Privacy Policy
With this notice we inform you about the processing of your personal data by Theo Klein GmbH and the rights you are entitled to under the new data protection law.
1. Name and contact details of the data protection officer and the data protection officer
Responsible for data protection within the meaning of the GDPR is
Theo Klein GmbH
Claus-Dieter Klein
Martin Klein
Dominik Klein
Burgstrasse 14
76857 Ramberg
Germany
Email: info@klein-toys.com
Phone: 0049 (0)6345/4080
(hereinafter also “We”)
You can contact our data protection officer at the following email address
or at the above postal address with the addition “for the attention of the Data Protection Officer”.
2. Purposes and legal basis(s) for the processing of personal data
a) When you visit the website
When you visit our websites www.klein-toys.de / www.klein-toys.com / www.my-klein-toys.de / www.my-klein-toys.com / www.princess-coralie.de and their language versions, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatically deleted:
– IP address of the requesting computer
– Date and time of access
– Name and URL of the retrieved file
– Website from which access is made (referrer URL)
– browser used and, if applicable, the operating system of your computer as well as the name of your access provider
We process the above data for the following purposes:
– Ensuring a smooth connection to the website
– Ensuring comfortable use of our website
– Ensuring system security and stability
The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest arises from the purposes for data collection listed above. Under no circumstances will we use the collected data to draw conclusions about you personally.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's IP address is deleted or anonymized after use. Anonymization involves changing the IP address in such a way that individual details about personal or factual circumstances can no longer be assigned to a specific or identifiable natural person, or can only be assigned with a disproportionate amount of time, money, and effort. Anonymized data therefore no longer permits personal reference. Furthermore, we use cookies and analysis services when you visit our website. Further information can be found in sections 3 and 4 of this privacy policy.
b) When using our contact form
If you have any questions, you can contact us using a form provided on our website. You must provide a valid email address and your message so that we can respond to your inquiry promptly and appropriately. Your first name, last name, street, zip code, city, country, and subject are optional.
In addition to the data mentioned above, the date and time of sending the contact form as well as the data collected each time the website is used in accordance with section 2 lit. a) are collected and stored.
The processing of personal data from the contact form serves us solely to process the contact.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of your voluntarily given consent, which you grant by submitting the contact form. In the event that a contract is subsequently concluded with us, Art. 6 (1) (b) GDPR applies as the legal basis.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no reasons for further storage under the GDPR. For personal data from the contact form input mask, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
For contacting us to conclude a contract, deletion will take place in accordance with the applicable agreements and regulations.
c) Participation in competitions
We offer competitions based on the respective terms and conditions of participation. As part of these competitions, we process the personal data requested or generated by us. To participate, participants must confirm their participation and, if applicable, answer a prize question or complete a task. The method used for this is stated in the respective competition description. To participate and to process the competition, in particular for the distribution of prizes, it is imperative that each participant provides us with their full name, date of birth (if applicable), email address or address of the social media platform they use (if applicable), and a postal address for sending the prize. Depending on the respective competition, participation in a competition may not be possible without this information.
When you participate, we process this personal data only for the purpose of conducting and processing the competition and only to the extent that the data is provided to us as part of your participation. Providing your date of birth is necessary so that we can verify your age and ensure participation in accordance with the terms and conditions.
The legal basis for data processing is Art. 6 (1) sentence 1 lit. b), lit. c) GDPR, as data processing is necessary to execute the competition contract and is carried out due to our statutory retention periods.
In individual cases, the legal basis may also be the granting of consent in accordance with Art. 6 (1) Sentence 1 (a) GDPR. If consent is required, we will duly obtain it from the participant in each individual case in accordance with Art. 7 GDPR. This would be the case if we use personal data for purposes other than the mere processing and implementation of the competition, e.g., for sending advertising.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no grounds for further storage under the GDPR. This is the case when the competition has been fully completed or the data is no longer subject to any further statutory retention obligations that we are required to comply with.
d) Use of the webshop
Our website features a webshop (small shop). This webshop is only advertised on our website. It is operated by e-nnovations GmbH, represented by Jan-Erik Westerwelle, Lilienthalstraße 21, 32052 Herford, Germany. You can access this webshop via a hyperlink. If you follow this hyperlink to the webshop, you will leave our website. Please note that we cannot accept any responsibility or liability for third-party content or data protection policies. The respective data protection policies of the third-party website or webshop apply.
3. Cookies
We use cookies on our website. These are small text files that can be stored on your device and read when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware.
The cookie stores information related to the specific device used. Cookies may contain data that enables us to recognize the device used. However, this does not mean that we directly know your identity.
The purpose of cookies is to make using our services more pleasant for you, to enable and optimize user navigation, and to customize the presentation of our website. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website.
The data processed by cookies are necessary for the purposes mentioned to protect our legitimate interests according to Art. 6 (1) (f) GDPR.
As soon as you close your browser, the session cookies are deleted.
Most browsers automatically accept cookies. However, you can configure your browser to prevent cookies from being stored on your computer or to always prompt you before a new cookie is created. To do this, you must adjust your browser's privacy settings (Settings menu -> Security and/or Privacy -> Cookies or Content Settings or Website Data). However, completely disabling cookies may prevent you from using all the features of our website.
4. Analysis tools
Tracking tools
We use the tracking tool listed below on this website if you have given us your consent in accordance with Art. 6 (1) (a) GDPR. With the tracking measures we use, we want to ensure a needs-based design and the continuous optimization of our website. We also use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you. These interests are considered legitimate within the meaning of the aforementioned provision.
® Google Analytics
For the purpose of tailoring our website to meet your needs and continuously optimising it, we use Google Analytics, a web analysis service provided by Google Inc. ( https://www.google.de/intl/de/about/ ) (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as "Google"). In this context, anonymised user profiles are created and cookies (see section 3) are used. The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (previously visited page),
The host name of the accessing computer (IP address) and the time of the server request are transmitted to a Google server in the USA and stored there.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. We have also extended Google Analytics on this website with the code "anonymizeip." This ensures that your IP address is masked, so all data is collected anonymously.
The information is used on our behalf to evaluate the use of the website, to compile reports on website activities and to provide other services related to website and internet usage for the purposes of market research and the needs-based design of these websites.
The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 (1) (a) GDPR. The recipient of the collected data is Google. The personal data is transferred to the USA under the EU-US Privacy Shield on the basis of the adequacy decision of the European Commission. You can access the certificate at " https://www.privacyshield.gov/EU-US-Framework ". The data we send and linked to cookies, user identification (e.g., user ID) or web ID is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.
You may refuse the use of cookies by selecting the appropriate settings on your browser (see section “Cookies”). However, please note that if you do this, you may not be able to use the full functionality of this website.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing a browser add-on (“ https://tools.google.com/dlpage/gaoptout?hl=de ”).
Further information on data protection in connection with Google Analytics can be found here:
– Google Analytics Help (“ https://support.google.com/analytics/answer/6004245?hl=de ”)
– Terms of Use (“ https://www.google.com/analytics/terms/de.html ”)
– Overview of data protection (“ https://www.google.com/intl/de/analytics/learn/privacy.html ”)
– Privacy Policy (“ https://www.google.com/intl/de/policies/privacy ”)
5. Sharing of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only transfer your personal data to third parties if you have effectively consented to this in accordance with Art. 6 (1) (a) GDPR, or if we are authorized or obligated to do so by law and/or official or court orders. This may include, in particular, the following:
– if you have given effective consent in accordance with Art. 6 (1) (a) GDPR
– if the transfer is necessary to protect our legitimate interests or those of a third party pursuant to Art. 6 (1) (f) GDPR and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data. This is the case, for example, if we must disclose data to lawyers or authorities to defend or assert legal claims.
– in the event that there is a statutory or legal obligation to pass on data pursuant to Art. 6 (1) (c) GDPR, as well as this is legally permissible and necessary for the processing of contractual relationships with you pursuant to Art. 6 (1) (b) GDPR.
7. Hyperlinks
Our website may contain hyperlinks to third-party websites (e.g., web shops). When you activate these hyperlinks, you will be redirected from our website directly to the other provider's website. You will recognize this, among other things, by the change in the URL. We cannot accept any responsibility for the confidential treatment of your data on these third-party websites, as we have no influence on these companies' compliance with data protection regulations. Please inform yourself about how these companies handle your personal data directly on these websites.
8. Use of social media plugins
The Facebook icon is located on our website. This is merely a hyperlink. If you use this hyperlink, the usual data will be transmitted to Facebook when you visit a website, as with any hyperlink. In this case, the provisions under Section 7 regarding hyperlinks apply.
9. Rights of data subjects
Under the statutory conditions, you are entitled to the rights described below, as applicable:
– Rights under Art. 15 et seq. GDPR
You have the right to information according to Art. 15 GDPR. Under certain conditions, you have the right to rectification according to Art. 16 GDPR, the right to restriction of processing according to Art. 18 GDPR and the right to erasure (“right to be forgotten”) according to Art. 17 GDPR. In addition, you have the right to receive the data you have provided in a structured, common and machine-readable format (right to data portability) according to Art. 20 GDPR, provided that the processing is carried out using automated procedures and is based on consent according to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR or on a contract according to Art. 6 (1) (b) GDPR.
– Revocation of consent according to Art. 7 (3) GDPR
If the processing of personal data is based on consent, you can revoke your consent at any time with future effect in accordance with Art. 7 (3) GDPR. Please note that revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the time of revocation. The addresses for revoking your consent can be found under Section 1.
– Right of objection according to Art. 21 GDPR
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you can object to this at any time with future effect, provided there are reasons for doing so arising from your particular situation. The addresses for objecting can be found under Section 1.
– Right to complain
You have the right to lodge a complaint with a data protection supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence, your place of work, or our company headquarters. Of course, you can also contact us directly with any questions, criticisms, or complaints.
Data security
We use the widely used SSL protocol to encrypt communication between your device and our web server during your website visit. You can tell whether a specific page of our website is being transmitted using encryption by the closed key or lock symbol next to your browser's URL entry bar.
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
Currentness and changes to this privacy policy
This privacy policy is currently valid and dated May 2018. Due to the ongoing development of our website and the offers available thereon, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed at any time on the website at " https://www.my-klein-toys.de/index.php/de/datenschutz ."
Photo credits
The photos used on this page come from the following sources:
– Theo Klein Toys GmbH
- Adobe Stock