Privacy Policy
We appreciate your visit to the website https://msa-matratzen.de. This privacy statement informs users about the nature, scope and purposes of the processing of personal data within this website and the websites, mobile applications and external online presences, such as social media profiles, that are linked to it.
1. Responsible party
Moderne SchlafArt GmbH
Stresemannstraße 23
10963 Berlin
Tel: +49 174 2124 385
E-mail: info@msa-matratzen.de
2. Processing of personal data
2.1 What is personal data?
Personal data is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person, Article 4(1) DSGVO.
2.2 Legal basis
Moderne SchlafArt GmbH (hereinafter „MSA“) processes personal data in compliance with the relevant data protection regulations (in particular DSGVO and BDSG) and on the basis of a legal permission.
MSA processes personal data only
- with the consent of the user pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO,
- for the fulfillment of a contract or for the execution of pre-contractual measures according to Art. 6 para. 1 p. 1 lit. b DSGVO,
- for the fulfillment of legal obligations according to Art. 6 para. 1 p. 1 lit. c DSGVO or
- for the protection of legitimate interests of MSA according to Art. 6 para. 1 p. 1 lit. f DSGVO.
2.3 Passing on of data
If MSA passes on personal data to other persons or companies in the course of processing, this shall be done in compliance with the legal requirements and after conclusion of corresponding contracts or agreements.
2.4 Data processing in third countries
If a transfer of personal data to a so-called „third country“ (i.e. to a state outside the European Union or the European Economic Area) is absolutely necessary, this will only take place if there is a recognized level of data erforderlich ist, erfolgt dies nur, wenn ein anerkanntes Datenschutzniveau besteht internal data protection regulations within the meaning of Art. 44 – 49 DSGVO.
2.5 Storage period
Unless otherwise stated in this Privacy Policy, personal data will be deleted as soon as the purpose of processing ceases to apply or the consent on which the processing is based has been revoked. If legal retention obligations or limitation periods prevent deletion, the personal data concerned may only be processed for commercial or tax law purposes or for the purpose of asserting, exercising or defending legal claims.
2.6 Data subject rights
The user has the right to:
- A confirmation as to whether his or her own personal data is being processed and to information about this data, as well as to further information and a copy of this data, Art. 15 DSGVO.
- Completion of own personal data or correction of incorrect own personal data, Art. 16 DSGVO.
- Deletion of own personal data if there is a reason for deletion mentioned therein, Art. 17 DSGVO.
- Restriction of the processing of own personal data, if there is a reason mentioned there, Art. 18 DSGVO
- Transfer of own personal data to another controller, Art. 20 DSGVO.
- Complaint to a supervisory authority if he/she considers that the processing of personal data concerning him/her violates applicable laws, Art. 77 DSGVO
Competent supervisory authority:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin
Phone: 030/138 89–0
Telefax: 030/215 50 50
E-Mail: mailbox@datenschutz-berlin.de
https://www.datenschutz-berlin.de
The user has the right to revoke given consent with effect for the future at any time, Art. 7 (3) DSGVO.
The user has the right to object at any time to the future processing of data relating to him in accordance with Art. 21 DSGVO. The objection may be made in particular against processing for direct marketing purposes.
3. Processing of personal data on this website
As a rule, users can use the website without providing any personal information. Excepted from this is information that MSA automatically collects each time the website is accessed (so-called server log files). This includes:
- File name of the requested file
- End device used (mobile device or PC/laptop)
- Browser type / version
- JavaScript activation
- Cookie activation
- Referring URL
- IP address
- Duration of access
- Number of pages accessed
- Click path
The legal basis for the processing of personal data in this context is Art. 6 (1) p. 1 lit. f DSGVO, as the possibility of technical administration and ensuring the security of the website is in the legitimate interest of MSA. The purposes of the processing are to enable the use of the website (connection establishment), system security, technical administration of the network infrastructure and optimization of the website. The stored data will be deleted after seven days, unless there is a justified suspicion of unlawful use based on concrete evidence, which makes further examination necessary. MSA is not able to identify users as data subjects on the basis of the stored information.
For individual functionalities of the website, it may exceptionally be necessary to provide personal information. Further information on this can be found under the item „Individual functionalities“.
4. Cookies
The website uses cookies. Cookies are small files that are stored on the user’s terminal device (PC, smartphone or similar). If the use of cookies results in the processing of personal data, this is based on Art. 6 para. 1 p. 1 lit. f DSGVO. The processing serves the legitimate interest of MSA to make the website more user-friendly, effective and secure.
Users can influence the use of cookies. Most browsers have an option that restricts or completely prevents the storage of cookies. In addition, users can delete cookies at any time in the security settings of their browser. Further information on this can be found at the Federal Office for Information Security.
4.1 Necessary cookies
These cookies are mandatory for websites and their functions to work properly. Without these cookies, certain functionalities cannot be provided.
4.2. Preference cookies
These cookies make it possible to improve the comfort and performance of websites and to provide various functions. For example, language preferences can be stored in preference cookies.
4.3 Statistics cookies
These cookies collect information about how users use websites. For example, statistics cookies help identify particularly popular areas of the website.
4.4 Marketing cookies
Marketing cookies are used to track visits and individual activities on websites. They are used to serve targeted advertising and ads.
4.5 Non-classified cookies
Unclassified cookies are cookies that are currently classified by us.
Notwendig (3)
Notwendige Cookies helfen dabei, eine Webseite nutzbar zu machen, indem sie Grundfunktionen wie Seitennavigation und Zugriff auf sichere Bereiche der Webseite ermöglichen. Die Webseite kann ohne diese Cookies nicht richtig funktionieren.
|
Name |
Anbieter |
Zweck |
Maximale Speicherdauer |
Typ |
|---|---|---|---|---|
|
CONSENT [x2] |
Wird verwendet, um festzustellen, ob der Besucher die Marketingkategorie im Cookie-Banner akzeptiert hat. Dieser Cookie ist notwendig für die Einhaltung der DSGVO der Webseite. |
2 Years |
HTTP-Cookie | |
|
CookieConsent |
Speichert den Zustimmungsstatus des Benutzers für Cookies auf der aktuellen Domäne. |
1 Jahr |
HTTP-Cookie |
Statistiken (3)
Statistik-Cookies helfen Webseiten-Besitzern zu verstehen, wie Besucher mit Webseiten interagieren, indem Informationen anonym gesammelt und gemeldet werden.
|
Name |
Anbieter |
Zweck |
Maximale Speicherdauer |
Typ |
|---|---|---|---|---|
|
_ga |
Registriert eine eindeutige ID, die verwendet wird, um statistische Daten dazu, wie der Besucher die Website nutzt, zu generieren. |
400 Tage |
HTTP-Cookie | |
|
_gat |
Wird von Google Analytics verwendet, um die Anforderungsrate einzuschränken |
Sitzung |
HTTP-Cookie | |
|
_gat |
Registriert eine eindeutige ID, die verwendet wird, um statistische Daten dazu, wie der Besucher die Website nutzt, zu generieren. |
Sitzung |
HTTP-Cookie |
Marketing (12)
Marketing-Cookies werden verwendet, um Besuchern auf Webseiten zu folgen. Die Absicht ist, Anzeigen zu zeigen, die relevant und ansprechend für den einzelnen Benutzer sind und daher wertvoller für Publisher und werbetreibende Drittparteien sind.
|
Name |
Anbieter |
Zweck |
Maximale Speicherdauer |
Typ |
|---|---|---|---|---|
|
ads/ga-audiences |
Used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor’s online behaviour across websites. |
Sitzung |
Pixel-Tracker | |
|
DEVICE_INFO |
Wird verwendet, um die Interaktion der Nutzer mit eingebetteten Inhalten zu verfolgen. |
180 Tage |
HTTP-Cookie | |
|
VISITOR_INFO1_LIVE |
Versucht, die Benutzerbandbreite auf Seiten mit integrierten YouTube-Videos zu schätzen. |
180 Tage |
HTTP-Cookie | |
|
YSC |
Registriert eine eindeutige ID, um Statistiken der Videos von YouTube, die der Benutzer gesehen hat, zu behalten. |
Sitzung |
HTTP-Cookie | |
|
ytidb::LAST_RESULT_ENTRY_KEY |
Speichert die Benutzereinstellungen beim Abruf eines auf anderen Webseiten integrierten Youtube-Videos |
Beständig |
HTML Local Storage | |
|
yt-remote-cast-available |
Speichert die Benutzereinstellungen beim Abruf eines auf anderen Webseiten integrierten Youtube-Videos |
Sitzung |
HTML Local Storage | |
|
yt-remote-cast-installed |
Speichert die Benutzereinstellungen beim Abruf eines auf anderen Webseiten integrierten Youtube-Videosn |
Sitzung |
HTML Local Storage | |
|
yt-remote-connected-devices |
Speichert die Benutzereinstellungen beim Abruf eines auf anderen Webseiten integrierten Youtube-Videos |
Beständig |
HTML Local Storage | |
|
yt-remote-device-id |
Speichert die Benutzereinstellungen beim Abruf eines auf anderen Webseiten integrierten Youtube-Videos |
Beständig |
HTML Local Storage | |
|
yt-remote-fast-check-period |
Speichert die Benutzereinstellungen beim Abruf eines auf anderen Webseiten integrierten Youtube-Videos |
Sitzung |
HTML Local Storage | |
|
yt-remote-session-app |
Speichert die Benutzereinstellungen beim Abruf eines auf anderen Webseiten integrierten Youtube-Videos |
Sitzung |
HTML Local Storage | |
|
yt-remote-session-name |
Speichert die Benutzereinstellungen beim Abruf eines auf anderen Webseiten integrierten Youtube-Videos |
Sitzung |
HTML Local Storage |
The data processed by necessary cookies are required for the aforementioned purposes to protect the legitimate interests of MSA pursuant to Art. 6 (1) p. 1 lit. f DSGVO.
The processing of personal data through statistics and marketing cookies may only take place for the aforementioned purposes with the consent of the users according to Art. 6 para. 1 p. 1 lit. a DSGVO.
5. Individual Functionalities
The functionalities used on the website are operated on the basis of the user’s consent according to Art. 6 para. 1 p. 1 lit. a DSGVO or on the basis of the legitimate interest of MSA according to Art. 6 para. 1 p.1 lit. f DSGVO. The legitimate interest of the MSA is to ensure the appropriate design and continuous optimization of the website. The purpose of the data processing and categories of personal data are described in the context of the respective functionality.
5.1. Google Analytics
The website uses Google Analytics, a reach analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as „Google“).
Google Analytics uses cookies that allow an analysis of the use of the website by the user. In this process, personal data (IP address), among other things, is transmitted to Google servers outside the EU and stored there. To ensure the protection of users‘ personal data, MSA has activated the so-called „IP anonymization“ for the website. This means that the IP addresses of users within the EU are only processed by Google in shortened form – i.e. anonymized. Only in exceptional cases is the full IP address transmitted to Google servers outside the EU and shortened there. The transmitted IP address is not merged with other data from Google.
On behalf of the MSA, Google will use the data collected for the purpose of evaluating the activities of users of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the MSA.
Users can prevent the collection and use of their data by Google by downloading and installing the following browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en.
Google’s privacy policy is available at https://policies.google.com/privacy.
5.2. Google Tag Manager
The website uses the Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as „Google“).
With the Google Tag Manager, it is possible to manage website tags via an interface. The Google Tag Manager itself is a cookie-less domain and does not collect any personal data. It provides for the triggering of other tags, which in turn may collect personal data.
The Google Tag Manager itself does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
Google’s privacy policy is available at https://policies.google.com/privacy.
5.3. Google Ad Manager / DoubleClick
The website uses the Google Ad Manager (formerly DoubleClick) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as „Google“) to place ads in the Google advertising network (e.g. in search results, in videos, on web pages, etc.).
The use of Google Ad Manager allows ads to be served in real time based on presumed user interests. This allows MSA to target ads to present users only with ads that potentially match their interests.
Users can prevent the collection and processing of data related by Google by deactivating the personalized advertising on the web and in Google Search link https://www.google.com/settings/ads/onweb/ .
Google’s privacy policy is available at https://policies.google.com/privacy.
5.4. Google Drive
The website uses Google Drive of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as „Google“) to make MSA’s catalog and inventory list available for download.
Google’s privacy policy is available at https://policies.google.com/privacy.
5.5. Google WebFonts
The website uses Google WebFonts of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as „Google“). Google WebFonts are transferred to the browser’s cache when the website is called up so that they can be used for display. If the browser does not support Google WebFonts or prevents access, the text is displayed in a standard font. Data transmitted in connection with calling up the website is sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.
Users can set their browser so that the fonts are not loaded from Google servers (for example, by installing NoScript or Ghostery for Firefox).
Google’s privacy policy is available at https://policies.google.com/privacy.
5.6. Facebook Fanpage
MSA operates its own Facebook fan page at https://www.facebook.com/msa.matratzen/. Facebook is a social media network of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter referred to as „Facebook“).
The processing of personal data on the Facebook Fanpage by MSA is based on Art. 6 para. 1 lit. f DSGVO, as it is in the legitimate interest of MSA to offer customers, interested parties and users up-to-date information and interaction opportunities.
When calling up the Facebook fan page, the general terms and conditions as well as the data policy of Facebook apply, over which MSA has no influence. In particular, data may also be processed by Facebook outside the European Union. The data policy of Facebook is available at https://de-de.facebook.com/policy.php .
When visiting the Facebook Fanpage, statistical information about the use of the Facebook Fanpage is created with the help of cookies. If the user is logged into his Facebook account when calling up the Facebook fan page, the statistics are collected across devices. Further information is available at https://de-de.facebook.com/help/pages/insights .
MSA has no influence on the generation and presentation of these so-called „page insights“. The data provided by Facebook includes: Total number of page views, „Like“ views, page activity, post interactions, reach, video views, post reach, comments, shared content, responses, proportion of men and women, origin related to country and city, language, views and clicks in the store, clicks on route planners, clicks on telephone numbers. More information is available at here .
MSA is aware that Facebook processes data at least for the purposes of advertising, the creation of user profiles and market research.
If users do not wish the described data processing, the connection between the Facebook account of the user and the Facebook fan page can be disconnected via the function „I no longer like this page“ or „Do not subscribe to this page“.
Objections (so-called opt-outs) to Facebook can be set at here .
Facebook’s data protection officer can be reached at here .
5.7. YouTube
The website uses YouTube, an internet video portal of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as „Google“).
YouTube enables video publishers to post video clips free of charge and other users to view, rate and comment on these video clips free of charge. Further information on YouTube is available at https://www.youtube.com/yt/about/de.
Each time a website is accessed on which a YouTube video has been integrated, the user’s browser is automatically prompted to download a representation of the corresponding YouTube video from YouTube. As part of this technical process, YouTube and Google receive information about which specific website is visited by the user.
If the user is logged in to YouTube at the same time, YouTube recognizes which specific website is visited when a website containing a YouTube video is called up. This occurs regardless of whether the user clicks on a YouTube video or not. This information is collected by YouTube and Google and assigned to the respective YouTube account of the user. If the user does not want this information to be transmitted to YouTube and Google, the transmission can be prevented by the user logging out of YouTube before accessing the website.
Google’s privacy policy is available at https://policies.google.com/privacy.
5.8 Contacting
When contacting MSA (for example, by e-mail), the information of the requesting user is processed to the extent necessary to respond to the contact request and any requested measures.
Die rechtliche Grundlage für die Verarbeitung personenbezogener Daten in diesem Zusammenhang ist Art. 6 Abs. 1 lit. f DSGVO, da es im berechtigten Interesse von MSA liegt, Anfragen zu beantworten.
A transfer of the data provided by the requesting user in the context of contacting us will only take place with his consent in the sense of Art. 6 para. 1 lit. a DSGVO.
6. Processing of personal data
6.1 Contractual relationships
For the establishment and/or implementation of contractual relationships with customers, the processing of personal master, contract and payment data is required. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
MSA processes customer and prospective customer data for evaluation and marketing purposes. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f DSGVO. The processing serves the legitimate interest of MSA to further develop the range of services and to inform specifically about this.
Further processing of personal data only takes place on the basis of consent in the sense of Art. 6 para. 1 p. 1 lit. a DSGVO or in the context of the fulfillment of legal obligations in the sense of Art. 6 para. 1 p. 1 lit. c DSGVO.
7. Security of processing
The website uses the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by the browser used. Whether an individual web page of the Website is transmitted in encrypted form can be identified in the address bar of the browser by the prefix https:// and/or the closed padlock symbol.
MSA uses technical and organizational security measures to protect the personal data it manages against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. The security measures are continuously improved in line with technological developments.
8. Validity and topicality of the data protection declaration
The data protection declaration is currently valid and dated 06.08.2021.
Due to ongoing legal and technical developments, MSA reserves the right to update this Privacy Policy at any time.
