Data Policy

This website is subject to Turtle-Media's Data Policy. The full version can be found at https://www.turtle-media.de/common/info/datenschutz.html (in German). Below, we provide the most important passages in English. Please feel free to contact our data protection team at any time with questions regarding the Data Policy and European GDPR regulations.

The protection of your personal data is very important to us. We naturally comply with the provisions of the EU GDPR and protect your personal data in good faith. The following information provides a simple overview of what happens to your personal data when you use our service. Personal data is any data that can be used to personally identify you.

The data controller is:

Turtle-Media
Oliver Schwartz
P.O. Box 6329
76043 Karlsruhe
Germany

contact@turtle-media.de

For all data protection inquiries, please contact us at the following email address:

datenschutz@turtle-media.de

To ensure the smooth operation of our website and to provide you with optimal information, we use technical means to monitor website usage. These data collection and analysis services are explained separately in this document.

Under no circumstances do we use the data collected in this process to draw conclusions about your identity.

The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR) in operating our website professionally and securely.

When implementing our projects, as well as providing support and advice to our customers, we need your customer data to enable processing. In this case, we process the data in accordance with Article 6(1)(b) and (c) GDPR.

Furthermore, there are situations in which you may wish to provide us with personal data, such as when registering for a customer account or subscribing to a newsletter, or when submitting a message via a provided web-based contact form. In this case, we will ask for your consent to the processing (Article 6 (1) lit. a GDPR).

Some data is collected to ensure the proper functioning of the website and our services. Other data may be used to analyze your user behavior.

Collection and processing when using the contact form or processing an inquiry

When you use the contact form, we collect personal data (individual details about the personal or factual circumstances of a specific or identifiable natural person) only to the extent that you provide it. We need your email address to answer your inquiry. Accordingly, it will only be used for this purpose. Your data will then be deleted unless you have expressly consented to further processing.

Collection and use when placing an order

Your personal data is processed and used based on our legitimate interest in ensuring the processing of orders and, consequently, the fulfillment of contracts. After complete contract fulfillment, all personal data is initially stored for tax and commercial law reasons in accordance with statutory retention periods. After the retention period expires, your data will be deleted unless you have expressly consented to its further use or processing.

Newsletter Distribution

Regardless of contract processing, we use your email address exclusively for our own advertising purposes (direct marketing or our own services) and for sending newsletters, provided you have expressly consented to this. You give your consent by clicking the "Subscribe to Newsletter" button. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by contacting us (see contact details above or in the legal notice). Your email address will then be deleted from the mailing list.

We do not transfer any personal data to third parties without your explicit consent.

This excludes our service partners, whom we require for processing contractual relationships. Even in these cases, data protection regulations are observed. The scope of data transfer is limited to the permissible minimum.

The following service partners are involved in processing:

Hosting

Lima City
c/o TrafficPlex GmbH
Konsul-Smidt-Str. 90
28217 Bremen

Withdrawal of Consent
Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. An informal email to us is sufficient. The lawfulness of the data processing carried out before the withdrawal remains unaffected.

Data Subject Rights
You have the right to free access to, rectification, erasure, or restriction of processing of your data at any time. Furthermore, you have the right to rectification of inaccurate or incomplete data.

Right to Lodge a Complaint
Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority (see contact details below, 1.7).

Please note that, pursuant to Article 21 of the GDPR, you have the right to object to the processing of your personal data.

You may submit your objection in writing or by email to the address provided above.

In the event of data protection violations, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is: Landesbeauftragter für Datenschutz und Informationsfreiheit
Baden-Württemberg

Postal address:
P.O. Box 10 29 32
70025 Stuttgart
Germany

www.baden-wuerttemberg.datenschutz.de

Cookies

Our website uses cookies. Cookies do not harm your computer and are used to make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can configure your browser to inform you about the use of cookies and to allow cookies only in individual cases, to block cookies in certain cases or entirely, and to automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website. Furthermore, we offer you the option to selectively allow or reject specific cookies on our server via the "Cookie Settings."

Cookies that are necessary for carrying out electronic communication or for providing certain functions you have requested (e.g., the shopping cart function) are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically flawless and optimized provision of its services.

Server Log Files

The provider of this website automatically collects and stores information that your browser automatically transmits to us in so-called server log files. This information includes:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address
This data is not merged with other data sources.

The legal basis for this processing is the legitimate interest (Article 6(1)(f) GDPR) in operating this website professionally and securely.

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies" to analyze the use of this website. The information generated is generally transmitted to and stored on a Google server in the USA.

More information on how Google Analytics handles user data can be found in Google's privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de

You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of this website. You can also prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

We have entered into a data processing agreement with Google and fully comply with data protection regulations when using Google Analytics.

We use the "Activate IP anonymization" function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

SSL

This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the website operator. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the padlock icon in your browser's address bar.

When SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Use of an AI-powered voice assistant to answer incoming calls

We use an AI telephone assistant to automate the handling of telephone inquiries. This assistant processes call content on our behalf to understand, forward, or answer your request. This process utilizes automatic speech recognition (speech-to-text), semantic analysis (natural language processing), and, if necessary, text generation (text-to-speech).

Call content may be recorded, transcribed, or documented. This only occurs if you are informed accordingly at the beginning of the call and continue the conversation. You can end the call at any time to prevent processing.

The data processed includes, in particular, your statements during the call, technical connection data (date, time, duration), and any personal data you voluntarily provide, such as your name or telephone number. Interaction data is also processed, for example, regarding the course of the call or in case of call termination. The legal basis for this processing is Article 6(1)(b) GDPR (for the initiation or performance of a contract) and Article 6(1)(f) GDPR (legitimate interest in efficient and scalable communication).

For technical implementation, we use subcontractors, particularly for hosting, speech recognition, and semantic analysis. In this context, personal data may also be transferred to the USA by the subcontractor. This is generally done on the basis of an adequacy decision pursuant to Article 45 GDPR, as the service providers are certified under the EU-U.S. Data Privacy Framework. If such a decision is lacking, the transfer is based on standard contractual clauses pursuant to Article 46(2)(c) GDPR and supplementary safeguards. The requirements of Article 44 GDPR are complied with.

To improve speech processing, pseudonymized data may be used for training purposes. Tracing this data back to individual persons is either impossible or significantly more difficult. No automated decision-making within the meaning of Article 22 GDPR takes place.

For technical implementation, we use subcontractors, particularly for hosting, speech recognition, and semantic analysis. The data is stored only as long as necessary for the stated purposes. Afterwards, the data is automatically deleted or anonymized.