Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data is any data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Kipor.org GmbH, Knetterhauserstr. 26, 33775 Versmold, Germany, Tel.: 05423-94670, Fax: 05423-9467-40, E-Mail: info@kipor.org. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When you visit our website purely for informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referral from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively should specific evidence point to unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser line.
3) Cookies
To make visiting our website attractive and enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called “session cookies”), while others remain on your device longer and allow the saving of site settings (so-called “persistent cookies”). In the latter case, you can find the storage duration in the cookie settings of your web browser.
If personal data is processed through individual cookies we use, processing is carried out in accordance with Art. 6(1)(b) GDPR, either for contract execution, in accordance with Art. 6(1)(a) GDPR in the event of consent, or in accordance with Art. 6(1)(f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser to inform you about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general.
Note that disabling cookies may limit the functionality of our website.
4) Contacting Us
4.1 Own Review Reminder
Solely based on your express consent according to Art. 6(1)(a) GDPR, we will use your email address to remind you once to submit a review of your order. You can revoke your consent at any time by sending a message to the data controller.
4.2 When contacting us (e.g., via the contact form or email), personal data will be processed – exclusively to respond to your inquiry and only to the extent necessary for that purpose.
The legal basis for processing these data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your inquiry aims at a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the relevant matter has been fully resolved and provided that there are no statutory retention obligations to the contrary.
5) Comment Function
When using the comment function on this website, in addition to your comment, details of when the comment was created and your chosen commenter name will be stored and published on the website. Additionally, your IP address is stored for security reasons to allow for assignment to the author in case of illegal comments. Your email address is stored to contact you if a third party objects to your published content as being unlawful.
The legal basis for storing your data is Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as being illegal.
6) Data Processing When Opening a Customer Account
In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide them when opening a customer account. The data required for opening an account can be found in the input form on our website.
Deleting your customer account is possible at any time and can be done by sending a message to the above address of the controller. After deleting your customer account, your data will be deleted unless all contracts associated with it have been fully processed, no legal retention periods oppose this, and no legitimate interest on our part persists in continuing to store the data.
7) Data Processing for Order Handling
7.1 To the extent necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the contracted transport company and the contracted financial institution in accordance with Art. 6(1)(b) GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided during the order (name, address, email address) to inform you personally via a suitable communication channel (e.g., by post or email) about pending updates within the statutory period. Your contact details will be used exclusively for the purpose of informing you about updates owed by us and will only be processed to the extent necessary for that purpose.
We also work with external service providers who support us wholly or partially in the fulfillment of contracts. Certain personal data is transmitted to these service providers, as explained below.
7.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We pass on your name and delivery address and, where necessary for delivery, your phone number solely for the purpose of delivering goods in accordance with Art. 6(1)(b) GDPR to a selected shipping partner.
8) Online Marketing
HubSpot
This website uses the software-based marketing service of the following provider for customer management and synchronization of various services: HubSpot Ireland Ltd., 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.
The service allows automated handling of feed activities, control of advertising in marketing channels, analysis of marketing activities, central email marketing, and contact management.
Cookies, small text files stored in your web browser’s cache on your device, are used to fulfill the various functions. These cookies collect certain information such as your IP address, location, and the time of the page visit.
All the above processing activities, particularly the setting of cookies for reading information on your device, are performed only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect by disabling this service in the “cookie consent tool” provided on the website.
We have entered into a data processing agreement with the provider to ensure the protection of our visitors’ data and to prevent unauthorized disclosure to third parties.
9) Web Analytics Services
9.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.
Google (Universal) Analytics is used on this website without the use of cookies, meaning the service never sets cookies on your device at any time.
Instead, your browser’s local storage is used to store an individual ID assigned by Google (Universal) Analytics, which allows an analysis of your website usage. Certain user information is processed through this ID. This includes your IP address, which Google shortens to exclude direct personal reference.
The information is transmitted to Google’s servers and further processed there. Transfers to Google LLC’s servers in the USA are also possible.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Data collected through the use of Google (Universal) Analytics is stored for two months and then deleted.
All the described processing, including the storage of information on the used device in the form of the ID, will only occur if you have given us your express consent in accordance with Art. 6(1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your site visit. You can revoke your consent with future effect at any time.
To exercise your revocation, you can download and install the browser plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en
Alternatively, within browsers on mobile devices, you can revoke your consent by clicking on the following link to set an opt-out cookie, which will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie works only in this browser and for this domain. If you delete your cookies in this browser, you must click this link again):
Disable Google Analytics
We have entered into a data processing agreement with Google to ensure the protection of our visitors’ data and to prevent unauthorized disclosure to third parties.
For the transmission of data to the USA, Google relies on standard contractual clauses of the European Commission to ensure compliance with European data protection standards.
Further legal notices regarding Google (Universal) Analytics, including a copy of the standard contractual clauses, can be found at https://policies.google.com/privacy?hl=en&gl=de and https://policies.google.com/technologies/partner-sites
Demographic Features
Google (Universal) Analytics uses the special “demographic features” function to create statistics about visitors’ age, gender, and interests by analyzing advertisements and third-party information. This helps identify target groups for marketing activities. The collected data cannot be linked to any specific person and is deleted after two months.
Google Signals
As an extension of Google (Universal) Analytics, Google Signals may be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices with your Google account, Google may analyze your usage behavior across devices, provided you have consented to the use of Google Analytics according to Art. 6(1)(a) GDPR. Google creates database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the “Personalized Ads” feature in your Google account settings by following these instructions: https://support.google.com/ads/answer/2662922?hl=en More information about Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=en
User IDs
As an extension of Google (Universal) Analytics, the “User IDs” feature may be used on this website. If you have consented to the use of Google (Universal) Analytics according to Art. 6(1)(a) GDPR, have set up an account on this website, and log in across multiple devices, your activities, including conversions, can be analyzed across devices.
10) Retargeting/ Remarketing and Conversion Tracking
10.1 Google Ads Remarketing
Our website uses Google Ads Remarketing, a feature that advertises this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google sets a cookie in your browser, which automatically enables interest-based advertising using a pseudonymous cookie ID based on the pages you have visited. Further data processing only occurs if you have agreed with Google that your web and app browsing history will be linked to your Google account and information from your Google account will be used to personalize ads you see on the web. In this case, if you are logged into Google during your website visit, Google uses your data along with Google Analytics data to create and define audience lists for cross-device remarketing. For this, your personal data will be temporarily linked by Google to Google Analytics data to form target audiences. In the context of using Google Ads Remarketing, personal data may also be transmitted to Google LLC’s servers in the USA.
Details on the processing activities triggered by Google Ads Remarketing and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently object to the use of cookies by Google Ads Remarketing by downloading and installing the browser plugin provided by Google under the following link: https://support.google.com/ads/answer/7395996
Further information and the privacy policy regarding advertising and Google can be found here: https://www.google.com/policies/technologies/ads/
All the described processing activities, particularly the setting of cookies for reading information on your device, are only carried out if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by disabling this service in the “cookie consent tool” provided on the website.
10.2 Google Ads Conversion Tracking
This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google AdWords). Based on the data from the advertising campaigns, we can determine how successful the individual advertising measures are. We pursue the interest of showing you advertisements that are of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.
Details on the processing activities triggered by Google Ads Conversion Tracking and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All the described processing activities, particularly the setting of cookies for reading information on your device, are only carried out if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by disabling this service in the “cookie consent tool” provided on the website.
You can also permanently object to the setting of cookies for Google Ads Conversion Tracking by downloading and installing the browser plugin provided by Google at the following link: https://www.google.com/settings/ads/plugin?hl=en
Please note that certain functions of this website may not be available or may be limited if you have disabled the use of cookies.
Google’s privacy policy can be found here: https://www.google.de/policies/privacy/
11) Site Features
11.1 Instagram Plugins
Our website uses plugins from the social network Instagram, operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These plugins enable direct interactions with content on the social network.
To enhance the protection of your data when visiting our website, the plugins are initially disabled using a “2-click” or “Shariff” solution.
This integration ensures that no connection with the provider’s servers is established when you access a page of our website that contains such plugins.
Only when you activate the plugins and thus give your consent to data transmission in accordance with Art. 6(1)(a) GDPR, does your browser establish a direct connection to the provider’s servers. In doing so, information about your device (including your IP address), your browser, and your page history may be transmitted to the provider and further processed, regardless of whether you are logged into an existing user profile.
If you are logged into a user profile on the provider’s social network, any interactions performed using the plugins will also be published and displayed to your contacts.
You can revoke your consent at any time by re-clicking on the activated plugin to deactivate it. However, the revocation does not affect data already transmitted to the provider.
Data may also be transferred to Meta Platforms Inc., USA.
We have entered into a data processing agreement with the provider to ensure the protection of our visitors’ data and to prevent unauthorized disclosure to third parties.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission to ensure compliance with European data protection standards.
12) Tools and Miscellaneous
Cookie Consent Tool
This website uses a “cookie consent tool” to obtain effective user consents for cookies and cookie-based applications. The “cookie consent tool” is displayed to users when they access the page as an interactive interface where consent for certain cookies and/or cookie-based applications can be given by ticking a box. Through the use of the tool, all consent-requiring cookies/services are only loaded if the respective user gives the corresponding consent by ticking the box. This ensures that such cookies are only set on the respective user’s device if consent is given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storage, allocation, or logging of cookie settings, this is done in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and, thus, in legally compliant website design.
The further legal basis for processing is Art. 6(1)(c) GDPR. As controllers, we are legally obliged to base the use of technically unnecessary cookies on the respective user’s consent.
If necessary, we have entered into a data processing agreement with the provider to ensure the protection of our visitors’ data and to prevent unauthorized disclosure to third parties.
Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.
13) Data Subject Rights
13.1 The applicable data protection law grants you the following rights (rights to information and intervention) against the controller regarding the processing of your personal data, whereby reference is made to the corresponding legal basis for the respective exercise requirements:
- Right to information pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to deletion pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to revoke consents granted pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
13.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS BASED ON OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNING YOU FOR DIRECT ADVERTISING PURPOSES.
14) Duration of the Storage of Personal Data
The duration of the storage of personal data is determined based on the respective legal basis, the processing purpose, and – where applicable – additionally based on the respective statutory retention period (e.g., commercial and tax law retention periods).
If personal data is processed based on explicit consent in accordance with Art. 6(1)(a) GDPR, this data will be stored until you revoke your consent.
If there are statutory retention periods for data processed in the context of contractual or quasi-contractual obligations based on Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, provided the data is no longer required for contract performance or contract initiation and/or we have no legitimate interest in continuing to store the data.
If personal data is processed based on Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
If personal data is processed for direct marketing purposes based on Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.
Unless otherwise indicated in the other information of this statement regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.