Privacy Policy

Privacy Policies: Social Networks

Privacy Policy: Website

I. Preliminary Remarks

This Privacy Policy is intended to fulfill the data protection requirements applicable to the operation and use of the website www.asphaltkind.de, in particular the information obligations under Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, April 2016 on the protection of natural persons with regard to the processing of personal data, on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).

This Privacy Policy applies only to the data processing activities associated with visiting the website and fulfilling contracts entered into through the website.

II. Data Controller / Data Protection Officer / Supervisory Authority

1. Data Controller

Cropfiber GmbH is the data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other data protection regulations. The contact information and details regarding the authorized representatives can be found in the legal notice section of this website.

2. Competent Data Protection Supervisory Authority

LDI North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de

III. General Information on Data Processing

1. Scope of the Processing of Personal Data

As a general rule, we collect and process our users’ personal data only to the extent necessary to provide a fully functional website and to deliver our services, and in the cases listed in this Privacy Policy. Any processing of our users’ personal data beyond this scope occurs only to the extent expressly permitted by law and/or where the respective user has given their consent—where required.

2. Legal Basis for the Processing of Personal Data

To the extent that we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of precontractual measures.

To the extent that the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.

In cases where the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) of the GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and fundamental freedoms of the data subject do not override the former interest, then Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

3. Data Deletion and Retention Period

The data subject’s personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Data may also be stored if this is provided for by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

IV. Visiting the Website

1. Description and Scope of Data Processing

When you visit and use our website www.asphaltkind.de, the software used on your device to view and use websites (web browser) automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

the IP address of the requesting computer,
the date and time of access,
the name and URL of the file accessed,
the website from which the access is made (referrer URL),
the web browser you use and, if applicable, the operating system of your device, as well as the name of the service provider that provides you with Internet access (Internet service provider).

2. Purpose of Data Processing

We process this data for the following purposes:

Ensuring a smooth connection to the website,
To ensure a comfortable user experience on our website,
Assessment of system security and stability.

3. Legal Basis for Data Processing

The legal basis for data processing is Article 6(1), first sentence, subparagraph (f) of the GDPR. Our legitimate interest is to provide you with an informative and functional website. Processing the data mentioned above is necessary to safeguard our interest. Of course, we also take your legitimate interests, fundamental rights, and fundamental freedoms into account. Therefore, under no circumstances do we use the collected data to draw conclusions about your identity.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this occurs when the respective session ends.

V. Using Our Reservation Service

1. Description and Scope of Data Processing

If you wish to make a non-binding reservation for a product we offer through our website, you must provide your personal information in order to finalize the reservation agreement and to process a subsequent sales contract or refund of the deposit. Required information for the reservation is marked separately; additional information is optional. We will generate an invoice based on the information you provide. To prevent unauthorized access by third parties to your personal data—particularly financial data—the reservation process and any subsequent order process are encrypted using TLS technology.

2. Purpose of Data Processing

This data is processed for the purpose of fulfilling the reservation agreement entered into through our website.

3. Legal Basis for Data Processing

The legal basis for data processing is Article6(1), first sentence, subparagraph (b) of the GDPR.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of a reservation, this refers either to the completion of the intended sales contract or the refund of the reservation.

VI. Use of Cookies

1. Description and Scope of Data Processing

We use cookies on our website. Cookies are small files that are automatically created in or by your web browser and stored on your device (laptop, tablet, smartphone, etc.). Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware. A cookie contains a unique string of characters that allows the browser to be uniquely identified when you visit the website again. Information related to the specific device you are using is stored in a cookie. However, this does not mean that we thereby gain direct knowledge of your identity.

We use cookies to make our website more user-friendly. For example, we use so-called session cookies to recognize that you have already visited certain pages on our website. These are automatically deleted when you leave our site. In addition, we also use temporary cookies to optimize the user experience; these are stored on your device for a specific, predetermined period of time. If you visit our site again to use our services, the system will automatically recognize that you have visited us before and recall the information and settings you previously entered, so you won’t have to re-enter them.

In addition, we use cookies to collect statistical data on the use of our website and to analyze this data in order to optimize our offerings for you. These cookies are automatically deleted after a specified period of time.

2. Legal Basis for Data Processing

The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) of the GDPR.

The legal basis for processing personal data using cookies for analytical purposes is Article 6(1)(a) of the GDPR, provided the user has given consent for this purpose.

3. Purpose of Data Processing

The purpose of using technically necessary cookies is to make it easier for users to navigate websites. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the web browser to be recognized even after the user navigates to another page.

We use analytics cookies to improve the quality of our website and its content. These cookies help us understand how the website is used, allowing us to continuously optimize our offerings.

These purposes also constitute our legitimate interest in processing personal data pursuant to Article 6(1)(f) of the GDPR.

4. Duration of Storage

Technically necessary cookies are automatically deleted when you leave our site. Cookies that are not technically necessary are automatically deleted after a predefined period of time. Cookies are stored on your device and transmitted from it to our site. However, you can configure your web browser so that no cookies are stored on your device or so that a notification always appears before a new cookie is created. However, completely disabling cookies may prevent you from using all the features of our website. You can view the cookies stored on your device and their expiration dates directly in the relevant settings section of your web browser. There, you can also delete cookies before their expiration dates.

VII. Contact Form

1. Description and Scope of Data Processing

You can contact us directly with questions or comments using the contact form provided on our website. You must provide a valid email address so that we can answer your question or respond to your message. In addition, you may voluntarily provide us with further personal information, such as your name or a phone number where we can reach you.

2. Legal Basis for Data Processing

The legal basis for processing the data is Article 6(1)(a) of the GDPR, provided the user has given consent.

3. Purpose of Data Processing

Personal data is processed for the purpose of contacting you based on the consent you have voluntarily provided.

4. Duration of Storage

The data you enter via the contact form will be automatically deleted four days after you submit it to us.

VIII. Newsletter

1. Description and Scope of Data Processing

On our website, you can subscribe to a free newsletter. When you sign up for the newsletter, the data you enter in the form is transmitted to us.

To receive the newsletter, simply provide an email address. You can unsubscribe at any time, for example, by clicking the link at the bottom of each newsletter. Alternatively, you can use the contact information provided in the legal notice on our website or the contact form on this website to request unsubscription.

2. Legal Basis for Data Processing

The legal basis for the processing of the data is the user’s consent (Art. 6(1)(a) of the GDPR).

3. Purpose of Data Processing

The user's email address is collected for the purpose of delivering the newsletter.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user's email address will therefore be stored for as long as the newsletter subscription remains active.

IX. Social Media Plugins

On our website, we use social plugins from the social networks Facebook, Instagram, YouTube, and Vimeo in accordance with Article 6(1), first sentence, letter f of the GDPR to raise awareness of our company. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the GDPR. The respective providers are responsible for ensuring that these plugins are operated in compliance with data protection regulations. We integrate these plugins using the so-called “two-click method” to provide the best possible protection for visitors to our website.

1. Facebook

Our website uses Facebook social media plugins to make your experience more personalized. For this purpose, we use the “LIKE” or “SHARE” button. These plugins are provided by Facebook. When you visit a page on our website that contains such a plugin, your web browser establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted directly from Facebook to your web browser and integrated into the website by your browser. By embedding the plugins, Facebook receives the information that your web browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your web browser to a Facebook server in the United States and stored there. If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins—for example, by clicking the “LIKE” or “SHARE” button—the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends. Facebook may use this information for advertising, market research, and to tailor the Facebook pages to your needs. To this end, Facebook creates usage, interest, and relationship profiles—for example, to analyze your use of our website in relation to the ads displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook. If you do not want Facebook to associate the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website. For information on the purpose and scope of data collection, as well as the further processing and use of the data by Facebook, and your rights and privacy settings in this regard, please refer to Facebook’s Privacy Policy (https://www.facebook.com/about/privacy/).

2. Instagram

Our website uses so-called social plugins (“plugins”) from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are identified by an Instagram logo, such as an “Instagram camera.” When you visit a page on our website that contains such a plugin, your web browser establishes a direct connection to Instagram’s servers. The content of the plugin is transmitted directly from Instagram to your web browser and integrated into the page. Through this integration, Instagram receives the information that your web browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your web browser to an Instagram server in the United States and stored there. If you are logged into Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins—for example, by clicking the “Instagram” button—this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts. If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. For more information, please see Instagram’s Privacy Policy (https://help.instagram.com/155833707900388).

3. YouTube

YouTube plugins are integrated into our website and can be played directly from our site. The operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page on our website that contains such a plugin, your web browser establishes a direct connection to YouTube’s servers. The plugin’s content is transmitted directly from YouTube to your web browser and integrated into the page. Through this integration, YouTube receives the information that your web browser has accessed the corresponding page of our website, even if you do not have a YouTube or Google account or are not currently logged in to YouTube or Google. This information (including your IP address) is transmitted directly from your web browser to a YouTube server in the United States and stored there. If you are logged in to YouTube or Google, YouTube can directly associate your visit to our website with your YouTube or Google account. If you do not want this association with your YouTube profile, you must log out before clicking the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or to tailor its website to user needs. Such analysis is carried out in particular (even for users who are not logged in) to deliver targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.

For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and has complied with the EU-U.S. Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

4. Google Maps

We use Google Maps on this website. This allows us to display interactive maps directly on the website and enables you to use the map feature conveniently.

When you visit the website, Google receives information indicating that you have accessed the corresponding page of our website. In addition, the data specified in Section IV. 1. of this policy is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not wish for your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or to tailor its website to your needs. Such analysis is carried out in particular (even for users who are not logged in) to deliver targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

For more information on the purpose and scope of data collection and its processing by the plugin provider, please refer to the provider’s privacy policy. There you will also find further information about your rights in this regard and settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and has certified its compliance with the EU-U.S. Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

5. Vimeo

Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages that includes a Vimeo plugin, a connection is established with Vimeo’s servers. In the process, the Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. This applies even if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to Vimeo’s servers in the United States.

When you are logged in to your Vimeo account, you allow Vimeo to associate your browsing activity directly with your personal profile. You can prevent this by logging out of your Vimeo account.

For more information on how user data is handled, please see Vimeo's Privacy Policy at: https://vimeo.com/privacy.

X. Web Analytics

1. Google Analytics

a. Description and Scope of Data Processing

We use the web analytics service Google Analytics, provided by Google Inc. (https://www.google.de/intl/de/about/), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”), on our website to tailor the design of our website to user needs and to continuously optimize it. The software uses so-called cookies on users’ computers (for more information on cookies, see Section IV) to enable an analysis of how users interact with our website. To this end, pseudonymized user profiles are created and cookies are used. This process collects information about your use of our website, such as

Browser type/version,
operating system used,
Referrer URL (the previously visited page),
Hostname of the accessing computer (IP address),
Time of the server request

transmitted to a Google server in the United States and stored there. The information is used to analyze website usage, to compile reports on website activity, and to provide other services related to website and Internet usage for the purposes of market research and to tailor the design of these web pages to user needs. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other data held by Google. The IP addresses are anonymized so that they cannot be linked to specific users (IP masking). You can prevent the installation of cookies by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on—particularly for browsers on mobile devices—you can also prevent data collection by Google Analytics by clicking this link: tools.google.com/dlpage/gaoptout?hl=de. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie applies only to this browser and only to our website, and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. For more information on data protection in connection with Google Analytics, please see the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=de).

b. Legal basis for data processing

The legal basis for the processing of the data is Article 6(1)(f) of the GDPR.

c. Purpose of Data Processing

Processing users’ personal data allows us to analyze their browsing behavior. By evaluating the data collected, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. These purposes also constitute our legitimate interest in processing the data pursuant to Article 6(1)(f) of the GDPR. By anonymizing the IP address, we adequately take into account users’ interest in the protection of their personal data.

d. Duration of storage

The data will be deleted as soon as it is no longer needed for our record-keeping purposes. In our case, this occurs after 26 months.

2. Google Ads Conversion Tracking

a. Description and Scope of Data Processing

We also use Google Conversion Tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GoogleAds”). In this process, GoogleAds sets a cookie (see Section IV) on your computer if you have reached our website via a Google ad. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages on the GoogleAds customer’s website and the cookie has not yet expired, GoogleAds and the customer can recognize that the user clicked on the ad and was redirected to that page.

Data protection authorities require the signing of a data processing agreement for the lawful use of Google Analytics. Google Ads provides a template for this at http://www.google.com/analytics/terms/de.pdf.

Each Google Ads customer receives a different cookie. As a result, cookies cannot be tracked across the websites of Google Ads customers. The information collected using the Google Ads cookie is used to generate Google Ads statistics for Google Ads customers who have opted in to conversion tracking. Google Ads customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in the tracking process, you can also refuse the placement of the cookie required for this purpose—for example, by using a browser setting that generally disables the automatic placement of cookies. You can also disable cookies for conversion tracking by turning off interest-based ads on Google and interest-based Google ads on the web (within the Google Display Network) in your browser by clicking the “Off” button at www.google.de/settings/ads. For more information about your settings options in this regard and data protection on Google Ads, please visit www.google.de/intl/de/policies/privacy/?fg=1.

b. Legal basis for data processing

The legal basis for the processing of the data is Article 6(1)(f) of the GDPR.

c. Purpose of Data Processing

Processing users' personal data allows us to collect statistical data on the use of our website and analyze it in order to optimize our website for you.

d. Duration of storage

The data will be deleted as soon as it is no longer needed for our record-keeping purposes. In our case, this occurs after 26 months.

3. WordPress Stats

a. Description and Scope of Data Processing

On our website, we use WordPress Stats from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA (hereinafter “WordPress Stats”). WordPress Stats uses cookies (see Section IV) that are stored on your computer and enable an analysis of website usage. The information generated by the cookies regarding the use of our website is stored on servers in the United States. Your IP address is anonymized after processing and before storage.

You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of our website may be limited.

You can object to the collection and use of your data in the future by clicking this link to set an opt-out cookie in your browser: https://www.quantcast.com/opt-out/.

If you delete the cookies on your computer, you will need to set the opt-out cookie again.

b. Legal basis for data processing

The legal basis for the processing of the data is Article 6(1)(f) of the GDPR.

c. Purpose of Data Processing

Processing users' personal data allows us to collect statistical data on the use of our website and analyze it in order to optimize our website for you.

d. Duration of storage

The data will be deleted as soon as it is no longer needed for our record-keeping purposes. In our case, this occurs after 26 months.

4. MailChimp

a. Description and Scope of Data Processing

We use MailChimp, provided by Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to send out newsletters.

MailChimp is a service that can be used, among other things, to organize and analyze the distribution of newsletters (see Section VIII). If you enter data for the purpose of subscribing to a newsletter (e.g., your email address), this data is stored on MailChimp’s servers in the United States.

MailChimp is certified under the “EU-U.S. Privacy Shield.” The “Privacy Shield” is an agreement between the European Union (EU) and the United States designed to ensure compliance with European data protection standards in the United States.

When you open an email sent via MailChimp, a file contained in the email (known as a web beacon) connects to MailChimp’s servers in the United States. This allows us to determine whether a newsletter message has been opened and, if so, which links were clicked. In addition, technical information is collected (e.g., time of access, IP address, browser type, and operating system). This information cannot be linked to the specific newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses may be used to better tailor future newsletters to the interests of the recipients.

If you do not want MailChimp to analyze your data, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on our website.

For more information on this, please see MailChimp's Privacy Policy at: https://mailchimp.com/legal/terms/.

b. Legal basis for data processing

The legal basis for the processing of the data is Article 6(1)(a) of the GDPR.

c. Purpose of Data Processing

Processing users' personal data allows us to analyze our newsletter campaigns using MailChimp.

d. Duration of storage

The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and MailChimp’s servers after you unsubscribe.

XI. Rights of Data Subjects

You have the right to:

pursuant to Article 15 of the GDPR, to request information about your personal data that we process. In particular, you may request information regarding the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;
in accordance with Article 16 of the GDPR, to request without delay the rectification of inaccurate personal data or the completion of your personal data stored by us;
to request, pursuant to Article 17 of the GDPR, the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims;
to request the restriction of the processing of your personal data pursuant to Article 18 of the GDPR, provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR;
In accordance with Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another controller;
In accordance with Article 7(3) of the GDPR, you may withdraw your consent at any time by notifying us. As a result, we may no longer continue processing the data based on that consent in the future, and
to file a complaint with a supervisory authority in accordance with Article 77 of the GDPR. As a general rule, you may contact the supervisory authority in your usual place of residence, your place of work, or where we are headquartered.
Right to Object

If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1), first sentence, letter f of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will honor without requiring you to specify a particular situation. If you wish to exercise your right to withdraw consent or to object, you may use the contact form on this website. Please enter the word “Objection” in the “Subject” field of the contact form.