Data protection

  • 1. Information on the collection of personal data

(1) Below we inform you about the collection of personal data when using our website. Personal data is any data that can be related to you personally, e.g. name, address, email addresses, user behavior.

(2) The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is the

Grow Scale Limited
RM03, 24/F, HO KING COMM CTR,
2-16 FAYUEN ST, MONG KOK
HONG KONG (China)

Registration number: 79153424
Managing Director: Leah May Torrevillas
Telephone: +1 262 240 6647 (no customer service)
Email: info@kernwalder.com

(3) When you contact us by email or via a contact form, the data you provide (your email address, and optionally your name and telephone number) will be stored by us in order to answer your questions. We will delete the data collected in this context once storage is no longer necessary, or restrict processing if there are statutory retention obligations. The legal basis for this is our legitimate interest within the meaning of Article 6(1)(f) GDPR in answering your inquiry, and, if your inquiry relates to the conclusion of a contract, Article 6(1)(b) GDPR.

(4) If we use contracted service providers for individual functions of our service or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the defined criteria for the storage period.

  • 2 Your rights

(1) You have the following rights with respect to your personal data:

– Right of access (Art. 15 GDPR),

– Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),

– Right to restriction of processing (Art. 18 GDPR),

– Right to withdraw consent (Art. 7 para. 3 GDPR)

– Right to object to processing (see paragraph 3)

– Right to information (Art. 19 GDPR),

– Right to data portability (Art. 20 GDPR).

(2) You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data (Art. 77 GDPR).

(3) In the case of processing personal data for the performance of tasks carried out in the public interest (Art. 6 para. 1 sentence 1 lit. e GDPR) or for the purposes of legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR), you may object to the processing of your personal data at any time with effect for the future. In the event of an objection, we shall cease all further processing of your data for the aforementioned purposes, unless

– there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or

– the processing is necessary for the establishment, exercise or defense of legal claims.

You can object to the use of your data for direct marketing purposes at any time with effect for the future; this also applies to profiling insofar as it is related to direct marketing. In the event of an objection, we will cease all further processing of your data for direct marketing purposes.

(4) To exercise your rights (with the exception of the right to lodge a complaint with a data protection supervisory authority), please contact the body referred to in Section 1(2).

  • 3. Collection of personal data when visiting our website

(1) When you use our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

– IP address

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (specific page)

– Access status/HTTP status code

– amount of data transferred in each case

– Website from which the request originates

– Browser

– Operating system and its interface

– Language and version of the browser software.

(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using. They allow the entity that sets the cookie (in this case, us) to receive certain information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the overall internet experience more user-friendly and effective (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR).

You can manage your cookie settings in your browser, including rejecting cookies in general or specifically for our site, and deleting any cookies that have already been set. Further information can be found in your browser's help menu.

(3) Use of cookies:

  1. a) This website uses the following types of cookies, the scope and function of which are explained below:

– Transient cookies (see b)

– Persistent cookies (see c).

  1. b) Transient cookies are automatically deleted when you close your browser. These include session cookies. These store a so-called session ID, which allows different requests from your browser to be associated with the same session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
  2. c) Persistent cookies are automatically deleted after a predetermined period, which can vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
  3. d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.
  4. e) We use cookies to identify you on subsequent visits if you have an account with us. Otherwise, you would have to log in again each time you visit.
  • 4. Using our online shop

(1) If you wish to place an order in our online shop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for processing your order. Mandatory information required for processing the contract is marked accordingly; other information is voluntary. We process the data you provide to process your order. For this purpose, we may transfer your payment details to our bank. The legal basis for this is Article 6( 1 )(b) GDPR.

Depending on your chosen payment method, your payment details will also be transmitted to the relevant payment service provider. The payment service provider is responsible for your payment details. Information, in particular regarding the responsible entity of the payment service provider, the contact details of the payment service provider's data protection officer, and the categories of personal data processed by the payment service provider, can be found at the following web address:

When paying by Paypal (PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg): https://www.paypal.com/de/webapps/mpp/ua/privacy-full

For payments via instant bank transfer: Klarna Bank AB (publ) Sveavägen 46 111 34 Stockholm Sweden: https://www.klarna.com/sofort/datenschutz/

(2) We are required by commercial and tax law to store your address, payment, and order data for ten years. However, after two years, we restrict the processing of this data, meaning it will only be used to comply with legal obligations.

(3) To prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.

  • 5. Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(3) You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of this website. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This shortens IP addresses before further processing, thus preventing them from being linked to a specific individual. Therefore, any personal data collected about you is immediately anonymized and the personal data is promptly deleted.

(5) We use Google Analytics to analyze and regularly improve the use of our website. The statistics we gather allow us to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR.

(6) Third-party provider information: Google LLC, 1600 Amphitheatre Parkway ,
Mountain View, CA 94043 USA. Terms of Service: http://www.google.com/analytics/terms/de.html, Privacy Overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.de/intl/de/policies/privacy. Google has certified its compliance with the EU-US Privacy Shield framework: https://www.privacyshield.gov/EU-US-Framework

  • 6 Facebook Custom Audiences

(1) Furthermore, the website uses the "Custom Audiences" remarketing function of Facebook Inc. ("Facebook"). This allows users of the website to be shown interest-based advertisements ("Facebook Ads") when visiting the Facebook social network or other websites that also use this process. Our aim is to show you advertising that is relevant to you in order to make our website more interesting for you.

(2) Due to the marketing tools used, your browser automatically establishes a direct connection to Facebook's server. We have no control over the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you to the best of our knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have visited the corresponding page of our website or clicked on one of our ads. If you are registered with a Facebook service, Facebook can associate your visit with your account. Even if you are not registered with Facebook or are not logged in, it is possible that the provider will obtain and store your IP address and other identifying information.

(3) The deactivation of the “Facebook Custom Audiences” feature is available to logged-in users at https://www.facebook.com/settings/?tab=ads#_möglich , as well as [please add]

(4) The legal basis for processing your data is Article 6 ( 1 ). Article 1(f) GDPR.

(5) Third-party information: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php ; Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework and Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
You can find more information here: http://www.facebook.com/policy.php

Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy.

  • 7. Embedding YouTube videos

(1) We have embedded YouTube videos in our online service. These videos are stored on http://www.YouTube.com and can be played directly from our website. All videos are embedded in "enhanced privacy mode," meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no control over this data transmission. This allows us to display relevant videos directly on our website, thus enabling more convenient use of our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

(2) By visiting our website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in Section 3 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish this association with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or the needs-based design of its website. Such analysis is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact YouTube.

(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and settings options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

  • 8 Newsletter

(1) With your consent, you can subscribe to our newsletter, which will inform you about our current special offers. The advertised goods and services are specified in the consent form.

(2) We use the so-called double opt-in procedure for newsletter registration. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. We also store your IP address and the date and time of registration and confirmation. The purpose of this procedure is to be able to verify your registration and, if necessary, investigate any potential misuse of your personal data.

(3) The only mandatory information required for sending the newsletter is your email address. After your confirmation, we will store your email address for the purpose of sending the newsletter. The legal basis for this is Article 6(1)(a) GDPR.

(4) You can withdraw your consent to receive the newsletter and unsubscribe at any time. You can do this by clicking on the link provided in every newsletter email, by sending an email to info@kernwalder.com , or by contacting us using the contact details provided in the legal notice.

  • 9. Storage duration

Unless we explicitly state otherwise, we store personal data for as long as statutory retention periods apply. After the statutory retention periods have expired, we will delete the data if we no longer need it to fulfill contractual obligations to you or if we cannot invoke a legitimate interest for further storage.