Privacy Policy

Responsible Entity

Types of Processed Data:

•	Inventory Data (e.g., names, addresses)
•	Contact Data (e.g., email)
•	Content Data (e.g., text inputs)
•	Usage Data (e.g., visited websites, interest in content, access times)
•	Meta/Communication Data (e.g., device information, IP addresses)

Purpose of Processing:

• Provision of the online offering, its functions, and content.
• Responding to contact inquiries and communication with users.
• Security measures.
• Reach measurement/marketing.

Transfers to Third Countries

The data we collect from our users is stored within the European Economic Area (EEA), but may also be transferred to and processed in a country outside of the EEA. The transfer of personal data is carried out in accordance with applicable laws.

Rights of Customers

You have the right to access, correct, delete, and transfer your data. Furthermore, you have the right to restrict the processing of your data. To exercise these rights, you can contact Carletto at the following email address: datenschutz@carletto.de. If Carletto fails to comply with applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority.

Cookies

We use so-called browser cookies to simplify the use of the Carletto website and applications, and to gather insights for improving the information and services accessible through the website. This evaluation is done anonymously, meaning without reference to personal data.

Manage Cookies

You have the option to control and, if necessary, prevent the acceptance of cookies by configuring your browser, as indicated on the websites of the browser manufacturers:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Internet Explorer: http://windows.microsoft.com/de-de/windows-vista/block-or-allow-cookies
Chrome: https://support.google.com/chrome/answer/95647?hl=de
Safari: http://support.apple.com/kb/PH5042
Opera: http://help.opera.com/Linux/9.00/de/cookies.html

You can also learn more about how cookies work on http://www.allaboutcookies.org/.

SSL Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, we use SSL encryption on our pages. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the padlock symbol in your browser's address bar.

When SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Hosting

Our website is hosted on the Versel platform. Versel provides us with the infrastructure and tools to deliver our content and services online. Your data may be processed through the data storage, databases, and general applications of Versel. Versel stores this data on secure servers that are protected by firewalls.

Versel places great importance on the security and protection of the stored data. For more information on Versel's privacy policies and security measures, please refer to their privacy policy: [Link to Versel’s privacy policy, if available].

Comments and Posts

When users leave comments or other contributions, their IP addresses are stored for 7 days based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR. This is done for our security, in case someone posts illegal content (e.g., insults, prohibited political propaganda, etc.) in the comments or contributions. In such cases, we could be held liable for the comment or post, and therefore, we are interested in identifying the author.

Contacting Us

When contacting us (e.g., via contact form, email, phone), the user's details are processed to handle the inquiry and its processing. The user's details may be stored in our system.

We delete inquiries when they are no longer necessary. Furthermore, the statutory archiving obligations apply.

Online Presences on Social Media

We maintain online presences on social networks and platforms to communicate with customers, prospects, and users active there, and to inform them about our services. When accessing these networks and platforms, the terms and conditions and the data processing policies of the respective operators apply.

Unless otherwise stated in our privacy policy, we process user data when they communicate with us within social networks and platforms, for example, by posting on our online presences or sending us messages.

Contests/Competitions

The participant agrees that the collected data will be stored for the duration of the campaign and will only be used for the purpose of sending the prize. After the campaign ends, all data will be deleted. We do not share any data with third parties.

Youtube

We embed videos from the platform "YouTube," provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Use of Facebook Social Plugins

We use social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), based on our legitimate interests (i.e., the interest in analyzing, optimizing, and economically operating our online offering in accordance with Art. 6 (1) (f) GDPR). The plugins may display interaction elements or content (e.g., videos, graphics, or text posts) and can be identified by the Facebook logo (a white "f" on a blue tile), the terms "Like," "Gefällt mir," or a "thumbs up" symbol, or the addition of "Facebook Social Plugin." You can view the list and appearance of Facebook social plugins here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield framework and thus guarantees compliance with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When a user accesses a feature of our online offering that contains such a plugin, their device establishes a direct connection with Facebook's servers. The content of the plugin is transmitted directly from Facebook to the user's device and integrated into the online offering. As a result, usage profiles of users may be created from the processed data. We have no influence on the scope of the data collected by Facebook through this plugin and inform users accordingly based on our knowledge.

By embedding the plugins, Facebook receives the information that a user has accessed the corresponding page of our online offering. If the user is logged into Facebook, Facebook can associate the visit with the user's Facebook account. If users interact with the plugins, such as by clicking the Like button or posting a comment, the corresponding information is transmitted directly from the user's device to Facebook and stored there. Even if a user is not a member of Facebook, there is still the possibility that Facebook will learn and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and extent of data collection, as well as the further processing and use of data by Facebook, along with the related rights and privacy settings available to users, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

If a user is a member of Facebook and does not want Facebook to collect data about them via this online offering and link it with their Facebook account information, they must log out of Facebook before using our online offering and delete their cookies. Further settings and objections to the use of data for advertising purposes can be made within Facebook profile settings: https://www.facebook.com/settings?tab=ads, or via the US website http://www.aboutads.info/choices/, or the EU website http://www.youronlinechoices.com/. These settings are platform-independent, meaning they will be applied across all devices, such as desktop computers or mobile devices.

Instagram

Within our online offering, we may embed features and content from the service Instagram, provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. These may include content such as images, videos, or text, as well as buttons that allow users to express their preferences regarding the content, follow the authors of the content, or subscribe to our posts. If users are members of the Instagram platform, Instagram may associate the viewing of the above-mentioned content and features with the users' profiles on Instagram.

For more information, please refer to Instagram's privacy policy: http://instagram.com/about/legal/privacy/.

TikTok

We use features and content from the social network TikTok within our online offering, which is operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Inc., 5800 Bristol Parkway, Culver City, CA 90230, USA.

This may include embedding content such as videos, images, or text, and buttons that allow users to interact with our posts. If users are members of the TikTok platform, TikTok may associate the viewing of the above-mentioned content and features with the users' profiles on TikTok.

TikTok processes personal data in the USA and other third countries. For more information on TikTok's data processing, please refer to TikTok's privacy policy: https://www.tiktok.com/legal/privacy-policy.

Links

Our websites contain links to other websites over which we have no control. We cannot assume any responsibility for the privacy practices or the content of these websites.

In conclusion

We reserve the right to change this privacy policy at any time, so please review it regularly. Changes and clarifications will take effect immediately upon their publication on the website. If we make significant changes to this policy, we will notify you here about those changes. This way, you will know what information we collect, how we use it, and under what circumstances we may use and/or disclose it.