Privacy Policy
1) Introduction and contact details of the controller
1.1 Thank you for visiting our website and for your interest in Alma Park. Below, we explain how we handle your personal data when you use our website. Personal data means any information that can be used to identify you personally.
1.2 The controller responsible for processing data on this website within the meaning of the General Data Protection Regulation (GDPR) is Alma-Park GmbH, Almastraße 39, 45886 Gelsenkirchen, Germany, tel.: +49 209 95709400, email: info@alma-park.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
1.3 The controller has appointed a data protection officer, who can be contacted at: Alma-Park GmbH, Almastraße 39, 45886 Gelsenkirchen, Germany, tel.: +49 209 95709400, email: info@alma-park.de.
2) Data collected when you visit our website
2.1 If you use our website solely to obtain information, without registering or otherwise providing us with information, we collect only the data that your browser sends to the website’s server (known as “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The page of our website you visit
- The date and time of access
- The amount of data sent, in bytes
- The source or referring page from which you reached the website
- The browser used
- The operating system used
- The IP address used, where applicable in anonymised form
Processing takes place under Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not shared or used for other purposes. However, we reserve the right to review the server log files subsequently if there is specific evidence of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content, such as orders or enquiries sent to the controller. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.
3) Hosting and content delivery network
We use a provider to host our website and display its content. The provider supplies these services itself or through selected subcontractors, exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have entered into a data processing agreement with the provider that safeguards our website visitors’ data and prohibits unauthorised disclosure to third parties.
4) Cookies
We use cookies to make your visit to our website more appealing and enable certain functions. Cookies are small text files stored on your device. Some are deleted automatically when you close your browser (“session cookies”); others remain on your device for longer and allow website settings to be saved (“persistent cookies”). For persistent cookies, you can find the storage period in your browser’s cookie settings.
Where individual cookies we use also process personal data, this processing takes place under Article 6(1)(b) GDPR to perform a contract, under Article 6(1)(a) GDPR where consent has been given, or under Article 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible website functionality and a user-friendly, effective browsing experience.
You can configure your browser to notify you when cookies are set and let you decide whether to accept them individually, or to reject cookies in particular cases or altogether.
Please note that rejecting cookies may restrict the functionality of our website.
5) Contacting us
5.1 Our own review reminder
Only with your express consent under Article 6(1)(a) GDPR do we use your email address to send a one-off reminder to review your order. You may withdraw your consent at any time by contacting the controller responsible for processing your data.
5.2 Trustpilot
We use the following provider’s services for review reminders: Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark.
Only with your express consent under Article 6(1)(a) GDPR do we send your email address and, where applicable, other customer data to the provider so that it can email you a review reminder.
You may withdraw your consent at any time with effect for the future by contacting us or the provider.
We have entered into a data processing agreement with the provider that safeguards our website visitors’ data and prohibits unauthorised disclosure to third parties.
5.3 Our own online appointment booking function
We process your personal data when you use the online appointment booking facility we provide. The relevant form or appointment enquiry shows which data we collect to arrange your appointment. Where particular data is necessary to make an online appointment, we identify it accordingly in the form or appointment enquiry. If the form includes a free-text field, you may use it to describe your request in more detail. You decide which additional information to enter. The data you provide is stored and used solely to arrange your appointment. Article 6(1)(b) GDPR is the legal basis for processing personal data necessary to perform a contract with you, including processing needed to take steps before entering into a contract. If you have consented to the processing of your data, processing takes place under Article 6(1)(a) GDPR. You may withdraw consent at any time by contacting the controller named at the beginning of this policy.
5.4 Personal data is collected when you contact us, for example through a contact form or by email. The relevant contact form shows which data is collected when you use it. This data is stored and used solely to respond to your request or contact you, and for the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request under Article 6(1)(f) GDPR. If you contact us with a view to entering into a contract, Article 6(1)(b) GDPR provides an additional legal basis. Your data will be deleted once your enquiry has been fully dealt with. This is the case when the circumstances indicate that the matter has been conclusively resolved, provided no statutory retention requirements prevent deletion.
6) Use of customer data for direct marketing
6.1 Subscribing to our email newsletter
When you subscribe to our email newsletter, we regularly send you information about our offers. The only information required to send the newsletter is your email address. Any other information is optional and is used to address you personally. We use a double opt-in process for newsletter subscriptions. This means that we will only send you an email newsletter once you have expressly confirmed your consent to receive it. We send you a confirmation email asking you to click the relevant link to confirm that you wish to receive the newsletter in future.
By activating the confirmation link, you consent to our use of your personal data under Article 6(1)(a) GDPR. When you subscribe, we store the IP address assigned by your internet service provider (ISP), along with the date and time of registration, so that we can investigate any subsequent misuse of your email address. The data collected when you subscribe is used solely for advertising through the newsletter. You can unsubscribe at any time using the link provided in the newsletter or by contacting the controller named at the beginning of this policy. Once you unsubscribe, your email address will be removed from our newsletter mailing list without delay, unless you have expressly consented to further use of your data or we reserve the right to use it further as permitted by law and as explained in this policy.
6.2 Sending email newsletters to existing customers
If you provided your email address when purchasing goods or services, we reserve the right to email you regular offers for similar goods or services from our range. Under section 7(3) of the German Act Against Unfair Competition (UWG), we do not need to obtain separate consent for this. The data is processed solely on the basis of our legitimate interest in personalised direct marketing under Article 6(1)(f) GDPR. If you objected to the use of your email address for this purpose from the outset, we will not send these emails.
You may object at any time, with effect for the future, to the use of your email address for this advertising purpose by contacting the controller named at the beginning of this policy. You will incur only transmission costs at the basic rates. Once we receive your objection, we will stop using your email address for advertising without delay.
6.3 Mailjet
Our email newsletters are sent through this provider: Mailjet GmbH, c/o Workrepublic, Berliner Allee 26, 40212 Düsseldorf, Germany.
On the basis of our legitimate interest in effective and user-friendly newsletter marketing under Article 6(1)(f) GDPR, we share the data you provide when subscribing with this provider so that it can send newsletters on our behalf.
Subject to your express consent under Article 6(1)(a) GDPR, the provider also statistically evaluates the success of newsletter campaigns using web beacons or tracking pixels in the emails sent. These can measure open rates and specific interactions with newsletter content. Device information, such as the time of access, IP address, browser type and operating system, is also collected and analysed, but is not combined with other datasets.
You may withdraw your consent to newsletter tracking at any time with effect for the future.
We have entered into a data processing agreement with the provider that protects our website visitors’ data and prohibits disclosure to third parties.
7) Web analytics services
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website. These are small pieces of text stored on your device to collect certain information. This information includes your IP address, although Google truncates its final digits to prevent it from being directly linked to an individual.
The information is transferred to Google’s servers and processed there. It may also be transferred to Google LLC in the USA.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide other services relating to website and internet use. The truncated IP address sent by your browser through Google Analytics is not combined with other Google data. Data collected through Google Analytics 4 is stored for two months and then deleted.
All processing described above, in particular the setting of cookies on your device, takes place only if you have given us your express consent under Article 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit. You may withdraw your consent at any time with effect for the future. To do so, please disable this service in the cookie consent tool provided on the website.
We have entered into a data processing agreement with Google that safeguards our website visitors’ data and prohibits unauthorised disclosure to third parties.
Further legal information about Google Analytics 4 is available at https://policies.google.com
Demographics
Google Analytics 4 uses a special demographics feature to generate statistics about website visitors’ age, gender and interests. It does so by analysing advertising and information from third parties. This allows target audiences for marketing activities to be identified. However, the data collected cannot be attributed to a particular person and is deleted after being stored for two months.
Google Signals
Google Signals may be used on this website as an extension of Google Analytics 4 to generate cross-device reports. If you have enabled personalised ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics under Article 6(1)(a) GDPR, analyse your usage across devices and create data models, including models of cross-device conversions. We receive only statistics from Google, not personal data. If you wish to stop cross-device analysis, you can disable personalised advertising in your Google account settings. Follow the instructions on this page: https://support.google.com
User IDs
The User IDs feature may be used on this website as an extension of Google Analytics 4. If you have consented to the use of Google Analytics 4 under Article 6(1)(a) GDPR, created an account on this website and signed into that account on different devices, your activities, including conversions, may be analysed across devices.
For data transfers to the USA, the provider participates in the EU–US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.
8) Retargeting, remarketing and conversion tracking
8.1 Meta Pixel
We use Meta Pixel within our online offering. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Meta”).
When a user clicks on an advertisement we have placed on Facebook and/or Instagram, Meta Pixel adds a parameter to the URL of the page we have linked. After the user is redirected, this URL parameter is stored in their browser by a cookie set by the linked page itself.
This allows Meta to identify visitors to our online offering as an audience for advertisements (“ads”). We therefore use the service to show our Facebook and/or Instagram ads only to users who have shown an interest in our online offering or who have particular characteristics, such as an interest in certain topics or products determined from the websites they have visited, which we communicate to Meta (“Custom Audiences”).
Meta Pixel also allows us to track whether users were redirected to our website after clicking an advertisement and what actions they take there (“conversion tracking”).
The data collected is anonymous to us, so we cannot use it to identify users. However, Meta stores and processes the data, which allows it to be linked to the relevant user profile and used by Meta for its own advertising purposes.
All processing described above, in particular the setting of cookies to read information on your device, takes place only if you have given us your express consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.
We have entered into a data processing agreement with the provider that safeguards our website visitors’ data and prohibits unauthorised disclosure to third parties.
The information generated by Meta is generally transferred to a Meta server and stored there. It may also be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider participates in the EU–US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.
8.2 Google Ads Remarketing
This website uses retargeting technology provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
For this purpose, Google sets a cookie in your device’s browser. Using a pseudonymous cookie ID and information about the pages you have visited, this cookie automatically enables interest-based advertising. Further data processing takes place only if you have agreed with Google that your internet and app browsing history may be linked to your Google account and that information from your Google account may be used to personalise the ads you see online. If, in this case, you are signed into Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. To form these audiences, Google temporarily links your personal data with Google Analytics data. Using Google Ads Remarketing may also involve transferring personal data to Google LLC’s servers in the USA.
All processing described above, in particular the setting of cookies to read information on your device, takes place only if you have given us your express consent under Article 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit.
You may withdraw your consent at any time with effect for the future. To do so, please disable this service in the cookie consent tool provided on the website.
For data transfers to the USA, the provider participates in the EU–US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.
Details of the processing carried out by Google and how Google handles data from websites are available here: https://policies.google.com
Google’s privacy policy is available here: https://www.google.de
8.3 Google Ads conversion tracking
This website uses the Google Ads online advertising programme and, within that programme, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our offers through advertisements on external websites, known as Google AdWords. Advertising campaign data allows us to assess how successful individual advertising measures are. Our aim is to show you advertising that interests you, make our website more relevant to you and ensure that advertising costs are calculated fairly.
A conversion tracking cookie is set when a user clicks an ad served by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If a user visits certain pages of this website before the cookie expires, Google and we can recognise that the user clicked the ad and was redirected to the page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across Google Ads customers’ websites. Information obtained through conversion cookies is used to create conversion statistics for Google Ads customers who have opted into conversion tracking. These customers learn the total number of users who clicked their ad and were redirected to a page containing a conversion tracking tag. They do not receive information that could identify users personally. Using Google Ads may also involve transferring personal data to Google LLC’s servers in the USA.
Details of the processing carried out by Google Ads conversion tracking and how Google handles data from websites are available here: https://policies.google.com
All processing described above, in particular the setting of cookies to read information on your device, takes place only if you have given us your express consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.
You can also permanently object to cookies being set by Google Ads conversion tracking by downloading and installing Google’s browser plug-in from the following link:
https://www.google.com
Please note that some website functions may be unavailable or limited if you disable cookies.
Google’s privacy policy is available here: https://www.google.de
For data transfers to the USA, the provider participates in the EU–US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.
9) Website features
9.1 YouTube
This website uses plug-ins to display and play videos from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transferred to Google LLC, USA.
When you visit a page of our website containing such a plug-in, your browser connects directly to the provider’s servers to load it. Certain information, including your IP address, is transmitted to the provider.
When you start playing an embedded video through the plug-in, the provider also uses cookies to collect information about user behaviour, create playback statistics and prevent misuse.
If you are signed into an account with the provider during your visit, your data is linked directly to your account when you click on a video. If you do not want it linked to your account, you must sign out before pressing play.
All processing described above, in particular the setting of cookies to read information on your device, takes place only if you have given us your express consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.
For data transfers to the USA, the provider participates in the EU–US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.
9.2 Trustpilot
Our website includes graphical elements from Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark, to display external customer reviews and/or an externally awarded quality seal.
When you visit a page of our website containing these graphical elements, your browser connects directly to the provider’s servers to load them correctly. Certain browser information, including your IP address, is transmitted to the provider.
Where this also involves processing personal data, processing takes place under Article 6(1)(f) GDPR on the basis of our legitimate interest in marketing our services effectively and presenting our website attractively.
9.3 Google reCAPTCHA
This website uses the CAPTCHA service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transferred to Google LLC, USA. The provider uses Google Fonts, which are fonts loaded from Google over the internet, to style the CAPTCHA window. This does not involve processing any information beyond the information mentioned above that is already transmitted to Google through reCAPTCHA’s functionality.
The service checks whether an entry is made by a natural person or abusively through automated machine processing, and blocks spam, DDoS attacks and similar automated malicious access. To establish that an action is performed by a human rather than an automated bot, the provider collects the IP address of the device used, identification data for the browser and operating system type, and the date and duration of the visit, and sends this information to its servers for analysis.
The legal basis is our legitimate interest in establishing individual accountability online and preventing misuse and spam under Article 6(1)(f) GDPR.
We have entered into a data processing agreement with the provider that safeguards our website visitors’ data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider participates in the EU–US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.
9.4 Google Customer Reviews, formerly the Google Trusted Stores programme
We work with Google through the Google Customer Reviews programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This programme allows us to obtain customer reviews from users of our website. After making a purchase on our website, you will be asked whether you wish to take part in an email survey from Google.
If you consent under Article 6(1)(a) GDPR, we send your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. Your review is then combined with our other reviews and displayed in our Google Customer Reviews badge and Merchant Center dashboard. Your review is also used for Google seller ratings. Using Google Customer Reviews may involve transferring personal data to Google LLC’s servers in the USA.
You may withdraw your consent at any time by contacting the controller responsible for processing your data or Google.
For data transfers to the USA, the provider participates in the EU–US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.
9.5 SmartSurvey
We use the following provider’s services to conduct surveys and provide online forms: SmartSurvey Ltd., Basepoint Business Centre, Oakfield Close, Tewkesbury Business Park, Tewkesbury, Gloucestershire, GL20 8SD, UK.
The provider enables us to design and evaluate surveys and online forms. In addition to the personal data you enter in the forms, information about your operating system, browser, the date and time of your visit, the referring URL and your IP address is collected, transmitted to the provider and stored on its servers.
Information you enter in the forms is stored with password protection to prevent third-party access and ensure that only we can evaluate the data for the purpose specified in the relevant form.
Article 6(1)(b) GDPR is the legal basis for processing personal data necessary to perform a contract with you, including processing needed to take steps before entering into a contract. If you have consented to the processing of your data, processing takes place under Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future.
We have entered into a data processing agreement with the provider that safeguards our website visitors’ data and prohibits unauthorised disclosure to third parties.
Where data is transferred to the provider’s location, an adequacy decision by the European Commission ensures an adequate level of data protection.
10) Tools and other services
Cookie consent tool
This website uses a cookie consent tool to obtain valid user consent for cookies and cookie-based applications that require consent. When users access the website, the tool appears as an interactive interface in which they can tick boxes to consent to particular cookies and/or cookie-based applications. The tool ensures that all cookies and services requiring consent are loaded only after the user has given the corresponding consent by ticking the relevant box. This ensures that such cookies are placed on the user’s device only where consent has been given.
The tool sets technically necessary cookies to save your cookie preferences. As a rule, no personal user data is processed for this purpose.
If, in an individual case, personal data such as an IP address is nevertheless processed to store, assign or record cookie settings, this takes place under Article 6(1)(f) GDPR. The basis is our legitimate interest in legally compliant, user-specific and user-friendly cookie consent management and, consequently, a legally compliant website.
Article 6(1)(c) GDPR provides a further legal basis for processing. As the controller, we are legally obliged to make the use of cookies that are not technically necessary dependent on the relevant user’s consent.
Where necessary, we have entered into a data processing agreement with the provider that safeguards our website visitors’ data and prohibits unauthorised disclosure to third parties.
Further information about the operator and settings of the cookie consent tool is available directly in the relevant interface on our website.
11) Your rights as a data subject
11.1 Applicable data protection law gives you the following rights against the controller in relation to the processing of your personal data, including rights to information and intervention. The conditions for exercising each right are set out in the legal provision cited:
- Right of access under Article 15 GDPR;
- Right to rectification under Article 16 GDPR;
- Right to erasure under Article 17 GDPR;
- Right to restriction of processing under Article 18 GDPR;
- Right to information under Article 19 GDPR;
- Right to data portability under Article 20 GDPR;
- Right to withdraw consent under Article 7(3) GDPR;
- Right to lodge a complaint under Article 77 GDPR.
11.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU MAY OBJECT TO THAT PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THAT PURPOSE. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
12) How long personal data is stored
The period for which personal data is stored depends on the applicable legal basis, the purpose of processing and, where relevant, the applicable statutory retention period, such as retention periods under commercial and tax law.
Where personal data is processed on the basis of express consent under Article 6(1)(a) GDPR, the data concerned is stored until you withdraw that consent.
Where statutory retention periods apply to data processed under Article 6(1)(b) GDPR in connection with contractual or similar obligations, that data is routinely deleted after the retention periods expire, provided it is no longer necessary to perform or enter into a contract and/or we no longer have a legitimate interest in retaining it.
Where personal data is processed under Article 6(1)(f) GDPR, it is stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves to establish, exercise or defend legal claims.
Where personal data is processed for direct marketing under Article 6(1)(f) GDPR, it is stored until you exercise your right to object under Article 21(2) GDPR.
Unless the other information in this policy concerning specific processing situations states otherwise, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
