Privacy Policy
In this privacy policy, Tolingo GmbH (“we” or “us”) explains how we process your personal data (“data”) when you visit https://www.beglaubigung24.de and use our services.
It also sets out the rights you have. We take the protection of your personal data and your privacy very seriously and, of course, comply with the applicable data protection legislation, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
If any of the terms used in this privacy policy are unclear, the section “Data protection terms explained” may help. If you have any questions about data protection, you are also welcome to contact us informally using the contact details below.
The controller responsible for data processing is:
Tolingo GmbH, Kühnehöfe 3, 22761 Hamburg, Germany
Tel. +49 40 413 583 100, service@tolingo.com
Managing Director: Jens Völkel
You can reach the data protection officer of Tolingo GmbH at:
Email: datenschutzbeauftragter@tolingo.com
Herting Oberbeck Datenschutz GmbH
Hallerstr. 76, 20146 Hamburg, Germany
https://www.datenschutzkanzlei.de
Withdrawing consent and your right to object
Withdrawal of your consent to data processing and right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
Many data processing operations are only possible with your express consent or on the basis of a legitimate interest under Art. 6(1)(f) GDPR.
You can withdraw any consent you have already given at any time. An informal email to datenschutz@tolingo.com is all it takes. Withdrawal does not affect the lawfulness of any processing carried out before it.
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
Where data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The legal basis for each processing operation is set out in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection under Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Art. 21(2) GDPR).
To exercise your right to object, simply send an email to datenschutz@tolingo.com.
Data processing when you visit our website
When you visit this website, we process personal data about you. In principle, you can use our website without providing any personal data. Our website is designed to collect as little data from you as possible. Data is collected for the purposes and to the extent described below, and we only pass your data on to third parties as described below.
Collection and processing of personal data
Provision of our website
This website is hosted by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).
Shopify is a platform for building and hosting websites and online shops. When you visit our website, Shopify records your IP address and information about your device and browser. Shopify is also used to analyse visitor numbers, traffic sources and customer behaviour and to compile user statistics. When you make a purchase on our website, Shopify also records your name, email address, delivery and billing addresses, payment details and other data related to the purchase (e.g. phone number, amount spent and similar). Shopify stores cookies in your browser for these analyses.
For details, please see Shopify’s privacy policy: https://www.shopify.com/legal/privacy.
We use Shopify on the basis of Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes listed above: to offer you our website and the services provided through it in a way that is technically sound, secure and optimised for your needs. Where consent has been requested, processing is based solely on Art. 6(1)(a) GDPR; you can withdraw your consent at any time.
Quotes and orders
To process orders, we collect and process the following data, which is necessary to conclude and properly perform the contract. We only collect and process your personal data if you provide it voluntarily and knowingly. This includes:
- First and last name
- Delivery and billing address: street, postcode, town or city, country
- Email address
The legal basis for processing your data for your order is Art. 6(1)(a) GDPR, based on the consent you have voluntarily given, and Art. 6(1)(b) GDPR for the performance of the contract. The personal data we collect is stored until the statutory retention period expires and is then deleted, unless we are obliged under Art. 6(1)(c) GDPR to keep it for longer owing to retention and documentation obligations under tax and commercial law (arising from the German Commercial Code (HGB), Criminal Code (StGB) or Fiscal Code (AO)) or you have consented to longer storage under Art. 6(1)(a) GDPR.
Marketing
We use the email addresses of our existing customers, meaning only those who already have a business relationship with us, to send marketing emails such as offers. This processing is based on Art. 6(1)(f) GDPR in conjunction with Section 7(3) of the German Act against Unfair Competition (UWG). Our legitimate interest lies in being able to contact our existing customers with marketing simply and cost-effectively. In doing so, we comply with the requirements of Section 7(3) UWG.
You have the right to object to the use of your email address for these purposes at any time. Simply email your objection to datenschutz@tolingo.com.
Translation
Customers send us the files to be translated, which we store and make available to the translator. Unless otherwise agreed, tolingo may also use freelance service providers, including providers based outside the EU. Once the order has been completed, source and target files are stored for the statutory retention periods.
The legal basis for processing the documents you send us for translation is Art. 6(1)(b) GDPR.
Use of cookies
Our website uses cookies. Most of the cookies we use are automatically deleted from your hard drive at the end of your browser session (hence the name session cookies). Other cookies remain on your device. On your next visit, they automatically recognise that you have been here before and which entries and settings you prefer (persistent cookies). This means you do not have to re-enter your password or fill in forms with your details when you order again.
You can disable cookies in your browser settings. Without cookies, however, some features of our website may be restricted or may not work as usual.
The legal basis for processing your data in the form of cookies is Art. 6(1)(f) GDPR.
Use of tracking and analytics services
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google Analytics also uses cookies, i.e. text files stored on your computer that make it possible to analyse how you use the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.
IP anonymisation has been activated on our website, so Google first truncates your IP address within Member States of the European Union or other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. In these exceptional cases, processing is carried out under Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us, as the website operator, with other services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
You can prevent cookies from being stored by adjusting your browser settings accordingly. Please note, however, that you may then not be able to use all features of this website in full. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Alternatively, you can prevent Google Analytics from collecting your data by setting an opt-out cookie. To do so, click here. If you delete the cookies in your browser, you will need to click this link again.
Google LLC, based in the USA, is certified under the EU-US data protection framework “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.
For more information on how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en
Google Ads
We use Google Ads and Google Conversion Tracking to record statistics on the use of our website and to optimise it. Google Ads is an online advertising programme of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). If you reach our website via a Google ad, Google Ads places a cookie on your computer.
These cookies generally expire after 30 days and are not used to identify you personally. If the user visits certain pages of the advertiser’s website and the cookie has not yet expired, Google and the advertiser can see that the user clicked on the ad and was redirected to this page.
Each advertiser receives a different cookie, so cookies cannot be tracked across advertisers’ websites. The information obtained using the conversion cookie is used to compile conversion statistics for advertisers who have opted for conversion tracking. Advertisers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that would allow them to identify users personally.
Conversion cookies are stored on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in analysing user behaviour in order to optimise both our website and our advertising.
If you do not wish to take part in tracking, you can refuse the cookie required for it, for example via a browser setting that generally disables the automatic setting of cookies. You can also disable conversion tracking cookies by setting your browser to block cookies from the domain “www.googleadservices.com”. Google’s privacy notice on Google Ads and conversion tracking can be found at https://policies.google.com/privacy?hl=en
Google Remarketing
Our website uses the remarketing function of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
This function is used to show website visitors interest-based ads within the Google advertising network. A cookie is stored in the visitor’s browser, which makes it possible to recognise the visitor when they access websites that belong to Google’s advertising network. On these pages, the visitor may be shown ads relating to content they previously viewed on websites that use Google’s remarketing function.
Google Remarketing is used on the basis of Art. 6(1)(f) GDPR. There is a legitimate interest in analysing user behaviour in order to optimise both the website and the advertising.
According to Google, it does not collect any personal data in this process. If you nevertheless do not want Google’s remarketing function, you can disable it by adjusting the relevant settings at www.google.com/settings/ads
Further information on Google Remarketing and Google’s privacy policy can be found at: www.google.com/privacy/ads/
If users have agreed to Google linking their web and app browsing history to their Google account and using information from their Google account to personalise the ads they see on the web, Google uses data from these signed-in users together with Google Analytics data to create and define audience lists for cross-device remarketing. To support this function, Google Analytics collects these users’ Google-authenticated IDs. This personal data from Google is temporarily linked to our Google Analytics data in order to build audiences.
Google Campaign Manager
This website uses Campaign Manager, an online marketing tool from Google. Google Campaign Manager is a product of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Campaign Manager uses cookies to show you ads that are relevant to you. Your browser is assigned a pseudonymous identification number (ID) to check which ads have been displayed in your browser and which have been viewed. The cookies do not contain any personal information. Using the cookies merely enables Google and its partner websites to serve ads based on previous visits to our website or other websites on the internet. The information generated by the cookies is transmitted by Google to a server in the USA for analysis and stored there. Google complies with the data protection provisions of the “Privacy Shield” agreement and is registered with the US Department of Commerce’s “Privacy Shield” programme.
Google Campaign Manager is used on the basis of Art. 6(1)(f) GDPR. There is a legitimate interest in analysing user behaviour in order to optimise both the website and the advertising.
You can prevent cookies from being stored by adjusting your browser settings accordingly. You can also prevent Google from collecting the data generated by the cookies relating to your use of the websites and from processing this data by installing the browser plug-in available at the following link: https://adssettings.google.com/.
Further information on Campaign Manager is available at https://www.google.de/doubleclick and on data protection at Google in general at: https://policies.google.com/privacy?hl=en
Google Tag Manager
The Google Tag Manager service simply allows us to integrate the services listed above by implementing the other cookies and tags. Google Tag Manager does not collect any personal data.
Matomo (web analytics)
We use the open-source web analytics software Matomo on this website. It shows us how our website is used, how visitors find us (e.g. via search engines, ads or links on other websites) and which of these routes lead to orders. This helps us improve our services and our advertising.
We run Matomo ourselves on our own server hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, in a data centre in the EU. IONOS processes the data solely on our behalf under a data processing agreement. The data is not passed on to third parties or transferred to countries outside the EU.
Matomo does not set any cookies for its analysis and does not read any information from your device. The following data is processed:
- your IP address, which is truncated before it is stored (e.g. 192.168.xxx.xxx)
- the pages you view and the date and time of each visit
- the website you came from (without URL parameters) and any campaign tags in links
- browser, operating system, device type and language setting
- your approximate location (country, region, city), derived from your IP address
- if you place an order: the products and variants ordered, quantity, prices, order value and a masked order number. We do not send your name, email address, postal address, payment details or the documents you upload to Matomo.
To attribute several page views to one visit, Matomo creates a checksum from your IP address, browser identifier, language setting and a random value that changes daily. Your full IP address is only used briefly for this and is not stored. You can be recognised for a maximum of 24 hours; no profile is built up over several days.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the statistical analysis of how our website is used, measuring the success of our advertising and improving our services.
Data on individual visits is deleted automatically after 13 months. We keep aggregated statistics that cannot be linked to any individual for longer.
You can object to tracking by Matomo at any time. If you activate the opt-out below, we store a cookie (b24_matomo_optout) in your browser that remembers your objection; it serves no other purpose. If you delete your cookies or use a different browser, you will need to activate the opt-out again.
HubSpot
Tolingo GmbH uses HubSpot, a service provided by HubSpot Inc., on its websites for analytics purposes. This involves tracking pixels and cookies that are stored on your computer and allow us to analyse how you use the website. HubSpot evaluates the information collected (e.g. IP address, geographical location, browser type, visit duration and pages viewed) on behalf of tolingo to generate reports on visits and on the tolingo pages visited.
If you do not want HubSpot to collect any data at all, you can prevent cookies from being stored at any time via your browser settings. Further information on how HubSpot works can be found in HubSpot Inc.’s privacy policy at: https://legal.hubspot.com/privacy-policy
Your rights
Right of access
Under Art. 15 GDPR, you have the right to obtain information from us as to whether and which data we process about you. This includes, among other things, how long and for what purpose we process the data, where it comes from and to which recipients or categories of recipients we disclose it. You can also request a copy of this data.
Right to rectification
Under Art. 16 GDPR, you have the right to have inaccurate or outdated data about you corrected without delay. You can also ask us to complete any incomplete personal data. Where required by law, we will also inform any third parties to whom we have disclosed your data of this correction.
Right to erasure (“right to be forgotten”)
Under Art. 17 GDPR, you have the right to have your personal data erased by us without delay if one of the grounds set out in Art. 17 GDPR applies.
Right to restriction of processing
Under Art. 18 GDPR, you have the right to ask us to restrict the processing of your personal data if one of the conditions set out in Art. 18 GDPR is met.
Right to withdraw consent
Under Art. 7(3) GDPR, you can withdraw any consent you have given us at any time with effect for the future. An informal message to the contact details above is sufficient.
Right to data portability
Under Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to others. For details and limitations, please refer to Art. 20 GDPR. Exercising this right does not affect your right to erasure.
Right to lodge a complaint with a supervisory authority
Under Art. 77 GDPR, you have the right to lodge a complaint with a competent supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.
Right to object
Under Art. 21 GDPR, you have the right to object to the processing of your personal data at any time. If the conditions for a valid objection are met, we will no longer process your personal data.
How to exercise your rights
To exercise your rights, please contact us (an informal message is fine) at:
Email: datenschutz@tolingo.com
Data protection terms explained
This privacy policy uses some terms that are also used by lawmakers, in particular in the EU General Data Protection Regulation (GDPR). As we want this privacy policy to be easy for you to understand, here are explanations of some key terms:
Browser: A program used to display websites on the internet.
Consent: Any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Cookies: Cookies are small files stored on your device that hold certain settings and data for exchange with your browser, unless you prevent this through technical settings. Cookies enable the websites and servers you visit to distinguish your browser from other browsers. A specific browser can therefore be recognised and identified by its unique cookie ID. This makes our website easier for you to use because, for example, you only need to enter certain data once. Wherever possible, we use cookies that are deleted when you close your browser (session cookies). We also use cookies that remain on your computer for longer (persistent cookies). As well as configuring your browser not to accept cookies, you can delete cookies that have already been set at any time using your browser or other programs. Please note, however, that not using cookies may mean that not all features of our website or services are fully available.
Data subject: Any identified or identifiable natural person whose personal data is processed by the controller.
IP address: An address assigned to your device (e.g. smartphone or computer) on the internet so that it can be located and reached there.
Personal data: Any information relating to an identified or identifiable natural person (also referred to as the “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Processor: A natural or legal person, public authority, agency or other body that processes personal data on behalf of a controller.
Pseudonymisation: The processing of personal data in such a way that it can no longer be attributed to a specific data subject without the use of additional information. This is particularly the case where the additional information is kept separately and is subject to technical and organisational measures ensuring that the data cannot be attributed to an identified or identifiable natural person with reasonable effort.
Recipient: A natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party.
Third party: A natural or legal person, public authority, agency or other body authorised to process the personal data.
Security
Your personal data is transmitted to us in encrypted form using SSL/TLS (Secure Sockets Layer/Transport Layer Security).
We use technical and organisational security measures to protect your personal data against misuse, loss, destruction and unauthorised access. Our security measures reflect the current state of the art and are continuously improved in line with technological developments.
Validity and changes to this privacy policy
This privacy policy is currently valid. As our website evolves, as new technologies are introduced or as legal or regulatory requirements change, it may become necessary to amend this privacy policy. We therefore reserve the right to make changes at any time.