Data Protection Notice for the website www.einhell.hr

The legal basis for the processing of your personal data depends on the purpose underlying the processing. 

5.1 Technical administration of the website

The legal basis for the processing of personal data for the purpose specified above is Art. 6(1) lit. b of the General Data Protection Regulation (GDPR), provided a contractual relationship exists with you. Where no contractual relationship exists between the company and you, the legal basis for data processing is Art. 6(1) lit. f GDPR. A transfer of personal data (see figure 2) is necessary in order to establish a connection to the website and to display website content.

5.2 Provision of services

The legal basis for the processing of personal data for the purpose specified above is Art. 6(1) lit. b GDPR. We provide our services as part of fulfilling contractual obligations. We are unable to fufil or perform the contract with you if we are unable to process personal data.

The following services are available on our website (2019) for which we store personal data: 

• Customer Login
• Newsletter
• 3 years product warranty on Einhell Power X-Change products
• 2 years battery warranty on Einhell Power X-Change batteries
• Product reviews (by Bazaarvoice Inc.; see figgure 5.10)

5.3 Google Tag Manager

Naša web stranica koristi Google Tag Manager, uslugu koju za osobe iz Europskog gospodarskog prostora i Švicarske pruža Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irska, a za sve druge osobe Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, Sjedinjene Američke Države ("Google").

Tag Manager služi za upravljanje alatima i vanjskim uslugama koje koristimo na našoj web stranici i omogućuje korištenje tzv. tagova (oznaka). Tag (oznaka) je element koda koji je pohranjen u izvornom kodu web-mjesta, na primjer za kontrolu koja se stranica ili servisni elementi i alati aktiviraju i učitavaju kojim redoslijedom. Alat pokreće druge oznake koje zauzvrat mogu prikupljati podatke i koji su dodatno objašnjeni u ovim pravilima o privatnosti. Dio podataka obrađuje se na Google poslužitelju u SAD-u.

Sklopili smo ugovor o obradi podataka s tvrtkom Google Ireland Limited za korištenje Google Tag Managera. U slučaju da se osobni podaci prenose iz Google Ireland Limited u SAD, Google Ireland Limited i Google LLC sklopili su standardne ugovorne klauzule (Provedbena odluka (EU) 2021/914, Modul 3) u skladu s čl. 46(2)(c) GDPR-a. Osim toga, dobivamo i vaš izričiti pristanak za prijenos vaših podataka u treće zemlje u skladu s člankom 49(1)(a) GDPR-a.

Googleova pravila o privatnosti podataka koja se odnose na ovaj alat mogu se pronaći ovdje: https://www.google.com/analytics/terms/tag-manager/.

5.4 Google Analytics 4

Ako ste dali svoj pristanak, ova web stranica koristi Google Analytics 4, uslugu web analitike koju pruža Google LLC. Odgovorna strana za korisnike u EU/EEA i Švicarskoj je Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irska ("Google").

Opseg obrade
Google Analytics 4 koristi kolačiće koji omogućuju analizu vašeg korištenja naših web stranica. Podaci prikupljeni pomoću kolačića o vašem korištenju ove web stranice općenito se prenose na Google poslužitelj u SAD-u i tamo se pohranjuju.

Google Analytics 4 ima anonimizaciju IP adrese omogućenu prema zadanim postavkama. Zbog anonimizacije IP-a, Google će vašu IP adresu skratiti unutar država članica Europske unije ili u drugim državama potpisnicama Ugovora o Europskom gospodarskom prostoru. Samo u iznimnim slučajevima puna IP adresa će se prenijeti na Googleov poslužitelj u SAD-u i tamo skratiti. Prema Googleu, IP adresa koju prenosi vaš preglednik kao dio Google Analytics 4 neće se spojiti s drugim Google podacima.

We use Google Signals. This allows Google Analytics to collect additional information about users who have personalized ads enabled (interests and demographics) and ads can be delivered to these users in cross-device remarketing campaigns.

Tijekom vaše posjete web stranici, vaše korisničko ponašanje se bilježi u obliku "događaja". Događaji mogu biti:

• Prikazi stranice
• Prvi posjet web stranici
• Početak sesije
• Vaša "putanja klikanja", interakcija s web stranicom
• Pomicanje (kad god se korisnik pomakne na dno stranice (90%))
• Klikovi na vanjske poveznice
• Interni upiti za pretraživanje
• Interakcija s video zapisima
• Preuzimanja datoteka
• Viđeni/kliknuti oglasi
• Postavke jezika
• Kupnja proizvoda (ako je funkcija dostupna na web stranici)

Također zabilježeno:

• Vaša približna lokacija (regija)
• Tehničke informacije o vašem pregledniku i krajnjim uređajima koje koristite (npr. postavka jezika, razlučivost zaslona)
• Vaš davatelj internetskih usluga
• URL preporuke (preko koje web stranice/medija za oglašavanje ste došli na ovu web stranicu)

Svrhe obrade
U ime operatera ove web stranice, Google će koristiti ove podatke za procjenu vaše upotrebe web stranice pod pseudonimom i za sastavljanje izvješća o aktivnostima na web stranici. Izvješća koja pruža Google Analytics 4 služe za analizu izvedbe naše web stranice i uspjeha naših marketinških kampanja.

Primatelji
Primatelji podataka su/mogu biti:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irska (kao izvršitelj obrade prema čl. 28 GDPR-a)
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, SAD
• Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, SAD

Ne može se isključiti mogućnost pristupa američkih vlasti podacima koje Google pohranjuje.

Transfer u treću zemlju
U slučaju da se podaci obrađuju izvan EU/EEA i ne postoji razina zaštite podataka koja odgovara europskom standardu, s pružateljem usluge sklopili smo ugovorne klauzule EU standarda za uspostavljanje odgovarajuće razine zaštite podataka. Matična tvrtka Google Ireland, Google LLC, nalazi se u Kaliforniji, SAD. Ne može se isključiti prijenos podataka u SAD i pristup američkih vlasti podacima koje Google pohranjuje. SAD se trenutno smatra trećom zemljom iz perspektive zaštite podataka. Tamo nemate ista prava kao unutar EU/EEA. Možda nemate pravo na pravne lijekove protiv pristupa vlasti.

Trajanje pohrane
Podaci koje šaljemo i povezani s kolačićima automatski se brišu nakon 14 mjeseci. Brisanje podataka kojima je istekao rok čuvanja događa se automatski jednom mjesečno.

Pravna osnova
Pravna osnova za ovu obradu podataka je vaš pristanak u skladu s čl. 6. st. 1. p. 1. lit. GDPR-a.

Opoziv
Svoj pristanak možete opozvati u bilo kojem trenutku s učinkom za budućnost tako da pristupite postavkama kolačića (gumb za privatnost u donjem lijevom kutu stranice) i tamo promijenite svoj odabir. Zakonitost obrade koja se provodi na temelju privole do opoziva ostaje nepromijenjena.

Osim toga, možete spriječiti prikupljanje podataka od strane Google-a koje generira kolačić i koji se odnose na vašu upotrebu web stranice i obradu tih podataka od strane Google-a:

• preuzimanje i instaliranje dodatka za preglednik za onemogućavanje Google Analytics 4. Ovo će instalirati kolačić za isključivanje na vaš uređaj. Ovo sprječava prikupljanje od strane Google Analytics 4 za ovo web mjesto i za ovaj preglednik u budućnosti, sve dok je kolačić instaliran u vašem pregledniku.
• onemogućivanje Google Analytics 4 putem sljedeće veze: Onemogućite Google Analytics 4 . Ovo će postaviti kolačić za isključivanje na vaš uređaj. Ovo sprječava prikupljanje od strane Google Analytics 4 za ovo web mjesto i za ovaj preglednik u budućnosti, sve dok je kolačić instaliran u vašem pregledniku.

Za više informacija o Google Analytics 4 uvjetima korištenja i Googleovim pravilima o privatnosti posjetite https://marketingplatform.google.com/about/analytics/terms/us/ ili https://policies.google.com/?hl=en.

5.5 Youtube-Videos

We embed YouTube videos on some of our websites. The provider of the corresponsing plug-ins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a site with the YouTube plug-in, a connection to the servers at YouTube is established. YouTube is thereby notified of which sites you visit. If you are logged into your YouTube account, YouTube can associate your surfing history to you personally. You can prevent this by logging out of your YouTube account.

If a YouTube video is launched, the provider uses cookies to collect information on user interactions.

If you have deactivated the storage of cookies for the Google ad program, then you need not be concerned about this type of cookie when viewing YouTube videos. However, YouTube also collects non-personal user information in other cookies. If you wish to prevent this, you must block cookies from being saved to your browser.

You can find additional information on data privacy at "Youtube“ in the provider's data protection notice at: https://www.google.de/intl/de/policies/privacy/.

5.6 Google Maps

This website uses Google Maps API in order to visually display geographic information. When using Google Maps, Google collects, processes and utilises data on use of the map function by users. You can obtain further information on data processing by Google in Google's data protection notice. There you can also make changes to your personal data privacy settings in the data protection centre.

5.7 Use of script libraries (Google webfonts)

We use script libraries and font libraries on this website, such as, for example, Google Webfonts, in order to display our content correctly and in a graphically appealing manner on all browsers (https://www.google.com/webfonts/). Google Webfonts are used to avoid repeat downloads to your browser's cache. If the browser does not support Google Webfonts or blocks access, the content will be displayed in standard font.

Accessing script libraries or font libraries automatically establishes a connection to the provider of the library. It is theoretically possible - though it is currently unclear whether and for what purpose - providers collect data on these libraries.

You can find the data privacy guielines for the library provider Google here: https://www.google.com/policies/privacy/.

5.8 Issuu

Our website uses a JavaScript code to embed a Flash application (Flash plug-in) from Issuu Inc., 131 Lytton Ave, Palo Alto, CA 94301, USA (hereafter: Issuu). This enables print publications to be called up as e-paper.
Issuu uses cookies that allow an analysis of your use of the website. It will then raise and store personal information such as the IP address and information about the time and duration of use. The transfer takes place if you have activated JavaScript in your browser. For more information on Issuu's Terms of Use and Privacy, please visit https://issuu.com/legal/privacy.
If the Do-Not-Track feature is activated in the browser, no external Issuu plug-ins will be loaded without approval, only the reference to this option will be displayed.

5.9 Cloudflare

Our pages use features from Cloudflare. The provider is Cloudflare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA.

Cloudflare provides a globally distributed content delivery network with DNS. The technical transfer of information between your browser and our website is routed via the Cloudflare network. Cloudflare is thus able to analyse the data traffic between users and our websites; for example, to speed up the loading time of our pages or to detect and ward off attacks on our services.

In addition, Cloudflare may store cookies on your computer for optimisation and analysis. This safeguards our legitimate interests in the security, performance and reliability of our advertising offer in accordance with Art. 6(1)(f) GDPR. We have concluded a corresponding contract processing agreement with Cloudflare on the basis of the GDPR. The data is generally processed in Germany or other states in the European Union. Insofar as processing is carried out in third countries in certain cases, processing is only carried out if the adequacy of the level of data protection in the third country has been asserted by the EU Commission in accordance with Article 45 GDPR, on the basis of the EU standard contractual clauses or if an adequate level of data protection is ensured by the data recipient in another way. Cloudflare collects statistical data about your visit to this website. Access data includes:

• IP address
• Date and time of the request
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request comes
• Browser, operating system and its interface, language and version of the browser software

Cloudflare uses the log data for statistical evaluations for the purpose of operation, security and optimisation of the offer. You can find information about the data collected there and about security and data protection at Cloudflare here.

5.10 Bazaarvoice

The IT-partner Bazaarvoice provides the functionality for product reviews on the Einhell website. 

The services around the topic of product evaluations (reviews and ratings) are also looked after in the system by the company, Bazaarvoice. In addition, customer-specific emails are sent when the service 2+1 warranty extension is used or when the Bazaarvoice interface is used. Therefore we ask for your expicit agreement before sending this one-time eMails to you. In case you accepted this we submit the following information to Bazaarvoice:

• Firstname 
• Lastname
• UserID (generated hash value) 
• Mailaddress
• Registered Product
• Timestamp of registration
• Language setting

The Bazaarvoice data protection guidelines can be found at https://www.bazaarvoice.com/legal/privacy-policy/.

5.11 Google Ads

Our website uses Google conversion tracking. If you link to our website via an ad delivered by Google, Google Ads places a cookie on your computer. The cookie for conversion tracking is placed on your computer when a user clicks on an ad delivered by Google. These cookies expire at the end of 30 days and do not serve to identify you personally. If the user visits certain pages on our website and the cookie has not yet expired, we and Google can detect that the user clicked on the ad and was routed to this site. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked via websites of Ads customers. The information obtained with the aid of conversion cookies serves to compile conversion statistics for Ads customers that have opted into conversion tracking. These customers learn the total number of users that clicked on their ad and that were routed to a page with a conversion tracking tag. However, they do not obtain any information that can be used to identify users personally.

If you do not want to participate in tracking, you can decline to allow the cookie from being placed on your computer -- using, for example, browser settings that deactivate the automatic placement of cookies or set your browser so that it blocks cookies from the domain "googleleadservices.com“.

Please note that you should not delete opt-out cookies if you do not wish to have measurement data recorded. If you have deleted all the cookies in your browser, you will need to set the opt-out cookie again.

5.12 Use of Google Remarketing

This website uses the remarketing feature from Google Inc. ("Google"). This feature serves to present interest-related advertisements to website visitors in the Google ad network. A cookie is saved to the website visitor's browser that makes it possible to recognize the visitor when he/she accesses websites that belong to Google's ad network. Visitors to these websites can be presented with advertisements relating to content that the visitor accessed previously on websites that use Google's remarketing feature.

According to information from the provider, Google does not collect any personal informaton as part of this process. If you do not wish to make use of the Google remarketing feature, you can deactivate it by choosing the appropriate settings at: www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising via the ad network initiative by following the directions at: www.networkadvertising.org/managing/opt_out.asp . You can find additional information on Google remarketing as well as Google's data protection notice at: www.google.com/privacy/ads/.

5.13 Friendly Captcha

Einhell uses the "Friendly Captcha" service to prevent fraudulent activity and to protect you as an end user from becoming a potential victim of cybercrime.

The Friendly Captcha services provides a JavaScript element that is integrated into the source code of the website / webshop. The inclusion of the JavaScript element loads software in the background that provides crypto puzzles. Your device solves this crypto puzzle automatically, and you do not have to solve any arithmetic problems or picture puzzles.

The solution of the crypto puzzle is used to track whether the website / webshop is being used fraudulently or through automated machine processing, e.g. using bots, and to confirm the visitors are real people. The service is used in forms (contact forms, prize draw forms, registration and login forms, etc.) and in the order process.

To provide the service, Friendly Captcha stores the following data:

• the User Agent, Origin and Referer request headers.
• The puzzle itself, which contains information about the Friendly Captcha account and the identifier of the website to which the puzzle relates.
• The version of the Friendly Captcha service being used.
• Timestamp (Date / Time) that the puzzle was requested and solved.

Friendly Catch stores an anonymised counter for each IP address to enable dynamic scaling of the puzzle complexity in the edge network, in order to detect malicious/automated use and minimise the banning of real people. The IP addresses are anonymised by one-way hashing, and thus are not personally identifiable. The use of Friendly Captcha does not involve the storage of personal data such as your name, email address, online profile, etc.

No cookies are set when using Friendly Captcha.

Provider of the service:
Friendly Captcha GmbH, Wörthsee, Deutschland

You can find further information about Friendly Captcha's data protection policy here. Friendlycaptcha.com - Privacy policy for end users

In accordance with article 6, section 1(f) of the General Data Protection Regulation (GDPR), Einhell Germany AG and its subsidiaries have a legitimate interest in the use of Friendly Captcha, as the service helps to prevent potentially fraudulent activity on our website / webshop which could put Einhell infrastructure at risk.

5.14 Facebook pixel and Facebook remarketing

Owing to our legitimate interest in the analysis, optimisation and economic operation of our webite, the site employs the so-called "Facebook pixel“ from the social network Facebook, operated by Facebook Inc. (1601 S. California Ave - Palo Alto - CA 94304 - USA) or, in the event your are resident in the EU, Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) (“Facebook”).

With the aid of the Facebook pixel, Facebook is able to identify visitors to our website as a target group for presentation of ads, so-called "Facebook ads". We use Facebook pixel accordingly in order to show the Facebook-delivered ads only to those users who have demonstated an interest in our internet services or who exhibit the speicific characteristics that we communicate to Facebook (also referred to as "pixel events" and which contain, for example, user email addresses). In other words, by using the Facebook pixel, we seek to ensure that our Facebook ads reflect the potential interests of our users and are not simply an annoyance. With the aid of the Facebook pixel we are also better able to track the effectiveness of Facebook advertisements for statistical and marketing purposes by seeing whether users were directed to our website after clicking on a Facebook ad.

Facebook immediately incorporates the Facebook pixel when our website is accessed and can store a cookie, i.e. a small file, on your device. If you then log into Facebook or visit Facebook while logged in, your visit to our website is noted in your profile. The data collected on you remains anonymous to us, it therefore provide us no indication as to the identity of the user. However, the data is stored and processed by Facebook, so that it is possible to make a connection to the respective user profile. Insofar as we transmit data to Facebook for cross-checking purposes, this data is encrypted locally on your browser and only then sent to Facebook via a secured https connection. This occurs solely for the purpose of reconciling data likewise encrypted by Facebook.

Insofar as we transmit data to Facebook for cross-checking purposes, this data is encrypted locally on your browser and only then sent to Facebook via a secured https connection. This occurs solely for the purpose of reconciling data likewise encrypted by Facebook.

The processing of data by Facebook occurs within the scope of Facebook's data utilisation guidelines. General information on the display of Facebook ads can be found in Facebook's data utilisation guidelines: www.facebook.com/policy.php. You can find special information and details on Facebook pixel and how it operates in Facebook's Help section: www.facebook.com/business/help/651294705016616.

You can object to collection of data by Facebook pixel and its use in presenting Facebook ads. To do so, refer to the followng webpage created by Facebook and follow the directions there regarding the preferences for user-based advertisement: www.facebook.com/settings, or declare your objection via the US webpage: www.aboutads.com/choices or the EU webpage: www.youronlinechoices.com/uk/your-ad-choices/ erklären. The preferences are platform-independent, meaning, they are adopted by all devices, whether desktop computer or mobile devices.

5.15 Matomo (self-hosted)

Description of Service
This is an open source web analytics service. Matomo is providing the technology. However, Matomo is not processing any data as the data is not being transferred to Matomo due to the self-hosting solution. Self-hosting means that Einhell hosts the web analytics service Matomo on its own servers and thus has sole sovereignty over the analytics data.

Data Purposes
This list represents the purposes of the data collection and processing.

• Analytics
• Event tracking

Technologies Used
We use Matomo without any tracking cookies - instead we rely on cookieless tracking. Cookieless tracking is an alternative form of tracking that uses methods such as counting unique IP addresses or browser fingerprinting to identify users instead of cookies.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

• Time of users previous visit
• Screen resolution
• Files clicked or downloaded
• Links to outside domain clicked
• Page speed
• Page URL
• Number of users visits
• Anonymized user IP
• User agent
• Browser information
• Time zone
• Time of users first visit
• Date and time of visit
• Page title
• Referrer URL
• Usage data
• Device information
• Geographic location
• Anonymized order ID

We use IP anonymization for the analysis with Matomo. In this case, your IP address is shortened before analysis so that it can no longer be clearly assigned to you. The same applies to the order ID, which is also anonymized when the shopping functionality is available on the website.

Legal Basis
In the following the required legal basis for the processing of data is listed.

• Art. 6 para. 1 s. 1 lit. f GDPR
• §25 para. 2 no. 2 TTDSG

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

• European Union

Deactivate Matomo
If you do not agree to the storage and use of your data, you can deactivate the data processing here. In this case, an opt-out cookie will be stored in your browser, which prevents Matomo from storing usage data. If you delete your cookies, this will have the effect that the Matomo opt-out cookie will also be deleted. The opt-out must then be reactivated when you visit our site again.