Privacy Statement

• Introduction and general information

Thank you for your interest in our website. The protection of your private data is an important concern to us. That means we oblige ourselves to handle the provided data with great care and great sense of responsibility. In the following you will find information about the handling of your data, which is being collected while using our website. The processing of your data complies with the legal data protection requirements. Our website contains links to other websites. We should point out that we do not influence the presentation or content of other websites. Nor can we therefore accept any liability for the up-to-dateness, correctness, completeness or quality of information provided there. Please read the data protection declarations on these sites if you are concerned about their methods of data collection and usage.

• Contact information

Responsible authority according to the legal data protection requirements

Otto Wilde Grillers inc 

12600 Hill Country Blvd

service@ottogrills.com
Tel.: 0211 54213030

Contact information of the privacy officer

datenschutzbeauftragter@datenschutzexperte.de

www.datenschutzexperte.de

• Definition

Our privacy statement is supposed to be simple and understandable to everyone. The privacy statement usually uses the terms and definitions of the General Data Protection Regulation (GDPR). The official definitions are being explained in art 4 GDPR.

• Data processing while visiting our website

If you’re using our website, it is technologically necessary that your internet browser transmits data to our web server. The following data will be recorded during a running connection between your internet browser and our web server:

• Domain visited
• Date and time of the request
• Site from which the data file has been requested
• Access status (Such as file was transmitted, or file was not found, etc.)
• Browser and operating system used
• IP-address of the requesting computer
• Volume of data transmitted

We raise the listed data to ensure a smooth connection set-up and to allow the user to comfortably use our website. Furthermore, the log file serves the analysis of system security and stability as well as administrative purposes. The legal basis for the temporary data or log file storage is art. 6 Part 1 lit. f GDPR.

For technical security reasons, especially to repel attempted attacks on our web server, this data may be temporarily stored. Identification of individuals is not possible with this data. After seven days at the latest, the data is being anonymized on domain level by shortening the IP address, so that a reference to individual users is not possible anymore. No analysis of any of this data, except for statistical reasons in an anonymized way, is taking place. A data integration between this data and data from other sources is not carried out.

You can visit our site without sharing any personal information. We merely store access data which is not personally identifiable such as the name of your internet service provider, the web page you have come from to visit our website, or the name of the file that you have requested. This data is solely analyzed to improve our performance. Identification of individuals is not possible.

Personal data is only collected if you voluntarily offer this data to us in the framework of your order or during the creation of a customer account or registration for our newsletter. We only collect and use your personal data where this is necessary for the fulfilment and handling of your requests. We use your email address outside of contractual processing exclusively to send you a newsletter for our own marketing purposes. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by contacting us. Your email address will then be removed from the distributor. Personal data will be transmitted encrypted via SSL during the order process.

We protect our website and other systems against loss, damage, access, alteration or circulation of your data by unauthorized people by implementing technical and organizational action.

General data processing on the website (web analysis, commercial tracking, cookies, newsletter and social media plug-ins excluded)

• Contact form and contact via mail

If you contact us via e-mail or using our contact form, we will store your name, your contact data and the content of your request solely for the purpose of answering it. Under no circumstances will this data be published or transferred to third parties without your permission. The processing will occur in accordance to art. 6 (1) lit. b GDPR and is required for the fulfilment of a contract with you. The messaging history will be processed and stored by Zendesk to ensure an optimal response to your concern.

• Chat feature

If you contact us via the chat feature, a ticket with your name and e-mail address will automatically be created in Zendesk. The processing will occur in accordance to art. 6 (1) lit. b GDPR and art. 6(1) lit. f GDPR and is required for the fulfilment of a contract with you.

• Creating a customer account

You have the opportunity to create a customer account on our website to track your order, to keep the overview of your orders and to manage your newsletter settings. In the context of registration and set-up we collect and use the following personal data:

• Name, surname, title
• Address
• E-mail address
• Date and time of the registration

Furthermore, you can provide further information such as telephone number. Mandatory information, which has to be made on the purpose of the registration, is indicated as a mandatory field by a little star symbol. With your customer account you get the possibility to use further parts of our website and to log yourself in to see and manage your orders. The processing will occur in accordance to art. 6 (1) lit. a GDPR and art. 6(1) lit. b GDPR and is required for the fulfilment of a contract with you. Your data will be deleted as soon as your customer account on our website has been deleted and no legal retention requirements exist. An alteration or cancellation including the data provided can be made if you’re logged into your customer account or by sending a message to the aforementioned responsible authority or to service@ottowilde.de.

• Shop

If you purchase goods through our online shop we collect personal data, which is necessary for the fulfillment of your order. In the context of the checkout process we collect the following data:

• Name
• Surname
• Address
• E-mail-address

Furthermore, you can provide further information such as telephone number. Mandatory information, which has to be made on the purpose of the registration, is indicated as a mandatory field by a little star symbol.

The processing and storage will occur in accordance to art. 6 (1) lit. b GDPR and is required for the fulfilment of a contract with you. Even after contract closing personal data will further be stored to meet legal and contractual requirements. The data will be deleted once it is no longer needed for the fulfillment of the contract. An early cancellation of the data is only possible, if no legal or contractual requirements prohibit it.

• Applications

If you send us an application via e-mail, you automatically agree to the processing of your data on the purpose of the application process.

• NPS survey

To improve our performance, we send you survey requests at certain contact points (f.e. after the purchase or interaction with our customer care) to give you the opportunity to give us feedback. The participation is voluntarily, and the answers will be analyzed anonymously.

• Newsletter

If you would like to receive the newsletter we offer at this website, we need to have your valid e-mail-address and further information. For the sending of the newsletter we use the so-called double-opt-in method. That means, that we will only send you our newsletter via e-mail once you confirmed, that you agree on receiving our newsletter. You will receive a confirmation link via e-mail. By clicking it you confirm that you are the owner of the e-mail address and want to receive our newsletter.

With the confirmation you give us your consent to use your personal data for the purpose of the newsletter sending in accordance to art. 6 (1) lit. a GDPR.

With the registration we collect, besides the mandatory mail address, the time and date of the registration and confirmation to be able to identify a possible fraud at a later stage.

You can unsubscribe at any time using the link attached at the end of every newsletter or by sending an e-mail to the aforementioned responsible authority. After the successful unsubscribing your e-mail address will be deleted, insofar as you didn’t agree on a continued usage of your data or the continued processing is legally permitted.

• SMS

If you would like to receive SMS offer, we need to have your valid phone number. For the sending of SMS we use the so-called double-opt-in method. That means, that we will only send you offers and content via SMS once you confirmed, that you agree on receiving our messages. You will be asked to answer the first SMS with “Y” or “YES”. By sending it you confirm that you are the owner of the phone number and want to receive our offers and content.

With the confirmation you give us your consent to use your personal data for the purpose of the SMS sending.

With the registration we collect, besides the mandatory phone number, the time and date of the registration and confirmation to be able to identify a possible fraud at a later stage.

You can unsubscribe at any time responding with “STOP”. After the successful unsubscribing your phone number will be deleted, insofar as you didn’t agree on a continued usage of your data or the continued processing is legally permitted.

• Web analysis and commercial tracking

• Google Analytics

Our website uses the online marketing programme “Google AdWords”, including conversion tracking. Google conversion tracking is a service operated by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognize that you have clicked on the advert and were forwarded to this page. Every Google AdWords customer receives a separate cookie. Therefore, it is not possible to track cookies relating to the websites of AdWords customers. The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. However, they do not receive any information with which could be used to personally identify users. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in targeted marketing and analysis of the effectiveness and efficiency of this marketing.

You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. You can prevent the storage of cookies by choosing corresponding technical settings in your internet browser. We would, however, like to point out that this may prevent you from making full use of all the functions of this website. You will then not be included in the conversion tracking statistics. You can also deactivate personalized advertising in Google’s advertising settings. You can find an introduction to this at https://support.google.com/ads/answer/2662922 You can also deactivate the use of cookies by third parties by calling up the Network Advertising Initiative deactivation page at https://www.networkadvertising.org/choices/ and following the opt-out instructions.

You will find more information as well as Google’s data protection declaration at: https://www.google.de/policies/privacy/

• Hotjar

This website uses the Hotjar web analysis service from Hotjar Ltd.. Hotjar Ltd. is a European company with registered offices in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, Tel.: +1 (855) 464-6788).

This tool can be used to track movements on websites that use Hotjar (so-called heat maps). In this way it is possible to monitor how a user scrolls and which buttons they click, and how often, for example. The tool can also be used to obtain feedback directly from the website users. This provides us with valuable information to help us make our websites even faster and more customer-friendly.

When using this tool, we hold the protection of your personal data in high regard. We can only track which buttons were clicked, the cursor movement, how far was scrolled, screen size, type of device and browser information, geographic location (only country) to optimize our website. Areas in which personal data of you or third parties is shown are automatically blanked out by Hotjar and thus not transparent at any time. To rule out identification of individuals IP addresses are only stored and processed anonymously. Hotjar is using several services of third-party-providers like Google Analytics and Optimizely. So, it may be the case that those providers collect data that was transmitted by your browser in the context of a website request. An example would be your IP address or cookies. In those exceptional cases this processing will occur in accordance to art. 6 (1) lit. f GDPR on the basis of our justified interest in statistical analysis of user behavior for optimization and marketing purposes.

Hotjar gives every user the opportunity to prevent the use of the Hotjar tool with a “Do Not Track header” so that no data is recorded about their visit to the respective website. This is a setting that the latest version of all common browsers supports. Your browser hereby sends a query to Hotjar instructing it to deactivate tracking of the respective user. If you visit sipgate websites with different browsers/computers, you have to configure the “Do Not Track header” separately for each of these browsers/computers.

Detailed instructions with information about your browser can be found at: https://www.hotjar.com/legal/compliance/opt-out

Further information on hotjar can be found at: https://help.hotjar.com

Hotjar´s privacy policy can be found at: https://www.hotjar.com/privacy

• Social Media Plugins

Social networks (Facebook, Twitter and Xing) are solely integrated as links to the relevant services on our website. After clicking the integrated text/ picture link you will be forwarded to the respective provider. Only after the forwarding your user information will be transmitted to the respective provider. Information about the handling of your personal data at these websites can be found at the respective privacy policies of the provider.

With the help of Social Media Plugins (“Plugins”) of different social networks you can share or recommend content or products.

If you enter a website which contains such a plugin, your browser will set up a connection with the respective social network. The content of the plugin will be transmitted from the social network straight to your browser and will then by integrated into the website.

Through the integration of the plugins, the social network will receive the information, that you entered our website. If you’re logged in to the social network, it can assign the visit to your account. If you interact with the plugin, by for example clicking the “Like”-button or commenting, the respective information will be transmitted to the social network and stored there.

Purpose and extent of the data collection as well as the further processing and usage of the data by social networks as well as the corresponding rights and setting opportunities to protect your privacy can be taken from the privacy policies of the respective networks or websites. Please find the links below.

If you do not want social networks to collect your data through our website, you have to log yourself out of the respective social network prior to entering our website.

Even if you’re not logged in to your social networks, websites with active social plugins can still send data to social networks. With an active plugin a personalized cookie will be created every time you enter a website. Since your browser is transmitting this cookie unasked every time you’re going online, the network is principally able to create a profile, which contains the websites the user connected to the personalized cookie has entered. And it also would be possible to assign this personalized cookie to a person at a later time. For example, if you’re eventually logging in to a social network.

We’re using the following plugins on our website:

Facebook, Twitter, Youtube, Pinterest and Instagram

If you do not want social networks to collect data from you through plugins, you can just disable them with one click on our website or choose the function “block cookies from third-parties” in your browser settings. Then, the browser doesn’t send any cookies to the server anymore. With this setting, however, some other cross-page functions besides the plugins may also not work properly.

Facebook:

We’re using plugins of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA („Facebook“).

Please find the privacy policy of Facebook here: https://www.facebook.com/about/privacy/

Twitter:

We’re using plugins of the social network Twitter, which is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA („Twitter“).

Please find the privacy policy of Twitter here: https://twitter.com/privacy

Pinterest:

We’re using plugins of the social network Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, USA („Pinterest“).

Please find the privacy policy of Pinterest here: http://about.pinterest.com/privacy/

Youtube:

We’re using plugins of the social network Youtube, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States („Youtube”).

Please find the privacy policy of Google Inc. here: http://www.google.com/intl/de/policies/privacy/

Instagram:

We’re using plugins of the social network Instagram, which is operated by Instagram, LLC Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

Please find the privacy policy of Instagram here: http://instagram.com/about/legal/privacy/#

• Cookies

Our website uses cookies. Cookies do not cause any damage to your computer or contain any viruses. Cookies serve to make our website more user-friendly, efficient and secure. Cookies are small text files that are placed on your computer and stored in your browser. Most of the cookies we use are “session cookies.” This means that they are automatically deleted after your visit. Other cookies remain on your end device until you delete them. These cookies enable us to recognize your browser upon your next visit.

Cookies are partly used to store settings to make website processes easier (for example already selected options). If personal data was processed though cookies implemented by us, the processing complies with art 6 (1) lit. B. GDPR either because it is required for the fulfilment of a contract with you or due to our justified interest in an optimized functionality of our website as well as a customer-orientated user experience.

You can set your browser so that you are informed about the placement of cookies or exclude the acceptance of cookies in general and activate the automated deletion of cookies when closing your browser. If you deactivate cookies, this can limit the functionality of this website.

Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en

Safari: https://support.apple.com/kb/PH21411?locale=de_DE&viewlocale=en_US

Opera: https://www.opera.com/help/tutorials/security/privacy/

You can also individually manage cookies of many companies and functions, which are being used for commercial reasons. Therefore use the respective user tools, that can be found at www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices

Most browsers also offer a so-called „do-not-track-function”, with which you can declare, that you don’t want to be “tracked” by websites. If this function is used, the browser tells commercial networks, websites und applications, that you don’t want to be tracked or receive behavior-based advertisement. Information and manuals on how to manage this function, depending on the browser you’re using, can be found here:

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=en

Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/

Internet Explorer: https://support.microsoft.com/en-us/help/17288/windows-internet-explorer-11-use-do-not-track

Opera: http://help.opera.com/Windows/12.10/en/notrack.html

Safari: https://support.apple.com/kb/PH21416?locale=de_DE&viewlocale=en_US

Additionally, you can prevent the loading of the so-called script. NoScript only allows the running of JavaScripts, Java and other plugins with trustworthy domains of your choice. Information and manuals on how to manage this function can be found here: (for example for Mozilla Firefox: https://addons.mozilla.org/en-GB/firefox/addon/noscript/)

Please note, that the deactivation of cookies may result in limitation of the website’s functionality.

• Facebook Cookies und Facebook Remarketing

Our website can integrate the social network plugins of Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. The plugins are identified by a Facebook logo or the add-on “Facebook Social Plugin”. An overview of the Facebook plugins is provided here. When you visit our website that contains such a plugin, the plugin establishes a direct link between your browser and the Facebook server and informs Facebook that you have visited our site using your IP address. When you click the Facebook plugin while you are logged in on your Facebook account, you will be able to link the content of our webpages to your Facebook profile. Facebook can then attribute your visit to our website to your user account. Please note that we, the providers of the pages, receive no information concerning either the content of the data transmitted or their use by Facebook. Additional information is provided in the data protection declaration of Facebook, which can be accessed here. If you do not want Facebook to attribute your visit to our website to your Facebook user account, please log out of your Facebook user account. If you don’t want data collection via Custom Audiences, you can deactivate Custom Audiences here. The reason for the processing of this data is the justified interest in the analysis, optimization and the economic operation of our online offering.

With your consent, on our website we deploy cookies (“Pixel”) of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). These cookies allow us to monitor whether a user has clicked on or viewed a Facebook promotion or advertisement, and thus to assess the effectiveness of Facebook publicity for statistical and marketing purposes. The data gathered are anonymous to us, so we cannot link the data to an individual user. However, we hereby inform you that Facebook saves and processes the data. Facebook can link these data to your Facebook account, and use them for their own publicity purposes, in accordance with the Facebook data policy (https://www.facebook.com/about/privacy/). They allow Facebook and its partners to activate marketing communications within and outside of Facebook. Furthermore, a cookie may be saved on your computer for these purposes.

Google Remarketing

This website uses the Google Inc. (“Google”) Remarketing function. The function enables us to present advertisements within the scope of the Google advertising network that relate to the interests of the website’s visitors. Website visitors’ browsers save so-called cookies: text files that are saved on their computers and enable visitors to be recognized when they open websites that belong to the Google advertising network. The advertisements that refer to the content that the visitors have already retrieved on other websites that use the Google Remarketing function can be presented to the visitors on these pages. Google states that it does not capture any personal data during this action. Furthermore, If you have chosen to enable Google to associate your web and app browsing history with your Google account, and to use information from your Google account to personalize ads, Google will use your data together with the Google Analytics data to build audience lists for cross-device remarketing. If you do not want the Google Remarketing function, you can deactivate it by making the relevant settings at http://www.google.com/settings/ads. Alternatively,

you can deactivate the use of cookies for interest-based advertising via the Network Advertising Initiative by following the instructions on http://www.networkadvertising.org/managing/opt_out.asp

• Data transfer and recipient

A transfer of your personal data to third parties does not occur, except

• if we pointed it out explicitly in the description of the respective data processing,
• if you gave us your explicit permission after art 6. (1) S. 1 lit. a GDPR,
• the transfer is necessary after art 6. (1) S. 1 lit. a GDPR for assertion, exertion or defense of legal claims and if there is no reason to believe, that you have a predominant protection-worthy interest in the non-disclosure of your data,
• in the case that after art 6. (1) S. 1 lit. a GDPR there is a legal obligation for the data transfer and
• if it’s necessary after art 6. (1) S. 1 lit. a GDPR to fulfill a contract with you.

Furthermore, we’re using external service providers for the processing, which have been chosen carefully and assigned in writing. They are bound to our instructions and are regularly monitored by us. If required, we concluded contracts after art 28 DSGVO with them. Those are service providers for webhosting, e-mail sending as well as maintenance of our IT-systems and order processing (ERP), etc.

Your data is also transferred to the shipping company, that is assigned with the delivery of the relevant goods. For payment transactions we also transfer your data to the credit institute, that is assigned with the payment. Any further usage, especially a transfer or sale of your data by the Otto Wilde Grillers is impossible, unless it happens within the aforementioned frame or the user has explicitly approved the transfer of his data.

• Duration of storage of personal data

The duration of the storage of personal data is determined by the relevant statutory storage periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data are routinely deleted. Insofar as data is required for contract fulfilment of initiation or if we have a legitimate interest in the continued storage, the data will be deleted if they are no longer required for these purposes or if you utilize your right of revocation or objection.

• Your rights

Below you will find information on the rights which are granted to individuals by the applicable data protection law vis-à-vis the person responsible for processing your personal data:

The right to request information concerning your personal data processed by us after art. 15 GDPR. You may, in particular, request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the existence of a right to rectification, deletion, limitation of processing or objection, the existence of a right to complain, the source of your personal data, unless obtained from us, and the existence of automated decision-making, including profiling and, where appropriate, meaningful information about the respective details.

The right to demand, without delay, correction of incorrect personal data or to complete personal data stored by us in accordance with art. 16 GDPR.

The right to demand deletion of your personal data retained by us, according to art. 17 GDPR, unless the processing thereof is required with regard to the right to exercise freedom of expression and information, for fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

The right to demand, pursuant to Art. 18 GDPR, limitation of processing your personal data, as far as the accuracy of your personal data is disputed by you, the processing is illegal, but you refuse the deletion thereof and we no longer require the data, but you, however, need them for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with art. 21 GDPR.

The right to receive, in accordance with art. 20 GDPR, your personal data provided by you in a structured, common and machine-readable format or to request transfer thereof to another person responsible.

The right to complain to a supervisory authority in accordance with art. 77 GDPR. Generally, you can contact the supervisory authority of the federal state of our above-named office or, if applicable, your usual place of residence or work place.

Right to revoke granted consent according to art. 7 (3) GDPR: You have, at any time, the right to revoke your consent to the processing of your personal data effective in the future. In case of revocation, we will delete the data concerned immediately, unless further processing is founded on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent before the revocation;

Right of objection

If your personal data is processed by us on the basis of legitimate interests pursuant to art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with art. 21 GDPR, insofar as this is for reasons that arise from your particular circumstances. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of specification of particular circumstances.

• Changes and latest version of the privacy statement

We reserve the right to update or adjust this privacy statement regarding to the applicable data protection rules. This way we can adjust them to the latest legal requirements and can take changes in our services into consideration. The respective current version applies for your visit.

This version was las updated on: May 25^th 2018