Privacy Policy

1. Name and contact details of the party responsible for data processing and of the data protection officer of the company

The responsible party pursuant to the General Data Protection Regulation and other national data protection regulations of the member states as well as any other data protection provisions is:

EckPack Service GmbH & Co. KG
Saalbaustraße 8-10
D-64283 Darmstadt
Phone: +49 6151 27 382-0
Fax: +49 6151 27 382-20
E-Mail: info@eckpack.com
Commercial Register: District Court of Darmstadt, No. HRA 7255

Management:
EckPack Verwaltungs GmbH
represented by Mr Marin Maras, Managing Director
Saalbaustraße 8-10
64283 Darmstadt
Telefon: +49 6151 27 382-0
Telefax: +49 6151 27 382-20
E-Mail: info@eckpack.com
Commercial Register: Darmstadt District Court, No. HRB 88545

The data protection officer of EckPack Service GmbH & Co. KG can be reached at the above-mentioned address or via datenschutzbeauftragter@eckpack.com.

2. Collection and storage of personal data; manner and purpose of their use

As a general rule, we process personal the data of our users only in so far as it is necessary in order to provide a working website and to present our contents and services. Personal data of our users is processed exclusively with the consent of our users. Exceptions are only in those cases whereby the user’s consent cannot be obtained in advance and processing their data is permitted by law.

The legal basis for obtaining users’ consent to process personal data shall be Article 6, paragraph 1 (a) of the EU General Data Protection Regulation (GDPR).
Article 6, paragraph 1 (b) GDPR shall apply if personal data is processed that is required in order to perform a contract to which the data subject is party. It shall also be the legal basis for data processing operations that are necessary to take steps prior to entering into a contract.
Article 6, paragraph 1 (c) GDPR shall be the legal basis for all cases in which personal data must be processed in order to comply with the legal obligations to which our company is subject.
Article 6, paragraph 1 (d) shall apply if the vital interests of the data subject, or any other natural person, require the process of personal data.
Article 6, paragraph 1 (f) shall be the legal basis for data processing, if the purpose of safeguarding our legitimate interests, pursued by our company or a third party, requires data processing and if a subject’s interests, basic rights and fundamental freedoms do not override our company’s interests.

Personal data shall be deleted or blocked as soon as the purpose for its storage is no longer required. Data can be stored beyond this purpose, if it is provided by European or national legislation via EU regulations, laws or other provisions to which the responsible party is subject. In addition, data is blocked or deleted, if a deadline set by the regulations mentioned expires, in which case the conclusion or performance of a contract necessitates further data storage.

a) Visiting our website

As soon as you click on www.luckys4kids.com the browser of your terminal device automatically sends information to the server on our website. This information is temporarily stores to a so called logfile. The following information is collected, stored and then automatically deleted without your doing anything:

• IP address of the requesting computer
• Date and time of access
• Name and URL of requested file
• Accessing website (referrer URL)
• Browser used.

We process the above-mentioned information for the following purposes:

• Ensuring a seamless connection will be established smoothly with the website,
• Ensuring that our website is user-friendly
• Evaluation of system security and stability, and
• For further administrative purposes

The legal basis for data processing is article 6, paragraph 1 (f) GDPR. Our legitimate interest arises from the above-mentioned purposes to collect data. Under no circumstances will we use the data collected to draw conclusions about you as a person.

In addition, we use cookies and analysing services for visits to our website. For further explanations, we refer you to No. 4 and 5 of this privacy policy.

b) When using our contact form

If you have any questions you are welcome to contact us via a contact form provided on our website. In order to be able to use it you must enter a valid e-mail address. This tells us who the sender of a message is and enables us to answer it. You may enter further information if you wish.

Processing data for the purpose of contacting us pursues to article 6, paragraph 1 (a) GDPR on the basis of your voluntarily-given consent.

In addition to any information you may enter, the following data is stored:

• URL of the page of the contact form

The personal data we collect via your using the contact form will be deleted after your enquiry was answered.

3. Forwarding data

Your personal data will not be forwarded to third parties other than for the following purposes:

We disclose your personal data to third parties only when:

• you have expressly agreed to it pursuant to article 6, paragraph 1 (a) GDPR
• the forwarding of your data pursuant to article 6, paragraph 1 (f) GDPR is necessary to establish, exercise or defend legal claims and no reason is apparent as to why your interest in not forwarding your data is worth being protected and overrides the former interest
• we are legally obliged to forward your data pursuant to article 6, paragraph 1 (c) GDPR, as well as when
• it is legally necessary in order to perform a contract with you pursuant to article 6, paragraph 1 (b).

4. Cookies

Our website applies cookies. They are small files automatically established by your browser and stored on your terminal device (laptop, tablet computer, smartphone etc.) when you visit our website. Cookies are not harmful to your device. Nor do they not contain any viruses, trojans or other harmful software.

Cookies collect information from your individual use of your terminal device. This does not mean that we gather direct information of your identity.

On the one hand, we apply cookies in order to enable user-friendly access offers for our visitors Therefore, we apply so-called session cookies that enable us to recognise that you have previously accessed our website. They are automatically deleted after you visit.

In addition to that and similarly in order to optimise user-friendliness, we use temporary cookies which are stored on your device for a certain period of time. Should you visit our website again because you wish to make use of our services, we can automatically recognise that you have been here before and which entries and settings you have made, so that you do not have to make them again.

On the other hand, we use cookies to collect statistical information on the use of our website, for evaluation purposes, so that we can optimise our offers for you (see No. 5). These cookies enable us to recognise, at your next visit, that you have been here before. They will be deleted after a certain period of time.

Pursuant to article 6, section 1 1 (f), the data processed by cookies is necessary in order to safeguard our legitimate interests and those of third parties.

Most browsers accept cookies automatically. You can, however, configure your browser in a way that cookies cannot be stored on your computer or that you are informed when a new cookie is stored. However, by completely deactivating cookies you might no longer be able to use all the features on our website.

5. Web analytics

a) Tracking tools

We use the tracking tools mentioned below pursuant to article 6, section 1 (f). Our intention is to make sure that our website is organised according to your needs and that it is continually optimised. In addition, we use tracking to obtain statistical information about the use of our website and to evaluate it in order to optimise our offers to you. These are legitimate interests pursuant to the above-mentioned regulation.

The categories of data and the purpose for which we collect them is described by the respective tracking tool.

i) Google Analytics¹

We use Google-Analytics, a web analysis service by Google Inc. (https://www.google.de/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter called „Google“), in order to organise our website according to your needs and to continually optimise it. In this context, pseudonym user profiles are set up and cookies (see No. 4) are applied. Information generated by your user behaviour is collected by the cookie as listed here:

• Browser type and version
• Operating system used
• Referrer URL (previous page visited)
• Host name of the accessing computer (IP address)
• Time of server request

They are transmitted and stored to a Google server in the USA. The information is processed to evaluate use of our website, to prepare reports about the activities on our website and to carry out further services linked to the use of both website and internet, for market research purposes and for designing these pages according to your needs. These data might be transmitted to third parties if we are legally obliged to do so and if third parties process the data on our behalf. Under no circumstances is your IP address connected to other Google data. IP addresses are rendered anonymous in order that identification is not possible (IP-masking).

You are free to prevent cookies from being installed on your computer by selecting the appropriate browser setting. We wish to point out, however, that in this case, certain features of this website cannot be fully utilised

In addition, you are free to prevent cookies from collecting data related to your users-behaviour (your IP address included) and Google from processing your data, by downloading and installing a browser-add-on https://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to installing a browser-add-on, particularly for browsers of portable terminals, you can prevent Google Analytics from collecting data by clicking on this link. An opt-out-cookie is set which blocks future data collection when returning to this website. This opt-out-cookie is only effective with this browser in combination with our website and it is stored on your device. Should you delete the cookies in this browser you must set the opt-out-cookie again.

For further information on data protection in connection with Google analytics, please refer to Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=en)

ii) Google Adwords Conversion Tracking

In order to obtain statistical information about the use of our website and to evaluate it in order to optimise our offerings to you, we also use Google Conversion Tracking. If you have accessed our website via a Google advert, google Adwords stores a cookie (see No. 4) on your computer.

This cookie expires after thirty days and does not identify anyone. A user’s visit to certain pages of the website of an Adwords client allows Google and the client to recognise that a user has clicked on the advert and has been redirected to this website.

Every Adwords client is assigned a different cookie. In doing so, cookies cannot be tracked via the website of an Adwords client. Information collected by means of conversion cookies is used to set up Conversion statistics for Adwords clients who have decided to install conversion tracking. Adwords clients can learn about the total number of users who have clicked on their advert and who were redirected to a page with a conversion tracking tag. They do not, however, receive any information about users’ identities.

You are free to prevent cookies from being installed on your computer by selecting the appropriate browser setting. We wish to point out, however, that in this case, certain features of this website can maybe not be fully utilised. In addition, you can prevent the cookie from collecting data about your user’s behaviour (your IP address included), which is then sent to and processed by Google, by downloading and installing the browser plugin provided by the following link: https://tools.google.com/dlpage/gaoptout?hl=en . Google guidelines on data protection with regard to conversion tracking can be found here: https://services.google.com/sitestats/en.html

6. Application of script libraries (Google Webfonts)

We use script libraries and font libraries such as, for example, Google Webfonts https://fonts.google.com/ that allow us to display our contents correctly and appealingly for all kinds of internet browsers. Google Webfonts are transmitted to your browser’s cache in order to avoid repeated downloading. If your browser does not support Google Webfonts, or even denies access, contents will be displayed in a default font.

Activating script or font libraries automatically establishes a connection with the library’s operator. Theoretically, this might enable them to collect data from you. Currently however, it is not known if, and if so, for what purpose they would wish to do this.

Data protection provisions of Google’s library operator can be found here: https://policies.google.com/privacy?hl=en

7. Social Media

We do not use so-called social-media plug-ins. You can, however, “share“ certain contents of our website with social media. If you click on a “share“ symbol on our website, you will be redirected to the website of the respective social network. There you are free to share the content of our website in question with anyone you like subject to the fact that you have an account and are logged on to it.

No data is transmitted to social networks unless you click on the respective icon or link that redirects you to the respective websites of a social network. The risk of supplying social networks with your personal data and their processing them comes up as soon as you click on the logo or a link leading you to the website of the social network. In particular, your personal data might be processed if you are logged on to your social media account and post contents to those websites. In addition to that, data – for example your IP-address – might be processed even if you do not have a social media account.

We can neither control data collection and data processing nor do we have any knowledge about the amount of data collected, the purposes of processing, the expiration of the storage time limit nor about the deletion of the data collected.

8. Integrated YouTube or Vimeo videos

We use YouTube videos on some pages of our website. The operator of their plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page featuring a YouTube plugin, a connection to the You Tube’s server is established. In doing so, YouTube will be informed about which of our pages you have visited. If you are logged on to your YouTube account, YouTube will be able to associate your browsing behaviour with your identity. You can prevent this by logging out of your YouTube account.

As soon as a YouTube video is started cookies are set to collect data about usage patterns. Those who deactivated the storage of cookies for the Google-Ad programme will not have to fear such cookies when watching YouTube videos. YouTube, however, stores non-personal usage information to other cookies. If you wish to prevent it, you have to block the storage of cookies to your browser.
For more information on data protection with YouTube please refer to their privacy policy on https://policies.google.com/privacy?hl=en&gl=en

In addition, some pages of our website contain videos by the platform “Vimeo“ provided by Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. You can find their privacy policy on https://vimeo.com/privacy.

9. Rights of the persons concerned:

You have the following rights:

• Pursuant to article 15 GDPR, you have the right to demand information about the personal data we have processed. In particular, you may demand information about the purposes of data processing, the categories of personal data concerned, the categories of recipients to whom your data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification of errors, erasure, restriction of processing or objection to such processing, the existence of the right to lodge a complaint, the origin of your data if it was not collected by us but by a third party and, finally, about the existence of an automated decision-making process, including profiling and, if this is the case, meaningful information about their particular details.
• Pursuant to article 16 GDPR it is your right to demand without undue delay rectification of incorrect or completion of incomplete personal data which we have stored about you.
• Pursuant to article 17 GDPR, you may demand erasure of personal data concerning you, unless such processing is necessary for the exercise of the right of freedom of expression and information, for compliance with legal obligations, for reasons of public interests nor for the establishment, exercise or defence of legal claim.
• Pursuant to article 18, you have the right to obtain restriction of the processing of your personal data if you are contesting the accuracy of it, if processing your data is unlawful and you oppose their erasure, if we no longer need your data and you need them in order to establish, exercise or defend legal claims, or if you have already objected to your data being processed pursuant to article 21 GDPR.
• Pursuant to article 20 GDPR, it is your right to receive the personal data that you have provided us with, in a structured, currently used and machine-readable format or to have them transmitted to another controller.
• Pursuant to article 7, section 3 GDPR, it is your right to withdraw your consent at any time which we signify that we may no longer continue processing any data that was subject to your consent.
• Pursuant to article 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you may refer to the appropriate authority in the area of your usual residence, at your place of work, or in the area where our headquarters are situated.

10. Right to object

Pursuant to article 21 GDPR, you have the right to object to processing of your personal data if it is processed based on legitimate interests in accordance with article 6, paragraph 1 (f) GDPR on grounds relating to your particular situation or that your objection refers to direct marketing purposes. In that last case, you have a general right of objection which, even in the absence of any instruction regarding a specific situation, we would overturn.

If you wish to make use of your right to withdraw or object, an e-mail sent to the following address will suffice: datenschutzbeauftragter@eckpack.com.

11. Data security

Within our website, we use the widely spread, SSL (Secure Socket Layer), in conjunction with the highest encryption level supported by your browser. As a rule, this is a 256 Bit encryption. If your browser does not support 256 Bit encryption, we will use 128 Bit v3 technology instead. Whether or not an individual page of our internet presence is transmitted with encryption can be identified by the lock or key symbol showing in the lower status bar of your browser.

Apart from that, we make use of appropriate technical and organisational security measures in order to protect your data from accidental or deliberate manipulation, partial or complete loss, deterioration or unauthorised access of third parties. Our security measures will continue to be upgraded in line with the best technical development available.

12. Updating and amending this privacy policy

This privacy policy is currently valid and was last updated in May 2018.

Due to further development of our website and offers beyond or because of amended legal or official provisions it may become necessary to amend this privacy policy. The privacy policy in its currently valid version can be accessed and printed at any time on https://www.luckys4kids.com/en/privacy-policy/.