PRIVACY
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection declaration.
I. General Information
This notice applies to your use of the Wynken Blynken & Nod website (hereinafter also referred to as "website", "us" or "we"). Privacy notices are required when personal data is processed. Personal data are in particular name, address, telephone number, e-mail address, social media identification (profile name), bank details, date of birth, IP address, cookie identifiers and geotags.
Important abbreviations:
DSGVO: Basic data protection regulation (VO EU 2016/679)
UWG: Law against unfair competition
EEA: European Economic Area
Art.: Article
Par.: Paragraph
lit.: letter
II. legal basis, purposes and duration of data processing
The following legal bases (Arabic numerals) and the purposes of data processing based on them (bullet points) are to be understood as general information and examples. The presentation of other legal bases, in particular Art. 6 para. 1 lit. c, lit. d and lit. e DSGVO, has been deliberately omitted, as these are not relevant to the processing of personal data when using this website.
Under the last heading, "Processing operations", this data protection notice contains specific information on the processing operations, e.g. with regard to the use of cookies, web analysis or the use of social (media) plug-ins. These concrete purposes of data processing can be assigned to the legal bases listed here.
1. data processing with consent, Art. 6 para. 1 lit. a and others Art. 9 para. 2 lit. a DSGVO
Data processing is always permitted if consent is given.
- Registration as customer
- Contact form / Contact by e-mail
- Comments on blog posts
- Social(Media) PlugIns
- Use of functional cookies (e.g. web analysis)
- Use of marketing cookies
- Dispatch of newsletters, legal basis in case of a contract for goods or services: Section 7(3) UWG
2. data processing for the performance of a contract, Art. 6(1)(b) DSGVO
Data processing for the fulfilment of a contract is permitted, e.g. processing of name and address when ordering goods or services. Similarly, processing for the purpose of carrying out pre-contractual measures is permitted at the request of the data subject, e.g. in the case of booking requests via a contact form.
- Registration as a customer, if for the fulfilment of a contract
- Contact by e-mail, directed to the conclusion of a contract
- other processing operations where necessary for the conclusion or performance of a contract
3. data processing to safeguard legitimate interests, Art. 6 para. 1 lit. f DSGVO
Data processing is also permitted if our legitimate interests or the interests of third parties must be safeguarded and these interests outweigh your interest in protecting your data. Your interest in the protection of the data outweighs, for example, the impairment of your basic rights or freedoms.
- Storage of IP addresses, completely or in the last two bytes anonymised or pseudonymised
- Storage of further data in .log files
- Contact by e-mail, in case of legitimate interests
- Use of support systems, e.g. live chat
- Use of technically required cookies
- Use of functional cookies (e.g. web analysis)
- Use of 3rd party cookies
4. duration of data processing
Personal data will be deleted,
- if you assert your right of cancellation against us and there is no legal basis for further processing
- if the data are no longer necessary for the purpose for which they were collected
- for complete IP addresses in .log files: at the latest seven days after their collection; in case of processing beyond this, the IP addresses are anonymised or pseudonymised in the last two bytes (e.g. 192.168.xxx.xxx)
- for "session cookies": after the end of the respective session on our website or if you delete them
- for "Permanent Cookies": when you delete them or when the cookies are no longer needed or when their programmed duration has expired (usually after two years)
III. responsible body
Contact details of the body responsible for processing personal data:
Wynken Blynken & Nod GmbH & Co. KG
Vorwerkstraße 12a
20357 Hamburg
Phone: +49 (0) 40 / 88 19 081 - 00
registered at the local court Hamburg under: HRA 118861
Seat of the company: Hamburg
Personally liable partner: Wynken Blynken & Nod Verwaltungsgesellschaft mbH
registered at the local court Hamburg under: HRB 136421
represented by the managing directors Matthias Erb, Tim Keller, Jens Theil
Phone: +49 (0) 40. 88 19 081 - 00
Fax: +49 (0) 40. 63 73 01 51
You can reach the data protection officer responsible for us at
Mr Philipp Herold
My data protection officer.com
Hafenstraße 1a
23568 Lübeck
Phone: +49 451 - 16 08 52 -21
e-mail: privacy@wynken.com
V. Rights of data subjects
As a data subject, you can assert the following rights against the responsible body. Please use the contact details given under the heading "Responsible body".
1. right to confirmation and information, Art. 15 DSGVO
You may request confirmation that personal data concerning you is being processed. If confirmation is available, you can then request information about:
- the purposes of the data processing
- the categories of personal data
- the recipients or categories of recipients of the data
- the planned duration of storage or criteria for determining the duration
- the existence of the rights of correction or deletion
- the existence of the right to restrict processing
- the existence of the right of appeal
- the existence of the right of appeal to a supervisory authority
- all available information about the origin of the data, if the data was not collected directly from you
- the existence of automated decision-making (including "profiling") pursuant to Art. 22 para. 1 and para. 4 DPA
- the existence of a data transfer to a third country and/or to an international organisation
- in the case of data transfer to a third country and/or to an international organisation: appropriate guarantees in accordance with Art. 46 DSGVO
2. right of correction and/or completion, Art. 16 DSGVO
If the personal data concerning you is incorrect or incomplete, you may request that it be corrected and/or completed. The responsible party must then carry out the correction/completion without delay and will inform you accordingly.
3. right of deletion ("right to be forgotten"), Art. 17 DSGVO
In the following cases, you can request immediate deletion of the personal data concerning you:
- the data is no longer necessary for the purposes for which it was collected or otherwise processed
- any consent given is revoked and there is no other legal basis for further processing
- Opposition under Art. 21(1) DSGVO without prior grounds for processing
- Opposition under Art. 21(2) DSGVO
- the data were processed unlawfully
- the responsible body is required by Union law or by the law of one of the Member States to delete
- there is a data collection and processing according to Art. 8 para. 1 DSGVO
- The right to erasure is excluded if the processing of the data is necessary:
- to exercise the right to freedom of expression and information
- to comply with a legal obligation under Union law or the law of one of the Member States
- for the performance of a task in the public interest
- for the exercise of official authority, insofar as this has been transferred to the responsible body
- for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO
- if erasure of the data is likely to make it impossible or seriously harm the achievement of the objectives of subsequent processing operations (Art. 89 (1) DGSVO):
- archiving purposes in the public interest
- scientific or historical research purposes
- statistical purposes
- to assert, exercise or defend legal claims
If there is an obligation to delete the data, the following applies:
The responsible body will inform you about the deletion of the data. If the personal data concerning you have been made public by the responsible body, all responsible bodies that process these data will also be informed of your request for deletion. This then also applies to the deletion of all links to the data and / or copies and / or replications of the data.
4. right to restrict processing, Art. 18 DSGVO
Under the following conditions, the processing of personal data concerning you must be temporarily or permanently restricted at your request:
- you have disputed the accuracy of the data, Art. 16 DPA, and this is verified by the responsible body
- the processing is unlawful, but you wish the processing to be restricted instead of deleted
- the data are no longer necessary for the purposes of the processing, but you need the data in order to assert, exercise or defend legal claims
- You have lodged an objection to the processing, Art. 21 para. 1 DPA, but it is not yet clear whether this is justified
You will be notified by the data controller after the processing has been restricted and before the restriction is lifted. After the restriction, your data may continue to be stored, but only be processed in the following cases:
- you have given your consent
- legal claims should be asserted, exercised or defended
- for the protection of another person
- there is an important public interest of the EU and/or a Member State
5. right to information, Art. 19 DSGVO
If you have asserted your rights under Art. 16 to 18 DSGVO (correction, deletion, restriction of processing), the responsible body is obliged to inform all recipients to whom the data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
6. right to data transferability, Art. 20 DSGVO
The data controller must provide you with the personal data concerning you in a structured, common and machine-readable format. The unimpeded transfer of this data to another responsible body must be guaranteed, provided that
- the processing is based on consent (Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a FADP) and / or
- the processing is carried out for the performance of a contract or pre-contractual measures (Art. 6 para. 1 lit. b DSGVO) and
- the processing is carried out using automated procedures
The freedoms and rights of other persons must not be affected. The right to data portability shall not apply to data processing operations
- for the performance of a task in the public interest
- in the exercise of official authority, insofar as it has been delegated to the responsible body
They may request that the data be transferred directly to another responsible party, insofar as this is technically feasible.
———————————————————————————————————————————————————————————————
7. right of objection, Art. 21 DSGVO
You may object at any time if the data processing
- is based on Art. 6 para. 1 lit. f DGSVO or
- is for direct marketing purposes, or
- is carried out for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 DSGVO
The same applies to corresponding profiling. The objection must be justified. It is sufficient if you state as a reason that you no longer wish the data to be processed. After the objection, the data will not be further processed.
The responsible body may continue to process the data despite your objection if
- there are compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or
- the processing serves to assert, exercise or defend legal claims, or
- in the case of processing pursuant to Art. 89 para. 1 DPA: the processing is necessary for the performance of a task carried out in the public interest
In connection with the use of information society services, you may also exercise your objection by means of automated procedures using technical specifications.
———————————————————————————————————————————————————————————————
8. right of withdrawal, Art. 7 para. 3 DSGVO
You can revoke your data protection consent for the future at any time. This does not affect the legality of the processing that has taken place on the basis of the consent until the revocation.
9. automated decision in individual cases including profiling, Art. 22 DSGVO
You have the right to opt out of a decision based on automated processing if that decision has legal effect vis-à-vis you or significantly affects you in a similar way. The same applies to profiling.
This right is not subject to any restrictions if the decision is based on special categories of personal data in accordance with Art. 9 para. 1 DPA, e.g. data concerning political opinions, religious or philosophical beliefs, genetic or biometric data and health data or data concerning sexual life or sexual orientation.
However, if you have consented to automated processing and neither Union law nor the law of a Member State prohibits such consent (Art. 9 para. 2 lit. a DSGVO) or if processing is necessary for reasons of substantial public interest (Art. 9 para. 2 lit. g DSGVO), your right may be excluded as described below, even if special categories of personal data are processed.
This right does not apply if the decision based on automated processing
- is necessary for the conclusion or performance of a contract between you and the responsible party or
- is authorised by Union legislation and/or by one of the Member States, and
- your rights, freedoms and legitimate interests are adequately protected by this legislation; or
- has been made with your express consent
In the first and last case of an exclusion of your right as described above, the responsible body will take appropriate measures to protect your other rights, freedoms and legitimate interests. This includes in particular the right to intervene in the decision by the responsible body, to present your own standpoint and to challenge the decision.
10. right to appeal to a supervisory authority, Art. 77 DSGVO
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you is in breach of the DSGVO. You will be informed by the supervisory authority with which the complaint was lodged of the status and the results of the complaint, including the possible remedies (in particular Art. 78 DSGVO). Please contact the supervisory authority for more detailed information on its responsibilities:
The Federal Commissioner for Data Protection and Freedom of Information
Hussars Street 30
53117 Bonn
Phone: 0228/997799-0
Fax: 0228/997799-550
e-mail: poststelle@bfdi.bund.de
VI. processing operations
The following processing operations (purposes of data processing) can be assigned to the legal bases under point II. of this data protection notice. Any data transfer to third countries (countries outside the EU / EEA) is reported in detail for each processing operation.
1. cookies
This website uses so-called "cookies", i.e. text files which are stored on your hardware (e.g. computer) and/or in your browser and enable an analysis of your usage behaviour. You can make settings in your browser that prevent the setting of cookies, with the exception of those technically required for the operation of the website, either individually or in total. Information on how to change these settings can be found under the following links (help menus):
Internet Explorer: https://windows.microsoft.com/...
Firefox: https://support.mozilla.org/de...
Chrome: https://support.google.com/chr...
Safari: https://support.apple.com/kb/p...
With the exception of the technically required ones, you can prevent all cookies from being set. If no cookies are set, it is possible that individual or several functions of this website cannot be used.
There are essentially the following types of cookies:
- .http cookies
- .html cookies
- Pixel cookies
With regard to their "lifetime" or "validity", cookies are distinguished as follows:
- Session cookies" are session-based cookies that expire after each "session" on our website
- "Permanent cookies" are cookies that are permanently stored on your hardware / in your browser and allow an analysis of your surfing behavior on several websites
The distinction between cookie users is as follows:
- 1st Party Cookies are cookies that we use ourselves
- 3rd party cookies are cookies that external providers (e.g. Google, Facebook or shop systems) use
A distinction regarding the functionality of the cookies is also possible:
- technically required cookies enable the use of the basic functional range of this website
- Functional cookies serve the use of individual services that are not absolutely necessary for the operation of the website (e.g. web analysis)
- Marketing cookies are required for advertising
Google Maps
Google Maps is a geographical information service for the display of interactive maps. Your IP address is processed. If you are logged in to your Google Account, the processed data will be assigned to your account. If you do not wish this, you must log out before using the sub-pages on which Google Maps is integrated. Google uses the processed data to create user profiles, for example to better display personalised advertising or to conduct market research. You can completely prevent the integration of Google Maps: deactivate the JavaScript application in your browser. Further information about Google Maps is available here: https://www.google.com/intl/de...
2. web analysis
We conduct web analysis on our website, which serves to evaluate the use of the website, e.g. with regard to the number of visits, length of stay on our pages or other web activities.
Matomo
For web analysis we use a service installed on our own server from Matomo, a service of Innocraft Ltd, 150 Willis St., 6011 Wellington, New Zealand. A transfer of data to Matomo therefore does not take place. Matomo uses cookies (https://matomo.org/faq/general/faq_146), for example to read the screen resolution and to generate photos and graphics optimised for each device. The IP address is anonymized or pseudonymized in the last two bytes (e.g. 192.168.xxx.xxx). No further information is stored in these cookies. Information on data protection at Matomo can be found here: https://matomo.org/privacy
6. .log files
We collect and process the following information automatically transmitted by your browser in so-called .log files:
Browser type/browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
A personal reference cannot be established on the basis of this data. Nor is this data merged with other data, nor are user profiles created.
7. social media
We use [links to various social media portals] [and so-called] [social (media) plug-ins] on this website.
Separate data protection and liability regulations apply to the social networks and in general to third-party websites. The storage and use of personal data by the respective site operator, which are generated when using the services of the site operator, may exceed the scope of this data protection declaration.
If you are a member of a social network and do not wish the social network to collect and use data about you via our website, you must log out of the social network before you visit this website.
[Social(Media)PlugIns allow you to set bookmarks on these pages and share these bookmarks with other social network participants. You can recognize the plug-ins by the logos that can be viewed on the social network websites.
By integrating the plug-ins, the social network receives the information that you have visited the website. If you are logged in to the respective social network, it can assign the visit to your user account. If you interact with the plug-ins, for example, by clicking the "Like" button, using the "Share", Google+ "+1" or Twitter "Tweet This" functions or making a comment, the corresponding information is transmitted directly from your browser to the respective social network and stored there. If you are not a member of a social network, it is still possible that your IP address is transmitted and stored.
The Social(Media)PlugIns are deactivated in their default setting on our website. This is to ensure the greatest possible protection of your personal data. Only when you activate the Social(Media) PlugIns for individual visits to this website or permanently and thus prevent the transfer of personal data to the respective service provider, data will be transmitted, the nature and extent of which we have no influence over.
Your browser then establishes a direct connection with the servers of this network. The content of the PlugIn will be transmitted directly to your browser by the operators of the respective social network and integrated into the website by the browser].
More detailed information about the providers follows:
Operator: Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA
website: https://www.facebook.com
Plugins: https://developers.facebook.co...
Data scope: https://www.facebook.com/help/...
Privacy policy: https://www.facebook.com/about...
Operator: Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA
Website: https://www.instagram.com
Privacy policy: https://help.instagram.com/519...
: https://privacy.xing.com/de/da...
youtube
Operator: YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA
Website: https://www.youtube.com
Data protection: https://policies.google.com/pr...
tumblr
Operator: Tumblr Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA
website: https://www.tumblr.com
Privacy policy: https://www.tumblr.com/privacy...
Spotify
Operator: Spotify AB, Regeringsgatan 19, SE - 111 53 Stockholm
Website: https://www.spotify.com
Data protection: https://www.spotify.com/de/privacy/
Google Fonts
Type and scope of processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, you connect to Google Ireland Limited's servers and your IP address is transmitted.
Purpose and legal basis
The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision as well as the optimization of our online offer according to Art. 6 para. 1 lit. f. DSGVO.
Storage period
The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.
Translated with www.DeepL.com/Translator (free version)