Privacy Policy

This privacy policy informs you about the type, scope, and purpose of processing personal data (hereinafter referred to as "data") in the context of providing our services as well as within our online offering and the associated websites, functions, and content, as well as external online presences such as our social media profiles (hereinafter collectively referred to as the "online offering").

Regarding the terms used, such as "processing" or "controller," we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Responsible Entity:

Campers First Aid
Benjamin Bayer
Unterriedern 3
DE 82404 Sindelsdorf

Phone: +351 926 550 969
Email: info@campers-first-aid.eu
Website: www.campers-first-aid.eu

Responsible for Content:
Benjamin Bayer

Types of Processed Data

Inventory data (e.g., personal master data, names, or addresses).
Contact details (e.g., email, phone numbers).
Content data (e.g., text input, photographs, videos).
Usage data (e.g., visited websites, interest in content, access times).
Meta/communication data (e.g., device information, IP addresses).

Categories of Affected Persons

Visitors and users of the online offering (hereinafter collectively referred to as "users").

Purpose of Processing

Provision of the online offering, its functions, and content.
Responding to contact inquiries and communication with users.
Security measures.
Reach measurement/marketing.

Definitions of Terms Used

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"). A natural person is considered identifiable if they can be identified directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

"Processing" means any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and covers practically any handling of data.

"Pseudonymization" means processing personal data in such a way that the personal data can no longer be attributed to a specific data subject without additional information, provided that such additional information is kept separately and is subject to technical and organizational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.

"Profiling" means any form of automated processing of personal data that involves using personal data to evaluate certain personal aspects relating to a natural person, particularly to analyze or predict aspects concerning that natural person's work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

The "Controller" is the natural or legal person, public authority, agency, or other body that alone or jointly with others determines the purposes and means of processing personal data.

The "Processor" is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Controller.

Legal Basis for Processing

In accordance with Article 13 GDPR, we inform you of the legal basis of our data processing. For users within the scope of the General Data Protection Regulation (GDPR), i.e., the EU and the EEA, the following applies unless otherwise specified in the privacy policy:

The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR;
The legal basis for processing to fulfill our services and contractual obligations, as well as responding to inquiries, is Article 6(1)(b) GDPR;
The legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR;
If the processing of personal data is necessary due to the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis;
The legal basis for processing necessary for performing a task carried out in the public interest or in the exercise of official authority vested in the controller is Article 6(1)(e) GDPR;
The legal basis for processing to protect our legitimate interests is Article 6(1)(f) GDPR.

Security Measures

We take appropriate technical and organizational measures, considering the state of the art, implementation costs, the nature, scope, context, and purposes of processing, as well as the varying probability and severity of risks for individuals' rights and freedoms, to ensure a level of security appropriate to the risk.

The measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical access to the data, as well as access, input, transfer, ensuring availability, and separation of the data. Additionally, we have established procedures that ensure the exercise of data subject rights, deletion of data, and response to data threats. Furthermore, we already consider the protection of personal data during the development, or selection, of hardware, software, and procedures, following the principle of data protection by design and by default.

Collaboration with Processors, Joint Controllers, and Third Parties

If, in the course of our processing, we disclose data to other persons and companies (processors, joint controllers, or third parties), transmit them to them, or otherwise grant them access to the data, this is done only on the basis of a legal permission (e.g., if the transmission of the data to third parties, such as payment service providers, is required for contract fulfillment), if users have given their consent, if a legal obligation provides for it, or based on our legitimate interests (e.g., when using agents, web hosts, etc.).

If we disclose, transmit, or otherwise grant access to data to other companies within our corporate group, this is particularly for administrative purposes as a legitimate interest and, beyond that, based on a legal permission.

Transfers to Third Countries

If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA), or the Swiss Confederation) or if this happens in the context of using third-party services or disclosing, or transmitting data to other persons or companies, this is only done in compliance with legal requirements.

Unless explicitly permitted by law or contract, we process or allow data to be processed in a third country only under the following conditions:

The processing takes place in a country with an officially recognized level of data protection (e.g., Privacy Shield in the USA).
The processing takes place under officially recognized special contractual obligations (Standard Contractual Clauses, SCC).

Rights of Data Subjects

Users have the right to request confirmation whether relevant data is being processed and to receive information about this data, as well as further details and a copy of the data in accordance with legal requirements.

Users have the right to rectification of incorrect or incomplete data concerning them.

Users have the right to request deletion of relevant data immediately or, alternatively, restriction of processing, in accordance with legal requirements.

Users have the right to demand the transfer of their personal data to themselves or to another controller.

Users also have the right to file a complaint with the relevant supervisory authority if they believe that their data is being processed unlawfully.

Right of Withdrawal

Users have the right to revoke granted consents with effect for the future.

Right to Object

Users can object to the future processing of their data at any time, in accordance with legal regulations. This applies particularly to direct advertising.

Cookies and Right to Object to Direct Marketing

"Cookies" are small files stored on users' devices. Cookies can contain various information. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during and after their visit within an online offering.

Temporary cookies or "session cookies" are deleted after a user leaves an online offering and closes their browser. A cookie like this can store, for example, the contents of a shopping cart or a login status.

"Permanent" or "persistent" cookies remain stored even after closing the browser. For example, the login status can be saved if users visit the website again after several days. Also, such a cookie can store users' interests, which are used for reach measurement or marketing purposes.

A "third-party cookie" refers to cookies provided by third-party providers rather than the controller operating the online offering. If they are only first-party cookies, they are set by the website owner.

We can use temporary and permanent cookies and clarify this in our privacy policy.

Users who do not want cookies to be stored on their computers should disable the corresponding option in their browser settings. Stored cookies can be deleted in the browser settings. The exclusion of cookies may lead to functional limitations of this online offering.

A general objection to the use of cookies for online marketing purposes can be declared for many services, particularly in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/.

Furthermore, the storage of cookies can be prevented by disabling them in the browser settings. However, not all functions of this online offering may then be usable.

Data Deletion

The data we process is deleted in accordance with legal regulations as soon as they are no longer required for their purpose and there are no legal retention obligations preventing deletion.

If data is not deleted because it is required for other legally permissible purposes, its processing is restricted. That means the data is blocked and not processed for other purposes.

Changes and Updates to the Privacy Policy

We ask you to regularly inform yourself about the content of our privacy policy, as we adjust it when changes in our data processing make it necessary.

We will inform users when the changes require their cooperation (e.g., consent) or any other individual notification.

Contact

If you have any questions about data protection, you can contact us at:

📧 Email: info@campers-first-aid.eu

📞 Phone: +351 926 550 969