Last revised and updated 04 October 2022
When you visit our website, various data, including personal data, is collected. We treat your personal data (definition according to Art. 4 (1) GDPR) confidentially and in accordance with the legal data protection regulations. This privacy policy explains what data we collect on our website, what we use it for, how and for what purpose. This is done primarily to provide you with convenient and secure access to our information and offers. Of course, we also pursue economic interests with our website, with which we want to strengthen both our image and our sales. For reasons of fairness and transparency, we are happy to inform you about this in detail below in accordance with the EU Data Protection Regulation:
CONTROLLER luca system
The controller for the processing of personal data collected directly by us is:
culture4life GmbH
Mörikestrasse 67
70199 Stuttgart
Germany
CONTACT DETAILS DATA PROTECTION OFFICER (DPO) OF THE CONTROLLER
You can reach our DPO at our Berlin location as follows:
culture4life GmbH
Data Protection Officer
Charlottenstraße 59
10117 Berlin
Germany
How do we collect your data?
Your data is collected automatically by the IT systems used when you visit the website. This is mainly technical data (e.g., internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website. Other data is collected when you provide it to us. This can be, for example, data that you enter in a contact form.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. We explain further details in the following sections.
Analysis tools and third-party tools
When visiting our website, your surfing behaviour may be statistically analysed. This is done with so-called analysis programs. The analysis of your surfing behaviour is anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data protection declaration.
You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.
TLS encryption
This site uses TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If TLS encryption is activated, the data you send to us cannot be read by third parties.
Some websites use so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.
You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be limited.
Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.
The provider of our website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. Log file data includes:
These log files are stored 24 hours from the time they were created, then archived for 30 days and then automatically deleted.
If you send us inquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us to process the request and in case of follow-up questions. We will not share this data without your consent.
The data entered in the contact form is processed on the basis of Article 6 (1) (b) GDPR (fulfilment of a contract to which the data subject is a party, or necessary to carry out pre-contractual measures taken at the request of the data subject).
The data you enter in the contact form will remain with us until you request us to delete it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions — in particular retention periods — remain unaffected.
If you would like to receive the newsletter offered on the website, we need an email address from you. Further data is not collected or is only collected on a voluntary basis. We use this data exclusively to send the requested information and do not pass it on to third parties.
The data entered in the newsletter subscription form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can withdraw your consent to the storage of the data, the email address and their use to send the newsletter at any time, for example via the “unsubscribe newsletter” link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and delete it after you unsubscribe from the newsletter. Data that we have stored for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.
Registration is carried out using the so-called “double opt-in” procedure. After signing up for the newsletter, you must confirm your subscription to the subscriber list in a second step. For this purpose, an e-mail message with a request for confirmation will be sent to the entered contact address. Registration for the newsletter is therefore only effective when it is confirmed.
With regard to the processing of personal data (e.g. name, photos, email addresses and IP addresses, etc.) initiated by your visit to these pages, we are responsible together with the operators of the social media platforms. In addition, the respective managers of the social media operators are listed below and the data protection declarations of the respective operators therefore also apply.
The operators of social media platforms also carry out data processing. The individual data processing operations and their scope differ depending on the operator of the respective social media platform and are not necessarily comprehensible to us. For details about the collection and storage of your personal data as well as the nature, scope and purpose of their use by the respective operator, please refer to the listed data protection declarations. We have only very limited influence on individual data processing operations. As far as we are able to influence data processing, we work to ensure that data protection is handled in accordance with data protection regulations within the scope of the options available to us. We can neither influence nor switch off certain statistics that operators of social media platforms compile and make available to us in anonymized form. However, we do not use any optional statistics.
Data processing is carried out in the interest of our public relations and communication. The legal basis for processing your personal data is our legitimate interest in accordance with Art. 6 (1) 1 f) GDPR to present our company.
You are not required to provide us with your personal data. However, this may be necessary for individual functionalities of our pages on social media platforms (e.g. the comment function is often only reserved for users registered on the respective platforms). These functionalities are not available to you or are only available to you to a limited extent if you do not provide us or the respective operator of the platform with your personal data.
The data you enter on our social media pages, such as comments, videos, photos, likes, public messages, etc. is published by the respective social media platform. If you use our social media pages to get in touch with us, the personal data you provide us with will only be processed for the purpose of getting in touch with you (Art. 6 (1) 1 a) and b) GDPR). If messages or comments are addressed to us as a question or a request consisting of the exercise of your rights, we may forward this request internally for processing (only providing absolutely necessary data). Alternatively, you can contact our data protection officer directly (the contact details can be found at the top of this statement). We do not process your data for purposes other than those mentioned above and delete the personal data after the end of the processing process. We only store the content if this is necessary, for example to comply with legal requirements or because it is clearly discriminatory, insulting or obscene content. The legal basis for this is Art. 6 (1) 1 c) GDPR.
Facebook Ireland Limited (hereinafter referred to as “Facebook Ireland”)
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
DSE: https://www.facebook.com/policy.php
Facebook Ireland Limited (hereinafter referred to as “Facebook Ireland”)
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
DSE: https://www.facebook.com/help/instagram/519522125107875
Twitter, Inc.
Currently: Privacy Policy Inquiry
1355 Market Street, Suite 900
San Francisco, CA 94103, United States
DSE: https://twitter.com/de/privacy
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
ireland
DSE: https://policies.google.com/privacy?hl=de
This website includes videos from the YouTube website. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To ensure data protection on this website, we only use YouTube together with a so-called “pre-click” solution. A plugin prevents data from being transferred to YouTube the first time you enter the page.
Activating the video via the button provided constitutes consent within the meaning of Art. 6 para. 1 lit. a DSGVO. You can withdraw this consent at any time with effect for the future.
In addition, we use YouTube in extended data protection mode. This mode means that only minimal data is sent to YouTube to connect when you start the video. If you are logged into your YouTube account, you enable YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
After the start of a YouTube video, further data processing processes may be triggered over which we have no influence. For more information about YouTube's privacy policy, see their privacy policy at: https://policies.google.com/privacy?hl=de.
On our website, we also show you content from the video platform Vimeo. Vimeo is operated by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you visit one of our pages designed with a Vimeo video, a plugin prevents an immediate connection to the Vimeo servers. This means that the so-called “iframes” for Vimeo are blocked and provided with an automatic button. The connection to Vimeo is only made possible with your consent by clicking on this button. The server is then informed of your IP address and which of our pages you have visited. Vimeo sets cookies and works with advertising networks. You can find more about this here under “Cookies” and in the Vimeo privacy policy (link below).
If you are logged into your Vimeo account, you enable Vimeo to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.
Vimeo can only be used with your consent per click (Art. 6 para. 1 lit. a GDPR).
For more information on how to handle user data, please see Vimeo's privacy policy at: https://vimeo.com/privacy
The analytics tools used on our platform enable us to monitor web traffic, analyze usage, and track user interactions.
Google Analytics 4: With this tool from Google, we collect data to understand how our website is being used. We use it to create reports and share the information we collect with other Google services. Google can also use this data to better tailor advertising on its network to you.
Google Analytics 4 is an evolution of the Google Analytics service that collects usage statistics while protecting privacy by anonymizing IP addresses shortly after they have been collected.
Personal data: usage information, cookies.
Google Analytics Privacy Policy
Opt Out
Google Ads conversion tracking: Google Ads helps us determine how users interact with our website after they've seen or clicked on a Google ad.
Personal data: usage information, cookies.
Facebook Ads conversion tracking (Facebook pixel): This Facebook service links data from the meta advertising network with actions that take place on our website. It tracks which conversions come from ads on Facebook, Instagram, and the Audience Network.
Personal data: usage information, cookies.
Meta Events Manager: By integrating the meta pixel, we gain valuable insights into user behavior on our website.
Personal data: usage information, cookies.
TikTok conversion tracking: With TikTok conversion tracking, we analyze how our website is being used in order to be able to better reach users based on their previous visits.
Personal data: cookies.
Matomo
This website uses the open source software Matomo to measure reach. Matomo is configured so that no cookies are stored on the computer. Instead, we use various device data to analyze the behavior of our visitors for the purpose of optimizing our website. The legal basis for processing is our legitimate interest as a website operator in accordance with Art. 6 para. 1 lit. f DSGVO. The balancing of legitimate interests was documented.
The following data is collected: IP address = anonymized, pseudonymized visitor ID, location, date, time, browser, operating system/software, screen resolution, device type, device model, device brand, visits, converted destinations to understand usage and navigation on our pages. The IP address is anonymized directly when collected. As a result of the measures mentioned above, we are unable to draw any conclusions about the identity of individual visitors. We chose a German hosting provider to provide Matomo and secured it with an order processing contract. The storage period is: 14 months.
You can also object to Matomo's range measurement right here:
When deactivated, an opt-out cookie is stored in your browser, which prevents Matomo from saving usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit our site again. Matomo adheres to the “do-not-track” function of your browser.
For more information, see: Matomo — Privacy User Guide
Hubspot
We have integrated Hubspot on the website. This allows us to better scale what's happening on the website and optimize your user experience.
For more information about the associated cookie policies, please here.
Our website uses tag management services to centrally organize tags or scripts that are necessary for the site to function. As a result, user data can flow through these services and possibly be stored.
Google Tag Manager: This service from Google helps us manage website tags efficiently.
Personal data: cookies.
These services allow us and our partners to personalize and optimize advertising content based on your previous use of our website.
This includes collecting usage data and using cookies.
Google Ads similar audiences: This service from Google uses data to present targeted advertising to users who show similar online behavior to those on the remarketing list. Users can adjust their settings for advertising cookies Adjust here.
Personal data: usage information, cookies.
Google Ads Remarketing: This service from Google links activity on our website to the Google advertising network. Users can use their data for remarketing by Google Reject here.
Personal data: usage information, cookies.
Facebook Lookalike Audience: This Facebook service uses data to present personalized advertising to users who show similar online behavior to existing customer groups. Users can use their data for personalized advertising through Facebook Reject here.
Personal data: usage information, cookies.
Facebook Custom Audience: With this Facebook service, we can link our website activity to the Facebook advertising network to enable targeted advertising. Users can personalize ads through Facebook Reject here.
Personal data: email, cookies.
TikTok remarketing: With this service from TikTok, we can once again reach users who have visited our website via the TikTok advertising network.
Personal data: cookies.
With regard to the processing of your personal data, you have the following rights provided for in the GDPR, which you can assert against us for all processing:
To exercise these rights against us, you can also contact our data protection officer.
Notwithstanding the above rights, you have the right to lodge a complaint with a supervisory authority for data protection and freedom of information, such as the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information:
State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, P.O. Box 10 29 32, 70025 Stuttgart.
Phone: 0711/615541-0
Fax: 0711/615541-15
VERSION
This is the current version of our privacy policy (valid as of 04.10.2022). We reserve the right to adapt this privacy policy (in particular in the event of changes in the legal situation or changes to our services). For this reason, it is recommended that you check this privacy statement at regular intervals.