Privacy Policy

cosnova GmbH (hereinafter referred to as "we") welcomes your interest in our company and The SIGN Tribe products. It is therefore our concern that you feel safe with respect to the protection of your personal data when visiting our website thesigntribe.com (hereinafter referred to as "website").

With this Data Protection Policy, we inform you about the nature, scope and purpose of the personal data collected, used and processed by us when using our website. Personal data includes all data personally related to you, such as name, address, email addresses and user behaviour.

Via the following links, you can connect directly with the respective topics to find out how we use your personal data. You can also read, save and print this Data Protection Policy as an entire document.

Content of the Data Protection Policy

1. Information on the data protection controller, data protection officer
2. Collection of personal data when visiting our website
3. Use of Google Analytics
4. Information regarding the newsletter
5. Our presence in social media
6. Your rights as data subject
7. Updating of the Data Protection Policy
8. Your contact to us, data processing when contacting us

1. Information on the responsible data protection controller

(a) The responsible data protection controller in terms of the Basic Data Protection Regulations and other national Data Protection Laws of the member states as well as other data protection regulations is:

cosnova GmbH
Am Limespark 2
65843 Sulzbach
Phone: +49(0) 6196 / 76156-0
Fax: +49(0) 6196 / 76156-1298
Email: info@cosnova.com
More information about us is available in the imprint under www.thesigntribe.com/imprint.

(b) The data protection officer of the controller is:

Moritz Görmann
CTM-COM GmbH
Marienburgstraße 27
D-64297 Darmstadt
Telefon: +49 6151 394272
Fax: +49 6151 394277
www.ctm-com.de

2. Collection of personal data when visiting our website

(a) During the mere informational usage of the website, i.e. if you do not otherwise transmit information to us, we only collect the personal data transmitted to our server by your browser. If you wish to view our website, we collect the following data, which is technically necessary for us to display to you our website and to ensure stability and security (legal basis is Article 6 (1) S. 1 lit. f GDPR):

- IP address
- Date and time of the request
- Content of the request (specific page)
- Website from which the request comes
- Browser
- Operating system

The above data will be deleted immediately if they are no longer required for the aforementioned purposes, at the latest 30 days after we have collected them.

(b) In addition to the aforementioned data, Cookies are stored on your computer when you use our website. Cookies are small text files which are stored on your hard drive allocated to the browser you are using and through which the place which sets the Cookie (in this case we) receives certain information. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the internet offer more user-friendly and effective overall.

(c) Use of Cookies:

(aa) This website uses the following types of Cookies; their extent and functionality is explained below:

- Transient Cookies (see bb)
- Persistent Cookies (see cc).

bb) Transient Cookies are automatically deleted as soon as you close the browser. They particularly include the Session Cookies. These store a so-called session ID, with which different requests of your browser can be assigned to the common session. As a result, your computer can be recognised when you return to our website. The Session Cookies are deleted when you log out or close the browser. For example, such Cookie can store the content of a shopping cart in an online shop or a login status.

cc) Persistent Cookies are automatically deleted after a specified duration, which may vary depending on the Cookie. You can delete the Cookies at any time in the security settings of your browser.

dd) You can configure your browser settings in accordance with your desires and, for example, reject the acceptance of Third-Party Cookies or all Cookies. Saved Cookies can be deleted in the systems settings of the browser. Please be aware that in this case you may not be able to use all functions of this website.

3. Use of Google Analytics

(a) This website uses Google analytics, a web analysis service of Google Inc. ("Google"). Google analytics uses so-called "Cookies", text files that are stored on your computer and permit the analysis of your usage of the website. The information regarding your usage of this website created with the Cookie is generally transmitted to a server of Google in the USA and stored there. However, if IP anonymization is activated on this website your IP-address is initially limited within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website in order to evaluate your usage of the website, to compile reports on website activity and to provide further services to the operator of the website related to the usage of the website and the Internet.

(b) The IP-address transmitted by your browser in the context of Google Analytics is not linked with other data by Google.

(c) You can prevent the storing of Cookies with a respective setting of your browser software; however, we would like to inform you that in this case you might not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the Cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(d) This website uses Google Analytics with the addendum "_anonymizeIp()". Thereby, IP addresses are processed in a truncated form and any personal association can be excluded. If the data collected about you can be allocated to a person, the reference is excluded immediately and the personal data is thus deleted immediately.

(e) We use Google Analytics to analyse the usage of our website and improve it regularly. The obtained statistics help us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Legal basis for the usage of Google Analytics is Article 6 (1) S. 1 lit. f GDPR.

(f) Information of the provider of Google Analytics: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

User conditions: http://www.google.com/analytics/terms/de.html
Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html,
Data Protection Policy: http://www.google.de/intl/de/policies/privacy

4. Information regarding the newsletter

(a) With the following information, we inform you about the contents of our newsletters as well as registration, dispatch and the statistical evaluation procedure as well as your rights of objection. We send newsletters via emails with commercial information (hereinafter referred to as "newsletter") only with the consent of the recipients or statutory permission. If the content of the newsletter is specifically defined in the context of a registration, they are decisive for the user's consent. For the remainder, our newsletters contain information regarding our products, offers, campaigns and our company.

(b) We use the so-called double-opt-in process for the registration for our newsletter. This means, you receive an email following your registration, which requests the confirmation of your registration. This confirmation is necessary to prevent anyone registering with third-party email addresses.

(c) The registrations for the newsletter are recorded in order to be able to verify the registration process in accordance with legal requirements. This includes the storage of the time of registration and confirmation as well as the IP address. Also the changes of your data stored at MailChimp are recorded.

(d) The newsletter is sent via "MailChimp", a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The data protection regulations of the dispatch service provider are available at https://mailchimp.com/legal/privacy/.

Rocket Science Group LLC d/b/a MailChimp is certified according to the Privacy Shield Treaty and thus guarantees compliance with the European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).

According to their information, the dispatch service provider can use the pseudonymous data, i.e. without allocation to a user, to optimise or improve their own services, e.g. for the technical optimisation of the dispatch and the illustration of the newsletters or for statistical purposes in order to determine the countries origin of the recipients. However, the dispatch service provider does not use the data of our newsletter recipients to contact them himself or to pass them on to third parties.

(e) To register for the newsletter, it is sufficient to provide your email address.

(f) The consent for the dispatch of the newsletter is based on your consent according to Article 6 (1) lit. a) and Article 7 GDPR as well as § 7 (2) No. 3 / (3) UWG (Unfair Competition Act). The use of the dispatch service provider MailChimp, carrying out statistical surveys and analyses as well as recording of the registration procedure, are based on our legitimate interests pursuant to Article 6 (1) lit. f) GDPR. Our interest is based on the application of a user-friendly and secure newsletter system that serves our commercial interests as well as the expectations of the users.

(g) You can terminate the receipt of our newsletter at any time, e.g. withdraw your consent. The withdrawal of consent does not affect the legality of the newsletter dispatch made on the basis of the consent until withdrawal. A link to terminate the newsletter is attached to the end of each newsletter. The personal data is deleted upon deregistration from the newsletter, unless their storage is required by law or is justified, whereby their processing is merely limited to these exceptional purposes in this case. We may store the deregistered email addresses for up to three years based on our legitimate interests according to Article 6 (1) lit. f) GDPR before we delete them for the purpose of sending the newsletter in order to verify a once given consent. The processing of this data is limited to the purpose of a possible prevention of claims. An individual request for erasure is possible at any time, provided that at the same time the former existence of consent is confirmed.

5. Our presence in social media

We also maintain online presence in social media, such as Facebook and Instagram for which we provide a link on our website. This occurs based on our legitimate interests to inform about our offer and to communicate with customers, prospective customers and users. Legal basis for this process is Article 6 (1) lit. f. GDPR. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply, over which we have no influence.

Unless specified otherwise in the context our Data Protection Policy, we process the data of the users if they communicate with us with in the social networks and platforms, e.g. compose contributions on our online presence or send us a message.

6. Your rights as data subject

(a) Right of access by the data subject Upon request, you are entitled to receive information from us at any time regarding your personal data processed by us in accordance with Article 15 GDPR. For this purpose, you can send an application by post or email to the address listed below.

(b) Right to rectification of incorrect personal data

You are entitled to demand the immediate correction of any errors pertaining to your personal data. For this purpose, please contact the address listed below.

(c) Right to erasure

According to the prerequisites specified in Article 17 GDPR, you are entitled to demand the erasure of your personal data. These prerequisites for erasure particularly include if the personal data is no longer necessary for purposes for which it was collected or processed in any other manner as well as, in cases of illegal processing, the existence of an objection or the obligation for erasure according to the laws of the European Union or the laws of the member state governing us. In order to exercise your rights, please contact the addresses listed below.

(d) Right to restriction of processing

You are entitled to demand the restriction of processing according to the specifications of Article 18 GDPR. This right exists in particular if the correctness of the personal data between the user and us is disputed, for the duration which requires the verification of the correctness and in the event that the user requires a limited processing in the case of an existing right to erasure instead of erasure; furthermore in the event that the data is no longer required for the purposes pursued by us but the user needs it for the assertion, exercise or defence of legal claims and if the successful exercise of a contradiction between us and the user is still controversial. In order to assert your right of restriction of processing, please contact the addresses listed below.

(e) Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the responsible data protection controller, in a structured, commonly used and machine-readable format according to the specifications of Article 20 GDPR. In order to assert your right of data portability, please contact the addresses listed below.

(f) Right to object

According to Article 21 GDPR, you have the right to lodge an objection to the processing of your personal data for reasons arising from your particular situation, among other based on Article 6 (1) lit. e) or f) GDPR. We will stop the processing of your personal data, unless we are able to prove mandatory reasons for the processing worthy of protection, which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

(g) Right to withdraw (in the event of a granted consent)

According to Article 7 (3) GDPR, you are entitled to withdraw your granted consents with effect for the future at any time. The withdrawal of consent shall not affect the legality of the processing carried out on the basis of the consent until withdrawal.

(h) Right to lodge a complaint

You are furthermore entitled to contact the supervisory authority in case of complaints. The supervisory authority responsible for us is:

The Hessian Data Protection Controller
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Postfach 31 63, 65021 Wiesbaden
Phone: 0611 14080
Fax: 0611 1408 - 900
Email: poststelle@datenschutz.hessen.de
Internet: http://www.datenschutz.hessen.de

7. Updating of the Data Protection Policy

The status of this Data Protection Policy is 30.05.2018. Changes of our offer may make it necessary to change this Data Protection Policy. For this reason, please inform yourself of the content of this Data Protection Policy on a regular basis. We will also inform you as soon as the changes require your participation (e.g. consent) or other individual notification.

8. Your contact to us, data processing when contacting us

(a) If you have questions regarding the handling of your personal data in connection with the use of our website, you are welcome to contact info@thesigntribe.com

(b) If you contact us via email (e.g. to the address specified above), the personal data transmitted with your email is stored. The data is not transmitted to third parties. The data is used exclusively to process the conversation.

(c) The legal basis for the processing of data transmitted in the course of sending an e-mail is Article 6 (1) lit f. GDPR. This data serves solely for our processing of the contact; therein lies also the necessary legitimate interest in the processing of the data in terms of Article 6 (1) lit. f GDPR. The data is deleted as soon as the purpose of its recording ceases to exist, which is the case if the respective conversation with the user is terminated. The conversation is terminated once the circumstances reveal that the respective situation is conclusively settled.