Thanks for visiting our website. Data protection is an important concern for us, especially because our services are intended for use by minors. This privacy policy provides all information about how we process personal data and about the rights you have under the applicable laws. The information provided is only one (important) part when it comes to the protection of your kids’ personal data. It is as important that your kids do not use our service without parental permission and that your kids are aware of the privacy risks they are facing when using online-based services.
We reserve the right to adjust this privacy policy from time to time in order to ensure that it is in line with the current legal requirements, or in order to accommodate changes with respect to our data processing. This privacy policy is available on our website and may be printed at any time.
“Personal data” are any information relating to an identified or identifiable individual person, such as a person’s name, gender or contact information.
“Processing” of data means any operation or set of operations carried out with or without the aid of automated processes relating to personal data, such as collection, recording, organization, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or integration, limitation, erasure or destruction.
The legal basis for data protection can be found in particular in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (“General Data Protection Regulation”, GDPR), as well as in the Federal Data Protection Act (BDSG) and Telemedia Act (TMG).
We process personal data only to the extent necessary and for the purpose of providing functional and user-friendly services.
The website www.talesofus.com is provided by
Tales of Us gGmbH
Eva Vonk
Seestraße 35-37
14467 Potsdam
Email: info(at)talesofus.com
Tales of Us gGmbH is the Controller of your Personal Data. Controller means the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Scope and Location of Data ProcessingWe as well as our external service partners process your data for the purpose of providing the website and our services. The data categories affected are contact information, user behavior or other information that constitute personal data provided to us. If third party providers engaged by us process personal data outside the EU/EEA, data protection standards applicable in the EU are ensured. With respect to the United States the European Court of Justice has declared the former EU-US Privacy shield invalid. Therefore, the United States are considered an unsafe third country, in which public authorities may access your data without providing any legal remedies against this access. However, in order to guarantee an adequate level of data security comparable to the GDPR, the US providers we are using for our services have implemented appropriate safeguards, such as the EU Standard Contractual Clauses. In addition, we are in contact with our partners in order to exclude any existing risks to your personal data through appropriate technical or contractual measures.
We process your personal data as follows (or as otherwise described in this privacy policy or information provided to you):
| Data | Purpose | Legal Basis |
|---|---|---|
| contact data, contract data, usage data, other data provided | Communication in order to establish, implement and/or process a contractual relationship (also orally) with you | Art. 6 para. 1 s.1 lit. b. GDPR |
| contact data, contract data, other data provided | compliance with legal obligations, e.g. commercial, tax and social security detention obligations | Art. 6 para. 1 s.1 lit. c. GDPR |
| contact data, contract data, other data provided | enforcement, exercise and defense of legal claims with our legitimate interest that may be, for example, in the assertion of legal claims and defense in legal disputes | Art. 6 para. 1 s.1 lit. f. GDPR |
| contact data, usage data, other data provided | analysis of data with our legitimate interest of, for example, quality assurance or marketing | Art. 6 para. 1 s.1 lit. f. GDPR |
| contact data, usage data, other data provided | consent to data processing for the purpose named in this privacy policy or information provided to you | Art. 6 para. 1 s.1 lit. a. GDPR |
In the event you refrain from providing such data you may face legal disadvantages, for example, no answer to your email send to us.
Furthermore, we have implemented technical and organizational measures to ensure that the data protection regulations are observed both by us and by external service providers. The website is operated through a safe SSL-connection. If an SSL-connection is activated third parties are prevented from reading any data that are transferred by you to us.
The data are deleted if you withdraw your consent and the data are no longer necessary for the purpose of processing. We or the engaged third party services delete your data according to the following criteria: Time and completion of requests, lapse of legal retention periods, settings provided by third party providers etc. Furthermore, we store your data if we are obliged to do so in accordance with legal retention periods (e.g. German Commercial Code (HGB) or German Fiscal Code (AO)).
We (or the web space provider) collect data on each visit on our website in so-called server log files for statistical evaluations for the purpose of optimizing our services and in order to guarantee the stability and operational security of the website.
| Data | Purpose | Legal Basis |
|---|---|---|
| name of the website visited, date and time of the visit, data amount transferred, browser type and version, operating system, referrer URL (the page visited before), IP address and the requesting provider If a mobile device is being used we also process the following data: country code, language, name of device, name of operating system and version | optimizing our services and in order to guarantee the stability and operational security of the website compliance with legal obligations | Art. 6 para. 1 s.1 lit. f. GDPR based on our legitimate interest of quality assurance Art. 6 para. 1 s.1 lit. c. GDPR |
In order to use our services you have to register on our website. During the registration process we collect the following data:
| Data | Purpose | Legal Basis |
|---|---|---|
| name, email address, date and time of the registration, IP address | Concluding a contract regarding the use of our services | Art. 6 para. 1 s.1 lit. b. GDPR |
If you contact us, e.g. via email, your details in this request are processed by us as follows:
| Data | Purpose | Legal Basis |
|---|---|---|
| contact data, name, email address and other data provided | deal with your inquiry or to be able to contact you at a later time for follow up questions | Art. 6 para. 1 s.1 lit. a GDPR Art. 6 para. 1 s.1 lit. b GDPR |
With the email newsletter we inform you about our products and services. For the registration to the newsletter only the email address is needed. If you register for the newsletter, your email address will be transmitted to us (or to the engaged third party provider) and stored there. After registration, you receive an email to confirm the registration (“double opt-in”).
| Data | Purpose | Legal Basis |
|---|---|---|
| email address, IP address, the device name, the mail provider as well as (optional) the first and last name and the date of the registration | registration of the newsletter; this storage serves solely as proof in the event that a third party misuses an email address and registers for receiving the newsletter without the knowledge of the authorized party | Art. 6 para. 1 s.1 lit. a GDPR |
| email address, IP address, the device name, the mail provider as well as (optional) the first and last name and the date of the registration | Sending newsletters based on your consent | Art. 6 para. 1 s.1 lit. a GDPR |
| email address, IP address, the device name, the mail provider as well as the first and last name | Sending newsletters based on an existing relationship with you | Art. 6 para. 1 s.1 lit. b GDPR, Section 7 para. 3 German Unfair Competition Act (UWG) |
| IP address, browser type and operating system | analyze the behavior, such as whether users open the email sent or click certain links in emails (when the newsletter is opened, the contained information (so-called web-beacon) connects to the servers of Segment in order to analyze the behavior) for such data processing our legitimate interests (or the legitimate interests of third parties) in quality assurance or marketing apply | Art. 6 para. 1 s.1 lit. f GDPR |
You can withdraw their consent to the processing of Data for the purpose of sending the newsletter or evaluation of related data at any time. The withdrawal can take place over a link, which is contained in each newsletter, or by separate message to us. You will not incur any costs other than the transmission costs according to the basic tariffs.
Our website partly uses technical cookies for a user friendly and technical adequate presentation of the website. Cookies are small text files which are stored on your device and in your browser.
We also use session cookies. After the end of the session those cookies will be deleted automatically. The session cookies are used in order to associate successive page requests with the individual users, who at the same time access our website. Other cookies will be stored on your device until you delete them. These cookies enable us to recognize your browser during your next visit. We also use third party cookies for different purposes, including marketing. For details please refer to the following section and the list of third party cookies and providers used by us.
OPT-OUT: You can adjust your browser to notify you, before you receive a cookie or to decide to accept cookies on a case-by-case basis, to completely or partly exclude all incoming cookies and to activate the deletion of cookies automatically when the browser is closed. You may manage many online advertisement cookies provided by companies via the American web page
http://www.aboutads.info/choices/
or the web page of the European Union
http://www.youronlinechoices.com/uk/your-ad-choices/
. We would like to inform you that the usage and especially the convenience of usage without using any cookies may be limited.
In the event personal data are processed such processing is based on Art. 6 para. 1 s.1 lit. f. GDPR with our legitimate interest of the presentation of a user friendly and technical correct website, or, where required, your consent (legal basis Art. 6 para. 1 s.1 lit. a. GDPR).
Third Party Cookies and similar TechnologiesThis website uses third party cookies and similar technologies. Some of these third party cookies and similar technologies are necessary for our online service, some are needed for improving the functionality of our online services or used by us for marketing purposes. Details about the third party cookies, similar technologies as well as other third party services used on our website are set out here:
| Name, provider | Personal data affected | Purpose | Legal basis for data processing | More information / OPT-OUT | Data processing outside the EU/EEA and applicable safeguards |
|---|---|---|---|---|---|
| Google Analytics by Google (inter alia Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, Mountain View, CA, USA) | Cookies; Usage Data | Tracking and Analytics | Art. 6 para. 1 s.1 lit. f. GDPR with our legitimate interest of the presentation of a user friendly website, or, where required, your consent (legal basis Art. 6 para. 1 s.1 lit. a. GDPR). | OPT-OUT: http://tools.google.com/dlpage/gaoptout?hl=en Google privacy policy: https://www.google.com/policies/privacy/ | This integration of Google Analytics anonymizes your IP address. It works by shortening users’ IP addresses within member states of the EU/EEA. Google LLC processes data in the USA. |
We operate social media pages, whereas data are processed by us and the provider of the social media. This type of service allows interaction with social networks or other external platforms directly from our website. With social media pages we can communicate with and provide you with interesting information. We may receive further Data through comments, shared images, messages and reactions, which we then processes to answer or communicate with you. If you use
social media on several end devices, a cross-device analysis of the data can take place. Furthermore, the providers of the social media pages may also use cookies and tracking technologies to analyze and improve their services. The respective social media provider assumes the data protection obligations towards you, such as information on data processing, and is the contact person for the assertion of your rights. This due to the fact that such provider has direct access to the relevant information on the social media pages and the processing of data. However, you are also welcome to contact us if this should become necessary and we will then forward the request to the respective provider if necessary.
Data processing takes place with consent or for the purpose of answering user enquiries (Art. 6 para. 1 s.1 lit. a or b GDPR) or on the basis of legitimate interests in improving the services, advertising and marketing activities and presentation to the outside world (Art. 6 para. 1 s.1 lit. f GDPR). The interaction and information obtained through us are always subject to your privacy settings for each social network. This type of service might still collect traffic data for the pages where the service is installed, even when you do not use it.
It is recommended to log out from the respective services in order to make sure that the processed data on our website is not being connected back to your social media profile.
The social media providers may process your data outside the EU/EEA (mainly: USA).
You have the following rights:
the right to access,
the right to rectification or erasure,
the right to restriction of processing
the right to data portability,
the right to withdraw your consent.
To assert your rights set forth above you may contact us via email to
info@talesofus.com.
Finally, you have the right to lodge a complaint with the data protection authority.
January 2021
