Privacy Terms

1. General and required information

Welcome to our website! We appreciate your interest in our company. When you use our website, we collect personal data (data) from you. This refers to data which can be used to personally identify you. We take the security of your personal data seriously. That is why we process your data in accordance with the EU General Data Protection Regulation (GDPR). This privacy policy will inform you of how your personal data are processed and what your rights are.

However, please note that data transmission over the Internet (e.g. email communications) can have security gaps. It is not possible to guarantee complete protection of data from third party access.

Controller and data privacy officer

Controller in accordance with EU General Data Protection Regulation (GDPR):

Mosca GmbH
Gerd-Mosca-Straße 1
69429 Waldbrunn

Represented by: Timo Mosca (CEO), Simone Mosca (CEO), Alfred Kugler (CEO)

Phone: +49 6274 932-0
Email: info@mosca.com

Contact our data privacy officer at: datenschutz@mosca.com.

1.1. Your rights

You have many rights with regard to the processing of your personal data.

Right to access information:

You have the right to obtain information on the personal data we collect, particularly the purpose of processing the data and how long they will be stored (Article 15 GDPR).

Right to rectification of inaccurate data:

You have the right to request that we immediately correct any personal data pertaining to you, if the data are incorrect (Article 16 GDPR).

Right to deletion:

You have the right to request that we delete any personal data pertaining to you. Under these terms, you can request to have your data deleted, e.g. if we no longer need the personal data for the purposes for which they were collected or otherwise processed, if we processed the data illegally or if you have legitimately objected or if there is a legal obligation to delete the data (Article 17 GDPR).

Right to restrict processing:

You have the right to request that the processing of your personal data be restricted. This right applies in particular if you dispute the accuracy of the personal data, during the time it is being verified, as well as in the event that you have a right to deletion but instead request restricted data processing. Moreover, data processing shall be restricted in the event that, while we no longer require the data for our intended purposes, you still need the data in order to enforce, exercise or defend legal claims, or pending the verification whether our legitimate grounds override yours (Article 18 GDPR).

Right to data portability:

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format (Article 20 GDPR), if the data have not yet been deleted.

Right to object:

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you (Article 21 GDPR). We will then cease processing your personal data, unless we are able to demonstrate compulsory and legitimate reasons which take precedence over your interests, rights and freedoms or demonstrate that the data is being processed in order to enforce, exercise or defend legal claims. If you wish to object to the processing of your personal data, send us an email or write to the Controller's contact address indicated above. This shall not affect the legality of the data processing performed prior to the revocation of consent.

Right to revoke consent:

You can revoke your consent at any time. The legality of any data processing which took place prior to the revocation shall not be affected.

Right to appeal through a controlling authority:

You have the option of contacting the aforementioned data privacy officer or a data protection agency, if you believe that the processing of your personal data violates the General Data Protection Regulation.

See here for a list of the data protection agencies:

https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html

1.2. Processing of data

The purpose of the following statement is to provide you with information on the processing of your data when you visit our website. For general information on the processing of personal data (Notes Art. 13 GDPR), please click here:

Information on Processing Personal Data

1.3. SSL and TLS encryption

For security reasons and in order to protect the transfer of confidential materials, such as orders or inquiries which we receive as the website owner, this website uses SSL and TLS encryption. You can tell that a connection is encrypted when the address bar in the browser switches from "http://" to "https://" and a lock icon appears in the browser bar. When SSL or TLS encryption is enabled, the data you send to us cannot be viewed by third parties.

1.4. Links

On our website, we offer links to other sites which could potentially be of interest to you. We have no influence on the contents on these sites. We cannot be held liable for these third-party contents. The respective provider or owner of the pages is responsible for the content of the website. The linked sites were checked for potential statutory violations at the time the link was created. At the time the link was set, no such violations were evident. However, it is not reasonable to continuously review the contents of the linked sites without a specific cause for suspicion of a legal infraction. As soon as any violations are identified in linked webpages, we will immediately remove the affected links.

2. Data collection on our website

2.1. Server log files

The website owner and/or site provider collects data on visits to the site and saves them as "server logfiles". The following data are logged in this way:

(Anonymised) IP addressed used
Time of visit
Website visited
Logs
Status code
Volume of data
Referrer URL
User agent
Host name of the accessing computer

These data will not be combined with other data sources. The purpose for data processing is to display our website for you and to ensure stability and security, Art. 6 Sect. 1 lit. f GDPR.

For more details on the data collected, visit: https://www.mittwald.de.

2.2. Cookies and third-party services

This website sometimes uses "cookies". They are used to make our site more user-friendly, effective, and secure. Cookies are small text files which are installed onto your computer and which are saved by your browser. "Session cookies" are deleted automatically after you leave the site. Other cookies remain saved on your device long-term or until you delete them. These cookies enable our system to recognise your browser at your next visit.

You can adjust your browser settings to have your browser inform you whenever cookies are saved and to only allow cookies on an individual basis, to accept cookies in certain cases or to generally exclude them, as well as to automatically delete cookies when you close your browser. However, the deactivation of cookies may restrict the functionality of our website.

Cookies which are necessary in order to perform the electronic communication procedure or to provide certain functions requested by you (e.g. shopping cart function) are saved in accordance with § 25 para. 2 TDDDG in conjunction with Art. 6 Sect. 1 lit. f GDPR. The website owner has a legitimate interest in saving cookies in order to provide their services optimally and without technical malfunctions.

This website uses different types of cookies (e.g. cookies for analyzing your surfing behaviour). Some cookies are placed by third parties that appear on our sites. The legal basis for the processing of personal data using technically unnecessary cookies is § 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. You can change or revoke your cookies consent at any time:

You can also contact us regarding your consent. In this case, please provide date and time of your consent and your consent ID.

2.3. Inquiries via contact form, email, phone or fax

If you contact us via contact form, email, phone or fax, we save and process your inquiry, including all associated personal data (name, inquiry).

These data are processed in accordance with Art. 6 Sect. 1 lit. b GDPR, to the extent that your inquiry pertains to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing shall be based on our legitimate interest in the effective processing of the inquiries we receive (Art. 6 Sect. 1 lit. f GDPR).

Your contact form data shall be retained until you request that we delete it or revoke your consent to data storage or until there is no longer a need to store the data (e.g. after your inquiry has been processed and closed). Mandatory legal regulations – particularly statutory retention periods – shall not be affected.

3. Social media

Since we post our contents on platforms such as YouTube, Facebook, Instagram and Twitter, we wish to inform you pertaining to data processing in conjunction with platforms, to the extent that we have knowledge of and influence over this.

When we open a profile or channel on a platform, the owner sets cookies (for policy, see above) once a user visits the profile or channels. The owners of the platforms use cookies or other technologies to collect users' personal data in order to analyse user behaviour. This applies in particular if you are already signed up to these platforms. For more details, refer to the privacy policy information of these platforms.

What we receive from the site owners are merely analyses on the use of our contents in anonymised form. These anonymised data are used to analyse user behaviour for statistical purposes, so that we can better align our offerings with the needs and interests of the target groups. The anonymised data are processed on a legal basis in accordance with Art. 6 Sect. 1 Clause 1 lit. c) GDPR.

We can use the filters provided by the platforms to select the data categories based on which the platforms generate their anonymised statistics. The platforms provide us with the following criteria and/or categories for evaluating the activities of our contents in an anonymised form, to the extent that such information is provided by the user or collected by the platform. These can include: age range, sex, location (state and country), language, mobile vs. stationary site access (YouTube includes individual device types and operating system), interactions in the context with posts (e.g. reactions, comments, shares, clicks, views, video watch time), time of use.

We do not have knowledge of all the types of personal data collected on the platforms or the other purposes for which user data is processed by platform operating companies. We have no influence on the privacy terms of a platform or on the collection, analysis and utilisation of user data. Since we do not actually process the personal data of users but only receive anonymised statistical data, we are not able to trace any individuals and obtain data pertaining to them. In this regard, please refer to the relevant platform operating company.

We recommend that you use and regularly check the various data privacy and security settings on each platform.

In their data policies, platform operating companies explain which data they collect from users:

Users can request a copy of the logged data: https://takeout.google.com/

Facebook

https://www.facebook.com/policy

Users can request a copy of the logged data: https://www.facebook.com/settings?tab=your_facebook_information

Twitter

https://twitter.com/de/privacy

Users can request a copy of the logged data: https://twitter.com/personalization

YouKu

https://terms.alicdn.com/legal-agreement/terms/suit_bu1_unification/suit_bu1_unification202005141916_91107.html?spm=a2ha1.14919748_WEBHOME_GRAY.footer-container.5~5~5~DL!2~5~A!4

3.1. Meta platforms

We operate "fanpages" on the social media platforms Facebook and Instagram (Meta Platforms Ireland Limited (Facebook), 4 Grand Canal Square, Dublin 2, Ireland) in order to communicate with platform users who have given our fanpage a "like" and to inform them about our products and services.

The cookies set by Facebook on user devices typically store information on user behaviour and interests. The user data generated in this way is used in particular for market research and advertising purposes. The user behaviour and inferred interests are used, inter alia, to create usage profiles. These profiles can be used, for example, to display interest-based advertising on and outside of Facebook. User profiles can also be used to store data independently of user devices, particularly if the users are logged in as registered users of Facebook.
This data processing is based on our legitimate interest in accordance with Art. 6 Sect. 1 lit. f GDPR (providing information on our products and services; communication with users).

If you wish to submit a request for information or claim other subject rights in accordance with the GDPR, the most effective approach is to refer to Facebook or Instagram. As the owner of the fanpage, we have no access to the data which is processed directly by Facebook. While we are considered to be controllers jointly with Facebook in accordance with the GDPR, only Facebook, as the service provider, is able to access user data and provide comprehensive information or fulfil other obligations, e.g. deletion requests from users.

As fanpage owners, we cannot guarantee that all subject rights with regard to Facebook can be enforced or that user data will not be processed outside of the European Union.

For more information on the purpose and scope of data collection and processing, as well as information on your rights as a data subject under the GDPR and your options for opting out of or restricting data processing in order to protect your personal data on Facebook, refer to Facebook's privacy policy: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland - privacy policy: https://www.facebook.com/about/privacy/.
Facebook provides the option of removing cookies with an opt-out: https://www.facebook.com/settings?tab=ads.

4. Analytics and Advertising

4.1. Google Analytics

This website uses functions of the web analysis service Google Analytics. The service provider is Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses "cookies". These are text files which are saved onto your computer and which allow to analyse the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there.

The storage of Google Analytics cookies is based on consent (Art. 6 Sec. 1 lit. f GDPR). We cannot exclude the possibility of Google transferring data to the United States.

4.1.1. IP anonymisation

We have enabled the IP anonymization function on this website. As a result, before your IP address is transmitted to the US, it is first abbreviated by Google within the member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address passed on to a Google server in the USA and shortened there. Under the authority of the owner of this website, Google will use this information to analyse your use of the website, compile reports on website activities and perform other services associated with website and internet use. The IP address transmitted from your browser within the framework of Google Analytics will not be combined with any other data from Google.

4.1.2. Browser plugin

Although you can adjust your browser software to prevent the installation of cookies, we would point out that if you do so, you might not be able to make full use of all the functions on this website. Furthermore, you can prevent collection of information that the cookie generates about your use of this website (including your IP-address) by Google and the processing of the data by Google by downloading and installing the provided browser plug-in underneath the following link:

https://tools.google.com/dlpage/gaoptout?hl=de.

4.1.3. Opting out of data collection

Your can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set on your computer which will prevent your data from being collected during future visits to this site: Disable Google Analytics.

For more information on the handling of user data in Google Analytics, refer to Google's privacy statement: https://support.google.com/analytics/answer/6004245?hl=de.

4.1.4. Demographics in Google Analytics

This website utilises "demographics" from Google Analytics. This allows for the genera-tion of reports containing information on the age, sex and interests of site visitors. These data are derived from personalised advertising from Google as well as visitor data from third-party providers. These data cannot be associated with any particular person. You can disable this function at any time in the ad settings of your Google ac-count or prohibit the collection of your data by Google Analytics as described under "Opting out of data collection".

4.2. Google AdWords and Google conversion tracking

This website uses Google AdWords. AdWords is an online advertising service provider of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

In conjunction with Google AdWords, we use "conversion tracking". If you click an ad from Google, a cookie is set for conversion tracking. Cookies are small text files which the Internet browser saves on the user's computer. These cookies expire after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can detect that the user has clicked on the ad and been redirected to this page.

Every Google AdWords customer receives a different cookie. These cookies cannot be tracked via the websites of AdWords customers. The information obtained using the conversion cookies is used to generate conversion statistics for AdWords customers who have chosen to use conversion tracking. Customers are informed of the total number of users who have clicked the ad and been redirected to a page with a conversion tracking tag on it. However, they are not given any information which can be used to personally identify users. If you do not wish to take part in tracking, you can easily opt out of this use by disabling the Google conversion tracking cookie in your Internet browser. If you do so, you will not be included in the conversion tracking statistics.

The processing and storage of "conversion cookies" is based on consent (Art. 6 Sec. 1 lit. a GDPR). We cannot exclude the possibility of Google transferring data to the United States.

For more information on Google AdWords and Google conversion tracking, refer to Google's data protection terms and conditions: https://www.google.de/policies/privacy/.

You can adjust your browser settings to have your browser inform you whenever cookies are saved and to only allow cookies on an individual basis, to accept cookies in certain cases or to generally exclude them, as well as to automatically delete cookies when you close your browser. However, the deactivation of cookies may restrict the functionality of our website.

5. Newsletter

5.1. Newsletter data

If you would like to subscribe to our newsletter offered on the website, please provide both a valid email address and information which enables us to confirm that you are, in fact, the owner of the email address and have agreed to receive the newsletter. No additional data is collected except on a voluntary basis. We will use this data only to provide the information requested. We will not disclose your personal information to third parties.

The data entered in the newsletter subscription form will be processed based on your consent (Art. 6 Sect. 1 lit. a GDPR). At any time, you can revoke your consent to have your personal data and email address saved and used to receive the newsletter, e.g. by using the "unsubscribe" link in the newsletter. This shall not affect the legality of prior data processing operations performed.

The data you provide us for the purposes of your newsletter subscription will be re-tained until such time as you unsubscribe from the newsletter and will be deleted after newsletter cancellation. This shall not affect data retained by us for other purposes (e.g. email addresses for the members' section).

5.1.1. Legal basis

Data processing is based on your consent (Art. 6 Sec. 1 lit. f GDPR). You can revoke this consent at any time. This shall not affect the legality of prior data processing opera-tions performed.

5.2. Sendinblue

This website utilises Sendinblue to distribute newsletters. The service provider is Sendinblue GmbH (Sendinblue), Köpenicker Str. 126, 10179 Berlin, Germany.

Sendinblue is a service used, inter alia, to organise and analyse the distribution of newsletters. The data you enter for the purposes of newsletter subscription are saved on the servers of Sendinblue in Germany.

If you do not wish to allow analysis by Sendinblue, you will need to unsubscribe from the newsletter. A link is provided for this purpose in every newsletter email you receive. You can also unsubscribe from the newsletter directly on the website.

5.2.1. Data analysis by Sendinblue

Sendinblue enables us to analyse our newsletter campaigns. This allows us to see, for example, whether a newsletter email has been opened and which links have been clicked. We can then determine which links get the most clicks, etc.

We can also tell whether certain predefined actions are performed after the email is opened/link is clicked (conversion rate). This allows us to determine whether you made a purchase after clicking on the newsletter.

Sendinblue also enables us to break the newsletter recipients down into various categories ("clusters"). For example, newsletter recipients can be grouped by age, sex or location. This allows us to better adapt the newsletters to their target groups.

For detailed information on the functions of Sendinblue, see here: https://de.sendinblue.com/newsletter-software/?rtype=n2go

5.2.2. Legal basis

Data processing is based on your consent (Art. 6 Sec. 1 lit. f GDPR). You can revoke this consent at any time. This shall not affect the legality of prior data processing operations performed.

5.2.3. Storage period

The data you provide us for the purposes of your newsletter subscription will be retained until such time as you unsubscribe from the newsletter and will be deleted from both our servers and those of Sendinblue after newsletter cancellation. This shall not affect data retained by us for other purposes (e.g. email addresses for the members' section).

For more details, refer to the privacy policy of Sendinblue: https://de.sendinblue.com/datenschutz-uebersicht/?rtype=n2go.

5.2.4. Order data processing agreement

We have a contractual agreement with Sendinblue, under which Sendinblue is obligated to protect our customers' data and prohibited from transferring them to third parties: https://de.sendinblue.com/wp-content/uploads/sites/3/2021/08/AV_Muster_DE_18.02.2021_aktualisiert.pdf

6. Plugins and tools

6.1. YouTube

Our website utilises plugins from the website YouTube, which is operated by Google. The site owner is Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page on our website which includes a YouTube plugin, a link is estab-lished with YouTube servers. The YouTube servers are notified of which page you vis-ited.

When you are logged into your YouTube account, you enable YouTube to directly as-sociate your surfing behaviour with your personal profile. To prevent this, log out of your YouTube account.

The use of YouTube is based on your consent (Art. 6 Sec. 1 lit. a GDPR). We cannot ex-clude the possibility of Google transferring data to the United States.

For more information on the handling of user data, refer to YouTube's privacy policy: https://policies.google.com/privacy?hl=en&gl=de

6.2. Vimeo

Our website uses plugins from the video portal Vimeo. The service provider is Vimeo.com, Inc (Vimeo). , 555 West 18th Street, New York, New York 10011, USA.

When you visit a page on our website which includes a Vimeo plugin, a link is established with Vimeo servers. The Vimeo servers are notified of which page you visited. Vimeo also obtains your IP address. This applies even if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is sent to the Vimeo servers in the USA. The use of Vimeo is based on your consent (Art. 6 Sec. 1 lit. a GDPR).

When you are logged into your Vimeo account, you enable Vimeo to directly associate your surfing behaviour with your personal profile. To prevent this, log out of your Vimeo account.

For more information on the handling of user data, refer to Vimeo's privacy policy: https://vimeo.com/privacy.

6.3. Google Maps

This website uses the map service Google Maps through an API. The service provider is Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to utilise the functions of Google Maps, you must allow your IP address to be saved. This information is typically transmitted to a Google server in the US and saved there. The host of this website has no influence on data transfer.

The use of Google Maps is based on your consent (Art. 6 Sec. 1 lit. a GDPR). We cannot exclude the possibility of Google transferring data to the United States.

For more information on the handling of user data, refer to Google's privacy statement: https://policies.google.com/privacy?hl=en&gl=de.