Thank you for your interest in our online service at www.faller-create.de (hereinafter referred to as the “Website“).
Gebr. FALLER GmbH (hereinafter referred to as “we” or “us“), represented by the managing director, Mr Horst Neidhard, Kreuzstraße 9, 78148 Gütenbach, which is responsible for the collecting, processing and use of data, takes the protection of your personal data provided in the course of visiting our website seriously. Your data is protected and processed according to the provisions of the law. Below, you can find information about which data is recorded during your visit to our website and how it is used:
- General use of the website
You may visit our website without providing any personal information. We store access data – in addition to the data mentioned below – without any personal identifiers, such as the name of your internet service provider, the website which directed you to us or the name of the file requested. This data is only evaluated in order to improve our service and does not enable us to make any inferences about your person.
- a) Online configurator and contact options
Personal data is collected if you provide it to us voluntarily using the input interfaces, for example when you register as a customer, during the ordering process, or when using one of our communication channels. You can create a customer account with your email address so that you are able to create a model using the online configurator and save the model. To secure your data, it is necessary to input a password, which you may choose freely. Then, you can log in using your email address and the password.
The provision of master data (name, address), payment data (e.g. bank details, invoices) and contract data (3D model, object of the contract) is only required if you place an order. In the case of an order, we transmit your data to TinkerToys GmbH, which produces the 3D objects according to your specifications and then sends them directly to you.
You can view and process the data stored in the customer account at any time.
The legal basis for the processing of this data is constituted by Article 6 Para. 1 Clause 1(b) of the General Data Protection Regulation (“GDPR”). Accordingly, we are permitted to process data insofar as the processing is necessary for the fulfilment of a contract to which you are a party or for the implementation of pre-contractual measures. For the rest, we base data processing on our overriding legitimate interests (Article 6 Para. 1 Clause 1(f) GDPR); legitimate purposes are the processing and tracking of user inquiries as well as the division of labour in the production and delivery of 3D objects.
We only use the data provided to us without your separate consent for the purpose for which you provided it to us. When the execution of the contract is complete, your data is blocked for further use and deleted after the expiry of the retention periods under tax and commercial law, provided that you have not expressly consented to the continued use of your data.
In addition, you may also terminate your customer account at any time via email (firstname.lastname@example.org). Your email will be blocked for future access upon receipt of your termination notice. Your data will be deleted from the servers with final effect as soon as (and to the extent that) it is no longer required for the performance and execution of a contract which is in effect at the time of its deletion, for execution and accounting purposes or to fulfil statutory reporting and retention obligations.
If you send us electronic inquiries via our contact form, your data – as well as the data from written or email inquiries – will only be used for correspondence with you. Data will only be disclosed to third parties if this is necessary to perform the contract or if you have given your consent to this.
The provision of your personal data is not required by law. This means that you are not obliged to provide us with your personal data. However, if you do not provide us with your personal data, this may mean that we may not be able to communicate with you or that we may not be able to enter into or process a contractual relationship.
- b) Participation in competitions or sweepstakes
When participating in competitions or sweepstakes, your data (e.g. email address, name, date of birth, address) will only be used for the purposes described and for correspondence with you. Personal data will only be published or disclosed to third parties to the extent that this is necessary to perform the contract or you have given your consent.
Your data mentioned above will be used by us on the basis of Article 6 Para. 1 Clause 1(a) GDPR exclusively for implementation of the competition or the sweepstake. The data will be deleted immediately as soon as the competition or sweepstake has been concluded. The above-mentioned data will then be deleted unless we can justify the storage on another legal basis.
- c) Newsletter
On our website, we offer you the option of signing up for our newsletter. In order to receive our newsletter, you need to provide us with an email address. When registering for the newsletter, we use the so-called double opt-in procedure: after registering, you will receive an email from us with a confirmation link. Only once you have clicked on this link do we add the email address to our mailing list.
Your email address will be used by us on the basis of Article 6 Para. 1 Clause 1(a) GDPR exclusively for the sending of the newsletter.
You may unsubscribe from the newsletter at any time. All you need to do is click on “Unsubscribe” in the newsletter or send a short message to the contact details mentioned in Clause 9. After you unsubscribe, your email address will be deleted.
- Overview: cookies and integration of third-party content (marketing and external media)
To improve your experience of our website and to enable the use of certain features, on our website we use so-called
- essential cookies, i.e. cookies which are absolutely necessary for the operation of the website and which we process from every visitor to our website, see Clause 3;
as well as, insofar as you have given us your express consent, also
- cookies in the area of marketing, i.e. cookies that we use to measure our reach, compile statistics and/or fill advertising spaces, see Clause 4, and
- other content from external third-party providers (external media), i.e. functional and content elements of online presences such as social platforms, which we integrate into our website, see Clause 5.
Cookies are small text files that are stored on your device. Information about you during or after your visit to the website is stored in these text files (e.g. the selection of a language, the shopping cart, etc.). Some of the cookies we use are deleted again at the end of your browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your end device for a certain time and enable us (or our partner companies) to recognise your browser on return visits (so-called permanent cookies). Some of the cookies are placed by ourselves (so-called first-party cookies), others by third-party providers (so-called third-party cookies). Technologies that create so-called user IDs work in a similar fashion to cookies in order to recognise you. From a technical point of view, this works by assigning pseudonymised online labels, for example when accessing content from external third-party providers. For the sake of clarity, we have depicted cookies in the area of marketing and the integration of other content from external third parties below.
When you visit our website for the first time, a banner with the title “Data privacy settings” appears. Within this banner, you can give your consent for cookies in the area of “Marketing” (see Clause 4) and for the integration of “External Media” (see Clause 5). In this case, we base the processing of your personal data as described in Clauses 4 and 5 on your consent in accordance with Article 6 Para. 1 Clause 1(a) GDPR.
If you do not give us your consent, we only process the so-called necessary cookies described in Clause 3. The legal basis for the processing of this data is Article 6 Para. 1 Clause 1(b) GDPR, insofar as the processing is necessary for the fulfilment of a contract to which you are a party or for the implementation of pre-contractual measures. For the rest, we base data processing on our overriding legitimate interests (Article 6 Para. 1 Clause 1(f) GDPR); in this case, the legitimate purposes are to provide a user-friendly website with interaction options.
|Instructions for revocation and objection|
You may revoke your consent at any time or, if we base the processing of your personal data on our legitimate interest and the processing is not absolutely necessary for the fulfilment of the contract, you may object to this processing at any time.
Insofar as no separate technical method is described in Clause 4 and Clause 5 below to prevent the respective cookie or the integration of third-party content, you can adjust your browser settings (e.g. Mozilla Firefox, Internet Explorer, Chrome etc.) so that you are notified of cookie placement and can decide on a case-by-case basis whether they may be placed or not, or allow cookies to be accepted in certain cases or excluded in general. If cookies are disabled, some features of our website may not be available.
In addition, you can use a variety of external services to specifically prevent the use of certain cookies (e.g. for marketing purposes) (such as at https://optout.aboutads.info).
If you have any questions about individual cookies or the integration of third-party content as well as your options for revocation and/or objection, please contact us using the contact details provided in Clause 9.
- Essential cookies
When you visit the website, the following necessary cookies are used compulsorily, i.e. regardless of your consent, and the related data is processed:
- cookie_notice_accepted: true: permanent cookie that stores your response to the displayed data privacy settings banner.
- wp-wpml_current_language-Cookie: permanent cookie that saves your language selection.
The legal basis for the processing of this data, insofar as personal data is included, is Article 6 Para. 1 Clause 1(b) GDPR, insofar as the processing is necessary for the fulfilment of a contract to which you are a party or for the implementation of pre-contractual measures. For the rest, we base data processing on our overriding legitimate interests (Article 6 Para. 1 Clause 1(f) GDPR); the legitimate purposes are to provide a user-friendly website with interaction options.
The permanent cookies are stored for a period of 90 days and then deleted.
- Cookies in the area of marketing
When you visit our website for the first time, a banner with the title “Data privacy settings” appears. Within this banner, you may give your consent for cookies in the area of “Marketing” (see Clause 4 for this) and for the integration of “External media” (see Clause 5 for this). Insofar as you have provided your consent for cookies in the area of “Marketing”, we base the processing of your personal data as described in Clause 4 on your consent in accordance with Article 6 Para. 1 Clause 1(a) GDPR. Otherwise we do not process the data described in Clause 4.
If consent is given, the data is processed in the area of “Marketing” for the purpose of marketing and evaluating digital content in digital advertising spaces. For this purpose, user profiles are created and certain information (e.g. about websites visited, social media platforms used, technical data on the browser etc.) is stored in cookies or user IDs (see Clause 2 above) in order to be able to only display relevant content in the digital advertising space for the respective user. In addition, the IP address of the user may be processed in individual cases, whereby we use the available pseudonymisation methods (e.g. by shortening the IP address) in order to best protect your complete IP address.
In principle, the cookies or user IDs can also be read, analysed and supplemented with other data on other websites that use the same marketing process. In individual cases, users’ unencrypted data (such as their name or an email address) can also be assigned to the profiles, provided that the users provide the corresponding unencrypted data on the other websites.
Unless you find any information that states otherwise below, the cookies are stored for a period of 90 days.
We use the following cookies in the area of Marketing:
- a) Google Analytics
For the granting of your consent as well as a possible revocation, the general explanations under Clause 2 apply. You may also prevent data generated by the cookie and relating to your use of the website (including your IP address) from being collected and processed by Google by downloading and installing the browser plugin available at the following link: (https://tools.google.com/dlpage/gaoptout?hl=de). In view of the discussions regarding the use of analytics tools with a full IP address, please note that this website uses Google Analytics with the extension “_anonymizeIp()”, meaning that IP addresses are only used in shortened form in order to eliminate direct references to specific persons.
Google Universal Analytics
As part of the above-described use of Google Analytics using the Google Analytics Tracking Code (GACT), we generate a so-called ”user ID” to be able to attribute interaction data from various digital devices of the user (computer, smartphone, tablet) and from different sessions to this unique ID.
The user ID is a function of Google Universal Analytics, a web analysis service of Google. By using this user ID, we find out how users interact with our online content using various end devices, or, as the case may be, in various sessions. The authentication of a certain user for the user ID we have implemented is only possible if we know the user, i.e. because they have registered in a personalised area on our website. If we send a unique user ID and the associated interaction data to Google Analytics, all activities in the reports which Google provides us with access to can be attributed to a user. We receive report views from Google in which only the data from sessions is provided for which a user ID and the associated data was sent to Google Analytics. Using this data view, we can achieve a better understanding of how the traffic in this segment is different from other traffic with regard to user behaviour. In this way, we can obtain accurate user figures and can analyse the experience of logged-in users.
The user ID acts as a pseudonym for the user. Besides the user ID, we do not forward any personal data of the user to Google. Google Universal Analytics also uses the extension “_anonymizeIp()” and therefore only forwards IP addresses in shortened form, in order to eliminate direct references to people.
We do not user Google Universal Analytics to analyse user behaviour beyond their use of the internet.
For the granting of your consent and a possible revocation, we refer to the explanations above regarding Google Analytics.
Google Analytics advertising functions
We have activated the following three analytics marketing functions in connection with Google Analytics: “Remarketing with Google Analytics”, “Reports on Impressions in the Google Display Network” and “Google Analytics Reports on Performance According to Demographic Characteristics and Interests”. By activating these functions, further data on access is recorded via a Google cookie for ad preferences, which goes beyond the standard implementation of Google Analytics.
- The analytics tool “Remarketing with Google Analytics” makes it possible to divide users into various segments – depending on which actions the user took on our website. Then, we can contact the user again via remarketing. We can display ad content which is specially geared towards the interests which this user had indicated in previous sessions (interest-based advertising). If the user leaves our website and goes to websites which (also) display advertisement formats from the Google Display Network, we may display advertisements to the user on the screen of his/her end device (display) which match the data accumulated in Google Analytics and thus his/her interests. To the extent that we have shown adverts on third party websites using Google Adwords and third parties have shown adverts on our website, we are – together with these third parties – a part of the Google (AdWord) Display Network and link Analytics with AdWords. Interest profiles are set up and managed within Google Analytics in the form of lists. We continue to control the setting in Google Adwords determining which campaigns are to be displayed on which interest profiles (lists). In general, third party providers, including Google, show our adverts on websites on the internet as follows: adverts are shown in various formats (text, picture, video) on websites and apps whose owners have entered into a partnership, e.g. with Google.
You can find further information about remarketing on the Google websites at https://support.google.com/analytics/answer/2611268.
- We use the analytics tool “Impression Reporting in the Google Display Network” to evaluate how our advert impressions, other uses of advertising services and interactions with these advert impressions and advertising services relate to visits to our website.
- We use the analytics tool “Google Analytics Reports on Performance According to Demographic Characteristics and Interests” to record analytics data on demographic characteristics (age, gender) and interests (affinity categories, segments with target groups with a high willingness to purchase, other categories) of the users. The reports provide us with information on the number of visitors during a certain period, who the users are and how their behaviour changes according to their attributes (e.g. male compared to female). Using this analysis, we can optimise advertising strategies for online campaigns.
You can find further information on Google websites at https://support.google.com/analytics/answer/2954071?hl=de&ref_topic=2799375
- To the extent that we use Analytics advertising functions to combine personal data with non-personal data which was collected with the help of the Google marketing products, this will only be done if we have informed you beforehand in a visible way about this combination and you have given us your consent (opt-in procedure). Otherwise, no combination will take place.
You may deactivate Google Analytics marketing functions and assert your right to object (opt-out), for example via your browser’s ads preferences manager by clicking the Google link: https://adssettings.google.com
Otherwise, for the granting of your consent and a possible revocation, we refer to the explanations above regarding Google Analytics.
- b) Google Tag Manager
If you give your consent, this website uses Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google Inc., 600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
With this tool we can manage website tags (markings) via a single interface. Google Tag Manager itself, which uses the tags, works without cookies and does not – according to information from Google – collect any personal data. The Tag Manager only triggers other tags, which in turn may collect data under certain circumstances. However, Google Tag Manager does not access this data.
For the granting of your consent as well as a possible revocation, the general explanations under Clause 2 apply. If you have deactivated cookies, this will be observed for all tracking tags that are used with Google Tag Manager. This means that Google Tag Manager does not change your cookie settings.
This information is based on the information provided by Google, available at https://www.google.com/intl/de/tagmanager/use-policy.html.
- c) Facebook Pixel
If you give your consent, this website uses Facebook Pixel, a service of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”); parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA.
With this tool, we can determine visitors to our website as a target group for the display of advertisements (so-called Facebook ads) and then only display the Facebook ads we have placed on the social platform Facebook to such Facebook users.
For the granting of your consent as well as a possible revocation, the general explanations under point 2 apply. You can also make an objection on the Facebook platform at https://www.facebook.com/settings?tab=ads.
- d) Microsoft Advertising (Bing)
If you give your consent, this website uses Microsoft Advertising (Bing), a service of Microsoft Ireland Operations Limited, One Microsoft Place South County Business Park, Leopardstown Dublin 18 (“Microsoft“); Parent company: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
With this tool we can determine visitors to our website as a target group for the display of advertisements and then only show the advertising content we have placed on the Bing search engine to such users.
For the granting of your consent as well as a possible revocation, the general explanations under Clause 2 apply. You can also file an objection on the Microsoft website at https://choice.microsoft.com/de-DE/opt-out.
- Data processing in the field of “External media” (including social media plugins)
When you visit our website for the first time, a banner with the title “Data privacy settings” appears. Within this banner, you can give your consent for cookies in the area of “Marketing” (see Clause 4) and for the integration of “External media” (see Clause 5). Insofar as you have given your consent for data processing in the area of “External media”, we base the processing of your personal data as described in Clause 5 on your consent in accordance with Article 6 Para. 1 Clause 1(a) GDPR. Otherwise we do not process the data described in Clause 5.
If you give your consent, we may integrate functional and content elements from the third-party providers shown below into our website. Functional and content elements may be, for example, images, videos, comments, social media buttons with interaction options or maps (“third-party content“).
This third-party content is integrated using so-called plugins, which means that you do not have to call up the third-party provider’s website, but you are shown the third-party content directly on our website. Displaying something in plugins requires that the third-party providers process your IP address in order to be able to display the third-party content and/or to receive your content. From a technical standpoint, the processing of the IP address is necessary in order to send the data to your browser. In addition, usage data (e.g. the website visited, access times), meta and communication data (e.g. device information), content data (e.g. texts, images or videos) and/or location data (e.g. about the location of the end device) may be processed for statistical or marketing purposes.
We may use third-party content from the following third-party providers on our website and the individual subpages:
Use of the social media platforms outside of our website
If you use the social media platforms or Google Maps outside of our plugins, for example by calling up our online presence, please note the following additional information:
By using the social media platforms, your personal data will be collected, transferred, stored, disclosed and/or used by those responsible and may be transferred to the United States and any other country where the social media platforms do business, regardless of where you live, and used there. The providers of the social media platforms are groups with parent companies outside of Europe, which, at most, feel themselves bound to European data protection regulations in a limited fashion. This may affect your rights as a data subject according to the GDPR.
As a rule, the providers of the external media process the following data:
- Data that you enter voluntarily, such as name, registration data, contact details and possibly data about your contacts from your address book (if you upload or synchronise this);
- Data that can be derived from the content you share (such as interests in certain topics);
- Data that can be derived from communication with third parties or the circumstances of your communication, such as the content of confidential messages, location-based information, information about wireless networks, etc.;
- Data that arises when you view content (even if you have not created an account), such as IP address, browser type, operating system, information about the previously accessed website etc.
We would like to point out that in this case, you use the social media platforms under your own responsibility. The use of the platforms is not necessary in order to contact us. You can also communicate with us using the contact details mentioned in Clause 9.
For information about who is responsible for the social media platforms we use, what data and for what purposes the social media platforms process data according to their own statements, information about security mechanisms that justify data transfer to other EU countries and about setting options for the platforms to protect your privacy, please see the listing above.
- Data security
When using our website, particularly the contact form and as part of the registration- and order process, your personal data is sent over the internet in encrypted form. We secure our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorised persons by means of appropriate technical and organisational measures. Your customer account can only be accessed by entering your personal password. You should always keep your access information confidential and close the browser window when you have completed communication with us, especially if you share your computer with other people.
Please note that data is generally not always transmitted securely on the Internet. In email correspondence in particular, protection during data exchanges cannot be guaranteed. We recommend that you do not send any particularly sensitive data to us by email or via the contact form.
- Disclosure of personal data
Your master and contract data is passed on to TinkerToys GmbH, which produces the 3D object and then sends it directly to a shipping company commissioned with the delivery. For the purposes of settling payments, we disclose your master and contract data to the credit institutions commissioned to handle payments, insofar as this is necessary for the realization of the payment.
We are legally permitted to pass on data to TinkerToys GmbH as well as to shipping and payment service providers. The legal basis is Article 6 Para. 1 Clause 1(b) GDPR, insofar as the processing is necessary for the fulfilment of a contract to which you are a party or for the implementation of pre-contractual measures. For the rest, we base the processing on the legal basis of protecting our legitimate interests (Article 6 Para. 1 Clause 1(f) GDPR). As part of the operation of our online shop, we rely on external assistance from shipping and payment service providers. The production of an individualised 3D object is technically very demanding and requires a division of labour in production and delivery. This interest outweighs your interest in your personal data not being processed, since we carefully select the recipients, ensure that the recipients have an adequate level of data protection, and the data transfer is kept to a minimum.
The payment service providers process their master data, payment data (such as account number, credit card number, passwords, TANs etc.) and contract data as independent data controllers. We do not receive any payment data from the payment service providers, but only a positive or negative message about the payment process. For the processing operations carried out by the payment service providers, their terms and conditions and data protection notices apply. We use the following payment service providers on our website:
As a matter of principle, your data will not be passed on to recipients domiciled outside the European Union or the European Economic Area – unless expressly explained in Clause 1. Insofar as data is transmitted to the servers of the providers of tracking or targeting technologies commissioned by us for the processing mentioned under Clauses 2 through 5, this data transmission takes place according to the principles of the so-called “EU-US Privacy Shield”.
- Rights of data subjects
According to applicable data protection laws, you have the following rights
- Right of access: You may request information about whether we process your personal data. If this is the case, you have the right to obtain information about this personal data and other information related to the processing (Article 15 GDPR). Please note that this right of access may be restricted or excluded in certain cases.
- Right to rectification: In the event that personal data about you is not (or is no longer) applicable or is incomplete, you may request that this data be corrected and, if necessary, supplemented (Article 16 GDPR).
- Right to deletion or restriction: If the legal requirements are met, you may request the deletion of your personal data (Article 17 GDPR) or the restriction of the processing of this data (Article 18 GDPR), for example if the processing of this personal data for the purposes for which we have collected it is no longer required.
- Right to information: If you have asserted the right to rectification, deletion or the restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or deletion of the data or the restriction of processing unless this turns out to be impossible or would involve disproportionate effort. You have the right to have us inform you about these recipients.
- Right to data portability: Under certain conditions, you have the right to receive the personal data concerning you, which you have provided to us, in a specific format or to transmit this data to another data controller (Article 20 GDPR).
- Right to lodge a complaint with a supervisory authority: You may lodge a complaint against the processing of your personal data by us with a data protection authority, in particular in the EU member state in which you are habitually resident or work or where there is an alleged violation of applicable data protection laws (Article 77 GDPR).
The supervisory authority responsible for Gebr. FALLER GmbH is the:
Baden-Württemberg State Data Protection and Freedom of Information Officer
Phone: +49 711 615 541 0
Fax: +49 711 615 541 15
|You also have the right to object to the processing of your personal data by us at any time, namely (i) for direct advertising at any time or (ii) otherwise for reasons that arise from your particular situation, if we process your personal data to protect our legitimate interests based on Article 6 Para. 1 Clause 1(f) GDPR (Article 21 Para. 1 and Para. 2 GDPR).|
In the event of an objection, we will always stop processing your personal data for direct advertising, and in the case of data processing for other reasons we will stop as a rule, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedom, or that the processing serves for the assertion, exercise or defence of legal claims.
To exercise your aforementioned rights, certain legal requirements must be met, and in certain cases your rights may be restricted due to legal exceptions, in particular the exceptions contained in Article 17 Para. 3 and Article 22 Para. 2 GDPR or in national laws.
To exercise your rights or if you have any questions, please contact us using the contact details provided in Clause 9.
- Contact person for data protection
If you have any questions relating to the collection, processing or use of your personal data, or if you would like to request information or the correction, blocking or deletion of data or revoke any consents given, please contact:
Gebr. FALLER GmbH
You can reach our data protection officer at email@example.com or at our postal address with the addition of “the Data Protection Officer”.