Data Privacy

‍1. Fundamentals

‍By means of this privacy policy, we would like to inform you about the usage of personal data while visiting this website. punsch.group attaches great importance to the protection, accuracy and integrity of your personal data. 

The usage of this website is voluntary. If you are against the usage of your data, you can exit this website. 

The present privacy policy can be amended or updated at any time by punsch.group.

2. Responsible Organization

Below you can find the contact information regarding the controllor of processing as well as the data protection manager.

Controller of Processing

punsch.group GmbH
office@punsch.group

Data Protection Manager

Wajden Byloff
wajden@punsch.group

3. Safety Precautions

We take organizational, contractual and technical safety precautions according to the state of the art to make sure to comply with formalities of the data protection laws as well as protection of the data used by us against incidental or deliberate manipulation, loss, destruction or unauthorized access.

The safety measures notably include the encrypted transmission of all data between your browser and our server.

4. Information Disclosure involving third parties

Personal data will only be transferred to third parties if it is necessary – for instance if required for contractual purposes in accordance to DSGVO Art. 6 para 1 lit. b, or on the basis of legitimate interests of economic and efficient operations for our business in accordance to DSGVO Art. 6 para. 1 lit. f.

While commissioning subcontractors to provide our services, we take legal precautions as well as technical and organizational measures to ensure the safety of personal data in accordance with the data protection law.

5. Contact

When contacting us (via e-mail) the user’s information regarding the processing of your contact request will be used in accordance with DSGVO Art. 6 para. 1lit.b.

6. Survey of Access Data and Logfiles

We collect data on the basis of legitimate interests in accordance to DSGVO Art. 6 para. 1 lit. f. about every access to the server in service (so-called server log files). The access data include the name of the requested website, data file, date and time of access, transferred amount of data, message about successful call, browser type version, the user’s operating system, referrer URL (previously visited page), IP-address as well as the requesting provider.

For safety reasons (e.g. for the purpose of clearing up misuse or fraud in connection with access) log file information are stored for a maximum of seven days and deleted afterwards.
Data, for which storage for evidence is necessary, is excluded from erasure until clarification of the incident.

7. Cookies & Range-Measurement

Cookies consist of information which is transferred from our own or a third parties’ server to the user’s browser, where they are stored for a later retrieval. Cookies can be small files or similar types of information storage.

We use session cookies, which are only active for the duration of the current visit on one of our websites (e.g. to save log-in files or basket functions, hence making the use of our online services possible).

In a session cookie a randomly generated and unique identification number is stored, a so-called session-ID. Furthermore, the cookie contains information about its origins and storage period – they are not able to secure any other data. The deletion of the session-cookie will take place when the usage of our online services is completed e.g. a logging-off is performed or the browser is closed.
The user will be informed about the usage of cookies as part of pseudonymous range measurement within the privacy policy.

If the storage via cookie on their computer is not desired by the user, they are asked to deactivate the corresponding option in their browser system settings. Secured cookies can be deleted in their browser system settings. The exclusion of cookies can lead to functional restrictions regarding our online services.

Following cookies are used on the punsch.group-website „www.punsch.group“:

Category of data: Statistic

Purpose of cookie: Serves as differentiation between users

Placed by: Google

Storage period: 2 years

Category of data: Statistic

Purpose of cookie: Serves as differentiation between users and deliver targeted advertising

Placed by: Meta

Storage period: 3 months

8. Third Party Services and Content

Based on our legitimate interest (interest of analysis, economic and efficient operations for our online services in accordance to DSGVO Art. 6 para. 1 lit. f.) we use third party content offerings and services to corporate their content offerings and services, for instance corporating videos and fonts (throughout consistently used as content). This assumes that third parties of this content use the user’s IP-adress because the content can’t be sent to the browser without an IP-adress. Therefore an IP-adress is needed for displaying content. 

We endeavour to only use content, where the provider merely uses an IP-adress for delivering content. Third parties can use so called Pixel-Tags (invisible graphics or code, also known as „Web Beacons“) as well for stastical or marketing purposes. With the help of „Pixel-Tags“ information like traffic of visitors can be analyzed on subsites of the website. The pseudonymous data can be stored in cookies on the user’s device and include technical information about the browser and operating system, referring websites, time of access, as well as further information about usage of our online services. This information is used to be connected with other information from different sources.

The following description gives an overview over third parties and their respective content, including a link to their respective privacy policies, which contains further information on data processing and, as partly mentioned above, contradictory possibilites (so called Opt-Out):
External fonts by Google, Inc., www.google.com/fonts („Google Fonts“). The embedding of Google Fonts takes place via server call (usually by Google US). Privacy Policy: www.google.com/policies/privacy/, Opt-Out: www.google.com/settings/ads/.
Videos from the platform “YouTube” placed by third party Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

9. User Rights

Upon request users have the right to receive information on the stored personalised data free of charge.
Further users have the right on rectification of incorrect data, limitations of processing and deletion of personalised data if they assert their rights to data portability and lodge a complaint with the competent regulatory authority in the event of unlawful processing.
Likewise, users can revoke consent generally with implications for the future.

10. Deletion of Data

The deletion of data secured by us takes place, when it is no longer required for its intended purpose and provided that there are no statutory storage obligations objecting to the erasure. If a user’s data is not deleted, because it is needed for other legal purposes, the processing will be limited. This means that the data will be locked and not be used for other purposes, which applies to user data which has to be stored on the basis of comercial or fiscal reasons.

In principle, the storage of the data takes place for up to 10 years.

11. Right of Objection

Users have the right to object future processing of their personalised data at any time according to legal guidelines.
Especially an objection to processing data for direct advertising can be made.

12. Changes in the Privacy Policy

We reserve the right to change the privacy policy, to adapt them to changed legal situations, or to changes in the service and data processing. However, this only applies to declarations of data processing. If consent of the user is required or elements of the privacy policy includes provisions of the contractual relationship with the users, changes are made only with the consent of the users.

Users are requested to inform themselves regularly about the content of the privacy policy.