Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Can Axartell, GmbH, Große Elbstraße 281, 22767 Hamburg, E-Mail: info@canaxartell.es. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for information purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you came to the site
Browser used
Operating system used
IP address used (if necessary: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock icon in your browser line.

3) Hosting & Content Delivery Network

For the hosting of our website and the presentation of the page content, we use a provider that provides its services exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our page visitors and prohibits unauthorized disclosure to third parties.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of the cookies we use are deleted after the browser session, i.e., after closing your browser (so-called "session cookies"). Other cookies remain on your device and enable us to recognize your browser on your next visit (so-called "persistent cookies"). If cookies are used, they collect and process individual user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.

Insofar as personal data are also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract or according to Art. 6 para. 1 lit. a GDPR in the case of a given consent or according to Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. Please note that the functionality of our website may be limited if you do not accept cookies.

5) Contact

5.1 Own function for online appointment scheduling
We process your personal data within the framework of the online appointment booking service provided. You can see which data we collect for the purpose of online appointment scheduling from the respective input form or the appointment inquiry for scheduling. If certain data are necessary to carry out online appointment scheduling, we will accordingly mark them in the input form or during the appointment inquiry. If we provide you with a free text field in the input form, you can describe your concerns in more detail there. You can also control which data you want to enter additionally. Your communicated data will be stored and used exclusively for the purpose of scheduling appointments. In the case of processing personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for carrying out pre-contractual measures), Art. 6 para. 1 lit. b GDPR serves as the legal basis. If you have given us consent to process your data, processing is based on Art. 6 para. 1 lit. a GDPR. A given consent can be revoked at any time by sending a message to the responsible person mentioned at the beginning of this statement.

5.2 Within the framework of contacting us (e.g. via contact form or e-mail), personal data are processed exclusively for the purpose of handling and answering your inquiry and only to the extent necessary. The legal basis for the processing of these data is our legitimate interest in answering your inquiry according to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your inquiry, provided that there are no legal storage obligations.

6) Comment Function

In the context of the comment function on this website, in addition to your comment, information at the time the comment is made as well as details you provide (comment name) will be stored and published on the website. Furthermore, your IP address will be logged and stored. This storage of the IP address is done for security reasons and in case the person affected by your comment violates the rights of third parties, or posts unlawful content. Your email address is required to contact you if a third party should object to your published content as unlawful. The legal basis for storing your data is Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.

7) Processing of Data for the Purpose of Order Handling

7.1 To the extent necessary for the delivery of goods and for payment purposes, personal data collected by us are passed on to the transport company commissioned with the delivery and, if necessary, to the credit institution commissioned with payment processing. The basis for processing is Art. 6 para. 1 lit. b GDPR.

Further details on the processing of data and your possible objections are included in the privacy policy of the respective provider. You can find these notices and the respective legal bases for the processing operations in the individual sections of this privacy statement.

8) Use of Customer Data for Direct Advertising

8.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will send you regular information about our offers. The only required information for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that you will receive an email asking you to confirm your registration. You will only receive the newsletter if you confirm your registration via a link in the confirmation email. The processing of your personal data in the context of sending the newsletter is based on your consent according to Art. 6 para. 1 lit. a GDPR.

You can unsubscribe from the newsletter at any time by clicking on the link provided in each newsletter or by sending a message to the controller mentioned above. After unsubscribing, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to further use your data in cases permitted by law and about which we inform you in this statement.

9) Data Processing for Order Processing

9.1 To the extent necessary for the contract processing of deliveries and payments, personal data collected by us will be passed on to the transport company commissioned with the delivery and, if necessary, to the credit institution commissioned with the payment processing. The basis for processing is Art. 6 para. 1 lit. b GDPR.

10) Rights of the Data Subject

10.1 The applicable data protection law grants you comprehensive rights (information and intervention rights) against the controller with regard to the processing of your personal data, about which we inform you below:

Right of access by the data subject pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

If you have any questions about the collection, processing, or use of your personal data, for information, correction, blocking, or deletion of data as well as revocation of granted consents or objection to a particular use of data, please contact us directly via the contact details in our imprint.

Furthermore, you have the right to lodge a complaint with the competent data protection supervisory authority.

11) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the processing purpose and - if relevant - additionally by the respective statutory retention period (e.g., commercial and tax retention periods).

If several legal bases apply, personal data will be stored until the purpose for which the data were originally collected no longer applies, unless statutory retention periods (e.g., commercial and tax retention periods) prevent deletion, there is a continued need for storage for evidence purposes, or there are any other legal grounds for storage.

When processing personal data on the basis of your consent according to Art. 6 para. 1 lit. a GDPR, these data are stored until you revoke your consent.

If there are statutory retention periods for data that are processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, these data are routinely deleted after the expiry of the retention periods, provided they are no longer required for contract fulfillment or contract initiation and/or there is no longer any legitimate interest on our part in their further storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, these data are stored until you exercise your right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

When processing personal data for direct advertising purposes on the basis of Art. 6 para. 1 lit. f GDPR, these data are stored until you exercise your right to object according to Art. 21 para. 2 GDPR.

Unless otherwise provided for in the information on specific processing situations in this privacy statement, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.