Privacy
Data Protection Notices
As of May 25, 2018
The responsible party for this website, including online shop, discussion forum, blogs, wiki ("Website"), as well as newsletters, is Miniatur Wunderland Hamburg GmbH, Kehrwieder 2, Block D, 20457 Hamburg, Tel .: +49 (0) 40 - 3006800 ("we").
In these data protection notices, we inform you ("you", "user") about how we, as the responsible party, process personal data from you and what rights you have as a data subject.
The protection of your personal data during collection, processing, and use is an important concern for us. Your data is protected within the framework of legal regulations.
1. Collection and Processing of Data
Every access to our website and every retrieval of a file stored on the website is logged. Storage is for internal system-related and statistical purposes. Logged are: name of the retrieved file, date and time of access, amount of data transferred, message about successful access, web browser and requesting domain as well as the IP address, referrer, type of browser, and operating system.
Furthermore, you can create a user account in our online shop and must provide the following data for this: salutation, first name, last name, email address, and set a password. Providing your telephone number is optional but facilitates communication for inquiries. In addition, for example, when ordering via the online shop, the provision of further data such as billing and/or delivery address as well as payment information may be required.
You can create a user account in our discussion forum. To do this, you must provide the following data: username, email address, and set a password.
You can create a user account in our wiki. To do this, you must provide the following data: username, email address, and set a password.
If you wish to use the comment function in our affiliated blog systems, you can provide your email address and your name.
1.1. Cookies
2. Use and Disclosure of Personal Data
We may use your data and contact information for the promotion of our products and services if we believe that you are interested in our products and services. This is our legitimate interest in processing your data (Art. 6 (1) lit. f GDPR).
If you have provided us with personal data, we will continue to use it to respond to your inquiries, to process contracts concluded with you, for technical administration, and for spam prevention.
If you have subscribed to one of our email lists and have given us your consent, we will process your contact information to send you regular information about our products and services, including event announcements or themed newsletters you have subscribed to, by email ("Newsletter", Art. 6 (1) lit. a GDPR).
You can revoke your consent at any time for the future. A unsubscribe link is provided in each newsletter. You can also unsubscribe by sending an email to info@miniatur-wunderland.de from the email address you receive newsletters with. You have the right to revoke your consent to the storage and use of your personal data at any time with effect for the future.
If you prohibit us from using the above data, we can no longer guarantee full use of our website, including the online shop, discussion forum, and wiki.
2.1. Use of Google Analytics for Web Analysis
We use "Google Analytics" from the provider "Google" (Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043) based on our legitimate interest in an operation of our online offer tailored to the needs of our users within the meaning of Art. 6 (1) lit. f. GDPR).
Google uses cookies for this purpose. The information about the use of the online offer by users stored in the cookies is usually transferred to a Google server in the USA and stored there. We use Google Analytics with IP anonymization: The IP address of the users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
On our behalf, Google will use this information to evaluate the use of the website, to compile reports on website activities, and to provide us with further services related to website and internet usage. Pseudonymous user profiles can be created from the processed data.
The collected data is transferred to the USA under the EU-US Privacy Shield, thus ensuring compliance with European data protection law. The corresponding certificate can be obtained at the following address: (https://www.privacyshield.gov/... Users can prevent the storage of cookies by setting their browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Users can also prevent Google from collecting and processing data generated by the cookie and related to their use of the online offer by Google by downloading and installing the browser plugin available at the following address: http://tools.google.com/dlpage...
Further information on data processing by Google as well as setting and objection options can be found in Google's privacy policy (https://policies.google.com/privacy?hl=de). There, in the so-called "privacy center", you can also change settings to manage and protect your data.
2.2 Google Maps
We use "Google Maps" to visually display geographical information. When using "Google Maps" from the provider "Google" (Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043), data about the use of the Maps functions by visitors to the website is also collected, processed, and used – processing may take place in the USA. This collected data may include IP address and location data. Further information about data processing by Google can be found in the privacy policy (https://policies.google.com/privacy?hl=de). In the "privacy center", you can also change settings to manage and protect your data.
2.3 Google Fonts
We use external fonts, "Google Fonts" from the provider "Google" (Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043). These fonts are embedded by calling a server from Google in the USA. This also collects, processes, and uses data about the use of the fonts functions by visitors to the websites – processing may take place in the USA. This collected data may also include the IP address. Further information about data processing by Google can be found in Google's privacy policy (https://policies.google.com/privacy?hl=de). In the "privacy center", you can also change settings to manage and protect your data.
2.4. Use of SALESmanago for Web Analysis and Email Delivery
On our website, we use the service "Salesmanago" from BENHAUER Sp. z o.o. 21 Grzegórzecka St. 31-532 Krakow. Cookies are used for this purpose. These are small text files that are stored locally on the end device of the page visitor and thus enable recognition when the online presences are visited again. This recognition option is used to create – initially pseudonymized – user profiles and then to provide the respective user with personalized content. The user profiles created in this way are not merged with personal data about the person behind it without a separately granted, express consent. If such a merger takes place, it is based on a previously given declaration of consent by the affected user. As far as the data is used for the above-mentioned purposes, this is based exclusively on a declaration of consent according to § 12 (1) 3. Var, 13 (2) TMG/Art. 6 (1) lit. a, Art. 7 GDPR. In this case, the user profiles can be merged with the following, possibly personal data and used: first and last name, email address, telephone number, address, telephone number, date of birth (age), IP address, technical browser settings, times of visits to the Miniatur Wunderland online offers, use of the Miniatur Wunderland newsletter.
For the above purpose, the data is only used until consent is revoked. Any collection, processing or use of personal data in connection with Salesmanago takes place in the European Union. The user is not obliged to provide personal data in the context of the processes described above, and a refusal to do so has no negative consequences.
Furthermore, this service provider evaluates on a pseudonymous basis on our behalf whether you open the newsletter and which links you click. This information is provided to us by the service provider in an aggregated form so that we can determine whether the content of our newsletters is of interest to the recipients and whether we can improve the newsletter (Art. 6 (1) lit. f. GDPR).
You can object to the collection and storage of data at any time with effect for the future by sending an email to germany@salesmanago.com.
2.5 Use of Amazon Cloud S3
We use the following hosting services of Amazon Cloud S3 from the provider "Amazon" (Amazon Europe Core S.à r.l. (Société à responsabilité limitée), 5 Rue Plaetis, L-2338 Luxembourg): infrastructure services and storage space.
We, or our hosting provider Amazon, process communication data from visitors to this website based on our legitimate interest in a reliable and secure operation of this online offer in accordance with Art. 6 (1) lit. f GDPR and Art. 28 GDPR (conclusion of a data processing agreement).
2.6 Use of PAYONE as a Payment Service Provider
For payment processing, we use PAYONE (BS PAYONE GmbH, Lyoner Straße 9, D-60528 Frankfurt/Main) as an external payment service provider, which is certified according to the Payment Card Industry Data Security Standard (PCI DSS).
In the context of contract fulfillment, we use the payment service provider based on Art. 6 (1) lit. b. GDPR. Furthermore, we use PAYONE based on our legitimate interests pursuant to Art. 6 (1) lit. b. GDPR in order to offer our customers secure payment options.
For this purpose, BS PAYONE GmbH may need your name and address, account number and bank code or credit card number (including expiry date), invoice amount and currency, and transaction number. BS PAYONE GmbH may use this information for payment processing and may pass it on to us if necessary. PAYONE is obligated to treat the information in accordance with German data protection laws. The privacy policy of PAYONE GmbH can be viewed at https://www.payone.de/datenschutz/.
We have concluded a contract for order processing with PAYONE and fully comply with the strict requirements of the German data protection authorities when using PAYONE.
The terms and conditions and privacy policy of PAYONE apply to these payment transactions. We refer to these for further information and for the assertion of information, withdrawal, and other data subject rights.
2.7 Use of YouTube
For the integration of videos, among other things, we use the provider YouTube. YouTube is operated by YouTube LLC with its main office at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. with its seat at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
On some of our websites, we use plugins from the provider YouTube. When you visit internet pages of our internet presence that are provided with such a plugin, a connection to the YouTube servers is established and the plugin is displayed. This transmits to the YouTube server which of our internet pages you have visited. If you are logged into YouTube as a member, YouTube assigns this information to your personal user account. When using the plugin, such as clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. and deleting the corresponding cookies before using our internet site.
Further information on data processing and data protection by YouTube (Google) can be found at https://policies.google.com/privacy?hl=de.
3. Duration of Storage
The deletion of the personal data stored by us takes place when you revoke your consent to storage, when knowledge of it is no longer required to fulfill the purpose pursued with storage, or when storage is no longer permissible for other legal reasons.
4. Your Rights
In accordance with legal requirements, you have the following rights:
- Right to information about the personal data concerning you
- Right to rectification of personal data concerning you
- Right to erasure of personal data concerning you
- Right to restriction of processing
- Right to object to processing
- Right to data portability
Upon request, we will be happy to inform you about the personal data stored about you by us. Your trust is important to us. Therefore, we would like to be available to you at any time to answer any questions you may have regarding the processing of your personal data. If you have any questions that this privacy policy could not answer or if you would like more detailed information on a particular point, please feel free to contact the data protection officer at any time:
Email of the data protection officer: datenschutz@miniatur-wunderland.de.
You also have the right to lodge a complaint with the competent supervisory authority.
5. Hosting and Server Log Files
We use the following hosting services from the company "n@work" (n@work Internet Informationssysteme GmbH, Wandalenweg 5, 20097 Hamburg): infrastructure and platform services, storage space and database services, email dispatch, as well as the necessary security and service services associated with this. The basis for this is our legitimate interest in a secure and reliable operation of our online offer in accordance with Art. 6 (1) lit. f GDPR and Art. 28 GDPR.
We collect, based on our legitimate interests in a secure and trouble-free operation of our online offer within the meaning of Art. 6 (1) lit. f. GDPR, data about every access to our website and store it in so-called server log files. The access data includes your IP address, date and time of the request, time zone difference to GMT, the specific page visited, HTTP status code, transferred data volume, referrer (the referring website), type of browser, and operating system.
These log files are stored for a period of 30 days for reasons of legal and operational security and then deleted. Data that is required as evidence, for example in legal matters, will only be deleted after the matter has been finally clarified.
6. Security Notice:
We endeavor to store your personal data by taking all technical and organizational measures in such a way that it is not accessible to third parties. However, we cannot guarantee complete data security when communicating by email, so we recommend sending confidential information by post.
