Privacy Policy

Note: This is an English translation of the German Datenschutzerklärung. In the event of any discrepancies or differences in interpretation, the German version shall prevail and be legally binding.

The controller responsible for data processing is:

Aliza Coronel
Professor W.H. Keesomlaan 12
1183 DJ
Netherlands
aliza@babykids.nl

We appreciate your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file containing, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access.

This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the website and improving our services. This serves to safeguard our legitimate interests in the correct presentation of our services, which prevail in the context of a balancing of interests, in accordance with Art. 6(1)(f) GDPR.

All access data will be deleted no later than one month after the end of your visit to the website.

1.1 Hosting

The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf.

Unless otherwise stated in this Privacy Policy, all access data and all data collected through the forms provided on this website are processed on their servers.

If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Canada, New Zealand, Japan, the United Kingdom, and the United States.

The adequacy decision for the United States serves as the basis for transfers to third countries insofar as the respective service provider is certified. Until our service providers are certified, data transfers continue to be based on the European Commission's Standard Contractual Clauses.

Our service providers are located and/or use servers in the following countries: Australia, India, and Singapore.

There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on the European Commission's Standard Contractual Clauses.

1.2 Content Delivery Network

For the purpose of reducing loading times, we use a so-called Content Delivery Network ("CDN") for some of our services.

With this service, content such as large media files is delivered via regionally distributed servers operated by external CDN service providers. Access data is therefore processed on the service providers' servers.

Our service providers act on our behalf as processors. Our service providers are located and/or use servers in countries outside the EU and EEA. There is no adequacy decision by the European Commission for these countries.

Our cooperation with them is based on the European Commission's Standard Contractual Clauses.

If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

2. Data Processing for Contact and Customer Communication

Contact

When you contact us, we collect personal data in accordance with Art. 6(1)(b) GDPR in order to process your enquiries if you voluntarily provide this data when contacting us, for example via a contact form, live chat tool, or email.

Mandatory fields are marked as such because, in these cases, we require the data in order to process your enquiry. The data collected can be seen in the respective input forms.

Once your enquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to use the data beyond this scope where permitted by law and about which we inform you in this Privacy Policy.

Once your customer enquiry has been fully processed, further processing of your data will be restricted and the data will be deleted after the expiry of the retention periods under tax and commercial law in accordance with Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data or we reserve the right to further use the data where permitted by law.

3. Advertising by Email

3.1 Email Newsletter with Subscription and Newsletter Tracking

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to regularly send you our email newsletter on the basis of your consent in accordance with Art. 6(1)(a) GDPR.

You can unsubscribe from the newsletter at any time, either by sending a message using the contact option described below or by using the designated link in the newsletter.

After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to further use the data where permitted by law and about which we inform you in this Privacy Policy.

Please note that when sending the newsletter, we evaluate your user behaviour. For this purpose, we also analyse your interaction with our newsletter by measuring, storing, and evaluating open rates and click-through rates in order to design future newsletter campaigns ("Newsletter Tracking").

For this analysis, the emails sent contain single-pixel technologies, such as web beacons and tracking pixels. For the analysis, we link in particular the following "newsletter data":

• the page from which the page was requested (the so-called referrer URL), as well as the date and time of access;
• a description of the type of web browser used;
• the IP address of the requesting computer;
• the email address;
• the date and time of registration and confirmation;
• the single-pixel technologies with your email address or IP address and, where applicable, an individual ID.

Links contained in the newsletter may also contain this ID.

If you do not wish to have Newsletter Tracking, you can unsubscribe from the newsletter at any time as described above.

The information will be stored for as long as you are subscribed to the newsletter.

3.2 Newsletter Distribution

The newsletter and the Newsletter Tracking described above may also be carried out by our service providers as part of processing on our behalf.

If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

Our service providers are located and/or use servers in the United States, for which the European Commission has determined an adequate level of data protection.

The adequacy decision for the United States serves as the basis for transfers to third countries insofar as the respective service provider is certified. Such certification is in place.

Our service providers are located and/or use servers in Australia. There is no adequacy decision by the European Commission for this country. Our cooperation with them is based on the European Commission's Standard Contractual Clauses.

Our service providers are also located and/or use servers in the United Kingdom, for which the European Commission has determined an adequate level of data protection.

4. Cookies and Other Technologies

4.1 General Information

To make your visit to our website attractive and to enable the use of certain functions, we use technologies, including so-called cookies, on various pages.

Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser ("session cookies").

Other cookies remain on your device and enable us to recognise your browser the next time you visit ("persistent cookies").

Protection of Privacy on End Devices

When you use our online services, we use technologies that are strictly necessary to provide the expressly requested telemedia service.

In this respect, storing information on your device or accessing information already stored on your device does not require consent.

For functions that are not strictly necessary, storing information on your device or accessing information already stored on your device requires your consent.

Please note that if you do not provide your consent, certain parts of the website may not be fully usable. Any consent you have given will remain valid until you adjust or reset the relevant settings on your device.

Subsequent Data Processing Through Cookies and Other Technologies

We use technologies that are strictly necessary for the use of certain functions of our website, such as website preference settings.

These technologies collect and process your IP address, the time of your visit, device and browser information, and information about your use of our website, such as information about your preferences.

This serves to safeguard our legitimate interests in the optimised presentation of our services, which prevail in the context of a balancing of interests, in accordance with Art. 6(1)(f) GDPR.

We also use technologies to fulfil our legal obligations, for example to demonstrate consent to the processing of your personal data, as well as for web analytics and online marketing.

Further information, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.

Cookie Settings

You can find the cookie settings for your browser using the relevant settings for Microsoft Edge™, Safari™, Chrome™, Firefox™, and Opera™.

Where you have consented to the use of technologies in accordance with Art. 6(1)(a) GDPR, you can withdraw your consent at any time by sending a message using the contact option described in this Privacy Policy.

Alternatively, you can visit: nanit.de.

If you do not accept cookies, the functionality of our website may be limited.

4.2 Cookiebot Consent Management Platform

We use Cookiebot on our website to inform you about the cookies and other technologies we use and, where necessary, to obtain, manage, and document your consent to the processing of your personal data through these technologies.

This is necessary in accordance with Art. 6(1)(c) GDPR to fulfil our legal obligation under Art. 7(1) GDPR to be able to demonstrate your consent to the processing of your personal data.

Cookiebot is a service provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf.

After you submit your cookie declaration on our website, Cookiebot's web server stores your anonymised IP address, the date and time of your declaration, browser information, the URL from which the declaration was submitted, information about your consent behaviour, and an anonymous random key.

A cookie containing information about your consent behaviour and the key is also used.

Your data will be deleted after twelve months unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to further use the data where permitted by law.

Our service providers are located and/or use servers in the United States, for which the European Commission has determined an adequate level of data protection.

The adequacy decision for the United States serves as the basis for transfers to third countries insofar as the respective service provider is certified. Such certification is in place.

5. Use of Cookies and Other Technologies

We use the following cookies and other third-party technologies on our website.

Unless otherwise specified for individual technologies, this is based on your consent in accordance with Art. 6(1)(a) GDPR.

Once the purpose no longer applies and we have stopped using the respective technology, the data collected in this context will be deleted.

You can withdraw your consent at any time with effect for the future.

Further information about your options for withdrawing consent can be found in the "Cookies and Other Technologies" section.

5.1 Use of Google Services

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Information automatically collected by Google technologies about your use of our website is generally transferred to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Unless otherwise specified for individual technologies, data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR.

Further information about data processing by Google can be found in Google's privacy information.

Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection.

Our service providers are also located and/or use servers in countries outside the EU and EEA for which there is no adequacy decision by the European Commission. Our cooperation with them is based on the European Commission's Standard Contractual Clauses.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data including your IP address, the time of your visit, device and browser information, and information about your use of our website. Pseudonymised user profiles are created from this data.

Cookies may be used for this purpose.

If you visit our website from within the EU, your IP address is stored on a server located in the EU for the purpose of deriving location data and is then immediately deleted before traffic is forwarded to other Google servers for further processing.

Data processing is carried out on the basis of a data processing agreement with Google.

For the purpose of optimising the marketing of our website, we have enabled the data sharing settings for "Google products and services."

This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services.

The sharing of data with Google under these data sharing settings is based on an additional agreement between controllers. We have no influence over Google's subsequent processing of the data.

If you do not consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place.

To address gaps in web analytics through behavioural and conversion modelling, pings containing data such as User-Agent, information about your consent behaviour, screen resolution, and IP address are sent to Google.

Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing Cookie may be placed when you visit our website.

It automatically enables interest-based advertising through the collection and processing of data such as your IP address, the time of your visit, device and browser information, and information about your use of our website, using a pseudonymous cookie ID and based on the pages you have visited.

Further data processing only takes place if you have enabled the "personalised advertising" setting in your Google Account.

If you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behaviour if you accessed our website through a Google Ads advertisement.

Cookies may be used for this purpose, and data may be collected, including your IP address, time of visit, device and browser information, and information about your use of our website based on events specified by us, such as visiting a webpage or subscribing to a newsletter.

Pseudonymised user profiles may be created from this information.

If you do not consent to the use of Google Ads in accordance with Art. 6(1)(a) GDPR, no cookies will be stored on or read from your device. The data processing described above will not take place.

To address gaps in web analytics through behavioural and conversion modelling, pings containing data such as User-Agent, information about your consent behaviour, screen resolution, IP address, page URL, and information about ad clicks in URL parameters are sent to Google.

Your IP address is used to determine the IP country.

Google Tag Manager

Google Tag Manager enables us to manage various codes and services on our website.

When implementing individual tags, Google may also process personal data, such as IP addresses and online identifiers, including cookies.

Data processing is carried out on the basis of a data processing agreement with Google.

Google Tag Manager enables the integration of various services and technologies.

If you do not wish to use certain tracking services and have therefore disabled them, the deactivation will remain in effect for all affected tracking tags integrated via Google Tag Manager.

5.2 Use of Microsoft Services

We use the technologies described below from Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland ("Microsoft").

Data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR.

Information automatically collected by Microsoft technologies about your use of our website is generally transferred to and stored on a server operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Further information about data processing by Microsoft can be found in Microsoft's privacy information.

Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection.

Our service providers are also located and/or use servers in countries outside the EU and EEA for which there is no adequacy decision by the European Commission. Our cooperation with them is based on the European Commission's Standard Contractual Clauses.

Microsoft Advertising

For advertising purposes in Bing, Yahoo, and MSN search results and on third-party websites, the so-called Microsoft Advertising Remarketing Cookie may be placed when you visit our website.

This automatically enables interest-based advertising through the collection and processing of data such as your IP address, the time of your visit, device and browser information, and information about your use of our website, using a pseudonymous cookie ID and based on the pages you have visited.

5.3 Use of Facebook Services

Facebook Ads (Ads Manager)

We use Facebook Ads to advertise this website on Facebook (by Meta) and other platforms.

We determine the parameters of each advertising campaign. Facebook (by Meta) is responsible for the specific implementation, particularly the decision regarding the placement of advertisements for individual users.

Unless otherwise specified for individual technologies, data processing is based on an agreement between joint controllers in accordance with Art. 26 GDPR.

Joint responsibility is limited to the collection of data and its transfer to Meta Platforms Ireland. Subsequent processing of the data by Meta Platforms Ireland is not covered by this joint responsibility.

Based on statistics regarding visitor activity on our website generated through the Facebook Pixel, we use Facebook Custom Audiences to carry out group-based advertising on Facebook (by Meta) by defining the characteristics of the relevant target audience.

Based on the pseudonymous cookie ID set by the Facebook Pixel and the data collected about your usage behaviour on our website, we use Facebook Pixel Remarketing to display personalised advertising.

Through Facebook Pixel Conversions, we measure your subsequent usage behaviour for web analysis and event tracking when you access our website through a Facebook Ads advertisement.

Data processing is carried out on the basis of a data processing agreement with Facebook (by Meta).

6. Social Media

Our Online Presence on Facebook (by Meta) and YouTube

Where you have given your consent to the respective social media operator in accordance with Art. 6(1)(a) GDPR, your data is automatically collected and stored for market research and advertising purposes when you visit our online presence on the social media platforms mentioned above.

Pseudonymised user profiles may be created from this data.

These profiles may be used, for example, to display advertisements within and outside the platforms that are likely to correspond to your interests.

Cookies are generally used for this purpose.

Detailed information about the processing and use of data by the respective social media operator, contact options, your rights, and settings for protecting your privacy can be found in the privacy information provided by the respective providers.

If you still require assistance in this regard, you can contact us.

Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland").

Information automatically collected by Meta Platforms Ireland about your use of our Facebook (by Meta) online presence is generally transferred to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.

Data processing in connection with visiting a Facebook (by Meta) fan page is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: United States, Canada, Japan, South Korea, New Zealand, United Kingdom, and Argentina.

The adequacy decision for the United States serves as the basis for transfers to third countries insofar as the respective service provider is certified. Such certification is in place.

Our service providers are located and/or use servers in Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico.

There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on the European Commission's Standard Contractual Clauses.

YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Information automatically collected by Google about your use of our online presence on YouTube is generally transferred to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection.

Our service providers are also located and/or use servers in countries outside the EU and EEA for which there is no adequacy decision by the European Commission. Our cooperation with them is based on the European Commission's Standard Contractual Clauses.

7. Contact Options and Your Rights

7.1 Your Rights

As a data subject, you have the following rights:

• pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• pursuant to Art. 16 GDPR, the right to request the immediate correction of inaccurate personal data or completion of your personal data stored by us;
• pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is necessary for exercising the right to freedom of expression and information, complying with a legal obligation, reasons of public interest, or the establishment, exercise, or defence of legal claims;
• pursuant to Art. 18 GDPR, the right to request restriction of the processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose its deletion, we no longer need the data but you require it for the establishment, exercise, or defence of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller;
• pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority at your usual place of residence or workplace or at our company's registered office.

Right to Object

Where we process personal data as described above in order to safeguard our legitimate interests, which prevail in the context of a balancing of interests, you may object to this processing with effect for the future.

If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above.

If the processing is carried out for other purposes, you only have a right to object if there are grounds arising from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing serves the establishment, exercise, or defence of legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.

To easily exercise your rights, including access, rectification, deletion, or data portability, you can contact us at any time at:

service@nanit.de

You can use this option to directly request the updating, deletion, or download of your personal data.

7.2 Contact Options

If you have any questions regarding the collection, processing, or use of your personal data, requests for information, correction, restriction, or deletion of data, withdrawal of consent granted, or objections to a specific use of data, please contact us directly using the contact details provided in our Legal Notice (Impressum).