Privacy Policy

I. Person responsible, collection, processing, use and disclosure of personal data

1. The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions with data protection character is the:

KOLUMA GmbH
Leipziger Ring 14a
D-59558 Lippstadt

Managing Director:
Mr. Lutz Kogel

Tel. +49 2941 9219 905
E-Mail hello@koluma.net

2. When you visit our website without registering or using a contact form, a series of general data and information is collected each time you or an automated system access the website. This general data and information is stored in the log files of the server. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of an access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems. This information is used exclusively for the operation of the website and the prevention of danger.

3. We also use your e-mail address for our own advertising purposes, provided you have expressly consented to this. You can revoke your consent to the use of your e-mail address for advertising purposes at any time with effect for the future.

4. On our website we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). If you select payment via PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.

5. After complete processing of the contract, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to the further use of your data.

6. When you contact us by e-mail or via the contact form, your information will be stored by us in order to answer your question(s). If you use the contact form offered on the website, we require a valid e-mail address and your first and last name. These fields are marked as mandatory. Further data will not be collected. The storage serves the sole purpose of answering your inquiry.

7. For accounting purposes, the customer and payment data are transmitted via an interface to the software LexOffice of Haufe-Lexware GmbH & Co. KG. The transmission takes place exclusively for the accounting of the bookings and purchases made by you and thus for the fulfillment of the contract concluded with you. We have concluded an order processing agreement with Haufe-Lexware GmbH & Co. KG. in this regard.

8. We have concluded an order processing contract with our provider and fully implement the strict requirements of the German data protection authorities when using servers or hosting.

II. Cookies

On our website, we use cookies to make visiting our website attractive and to enable the use of certain functions. These are small text files that are stored on your computer. Most of the cookies we use are deleted from your hard drive at the end of the browser session (so-called session cookies). Other cookies remain on your computer and allow us to recognize your computer on your next visit (so-called long-term cookies). If you do not want cookies to be installed on your computer, you can change this via the security settings of your browser. You can read how this works in the help section of your browser. It may be that certain areas of our offer will then only be available to a limited extent.

III. Google Services

1. Our website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (“Google”) is used. Google Analytics uses “cookies”. The information generated by the cookie about the use of this website by users is usually transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, however, the IP address of the user will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information for the purpose of evaluating the use of the website by users, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. Users may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if you do this you may not be able to use the full functionality of this website. Users can also prevent the collection of data generated by the cookie and related to their use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

2. This site uses so-called web fonts provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the Internet browser you use establishes a connection with Google’s servers. In the process, your IP address is transmitted to Google so that Google becomes aware that you have accessed our website. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. If your browser does not support web fonts, a standard font will be used by your computer.

For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/

3. The data transfer to Google and in particular to the USA takes place according to Art. 46 para. 2 lit. c) GDPR on the basis of so-called standard data protection clauses (SCC) for the transfer of personal data to third countries.

IV. Your rights and contact

1. Right to Information: You have the right at any time to receive information free of charge about which of your data we process and how this processing takes place. This includes

a. the categories of personal data that are processed;

b. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations;

c. if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;

d. the existence of a right to obtain the rectification or erasure of personal data concerning them or to obtain the restriction of processing by the controller or a right to object to such processing;

e. the existence of a right of appeal to a supervisory authority;

f. if the personal data are not collected from the data subject, any available information on the origin of the data;

g. the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) and, at least in such cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

2. Right to rectification: If our data about you is incomplete or incorrect, you have the right to have us rectify or complete this data without delay.

3. Right to deletion: If the conditions of Art. 17 (1) GDPR are met, you have the right to request the deletion of your personal data. This is the case if,

a. the data is no longer necessary for the purpose for which it was collected by us.

b. you have revoked your consent to our use of the data and we have no other legal reason for storing it.

c. you object to the processing of your data and there are no overriding legitimate grounds on our part for allowing us to continue processing the data.

d. the personal data have been processed by us unlawfully.

e. the deletion of the data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which we are subject.

f. the personal data has been collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

However, this right does not apply if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.

4. Right to block: You have the right to have us block the data we have stored if

a. the accuracy of the personal data is contested by you for a period of time that allows us to verify the accuracy of the personal data,

b. the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;

c. we no longer need the personal data for the purposes of processing, but you need them for the assertion, exercise or defense of legal claims, or

d. you have objected to the processing in accordance with Article 21 (1) GDPR, as long as it is not yet clear whether our legitimate reasons outweigh yours.

In this case, we may only use it to assert, exercise or defend legal claims, to protect the rights of another natural or legal person or for reasons of important public interest.

5. Right to information: If you have asserted your right to rectification, erasure or restriction of processing against us, we are obliged to inform all those to whom your data have been disclosed. This does not apply if the communication is impossible or involves disproportionate effort. You also have the right to be informed about these recipients.

6. Right to data transmission: You have the right to receive any data you have provided to us in a structured, commonly used, machine-readable format or to request that it be transferred to another responsible party, provided this is technically feasible.

7. Right of revocation: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing can be based on another legal basis under which consent is not required. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;

8. Right to complain: If you are of the opinion that the processing of your data by us violates data protection regulations, you have the option of filing a complaint with the competent supervisory authority. Your judicial remedies remain unaffected.

Right to objection:
If we process your personal data on the basis of a weighing of interests in our favor pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing with effect for the future at any time for reasons arising from your particular situation.

In the event of an objection, we will not further process your data unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

In the event that we process your personal data in order to send you direct advertising, you may object to this processing at any time with effect for the future. In this case, we will immediately terminate the processing for the purpose of direct marketing.

The contact details for asserting the aforementioned rights can be found in our imprint.