Privacy
Privacy policy for the use of our website "corticore.de
- Status: 17.08.2023 -
Dear visitors of our website,
We are pleased that you are visiting our website and, if applicable, using our services. With the following explanations, we inform you which data we collect and process from you in connection with the use of our website and the services we offer.
Table of Contents:
2. responsibility and contact person
4. modification of the privacy information
B. General data processing when calling up our website
2.1 Technically required cookies
3.1 Google Universal Analytics
C. Other special data processing
1.2 Consent to data processing
2. contact / Elite Scanning Club
2.1 Contact form; Elite Scanning Club
3.2 Implementation / order fulfillment
3.3 Data processing due to tax regulations
4.2 Partners and subcontractors of Mollie; data disclosure
4.3 Your rights against Mollie
A. General information
1. scope
This privacy policy covers the information about the processing of personal data in the context of the use of our website www.corticore.de or their subpages.
2. responsibility and contact person
The company responsible for the processing of personal data is the
Corticore GmbH, Volkartstraße 50, 80636 Munich ,
represented by the managing directors Thomas Zuchtriegel, Benjamin Götz, Kai Thomas, Tobias Hottner.
Tel: 49 (0)176 5789 7698 || E-mail: info@corticore.de
For all questions regarding data protection in connection with our products/services or the use of our website, you can contact us at any time by mail or e-mail.
You can reach our data protection officer via
HWData GmbH, Nordendstraße 64, 80801 Munich | cw@hwdata.de
3. place of data processing
For the hosting of our website as well as the data storage we use the services of Amazon Web Services (AWS, Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg). The data is only stored in data centers within the EU.
AWS Europe is a subsidiary of Amazon Technologies Inc, 410 Terry Drive Ave North, WA 98109-5210 Seattle, USA. We have agreed with AWS to be bound by the standard contractual clauses (SCCs) published by the EU Commission.
AWS's privacy notice is available here:
https://aws.amazon.com/de/compliance/germany-data-protection/
https://aws.amazon.com/de/compliance/data-privacy/
https://aws.amazon.com/de/compliance/gdpr-center/
We use the services of AWS to offer the use of our website and our other services to our customers / users quickly and conveniently.
4. modification of the privacy information
In the context of the further development of data protection law and technological or organizational changes, our data protection information is regularly reviewed for the need for adaptation or additions and updated as necessary.
B. General data processing when calling up our website
1. log files
When our websites are called up, a log data record (so-called server log files) is stored on our web server, which also includes the IP address of the website visitor. The data within these server log files are required, among other things, to correctly display the content of our websites and to ensure the security of our IT infrastructure (Art. 6 para. 1 lit. f) DSGVO). The log files are deleted regularly and automatically by our hoster. If you would like more information about this, please feel free to contact us at any time using the aforementioned contact details.
2. tools and cookies
This website uses various services and applications (collectively, "tools") that are provided either by us or by third parties. These include, in particular, tools that use technologies to store or access information in the end device (e.g. cookies, Web Storag, JavaScripts or pixels). Details about the tools, in particular the cookies used, can be found in the privacy settings.
2.1 Technically required cookies
We use technically necessary cookies to enable basic functions such as page navigation and trouble-free access to certain areas of the website. In addition, there are preference cookies, for example to be able to select the preferred language.
2.2 Other cookies / tools
In addition, we use YouTube recordings on our website (see also section 4.1). In doing so, YouTube (a subsidiary of Google, Inc.) sets cookies to record user behavior or user settings and also statistics when viewing YouTube content.
2.3 Browser settings
In general, you can manage the websites authorized to set cookies in your browser settings and, in particular, restrict third-party cookies. On the following pages you will find information on this for the most common web browsers:
- Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
- Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
- Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
- Safari : https://support.apple.com/de-de/guide/safari/sfri11471/mac
- Opera: http://help.opera.com/Windows/10.20/de/cookies.html
If necessary, you can additionally prevent the loading of so-called scripts. "NoScript allows JavaScript, Java, and other plug-ins to run only on trusted domains of your choice. For information and instructions on how to edit this feature, contact your browser vendor (for Mozilla Firefox, for example: https://addons.mozilla.org/de/firefox/addon/noscript/).
3. analysis tools
3.1 Google Universal Analytics
On our websites, we use Google Universal Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Universal Analytics uses, among other things, JavaScripts and pixels to read information on your terminal device and cookies to store information on your terminal device. This is used to analyze your usage behavior and to improve our website. We will process the information obtained to evaluate your use of the website and to compile reports on website activities for the website operators. We have made various settings to comply with data protection requirements (including in the form of IP anonymization; automatic deletion of old logs). The legal basis for this data processing is your consent in accordance with Art. 6 (1) a) DSGVO; § 25 (1) TTDSG.
3.2 Google Tag Manager
On this website, we use the Google Tag Manager service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Through this tool, "website tags" (i.e. keywords that are embedded in HTML elements) can be implemented and managed via an interface. By using the Google Tag Manager, we can automatically track which button, link or personalized image you have actively clicked on and can then record which contents of our website are of particular interest to you. These processing operations are carried out exclusively with the granting of explicit consent in accordance with Art. 6 para. 1 lit. a) DSGVO; § 25 para. 1 TTDSG. Further information on the Google Tag Manager as well as Google's privacy policy can be found at https://www.google.com/intl/de/policies/privacy.
4. marketing tools
4.1 YouTube
We display videos on our website that are played via the video portal "YouTube" of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"). The implementation is based on Art. 6 para. 1 p. 1 lit. f DSGVO, whereby our interest lies in the smooth integration of the videos and the thus appealing design of our website.
Data processing in a third country / Notes for your consent: When you access a page that has an embedded video, a connection to Google's servers is established and, in doing so, the content is displayed on the website by notifying your browser.
If you are logged in to Google at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.
In some cases, information is transferred to the parent company Google Inc. based in the USA, to other Google companies and to external partners of Google, each of which may be located outside the European Union. Google uses standard contractual clauses approved by the European Commission for this purpose and invokes the adequacy decisions issued by the European Commission regarding certain countries. However, there is currently no adequate level of data protection in the USA. It cannot be ruled out that state security authorities will issue orders against newsletter providers in order to gain access to data stored there. The possibilities for legal protection are also currently limited.
Further information on data protection in connection with YouTube can be found here:
https://policies.google.com/privacy?hl=de; as well as here:
C. Other special data processing
1. newsletter
1.1 Newsletter provider
If you subscribe to our newsletter, the emails are sent by the provider "MailChimp" (The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA).
The following data is passed on to MailChimp or collected by MailChimp as part of the newsletter dispatch:
First and last name; e-mail address, IP address / location
Mailchimp is the recipient of your personal data and acts as a processor for us as far as the sending of our newsletter is concerned. The processing of the data provided here is neither legally nor contractually required. We cannot and will not send you a newsletter without your express consent.
With the help of Mailchimp, we can analyze our newsletter campaigns. When you open an email sent with Mailchimp, a file contained in the email (known as a web beacon) connects to Mailchimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
Data processing in a third country / Instructions for your consent
By using MailChimp, personal data of newsletter recipients are processed in a third country, in this case the United States (USA).
Furthermore, in the case of data transfer to the USA, this takes place on the basis of the standard contractual clauses of the EU Commission. You can find more details here:
https://mailchimp.com/eu-us-data-transfer-statement/ and here
1.2 Consent to data processing
The data processing is based on your Consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of data for sending the newsletter at any time, for example via the "unsubscribe" link in each newsletter. The legality of the data processing already carried out remains unaffected by this revocation.
The data provided by you for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.
After you unsubscribe from the newsletter, your e-mail address will be stored by us or the newsletter service provider in a blacklist, if necessary, to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) f DSGVO). The storage in the blacklist is not limited in time.
2. contact / Elite Scanning Club
2.1 Contact form; Elite Scanning Club
If you contact us by mail via our website or want to join the "Elite Scanning Club", your name and e-mail address will be stored by us.
In the case of general contact, we process this data in order to be able to deal with your request - for example, a question to us. Subsequently, the data will be deleted (purpose achieved).
If you have joined the "Elite Scanning Club", the data will be processed by us for the duration of your membership.
You can object to this data processing at any time. If applicable, your request can then no longer be processed by us; and in this case you can no longer be a member of the Elite Scanning Club.
2.2 WhatsApp
Furthermore, if you wish, we use the messenger service "WhatsApp" on our website to get in touch with you. WhatsApp is a subsidiary of the US company Meta Platforms Inc (formerly known as "Facebook"). In Europe, WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible.
You can only make use of the option to communicate with us via WhatsApp if you have already registered with WhatsApp yourself beforehand (usually on your smartphone). In this respect, nothing new happens to your personal data when you make use of the "WhatsApp" chat function on our website. However, you should always be aware that WhatsApp processes a lot of personal data about you. You can find out the details here:
By using the services of WhatsApp, you agree as a precaution that personal data may also be transmitted to WhatsApp and/or Meta in the USA. The use of WhatsApp is voluntary at all times. You can revoke the aforementioned consent to us at any time or inform us that you no longer wish to receive communication via WhatsApp. We would then immediately stop communicating with you via WhatsApp.
You can contact us at any time through the usual communication channels (telephone, e-mail, mail).
3. orders in our webshop
3.1 Orders in the webshop
If you want to order something in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. Mandatory data required for the processing of contracts are marked separately by an asterisk (*), other information is voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 p. 1 lit. b DSGVO.
You can voluntarily create a customer account, through which we can store your data for future purchases. When creating an account under "Open a customer account?", the data you provide will be stored revocably. You can change all data of your user account, a deletion of the account you can under info@corticore.de require.
3.2 Implementation / order fulfillment
For the purpose of order fulfillment, we transmit - if you order goods (e.g. VR glasses / accessories) - personal data (possibly also your e-mail address and, if applicable, your telephone number) to a company contracted by us, which carries out the shipment of these goods to you.
Currently, this is Mediamarkt (Media-Saturn Deutschland GmbH, Media-Saturn-Str. 1, 85053 Ingolstadt). Your data will be used there exclusively for order processing / shipping the goods. We have concluded an order processing contract with Mediamarkt regarding personal data.
3.3 Data processing due to tax regulations
Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. If you no longer maintain an active customer account with us, the processing of the data will be restricted after three years.
4. payment services
For the processing of your payments, we use the services of Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, The Netherlands ("Mollie").
4.1 Mollie as responsible
Mollie is an online payment service provider through which various payment options are made available to you (e.g. installment purchase via Klarna, Sofortüberweisung, etc.). As an independent provider of payment services, Mollie is not a processor, but is itself the controller of your personal data. As a company based in the EU, Mollie is subject to the provisions of the European General Data Protection Regulation (GDPR). You can find Mollie's privacy policy here:
You instruct Mollie to fulfill your payment obligation triggered by your order with us. Mollie therefore requires the data provided by you for the performance of the contract concluded with you thereby (Art. 6 para. (1) letter b) DSGVO).
After you have selected a payment method in our webshop during the order process, the data required for the payment processing will be transmitted to Mollie (usually name, address and contact data, date of birth, payment information, as well as IP address, browser type and the like). By selecting one of the payment options, you consent to the transmission of personal data required for the processing of the invoice or installment purchase or for identity and credit checks.
4.2 Partners and subcontractors of Mollie; data disclosure
Mollie also uses the services of subcontractors to fulfill the order; furthermore, Mollie cooperates with other independent responsible parties (e.g. banks). A list of these partners of Mollie can be found here:
Depending on the payment method you choose, the data required for the order execution will be transmitted by Mollie to the respective payment service provider (e.g. Klarna, Apple Pay). During the ordering process, you will be shown those payment providers that you can select for the payment of our services/products. Currently, these are the following providers:
- Credit card companies (American Express, Mastercard, Visa)
- Klarna
- Apple Pay (when using iPhone / iPad)
- SEPA bank transfer or direct debit
4.3 Your rights against Mollie
You have the possibility to revoke your consent to the handling of personal data at any time vis-à-vis Mollie or to exercise further rights in relation to the processing of your data. Contact us about exercising your right to privacy@mollie.com. For details, please refer to the privacy policy of Mollie. A revocation does not affect personal data that must necessarily be processed, used or transmitted for (contractual) payment processing; nor does it affect transactions that have already been processed.
D. Your rights
You can exercise your rights as a data subject regarding your processed personal data at any time by contacting us using the contact details provided at the beginning of this document. In particular, you have the following rights:
Art. 15 DSGVO - Right to information about your data processed by us. In particular, you can request information about the processing purposes, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details.
Art. 16 DSGVO - Right to correct incorrect or complete your data stored by us.
Art. 17 DSGVO - right to erasure of your data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
Art. 18 DSGVO - Right to restrict the processing of data.
Art. 20 DSGVO - right to surrender your data ("data portability").
Art. 21 DSGVO - right to object to processing, if the processing is based on Art. 6 (1) p. 1 lit. e) or lit. f) DSGVO.
Art. 77 DSGVO - Right to lodge a complaint with a data protection supervisory authority.
