Privacy policy

This privacy policy explains how we process your personal data when you use our website.

I. Information about us as the data controller
II. The rights of users and data subjects
III. Information about data processing

I. Information about us as the data controller

The controller responsible for this website under data protection law is:

hanshanshans Groten Stapper Stapper GbR
Emdener Str. 105
50735 Köln
Germany

Email: info@hanshanshans.de

II. The rights of users and data subjects

Subject to the applicable legal requirements, you have the right of access to your data and to receive a copy (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR) and the right to restriction of processing (Art. 18 GDPR). Where you have provided us with data that we process by automated means on the basis of consent or a contract, you also have the right to data portability under Art. 20 GDPR.

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.

You may withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn. The options for withdrawing consent for individual services are described in the relevant sections. To exercise your rights, you can contact us at info@hanshanshans.de.

Under Art. 77 GDPR, you may lodge a complaint with a data protection supervisory authority, in particular in the place of your habitual residence, your place of work or the alleged infringement. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.

III. Information about data processing

Hosting and server logs

When you access our website, data including your IP address and the content requested are processed to deliver the website to you. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to provide our website securely and reliably. Data required solely for transmission are processed only for the duration of that transmission; any logging beyond this is described below.

Our website is hosted by:
iNETsolutions.de®e.K.
Leutragraben 1 - JenTower
07743 Jena
Germany

No data is stored in server logs.

Contact enquiries

If you contact us by email or through the contact form, we process the contact details and message content you provide in order to respond to your enquiry. You are under no statutory or contractual obligation to contact us or provide this data. We cannot respond to your enquiry without information about your request and a way to contact you.

For enquiries relating to a contract with you or to steps taken at your request before entering into a contract, the legal basis is Art. 6(1)(b) GDPR. We process other enquiries on the basis of Art. 6(1)(f) GDPR; our legitimate interest is to respond to enquiries and conduct business communications.

We use the following service provider for the technical receipt, transmission and storage of emails:
Alfahosting GmbH
Edmund-von-Lippmann-Straße 13-15
06112 Halle (Saale)
Germany

We delete enquiry data once the correspondence is complete and the matter has been fully resolved. Where individual documents are subject to statutory retention obligations, we retain commercial or business correspondence for six years and accounting vouchers for eight years, calculated from the end of the calendar year in which they were received, sent or created, as applicable. The legal basis for this retention is Art. 6(1)(c) GDPR in conjunction with section 147 of the German Fiscal Code (AO) and, where applicable, section 257 of the German Commercial Code (HGB). The retention period may be extended for as long as the documents remain relevant to taxes for which the assessment period has not yet expired.

For information about the security check in the form, please see the Google reCAPTCHA section. You can contact us without reCAPTCHA by emailing info@hanshanshans.de.

Google Maps

Our location map uses Google Maps to display table football locations. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is loaded only after you explicitly consent by selecting “Allow Google Maps”. Before that, the map does not connect to Google. Alternatively, you can use the location list without Google Maps.

After you consent, Google receives data including your IP address, browser and device information, the page visited and information about your use of the map. Google may use cookies or similar technologies, process data for its own purposes such as improving its services and personalised advertising, and link it to a Google account if you are signed in.

The legal basis is your consent under Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). Consent is voluntary and applies only to the current page view. We do not store cookies or a consent preference in your browser for this purpose. On a new page view, the map remains blocked until you consent again.

You can withdraw consent at any time for the future using “Withdraw consent” below the map. This reloads the page and blocks Google Maps again. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. It does not automatically delete data already transmitted to Google or cookies set by Google. Google's retention periods are governed by its privacy information and your Google account settings.

Data may be processed by Google LLC in the USA and in other countries outside the EU/EEA. Google describes the safeguards it uses, including the EU-US Data Privacy Framework and standard contractual clauses where required, in its information about international data transfers. For more information, see Google's privacy policy.

Google reCAPTCHA

We use Google reCAPTCHA v2 with the “I'm not a robot” check to protect our contact form against automated requests and spam. The service is provided by the Google group of companies. Data recipients are the Google group companies involved in providing and operating reCAPTCHA, in particular Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google processes reCAPTCHA customer data as a data processor.

The service is loaded only when you click “Enable Google reCAPTCHA”. It processes data including your IP address, browser and device information, and your interactions with the security check. Google uses the “_GRECAPTCHA” cookie, among others, for this purpose. The legal basis is your consent under Art. 6(1)(a) GDPR and, for storing information on or accessing information from your device, section 25(1) TDDDG.

Activation applies only to the current page view. To withdraw consent, reload the page and do not activate the service again. This does not automatically delete data already transmitted or cookies already set. You cannot submit the form without activating the service; alternatively, you can contact us by email.

Data may be processed by Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. Transfers covered by this certification are subject to an adequacy decision under Art. 45 GDPR. Further information about contractual safeguards for data transfers and subprocessors is available in the Google Cloud Data Processing Addendum.

Links to Facebook and Instagram

Our website contains links to our Facebook and Instagram profiles. These are ordinary links with icons stored on our website. Merely displaying these links does not load any content from Facebook or Instagram or establish a connection to Meta.

When you open one of these links, you leave our website and access the respective service. The provider for users in the European Economic Area is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Meta's processing of your personal data is governed by the privacy information provided by the respective service. For more information, see Meta's privacy policy.

Videos on our website

The videos on our homepage and in the public “Videos” section are provided as video files through our website. No YouTube player is loaded for this playback.

YouTube in the password-protected area

We embed YouTube videos in the password-protected area of our website to provide you with video content. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When the YouTube player loads, Google receives data including your IP address, browser and device information, and information about the page visited and your use of the video. Google may use cookies or similar technologies and associate this information with your Google account if you are signed in. Depending on the player version and your settings, Google's further processing may also serve to improve its services and for advertising purposes.

The legal basis for activation based on consent is Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, section 25(1) TDDDG.

Data may be processed by Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. Where a transfer is covered by this certification, it is subject to an adequacy decision under Art. 45 GDPR. Information about further safeguards for data transfers is available in Google's information about international data transfers.

For more information about Google's processing and retention periods, see Google's privacy policy.