you give your consent and play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transfer.
h) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified under §3 of this declaration is transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your profile to be associated with YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses it for advertising, market research and/or the design of its website to meet your needs. Such evaluation is carried out (even for users who are not logged in) specifically to provide demand-oriented advertising and to inform other social network users about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. The legal basis for the use of YouTube is article 6 para. 1(a) GDPR.
i) Information on third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.
§5 Online Presence on Social Media
We maintain online presences within social networks in order to inform active users about our services and to communicate directly via the platforms. We are currently represented on the following networks:
All of our social media channels can only be accessed by visitors to the website via an external link. We do not use any plugins or other interfaces on our website that the respective networks provide for embedding on websites.
We have no influence on data collection and data use by the social networks. For example, we do not know to what extent, where or for how long the data will be stored, to what extent the networks will comply with existing deletion obligations, what evaluations and links will be made with the data and to whom the data will be passed on to. We therefore expressly draw your attention to the fact that user data (such as personal information and IP address) is stored by the network operators in accordance with their data usage guidelines and used for business purposes.
We process users’ data on social media channels insofar as they contact and communicate with us via, for example, comments or direct messages.
The legal basis for the processing of user data is article 6 para. 1(b) and (f) GDPR.
Special Information on Facebook/Instagram
You can access the social media network Facebook/Instagram via external links on our website. All functions in the social media network are provided by Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. The Facebook channels can only be accessed via an external link. If you are logged in to Facebook with your own profile and access our social media channel, Facebook can assign your visit to your log-in profile. If you do not want your account to be associated with your IP address, please log out of your Facebook account prior to using our website.
facebook.com/privacy/explanation and our data policy
www.charmant.com/e/footer/data-security/Special Information on LinkedIn
Within our online offer, no functions and contents are offered by the service LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The LinkedIn channels are only accessible via an external link.
If visitors to the website are LinkedIn platform members, LinkedIn can assign the visit to the social media channel to the user’s profile if the user visits our LinkedIn profile while logged in. LinkedIn is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law.
We would like to point out that we have no influence on the content, extent of use or data collected by LinkedIn Ireland Unlimited Company. For further information, please visit the LinkedIn Ireland Unlimited Company website at https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv. Please note that you may make changes to your LinkedIn account to protect your privacy.
Special Information on YouTube
You can access the social media network YouTube via external links on our website. All functions in this social media network are offered by YouTube, Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. The YouTube channels are only accessible via an external link.
If you are logged in to YouTube with your own profile and access our social media channel, YouTube can associate your visit with your logged in profile. If you do not wish your account to be associated with your IP address, please log out of your YouTube account prior to using our website.
For further information on the processing of your data, please refer to the general information on data protection provided by Google: https://policies.google.com/privacy?hl=de&gl=de#infocollect
§6 Joint responsibility, contact data, company data protection officer:
We are jointly responsible with Facebook/Instagram for the operation of our Facebook/Instagram fan page in accordance with article 26 GDPR. To this end, we have concluded an agreement with Facebook/Instagram to determine who fulfils which data protection obligations. This agreement can be found here (https://www.facebook.com/legal/terms/page_controller_addendum). Facebook/Instagram is primarily responsible for providing the data subject with information about the joint processing and enabling him or her to exercise his or her privacy rights. Irrespective of this, we hereby inform you of your visit to our fan page.
You will find our contact details under §1.
You can reach Facebook at:
Facebook Ireland Ltd.
4 Grand Canal Square,
Grand Canal Harbour,
Dublin 2, Ireland
You can reach Facebook online here (https://www.facebook.com/help/contact/2061665240770586)
You will find the contact details of our company data protection officer under § 1.
You can reach the Facebook Data Protection Officer at: https://www.facebook.com/help/contact/540977946302970.
§7 Collection and storage of personal data as well as type and purpose and their use:
a) Data collected by Facebook/Instagram:
If you do not agree, you can opt-out here.
b) Data we use (“Page Insights”) and legal basis:
Facebook/Instagram provides us with statistics and usage data that enable us to analyse the use of our fan page (“Page Insights”). This enables us to continuously improve our Facebook offering. As an operator, we do not make any decisions regarding the processing of insights data and all other information resulting from article 13 GDPR, such as the storage period of cookies on user terminals. The primary responsibility according to GDPR for the processing of insights data lies with Facebook and Facebook fulfils all obligations under GDPR with regard to the processing of insights data.
As a page administrator, we have no other way of evaluating user behaviour on our fan page, not even via user tracking. It is also generally not possible for us to identify the fan page visitor by means of the page insights. In particular, we have no right under the Agreement to require Facebook to disclose individual visitor information. Identification is only possible if we can assign individual profile pictures to “like me” information for the page, but only if our fan page was marked “like me” by the corresponding visitor and the “like me” information is set to “public”.
You can find out what information Facebook/Instagram uses to create the page insights here.
The operation of the Facebook/Instagram fan page and the use of the page insights serve our legitimate interest in an effective external presentation and efficient communication with our customers and interested parties. This interest justifies the operation of the site both to the legitimate interests of Facebook/Instagram users and to visitors to our fan page who do not have a Facebook/Instagram account. Accordingly, the legal basis is article 6 para. 1(f) GDPR.
3. Passing Data on to Third Parties:
When Facebook processes data, user data may be transferred outside the European Economic Area (EEA), particularly to the United States. Facebook has therefore submitted to the EU-US Privacy Shield: (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=A…).
4. Right of Objection:
If your personal data is processed on the basis of legitimate interests pursuant to article 6 para. 1(f) GDPR, you have the right to object to the processing of your personal data pursuant to article 21 GDPR if there are reasons for doing so that result from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us, without stating a particular situation. If you would like to make use of your right of revocation or objection, simply send an e-mail to firstname.lastname@example.org.
5. Rights of Data Subjects:
You have the right to revoke your consent to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future. In addition, you have the right to access information pursuant to article 15 GDPR, the right to rectification pursuant to article 16 GDPR, the right to erasure pursuant to article 17 GDPR, the right to restriction of processing pursuant to article 18 GDPR, and the right to data transfer pursuant to article 20 GDPR. Furthermore, there is a right of appeal to a competent data protection supervisory authority (article 77 GDPR).
As a matter of principle, you can assert your rights of data subjects against Facebook as well as against us. Since only Facebook has direct access to your user data, you can assert your rights most effectively against Facebook.
If you have any questions about this data protection notice, you can contact us or our Data Protection Officer at any time.
The contents of the Charmant GmbH Europe website are protected by copyright. All rights reserved. With the exception of the downloads offered for use in the original version, the use of the texts and illustrations, even in extracts, without the prior written consent of Charmant GmbH Europe violates the provisions of copyright law and is therefore illegal. This applies in particular to all exploitation rights such as reproduction, translation or use in electronic systems. Registered trademarks, trade names, images and logos are used on our website. Even if these are not marked as such in the respective places, the corresponding legal provisions apply.