Data Privacy Statement - BrandFuze GmbH

We are pleased about your visit to our website and your interest in our company and our services. When using our services by visiting our website, personal data is generated which we process in accordance with the applicable laws. We have our headquarters in Hamburg. The data protection regulations applicable in Germany apply.

1. Responsible body:

This privacy policy applies to the data processing by:

    Brand Fuze GmbH
    Managing Director Frank Lohstöter
    Van-der-Smissen-Str. 3 | 22767 Hamburg
    Email: info@lightboxx.io

2. Processing of personal data

The use of our website is usually possible without the explicit provision of personal data.

By calling up our Internet services, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which the access takes place (referrer URL),
- the browser used and, if applicable, the operating system of your computer and the name of your access provider.

The above-mentioned data will be processed by us for the following purposes:
- To ensure a smooth set-up of the website,
- Guarantee a comfortable use of our website,
- Evaluation of system security and stability

The legal basis for the data processing is
Art. 6 para. 1 sentence 1 point f GDPR.
Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the collected data for drawing conclusions about your person.

In addition, we use cookies and analysis services for the operation of our website, which come into play during your visit. You will find more detailed explanations below.

When you register for our newsletter:

If you have expressed consent in accordance with
Art. 6 para. 1 sentence 1 point a GDPR,
we will use your e-mail address to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to provide an e-mail address.

It is possible to unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can send your unsubscription request at any time by e-mail to newsletter@lightboxx.io.

When using our contact form: For questions of any kind, we offer you the opportunity to contact us using a form provided on the website. In doing so, it is necessary to provide a valid e-mail address so that we know who the request comes from and can answer it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with
Art. 6 Para. 1 sentence 1 point a GDPR
on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after completion of the request you have made.

Google reCAPTCHA

For the purpose of protection against misuse of our contact form as well as against spam, we use the Google reCAPTCHA service on this website.
Google reCAPTCHA is a service provided by Google Ireland Limited, a company incorporated and operated under the laws of Ireland with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de).
By verifying a manual entry, this service prevents automated software (so-called bots) from performing abusive activities on the website. In accordance with Art. 6 para. 1 sentence 1 point f GDPR, this serves to protect our legitimate interests in protecting our website from misuse as well as in ensuring that our online presence is displayed without disruption.

Google reCAPTCHA uses a code integrated into the website, a so-called JavaScript, to use methods within the scope of the check which enable an analysis of the use of the website by you, such as cookies. The automatically collected information about your use of this website including your IP address is usually transferred to a Google server in the USA and stored there. In addition, other cookies stored by Google services in your browser are evaluated by Google reCAPTCHA.

A readout or storage of personal data from the input fields of the respective form does not take place.

As far as information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

Further information on terms of use and data protection can be found at
https://marketingplatform.google.com/about/analytics/terms/gb/.html
and
https://policies.google.com/?hl=en.

3. Information disclosure

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:
you have given your express consent in accordance with
Art. 6 Para. 1 sentence 1 point a GDPR;
the disclosure pursuant to
Art. 6 para. 1 sentence 1 point f GDPR
is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding and legitimate interest of protection in not disclosing your data;
in the event that there is a legal obligation to disclose your data pursuant to
Art. 6 para. 1 sentence 1 point c GDPR,
and;
this is legally permissible and necessary for the processing of contractual relationships with you in accordance with
Art. 6 Para. 1 sentence 1 point b GDPR.

4. Cookies

We use cookies. These are small files being automatically generated by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our website.

The cookies contain information that is related to the specific end device in use. This does not mean, however, that we are instantaneously informed about your identity.

The use of cookies enables us to make the use of our services more pleasant for you and improves the user experience. Our so-called session cookies, for example, recognize that you already have visited individual pages of our website during the session. These cookies are automatically deleted after leaving our site.

In addition, to enhance user-friendliness, we use temporary cookies, which are stored on your end device for a certain, defined period of time. These cookies enable us to automatically recognize that you have already been with us before when you visit our website again. Entries and settings you have made previously are kept, so that you would not have to re-enter them.

Finally we use cookies to record the use of our website statistically and to evaluate ways of optimizing our services for you (see below).  These cookies are automatically deleted after a defined time.

The data processed by cookies is required for the above-mentioned purposes to protect our legitimate interests and those of third parties in accordance with
Art. 6 Para. 1 sentence 1 point f GDPR.

Most browsers automatically accept cookies. You may configure your browser so that no cookies are stored on your computer or in a way that a message always appears before a new cookie is being created. Completely deactivating cookies may mean that you cannot use all the functions of our website.

5. Analysis tools

Google Analytics: If you have given your consent, this website uses Google Analytics, a web analysis service provided by Google Ireland Limited. The use includes the operating mode Universal Analytics, enabling to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyze the activities of a user across devices.

Google Analytics uses cookies, which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA where they are stored.

However, if IP anonymization is activated on a website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

We would like to point out that Google Analytics has been extended to include IP anonymisation on this website in order to ensure anonymous recording of IP addresses (so-called IP masking). The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.

Further information on terms of use and data protection can be found at
https://marketingplatform.google.com/about/analytics/terms/gb/.html
and
https://policies.google.com/?hl=en.

Purposes of processing: On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet.

Legal basis: The legal basis for the use of Google Analytics is your consent according to
Art. 6 Para. 1 sentence 1 point a GDPR.
Recipients / categories of recipients The recipient of the collected data is Google. The personal data is transferred to the USA under the EU-US Privacy Shield on the basis of the adequacy decision of the European Commission. The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

Rights of affected parties: You can revoke your consent at any time with effect for the future by preventing the storage of cookies by means of a corresponding setting in your browser software; however, we would like to point out that in this case may not be able to use all functions of this website to their full extent.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing a browser add-on:
https://tools.google.com/dlpage/gaoptout?hl=en.
Opt-out cookies prevent the future collection of your data when visiting this website. To prevent Universal Analytics from collecting data across multiple devices, you must opt-out on all systems in use.

6. Social media plug-ins 

6.1 Vimeo

We include videos on our website through the Vimeo.com portal of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA ("Vimeo").

When you access a page that embeds videos through Vimeo, only embedded video windows with a "play" icon are loaded. When you press the "Play" button, an information text is displayed that explains how your data is processed by playing the Vimeo video.
Only when you confirm this by clicking "Ok" is a connection established to the Vimeo servers in the USA. Information about your visit and your IP address will be stored there. Interactions with the Vimeo plugins, such as clicking the start button, are collected directly by Vimeo and stored there.

If you have a Vimeo user account and are logged in to Vimeo, Vimeo can associate your viewing of the video with your user account. If you do not want to do this, you must log out of Vimeo before visiting our website.

Vimeo allows for additional interactive functions with regard to the videos that we include, such as rating or sharing the videos. In order to use these features, you may need to log in with your Vimeo account or other providers (such as Facebook or Twitter). Vimeo's privacy policy, which provides more information about how Vimeo collects and uses your information, can be found at http://vimeo.com/privacy.

In addition, Vimeo also calls up the Google Analytics service via the iFrame in which the video is integrated. For more information on how Google Analytics works and your options for objection, please refer to the corresponding section of this privacy policy.
The basis for the use of your data is your consent. The transfer of your data to Vimeo in the USA is carried out in accordance with the EU-USA Privacy Shield.

6.2 YouTube Video Plugins

On our website third-party content is being partially integrated. This specific content is provided by Google LLC via the YouTube video service.
Youtube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

For videos hosted on Youtube integrated on our site, the extended data protection setting is activated, meaning that no information from website visitors is collected and stored by YouTube unless they play the video.

The integration of the videos serves our overriding legitimate interests in an optimal marketing of our offer.
The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your relevant rights and setting options for the protection of your privacy can be found in the data protection information of Google http://www.google.com/intl/de/+/policy/+1button.html.

The transmission of your data to Google in the USA takes place within the framework of the EU-USA Privacy Shield.

7. Rights of data subjects

You have the right to request information about your personal data processed by us. In accordance with Art. 16 GDPR, you can demand the correction of incorrect or incomplete personal data stored by us; in accordance with Art. 17 GDPR, you can demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

In accordance with Art. 18 GDPR, you can demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing in accordance with Art. 21 GDPR.

You may request that your personal data that you have provided us with be made available to you in machine-readable format.

You can revoke your consent once granted to us at any time. As a result, we may not continue the data processing based on this consent in the future.

Finally, you can complain about us to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our registered office.

If your personal data are processed on the basis of legitimate interests, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for doing so which arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us. If you wish to exercise your right of revocation or objection, simply send an e-mail to info@lightboxx.io.

8. Data security

We use the common SSL (Secure Socket Layer) method in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by closed key look symbol displayed on the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

9. Actuality and change of this privacy policy

This data privacy statement is currently valid and is dated January 2020. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to amend this data protection declaration. The current data protection declaration can be called up and printed out at any time on the website at https://lightboxx.io/privacy-policy