1. General Information and Principles of Data Processing

We are pleased that you have visited our website. Protecting your privacy and personal data when using our website is important to us. According to Art. 4 No. 1 of the GDPR, personal data includes all information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, address, phone number, email address, and IP address.

Data that cannot be associated with your person, such as through anonymization, does not qualify as personal data. The processing (e.g., collection, storage, reading, querying, use, transmission, deletion, or destruction) of personal data, as defined in Art. 4 No. 2 of the GDPR, always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of processing is achieved, and no legal retention obligations need to be observed. Here, you will find information on how we handle your personal data when you visit our website. To provide the functions and services of our website, it is necessary for us to collect personal data about you. We also explain the type and scope of the respective data processing, its purpose, the corresponding legal basis, and the respective storage period.

This privacy policy only applies to this website. It does not apply to other websites that we may reference via hyperlinks. We cannot be responsible for the confidential handling of your personal data on these third-party websites, as we have no influence over whether these companies comply with data protection regulations. Please inform yourself directly on these websites about how they handle your personal data. Below, you will find the contact details of the responsible entity.

2. Responsible Entity

The entity responsible for processing personal data on this website is:
BOOTSWERFT WINKLER
Lesumbroker Landstraße 191
28719 Bremen

3. Provision and Use of Website/Server Log Files

1. Type and Scope of Data Processing
   When you use this website without transmitting data to us in any other way (e.g., by placing an order), we collect technical data that is necessary for us to provide the website and that is automatically transmitted to our server through server log files. These include, among others:
   • IP address
   • Date and time of the request
   • Filename and URL of the request
   • Referring website
   • Access status/HTTP status code
   • Browser type
   • Language and version of the browser software
   • Operating system
2. Purpose and Legal Basis
   This processing is technically necessary to display our website to you. We also use this data to ensure the security and stability of our website. The legal basis for this processing is Art. 6 Para. 1 Sentence 1 lit. f) GDPR. The processing of the aforementioned data is necessary for providing a website and thus serves to protect a legitimate interest of our company.
3. Storage Duration
   As soon as the personal data mentioned is no longer required for displaying the website, it will be deleted. The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, the user has no right to object to this aspect. Further storage may be required in individual cases if this is mandated by law.

4. Use of Cookies

1. Type, Scope, and Purpose of Data Processing
   We use cookies. Cookies are small files that are sent by us to your device’s browser during your visit to our website and stored there. Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, allow us to perform various analyses. Some cookies can recognize the browser you are using on a subsequent visit to our website and transmit various information to us. We use cookies to facilitate and improve the use of our website. With the help of cookies, we can, for example, make our internet offering more user-friendly and effective for you by tracking your use of our website and identifying your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect the information directly through your browser. However, cookies do not cause any damage to your device. They cannot run programs and do not contain viruses. Various types of cookies are used on our website, and their type and function are explained below.
   • Temporary Cookies/Session Cookies
     Temporary cookies or session cookies are used on our website, which are automatically deleted as soon as you close your browser. With this type of cookie, it is possible to capture your session ID. This allows various requests from your browser to be assigned to a shared session, making it possible to recognize your device during subsequent visits to the website.
   • Permanent Cookies
     Permanent cookies are used on our website. Permanent cookies are stored in your browser for a longer period and can transmit information. The respective storage duration varies depending on the cookie. You can delete permanent cookies via your browser settings.
   • Third-Party Cookies
     We use analytical cookies to monitor anonymized user behavior on our website. We also use advertising cookies. These cookies allow user behavior to be tracked for advertising and targeted marketing purposes. Social media cookies enable connections to your social networks and sharing of content from our website within your networks.
   • Configuration of Browser Settings
     Most web browsers are preset to automatically accept cookies. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, please note that you may no longer be able to use all the functions of our website if cookies are disabled. You can also delete cookies already stored in your browser via your browser settings. Furthermore, it is possible to set your browser to notify you before cookies are stored. Since the various browsers can differ in their respective functions, we ask you to refer to the help menu of your browser for the respective configuration options. Disabling the use of cookies may require storing a permanent cookie on your computer. If you subsequently delete this cookie, you will need to deactivate it again.
2. Legal Basis
   Based on the purposes described, the legal basis for processing personal data using cookies is Art. 6 Para. 1 Sentence 1 lit. f) GDPR. Only those cookies that are technically essential to enable you to use the website can be based on this. If you have given us your consent to use cookies based on a notice from us on the website (“cookie banner”), the legal basis is additionally Art. 6 Para. 1 Sentence 1 lit. a) GDPR. This is necessary for cookies that allow analyzing your usage behavior and displaying corresponding advertisements.
3. Storage Duration
   As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information will be deleted. Further storage may be required in individual cases if this is mandated by law.

5. Data Transfer

We only pass on your personal data to third parties if:

1. You have given your explicit consent according to Art. 6 Para. 1 Sentence 1 lit. a) GDPR.
2. It is legally permissible and required under Art. 6 Para. 1 Sentence 1 lit. b) GDPR to fulfill a contractual relationship with you or to carry out pre-contractual measures.
3. There is a legal obligation for the transfer according to Art. 6 Para. 1 Sentence 1 lit. c) GDPR.
4. We are legally obliged to transfer data to government authorities, e.g., tax authorities, social insurance institutions, health insurance companies, supervisory authorities, and law enforcement agencies.
5. The transfer is necessary according to Art. 6 Para. 1 lit. f) GDPR to protect legitimate company interests and to assert, exercise, or defend legal claims, and there is no reason to assume that you have an overriding interest in not disclosing your data.
6. We use external service providers (so-called processors) in the context of processing according to Art. 28 GDPR, who are obliged to handle your data carefully.

We may use such service providers in the fields of IT, logistics, and telecommunications.

When transferring data to external parties in third countries, i.e., outside the EU or EEA, we ensure that these parties treat your personal data with the same care as within the EU or EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or when we ensure careful handling of personal data through contractual agreements or other suitable safeguards. We only transfer your data to companies in the USA if the requirements of the ECJ ruling of July 16, 2020, - C-311/18 - are complied with. If you have given us your consent, we also transfer data to companies located in the USA.

6. Tools

1. YOAST SEO
   To support search engine optimization of the site, we use the plugin “YOAST SEO.” According to WP support (https://wordpress.org/support/topic/yoast-gdpr/), the tool does not store personal data and is therefore GDPR-compliant. (Otherwise, consent would be required)

7. Data Subject Rights

Since we collect and process data from you, you have certain rights as a data subject of data processing:

• Right to information from us. If you exercise this right, we will inform you about the personal data we have processed about you.
• Right to rectification or erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw your consent
• Right to lodge a complaint with a supervisory authority
• Right to Object to Processing

Art. 21 GDPR allows you to object at any time to the processing of your personal data, which is based on Art. 6 Para. 1 Sentence 1 lit. e or f GDPR, for reasons arising from your particular situation.

Your Right of Withdrawal
You can withdraw your consent to process your personal data at any time. However, please note that the withdrawal will only take effect in the future.

8. Integration of Third-Party Services and Content

Within our online offering, we use content or service offerings from third-party providers based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering in accordance with Art. 6 (1) lit. f GDPR) to incorporate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”). This always requires that the third-party providers of this content perceive the IP address of the users, as they could not send the content to their browser without the IP address. The IP address is therefore necessary for the presentation of this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. Through the “pixel tags,” information such as visitor traffic on the pages of this website can be evaluated. The pseudonymized information may also be stored in cookies on the user's device and may include, among other things, technical information about the browser and operating system, referring websites, visit time, and further information about the use of our online offering, as well as be linked to such information from other sources.

Below is an overview of third-party providers and their content, along with links to their privacy policies, which provide further information on data processing and, in some cases, already mentioned options for objection (so-called opt-out):

External code from the WordPress plugin “WPBakery Page Builder,” provided by the third-party provider WPBakery (Rain-Task Limited) team, https://wpbakery.com/ https://wpbakery.com/Google Maps