Privacy Policy

I General Information

1. Responsible Body

Below we explain to you which personal data is collected and processed by us when using our services and offers.

We are:

Toukana Interactive GmbH

Eitelstraße 35, 10317 Berlin

[email protected]

2. Legal Basis

As far as a legal basis is mentioned in this Privacy Policy, they relate to the General Data Protection Regulation.

We collect and process personal data based on the following statutory regulations:

  • Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent for a certain case, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
  • Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
    Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.
  • Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail

3. Rights of affected

You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:

  • Right of access by the data subject to Art. 15 GDPR
  • Right to rectification according to Art. 16 GDPR
  • Right to erasure (“right to be forgotten”) in accordance with Art. 17 GDPR
  • Right to restriction of processing according to Art. 18 GDPR
  • Right to data portability according to Art. 20 GDPR
  • Right to object according to Art. 21 GDPR

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.

4. Data Erasure and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage lapsed. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

II Concrete Data Processing

1. Visit of the Website

1.1 Scope of data processing

Inter alila, we operate the website www.toukana.com. When visiting these websites, our web server collects and stores the following data:

  • Time / date of the request
  • operating system and browser of the client
  • the URL which is requested
  • anonymized IP address of the client / visitor
  • URL from which the web page was requested

Data is stored in the log files of our system. This data is not stored together with other personal data of the user. The storage takes place on rented servers within the European Union.

1.2 Legal Basis

The legal basis for processing the data is Art. 6 para. 1 (f) GDPR. The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.

The legal basis for the storage of the data on the rented servers is Art. 28 para. 3 GDPR.

1.3 Purpose of the data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session. Furthermore, the IP address is recorded to prevent attacks on the website.

The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

1.4 Duration of storage

The logfiles will be deleted after seven days at the latest, unless there is a need to keep the data for the aforementioned purpose due to specific events. The IP address is kept for 14 days for the purpose of defence against attacks on the website and then deleted.

Storage beyond that is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment to a specific user is no longer possible.

1.5 Objection and removal possibility

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation and protection of the website. There is consequently no possibility of objection by the user.

2. Newsletter

2.1 Scope of data processing

On our website we offer the possibility to register for a newsletter, where registered persons regularly receive e-mails from us with current information. An input mask is available on the website for registration. The registration requires the entry of your e-mail address. By clicking on the registration button, the data entered in the input mask is transmitted to us. In addition, the date and time of registration for the newsletter as well as the IP address used are stored. When confirming the newsletter registration within the scope of the so-called double opt-in procedure, the date and time at which you click on the confirmation link for the newsletter registration and the IP address used in the process are also stored.

The newsletter is sent by the external service provider “Mailchimp”. For this purpose, your e-mail address will be passed on to “Mail-chimp”, who will take over the dispatch of the newsletter on our behalf. The service provider does not make any further use of your e-mail address. The service provider is located in the United States of America.

2.2 Legal Basis

The legal basis for the processing of data in the case of direct registration for the newsletter is Art. 6 para. 1 (a) GDPR.

The legal basis for the transfer of data to Mailchimp are Art. 28(3), Art. 46(2)(c) DSGVO. Mailchimp has committed to comply with the standard data protection clauses pursuant to the decision of the Commission of the European Union of February 5, 2010 (2010/87/EU), adopted by the Commission pursuant to the examination procedure under Article 93(2).

2.3 Purpose of data processing

The purpose of storing the e-mail address is to enable electronic contact for information purposes. The date and IP address of the registration as well as the confirmation of the registration are recorded in order to document the consent to the newsletter dispatch in a way that is secure in terms of evidence and to prevent misuse. The information is passed on to the service provider for the purpose of sending the newsletter as a mass mailing.

2.4 Duration of storage

If you have expressly agreed to receive the newsletter, we will only delete or block the e-mail address for advertising purposes if you withdraw your consent. The data of the confirmation of the order of the newsletter will be saved for the same period of time.

The e-mails sent, as far as they are business letters, are stored for the duration of the retention periods of the German Tax Code or the German Commercial Code. Further e-mails will be deleted as soon as the user can no longer be expected to contact us.

2.5 Objection and removal possibility

You can object to the use of the e-mail address for sending of the newsletter or revoke your consent at any time without incurring costs that exceed the fees of your communication tariff. In every e-mail sent to you in the context of the newsletter, you can object to the use of your e-mail address with effect for the future by clicking on a link provided there. You can also object to the use of the newsletter for future use by sending an e-mail to the address mentioned in I. General Information / 1. Responsable Body. In the case of an objection by e-mail, the implementation of the deletion or blocking can take up to 5 working days; during this period, the newsletter e-mails may still be sent.

3.Google Analytics

3.1 Scope of data processing

Our website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (“Google”). This software collects information about how you use the website and compiles various statistics. The increased usage data include in particular the concrete selection of links, the length of stay on individual pages and the order of use of the website, the frequency of the page request. This data is collected together with your IP address.

In particular, the following information is collected:

  • Information about the type of browser and the version used
  • The operating system of the user
  • The user’s Internet service provider
  • The IP address of the user
  • Date and time of access
  • Websites from which the user’s system accesses our website
  • Websites that are accessed by the user’s system via our website

Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

We have activated a so-called IP anonymization on the Parkamo website, this means that the IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to retransmission to the USA.

Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google itself describes here https://www.google.com/policies/privacy/ its data processing activity.

The data processing is essentially carried out by Google itself. Despite IP anonymization, the data is not anonymous and can be merged with other data by Google. Google can use the data for any of its own purposes, such as profiling, as well as link it with other data such as any Google accounts and also pass it on to associated US companies, e.g. Google LLC.

3.2 Legal Basis

The legal basis for the processing of data when using the website is Article 6 para. 1 (a) GDPR in the form of your express consent.

The legal basis for the transfer of data to Google is Art. 26 GDPR and Art. 6 para. 1 (a) GDPR.

3.3 Purpose of data processing

The purpose of the processing is to analyze this website and the usage behavior of its visitors.

3.4 Duration of storage

We ourselves no longer have access to personal data after anonymization by Google. With regard to a use by Google, the duration of the storage is not known.

3.5 Objection and removal possibility

You can prevent the storage of cookies, including the generation and transmission of data to Google, by restricting or prohibiting the use of cookies in your browser software. This may result in the deactivation of non-Google-related cookies as well as the inability to use all functions of this website to the full extent.

You can prevent the collection of the data generated by the cookie regarding your use (including your IP address) and their transmission to Google as well as the processing of this data by Google by downloading the browser plugin available under the following link and to install https://tools.google.com/dlpage/gaoptout.

In addition, you can also revoke your consent to data collection at any time in our Cookie Bar. For this purpose, a cookie is then stored so that we can recognize that you have not consented to the use of Google Analytics.

As of September 3rd, 2023

4. Cookies

This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.

4.1 What are cookies?

Cookies are small text files that are used to store small pieces of information. The cookies are stored on your device when the website is loaded on your browser. These cookies help us make the website function properly, make the website more secure, provide better user experience, and understand how the website performs and to analyze what works and where it needs improvement.

4.2 What types of cookies do we use?

The cookies used on our website are grouped into the following categories.

  • Necessary
    Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
  • Non Necessary
    Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies.

The below list details the cookies used in our website.

4.3 How can I control the cookie preferences ?

You can manage your cookies preferences by clicking on the “Cookie Settings” button and enabling or disabling the cookie categories on the popup according to your preferences.

In addition to this, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. To find out more out more on how to manage and delete cookies, visit www.allaboutcookies.org.

Should you decide to change your preferences later through your browsing session, you can change your preferences or withdraw your consent entirely here if you click on “Cookie Settings” from this popup: 🍪 Cookie Consent

5. Webflow

We host our website with Webflow. The provider is Webflow, Inc, 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter: Webflow). When you visit our website, Webflow collects various log files including your IP addresses.Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are required to display the page, to provide certain website functions and to ensure security (necessary cookies).details can be found in Webflow's privacy policy: EU & Swiss Privacy Policy | Webflow 165.

The use of Webflow is based on Art. 6 para. 1 lit. f GDPR.We have a legitimate interest in displaying our website as reliably as possible.If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG.Consent can be revoked at any time and data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: EU & Swiss Privacy Policy | Webflow 165.

Order processing

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.