Privacy statement

Information about the collection of personal data
In the following, we inform you about the collection of personal data during the use of our website. Personal data are to be understood as any and all data that can be traced back to you as a person, for example your name, address, email address(es) and user behavior.

Liable as set out in article 4 section 7 of the EU General Data Protection Regulation (GDPR):

BTN Aquarium Decorations AB
senVerkstadsvägen 56
36 Kopparberg,
Schweden
info@backtonature.se

When you contact us via email or via a contact form, the data you disclose to us (your email address, and, if necessary, your name and your phone number) are stored by us insofar as they are necessary for answering your questions. The data transferred to us in the course of this contact will be deleted as soon as their storage is no longer required, or we will restrict processing them if statutory data retention obligations are in existence.

Should we require the services of third-party providers to fulfill individual functions of the services we offer, or should we desire to use your data for advertising purposes, we will inform you in detail about the processes involved, as specified below. During this process, we will also inform you about the pre-fixed criteria regarding storage duration.

Your rights
You have the following rights against us regarding the personal data that are relevant to you:

right to access the information,
right to rectification or erasure,
right to restriction of data processing,
right to object to data processing,
right to data portability.

Moreover, you have the right to lodge a complaint about the use of your personal data by us with a data protection supervisory authority should the necessity arise.

Collection of personal data during your visit to our website
When you use our web pages simply for informational purposes, i. e. if you do not register or transmit other information to us, we only store the personal data your browser communicates to our server. In order to enable you to view our web pages, we need to collect the following data, which are technically required to provide you with this service and to ensure the stability and safety of the web site (legally based on Art. 6 sect. 1 p. 1 lit. f GDPR):

the IP address
the date and time of your query
the time zone difference to Greenwich Mean Time (GMT)
the content of the query (the exact page)
the access status/HTTP status code
the amount of data transferred
the website the query originates from
the browser
the operating system and user surface
the language and version of the browser software.

In addition to the data cited above, cookies will be saved to your computer when you use our website. Cookies are small text files that are stored on the hard drive of the computer you are using to access our web pages, allocated to the browser you are using. The party placing these cookies (in this case, our company) has access to some pieces of information through these files. Cookies cannot execute any programs or transfer viruses to your computer. Their sole purpose is making internet services more user-friendly and more efficient.

Use of cookies:
This website uses transient cookies. Transient cookies are automatically deleted as soon as you close your browser. This especially includes session cookies. These serve for storing a so-called session ID, with which different queries from your browser can be assigned to the joint session. This enables recognition of your computer when you return to our website. Session cookies are deleted when you log out or close your browser.

You can configure your browser set-up according to your wish and refuse cookies altogether or only those by third parties. We hereby explicitly point out that as a consequence you might not be able to use all the functions of our website if you do so.

Further functions and services offered on our website
Besides the purely informatory use of our website, we also offer various services for you to use if you are interested in doing so. This requires, as a rule, entering further personal data, which we need for providing you the respective service and for which the aforementioned basic principles for data processing are applicable.

To process your data, we use external service providers to some extent. We have carefully chosen and commissioned them, they are under binding instructions and we regularly control them.

Insofar as the service providers or business partners contracted by us are located in a state outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the service we offer.

Objection or revocation of personal data processing
You can at any time revoke your consent on data processing that you have given us. Such a revocation infringes the admissibility of processing your data as soon as you have issued such a declaration to us.

Insofar as we base personal data processing on a balance of interests, you are free to object against their being processed. This is the case if data needn’t be processed in order to fulfill our contract with you, which we will explain in the following description of the functions. When lodging an objection, please be so kind as to give us the reasons why you no longer agree with our processing your personal data. In the case of a reasonable objection we will examine the situation and will either cease to process your personal data or adjust the extent of data processing, or give you our compelling and legitimate grounds why we have to keep processing your data.

Of course you can at any time revoke your permission to use your personal data for advertising purposes and for data analyses. Please direct your objection to the use of personal data for advertising purposes to the following contact:

BTN Aquarium Decorations AB
Verkstadsvägen 56
36 Kopparberg
Schweden
info@backtonature.se

Use of social media plugins
Currently we are using the following social media plugins: Facebook, Google+ and Twitter. We have decided to use a so-called two-click solution: When you visit our website, at first, no personal data are given to the plugin providers as a rule. The providers of the plugin are marked by their initials or their logo, which can be seen above the respective box. We offer you the possibility of directly communication with the plugin provider with the help of the button. Only when you click on the marked area, thus activating it, will the plugin provider be given the information that you have called up the respective website of our online service. Moreover, the data named in §3 of this declaration are transmitted. In the case of Facebook and Xing, according to the statement of the respective provider in Germany, the IP address is anonymized immediately after communication. When you activate the plugin, you transmit personal data are transmitted to the respective plugin provider, where they are stored (for providers located in the US, this is done in the USA). Since the plugin provider mainly uses cookies for collecting data, we recommend you to delete all cookies using the security or privacy settings of your browser before you activate the greyed-out box.

We cannot influence which data are collected in this context and how these data are processed. We do not know the full extent of such data collection, the purpose of their processing and the time limits for their storage, and neither do we have any information regarding the deletion of the data collected by the provider of the plugin.

The plugin provider stores the personal data collected from you as user profiles and uses them for advertising purposes, for market research and/or for needs-based website design. This analysis is especially used (also for users that are not logged in) to show you advertisements that are based on your interests, and to inform other users of the respective social networks about your activities on our website. You have the right to object against the creation of such a user profile. For filing such an objection you need to turn to the provider of the respective plugin. By incorporating these plugins into our web presence, we are offering you the possibility to interact with the social networks and with other users, and they help us improve our web pages and our services and to become more interesting for you as a user. The legal basis for plugin use is Art. 6 section 1 page 1 lit. f GDPR.

Data are transferred regardless if you have an account with the provider of the plugin and are logged in there or not. If you are logged in on the pages of the plugin provider, your personal data collected on our website are directly assigned to your account with the plugin provider. If you acknowledge the activated button and e.g. link to the page, the plugin provider will also store that information in your user account and disclose it publicly to your contacts. We recommend a logout every time you finish your activities on a social network, especially before you activate the button on our website, in order to prevent the assignment of your personal data to your profile with the plugin provider.

Please see the data protection statements of the plugin providers for further information regarding the purpose and the extent of data collection and data processing by them. There you can also get further information on your rights relating thereto and on the settings options to protect your privacy.

The addresses of the respective plugin providers and the URL with their data protection information:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Use of our web shop
If you want to place an order with us via our web shop you need to disclose to us such personal data as we require to process your order to enable us to facilitate the conclusion of the contract. For executing the contracts we need obligatory data, which are especially marked, further data entries are optional. The data you submit to us will be processed by us as we execute your order. We have the right to transmit your payment details to our house bank within this framework. The legal basis is art. 6 section 1 p. 1 lit. b GDPR.

You are free to create a customer account where we can store your data for future orders. When you create an account under „My Account“, the data you enter will be stored until further notice. You can delete all further data, including your customer account, in the customer area at any given time.

We are granted the right to process the data you submit to us in order to inform you about further products from our portfolio that may be interesting for you, or to send you emails with technical information.

Trade and tax law obliges us to store your address, payment and order details for a period of ten years. After three years, however, we will restrict data processing, i. e. your data will only be stored to meet these legal requirements.

To prevent unauthorized access to your personal data, especially your payment details, by third parties, the order process is encrypted using TLS technology.

Newsletter
With your consent, you can subscribe to our newsletter, in which we inform you about our current interesting offers. The goods and services advertised are named in the declaration of consent.

For subscription to our newsletter we use the so-called double opt-in method. After you submit your query, we will send you an email to the email address you have given during the subscription process, in which we ask you to confirm your subscription to our newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and, after one month, automatically deleted. Moreover, we will store the IP address(es) used by you and the time and date of your subscription and confirmation. The purpose of this method is to ensure that your subscription was made by you and to facilitate the identification of personal data misuse, should the necessity arise.

Giving your email address is obligatory for subscribing to our newsletter. The remittal of other personal data (especially marked) is optional. We will use these data to be able to address you personally. After receiving your confirmation we will store your email address in order to be able to send you the newsletter. Legal basis is art. 6 section 1 clause 1 lit. A DS-GVO.

You can at any time revoke your consent to receiving our newsletter and unsubscribe. You will find a link in every newsletter email that enables you to do so. Click on this link or send a message to the contact given in the imprint.

Please note that we will analyze your user behavior when sending you our newsletter. To facilitate analysis, each newsletter email contains so-called web beacons or tracking pixels, i. e. one-pixel picture files stored on our web pages. For analysis, we combine the data specified in §3 and the web beacons with your email address and an individual ID. The links contained in the newsletters also contain this ID. With the data we thus generate, we will create a user profile in order to tailor the newsletter exactly to your individual interests. We collect the time and date of your reading our newsletter and which of the links contained in it you click, and we deduce your personal interests. We combine these data with your activities on our website. This information will be stored as long as you are subscribed to our newsletter. When you unsubscribe, we will store these data for purely statistical purposes, and anonymize them. Tracking is not possible if you deactivate the display of pictures in your email set-up. In this case, you will not be able to see the newsletter completely, and you may not be able to use all its functions. If you enable pictures manually, your data will be tracked, as stated above.

Google Analytics
These web pages use Google Analytics, a web analyzing service provided by Google Inc. („Google“). Google Analytics uses so-called „cookies“, small text files that are stored on your computer and that make an analysis of how you use this website possible. The information generated by these cookies on your use of our website is, as a rule, transferred to a Google server in the USA, where it is stored. Should you activate IP anonymization on this website, your IP address will be shortened by Google while the information is still inside a member state of the European Union or in another contractual state of the Agreement on the European Economic Area. Your full-length IP address will only be transmitted to a Google server in the USA as an exemption, and shortened there. On order of the provider of this website, Google will use such information to analyze your visit on this website, in order to issue reports on website activities and to provide further services regarding the use of the web pages or the Internet in general to the website operator.

The IP address transmitted from your browser within the framework of Google Analytics will not be combined with other data by Google.

By choosing the corresponding set-up in your browser software, you can inhibit the storage of cookies on your computer. Please note that this might prevent you from using some of the functions of this website properly. Moreover, you can prevent the personal data created by the cookie (including your IP address) that refer to your activities on these web pages from being collected as well as from being processed by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

This website uses Google Analytics with the extension „_anonymizeIp()“. It shortens IP addresses before they are processed, and they cannot be traced back to an individual person this way. Insofar as there is a personal connection to be drawn from the data collected from you, this is at once excluded and the personalized data are deleted automatically and immediately.

We use Google Analytics in order to analyze user behavior on our website, which helps us to constantly improve our web pages. The statistics thereby created enable us to improve our internet offer and to make it more interesting for you as a user. If, as an exception, personal data are transmitted to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is art. 6 section. 1 p. 1 lit. f GDPR.

Information about the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms and conditions of use: http://www.google.com/analytics/terms/de.html, data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the data protection declaration: http://www.google.de/intl/de/policies/privacy.

This website also uses Google Analytics for analyzing visitor streams across devices, which is done with the help of a user ID (Universal Analytics). In your customer account, you can deactivate this analysis across devices under „My data“, or „Personal data“.

Use of web fonts
On these internet pages, we use external fonts provided by Google Fonts. Google Fonts is a service by Google Inc. The integration of these web fonts is realized by a call to the server, as a rule this is a server of Google Inc. in the USA. During this call, information about which of our pages you have visited is transmitted to the server. Furthermore, the IP address of the terminal device of the visitor of these web pages is stored by Google Inc. For more information, please refer to the data protection notices by Google, which are available here: www.google.com/fonts#AboutPlace:about and here: 
www.google.com/policies/privacy/

Incorporation of YouTube videos
We have incorporated YouTube videos in our online offer, which are stored at http://www.YouTube.com and which can be accessed directly on our website. These videos are all incorporated using the „extended data protection mode“, which means that no data concerning you as a user are transmitted to YouTube when you do not play these videos. Only when you click on „Play“ the data named in section two are transmitted. We have no influence over this data transmission.

When you visit our website, YouTube will receive the Information that you have called up the respective subpage of our website. In addition, the data named in §3 of this data protection declaration are transmitted. This is independent from the fact whether YouTube provides a user account to which you are logged in, or if you do not have a user account with YouTube. When you are logged in on Google, your data are directly assigned to your account. If you do not wish for your data to be assigned with your YouTube profile, please make sure that you log out before you activate the button. YouTube saves your data as user profiles and uses them for advertising purposes, for market research and/or to create needs-based web pages. Such analysis is especially done in order to provide you (this is valid even for non-logged-in users) with needs-based advertisements and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please turn to YouTube to exercise this right.

For further information about the purpose and extent of data collection and processing by YouTube, please refer to their data protection declaration. There you will also find further information regarding your rights and the set-up possibilities to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google will process your personal data in the USA and has submitted to the EU-US-Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Incorporation of Google Maps
On this website, we use the service provided by Google Maps. It enables us to show you interactive maps directly on our website, and to enable you to use the map functions comfortably.

When you visit this page, Google will receive the information that you have called up the respective subpage on our website. Moreover, the personal data specified under §3 of this declaration are transmitted. This is independent from the fact whether Google provides a user account to which you are logged in, or if you do not have a user account with YouTube. When you are logged in on Google, your data are directly assigned to your account. If you do not wish for your data to be assigned with your Google profile, please make sure that you log out before you activate the button. Google saves your data as user profiles and uses them for advertising purposes, for market research and/or to create needs-based web pages. Such analysis is especially done in order to provide you (this is valid even for non-logged-in users) with needs-based advertisements and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please turn to Google to exercise this right.

For further information about the purpose and extent of data collection and processing by the plugin provider, please refer to the provider’s data protection declaration. There you will also find further information regarding your rights and the set-up possibilities to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US-Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.