At Pfando’s cash & drive GmbH, we take the protection of your personal data seriously. Protecting your privacy and data security when processing personal data is our top priority, which we take into account and continuously optimize in our business processes. We process your personal data in accordance with the Data Protection Act, in particular the General Data Protection Regulation (GDPR). In the following privacy policy, we inform you about how we process your personal data and what rights you are entitled to.
Who is responsible for processing your personal data and how can you contact our data protection officer?
Responsible person:
Name: Pfando’s cash & drive GmbH
Street: Hohenzollerndamm 184
Postal code, city, country: 10713 Berlin
Commercial register number: HRB 130895 B
Managing Director: Tobias Renkel
Data Protection Officer:
Name: Attorney Jan Kühne
Email address: datenschutz@pfando.cz
Here you will find topics related to our privacy policy with direct links to explanations:
1. What personal data do we process, why do we do so, and what is our legal basis for doing so? (Legal basis)
2. How do we protect personal data?
3. Providing data to our partners is necessary for us to provide our services. Here you can find out who your personal data is shared with.
4. What happens to your personal data when you contact us?
5. For your and our security, we collect access data and log files
6. We use cookies and reach measurement to make your visit to our website more enjoyable.
7. We use Google Analytics to optimally address you and tailor our offer to your needs
8. Always up-to-date Google re/marketing services
9. A window to the world – Outbrain
10. Industry analyses using the Salesviewer tool
11. Every display is up to date with the AppNexus application
12. With the Sizmek system, you will always see the relevant ad
13. Contact us via Live Chat Inc.
14. With Hotjar, we develop our homepage exactly to your taste
15. Maintaining our partnership with easy.tracking
16. Find everything with Bing Universal Event Tracking
17. Relevant ads for you with advanced commerce
18. Facebook, Custom Audiences, and Facebook marketing services
19. RTBLAB
20. Let's chat with WhatsApp
21. Snapchat
22. You'll love our newsletters
23. Spoteffects
24. Nimbata
25. Pfando, your new employer?!
26. Integration of third-party services and content
27. Storage and deletion of your personal data
28. Under the Personal Data Protection Act, you have the following rights
29. You can contact the relevant authority as follows
30. You can exercise your right to object at any time
31. Changes to the privacy policy
1. What personal data do we process, why do we do so, and what is our legal basis for doing so? (Legal basis)
1.1 This Privacy Policy explains the nature, scope, and purpose of the processing of personal data within our online offering and related websites, features, and content (hereinafter collectively referred to as the "online offering" or "website"). The privacy policy applies regardless of the domains, systems, platforms, and devices (e.g., desktop or mobile) on which the website is viewed.
1.2 For terms used, such as "personal data" or its "processing," we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
1.3 We process inventory data (e.g., names and addresses and contact details of customers), contract data (e.g., services used, names of contact persons, payment details) for the purpose of fulfilling our contractual obligations and services in accordance with Article 6(1)(b) of the GDPR.
1.4 The personal data of users processed within the scope of this online offering includes inventory data (e.g., customer names and addresses), contract data (e.g., services used, names of contact persons, payment details), usage data (e.g., websites visited within our online offering, interest in our products), and content data (e.g., data in contact forms).
1.5 The term "user" covers all categories of data subjects affected by the processing of personal data. These include our business partners, customers, stakeholders, and other visitors to our website. Terms used, such as "user," are understood to be gender-neutral.
1.6 We process users' personal data only in accordance with the relevant data protection regulations. This means that users' personal data is only processed if legal consent has been given, in particular if the processing of personal data is necessary for the provision of our contractual services (e.g., processing of orders and inquiries) and online services, or if it is required by law, if the user has given their consent, and also on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation and security of our online offering within the meaning of Art. 6 (1) (f) GDPR, in particular in the measurement of reach, the creation of profiles for advertising and marketing purposes, and the collection of access data and the use of third-party providers).
1.7 We would like to point out that the legal basis for consent is Article 6(1)(a) and Article 7 of the GDPR. the legal basis for processing for the purpose of performing our services and implementing contractual measures is Article 6(1)(b) of the GDPR, the legal basis for processing for the purpose of fulfilling our legal obligations is Article 6(1)(c) of the GDPR, and the legal basis for processing for the purpose of protecting our legitimate interests is Article 6(1)(f) of the GDPR.
2. How do we protect personal data?
2.1 We take organizational, contractual, and technical security measures in accordance with the latest findings to ensure compliance with the provisions of data protection laws and to protect the data we process from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.
2.2 Security measures include, in particular, encrypted data transmission between your browser and our server, secure storage in protected areas, and hardware and software protection against unauthorized access by third parties or loss.
2.3 Trustpilot. We use the Trustpilot review portal, which is operated by TrustPilot A/S, Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark. In order to continuously improve our services, we offer our customers the opportunity to review us through this independent portal, without us being able to influence it in any way.
3. Providing data to cooperating partners is necessary for the performance of our services. Here you can find out to whom your personal data is transferred.
3.1 Data will only be transferred to third parties within the scope of legal requirements. We only transfer user data to third parties if this is necessary, for example on the basis of Article 6(1)(b) of the GDPR for contractual purposes or on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR for the economical and efficient operation of our business.
3.2 If we use subcontractors to provide our services, we take appropriate legal measures and corresponding technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal regulations.
3.3 If content, tools, or other resources from other providers (hereinafter collectively referred to as "third-party providers") are used within the scope of this privacy policy and their registered office is located in a third country, it can be assumed that data will be transferred to the countries in which the third-party providers are based. Third countries are countries in which the GDPR is not directly applicable, i.e., generally countries outside the EU or the European Economic Area. Data is transferred to third countries either if there is an adequate level of personal data protection, the user's consent, or other legal permission.
4. What happens to your personal data when you contact us?
4.1 When contacting us (via contact form, telephone, chat, or email), user data is processed for the purpose of processing the contact inquiry and handling it in accordance with Article 6(1)(b) of the GDPR.
4.2 User data may be stored in our customer relationship management system ("CRM system") or in a comparable inquiry processing organization.
5. For your and our security, we collect access data and log files.
5.1 Based on our legitimate interests within the meaning of Article 6(1)(f) of the GDPR, we collect data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website visited, the file, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, the URL of the referring link (previously visited page), the IP address, and the provider making the request.
5.2 For security reasons (e.g., to investigate misuse or fraud), information from log files is stored for a maximum of seven days and then deleted. Data that must be retained for evidentiary purposes is excluded from deletion until the relevant incident has been finally clarified.
5.3 Every 4 weeks, the web host database is backed up and the old backup is overwritten. This ensures that your data is not stored by our processor for longer than necessary.
6. To make your visit to our website more enjoyable, we use cookies & reach measurement.
6.1 Cookies are pieces of information that are transferred from our web server or third-party web servers to the user's web browser and stored there for later retrieval. Cookies can be small files or other types of information storage.
6.2 We use "session cookies," which are stored only for the duration of your current visit to our website (e.g., to store your login status). A randomly generated unique identifier, known as a session ID, is stored in the session cookie. The cookie also contains information about its origin and storage time. These cookies cannot store any other data. Session cookies are deleted as soon as you stop using our online offering and, for example, log out or close your browser.
6.3 Users are informed about the use of cookies for pseudonymous reach measurement in this privacy policy.
6.4 If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser's system settings. Stored cookies can be deleted in the browser's system settings. Excluding cookies may lead to restrictions in the functionality of this online offer.
6.5 The general use of cookies for online marketing purposes can be prevented for many services, particularly for tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. In addition, the storage of cookies can be prevented by deactivating them in your browser settings. Please note that in this case, it may not be possible to use all the functions of this online offer.
7. We use Google Analytics to ensure that we can address you optimally and that our offer is perfectly tailored to you.
7.1 Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Article 6(1)(f) of the GDPR), we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
7.2 Google uses cookies. The information generated by cookies about the user's use of the online offer is usually transferred to a Google server in the USA and stored there.
7.3 Google is certified under the EU-US Data Privacy Framework and thus offers a guarantee of compliance with European data protection law.
7.4 Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on activities within this online offering, and to provide other services related to the use of this online offering and the Internet.
7.5 The processed data may be used to create pseudonymous user profiles.
7.6 We only use Google Analytics with IP anonymization enabled. This means that users' IP addresses are truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the US and truncated there.
7.7 The IP address transmitted by the user's browser will not be associated with other Google data.
7.8 Users can prevent cookies from being stored by selecting the appropriate settings in their browser; users can also prevent the collection of data generated by cookies and related to their use of Google's online services and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=cs.
7.9 For more information about Google's use of data, settings options, and objections, please refer to Google's privacy policy (https://policies.google.com/privacy?hl=cs) and Google's ad display settings (https://adssettings.google.com/authenticated?hl=cs).
8. Always up-to-date Google re/marketing services
8.1 Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Article 6(1)(f) of the GDPR), we use marketing and remarketing services ("Google Marketing Services") from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
8.2 Google Marketing Services enables us to display targeted ads for and on our websites so that we only show users ads that potentially match their interests.
8.3 If, for example, users are shown advertisements for products they have been interested in on other websites, this is referred to as "remarketing."
8.4 For these purposes, when you visit our and other websites on which Google Marketing Services are active, Google directly runs Google code and integrates so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") into the website.
8.5 With their help, an individual cookie, i.e. a small file (comparable technologies may also be used instead of cookies), is stored on the user's device. This file records which websites the user has visited, what content they were interested in and which offers they clicked on, as well as technical information about the browser and operating system, referring websites, the duration of the visit and other information about the use of the online offer.
8.6 Users' IP addresses are also recorded, but are truncated within member states of the European Union or other contracting states of the Agreement on the European Economic Area within the framework of Google Analytics, and only in exceptional cases are they transferred in full to a Google server in the USA and truncated there.
8.7 The above information may also be linked by Google to information from other sources. If the user subsequently visits other websites, they may be shown advertisements tailored to their interests.
8.8 We may also use the "Google Tag Manager" tool to integrate and manage Google's analytics and marketing services on our website.
8.9 For more information on the use of personal data for marketing purposes by Google, please visit the overview page: https://www.google.com/policies/technologies/ads. Google's privacy policy is available at: https://www.google.com/policies/privacy.
8.10 If you wish to object to advertising based on Google Marketing Services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.
9. Window to the world – Outbrain
9.1 Based on our legitimate interests (Art. 6 (1) (f) GDPR), we use the services of Outbrain UK Limited, 5 New Bridge Street, London, EC4V 6JA, United Kingdom.
9.2 Outbrain uses cookies and similar technologies to collect information about the use of this online offering. This information is used to display personalized content and recommendations.
9.3 For more information about Outbrain's privacy policy, please visit: https://www.outbrain.com/legal/privacy
10. Industry analysis using the Salesviewer tool
10.1 This website uses technology from SalesViewer® GmbH on the basis of the legitimate interests of the website operator (Art. 6 (1) (f) GDPR) for the purpose of collecting and storing data for marketing, research, and optimization purposes.
10.2 User profiles may be created from this data using pseudonyms. Cookies may be used for this purpose. The data collected is not used to personally identify visitors to this website without their express consent and is not linked to the personal data of the pseudonym holder.
10.3 You can object to the collection and storage of data at any time with future effect by clicking on the following link: https://www.salesviewer.com/opt-out
11. With AppNexus, every display is up to date
11.1 We use technology from AppNexus Inc., 28 West 23rd Street, New York, NY 10010, USA, to optimize online advertising.
11.2 AppNexus uses cookies and similar technologies to collect data about website usage and to display targeted advertising.
11.3 Further information on personal data protection can be found at: https://www.appnexus.com/en/company/platform-privacy-policy
12. With Sizmek, you will always see the relevant ad
12.1 We use the marketing services of Sizmek Inc., 401 Park Avenue South, New York, NY 10016, USA.
12.2 Sizmek enables the display of targeted advertising based on users' previous behavior on the Internet.
12.3 For more information on personal data protection, please visit: https://www.sizmek.com/privacy-policy/
13. Contact us via Live Chat Inc.
13.1 We use the LiveChat chat service, operated by LiveChat Software S.A., ul. Zwycięska 47, 53-033 Wrocław, Poland, to communicate with visitors to our website.
13.2 Data entered into the chat (e.g., name, email address, message content) is processed for the purpose of responding to your inquiry.
13.3 For more information, visit: https://www.livechat.com/legal/privacy-policy/
14. With Hotjar, we develop our homepage exactly according to your taste.
14.1 We use the Hotjar service provided by Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141, Malta.
14.2 Hotjar allows you to analyze user behavior on websites (e.g., mouse movements, clicks, page scrolling) in order to optimize the user experience.
14.3 For further information, please visit: https://www.hotjar.com/legal/policies/privacy
15. Maintaining partnerships with easy.tracking
15.1 We use the easy.tracking service to analyze marketing activities and optimize our advertising campaigns.
15.2 When using this service, usage data and technical data about the user's device may be processed.
15.3 The data is processed for the purpose of monitoring the performance of advertising measures and assigning conversions to individual marketing channels.
15.4 Processing is carried out on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR in optimizing our marketing activities and the economic operation of our online offering.
15.5 If you do not want your data to be processed in this way, you can prevent cookies from being stored by adjusting your browser settings accordingly.
16. Find everything with Bing Universal Event Tracking
16.1 On our website, we use conversion tracking and remarketing by Microsoft Advertising (Bing Ads), operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
16.2 Microsoft stores a cookie on the user's device if the user has arrived at our website via a Microsoft Bing advertisement.
16.3 In this way, Microsoft and we can recognize that someone has clicked on an ad, been redirected to our website, and reached a predetermined landing page (conversion page).
16.4 Processing is carried out on the basis of Article 6(1)(f) GDPR on the basis of our legitimate interest in analyzing and optimizing advertising measures.
16.5 For more information about Microsoft's privacy practices, please visit: https://privacy.microsoft.com/cs-cz/privacystatement.
17. Relevant ads for you with advanced shopping
17.1 We use technologies to display targeted advertising based on users' interests.
17.2 Cookies and similar technologies may be used for this purpose, enabling the analysis of website usage and the display of personalized advertising.
17.3 Processing is carried out on the basis of Article 6(1)(f) of the GDPR.
18. Facebook, Custom Audiences, and Facebook Marketing Services
18.1 Based on our legitimate interests, we use the marketing services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
18.2 Using Facebook Pixel, Meta can identify visitors to our website as a target group for displaying advertisements (so-called "Facebook Ads").
18.3 Processing is carried out in accordance with Article 6(1)(f) of the GDPR.
18.4 For more information, please see Meta's Privacy Policy: https://www.facebook.com/privacy/policy/.
19. RTBLAB
19.1 We use RTBLAB services to optimize online advertising.
19.2 RTBLAB may use cookies and similar technologies to analyze user behavior.
19.3 Processing is carried out on the basis of Article 6(1)(f) of the GDPR.
20. Let's chat with WhatsApp
20.1 We offer the option of contacting us via WhatsApp, a service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
20.2 If you contact us via WhatsApp, the data you provide (e.g., phone number, message content) will be processed for the purpose of handling your inquiry.
20.3 Processing is carried out on the basis of Article 6(1)(b) of the GDPR or on the basis of your consent in accordance with Article 6(1)(a) of the GDPR.
21. Snapchat
21.1 We use the marketing services of Snap Inc., 2772 Donald Douglas Loop North, Santa Monica, CA 90405, USA.
21.2 Snapchat may use cookies and similar technologies to display personalized advertising.
21.3 Processing is carried out on the basis of Article 6(1)(f) of the GDPR.
22. You'll love our newsletters
22.1 If you subscribe to our newsletter, we will process the data you provide (e.g., your email address) for the purpose of sending you the newsletter.
22.2 Registration takes place via a double opt-in procedure.
22.3 Processing is based on your consent pursuant to Article 6(1)(a) of the GDPR.
22.4 You can unsubscribe from the newsletter at any time via the link provided in each newsletter.
22.5 We log newsletter subscriptions so that we can prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address.
22.6 Data processed in connection with newsletter subscriptions is stored until you unsubscribe.
23. Spoteffects
23.1 We use Spoteffects marketing services to optimize and evaluate our advertising campaigns.
23.2 Within this framework, technical data about the device, data about usage, and interaction with advertising media may be processed.
23.3 Processing is carried out on the basis of Article 6(1)(f) of the GDPR.
24. Nimbata
24.1 We use the Nimbata service to track telephone conversations and optimize marketing measures.
24.2 In doing so, call data, call duration, and technical data about the device may be processed.
24.3 Processing is carried out on the basis of Article 6(1)(f) of the GDPR.
25. Pfando, your new employer?!
25.1 If you apply for a job via our website, we process your personal data (e.g., name, contact details, CV, qualifications) for the purpose of conducting the selection process.
25.2 Processing is carried out on the basis of Article 6(1)(b) of the GDPR and, where applicable, Section 26 of the BDSG (if relevant).
25.3 If no employment relationship is established, your data will be deleted in accordance with legal regulations.
26. Integration of third-party services and content
26.1 We may integrate third-party content or services (e.g., videos, map services, fonts) into our online offering that require the transfer of the user's IP address to the third-party provider.
26.2 Processing is carried out on the basis of Article 6(1)(f) of the GDPR.
27. Storage and deletion of your personal data
27.1 We store personal data only for the time necessary to achieve the purpose of its processing or for the period specified by law.
27.2 After the relevant period has expired, the data will be routinely deleted or blocked in accordance with legal regulations.
28. Under the Personal Data Protection Act, you have the following rights
28.1 You have the right to information about the personal data being processed in accordance with Article 15 of the GDPR.
28.2 You have the right to correct inaccurate data in accordance with Article 16 of the GDPR.
28.3 You have the right to erasure under Article 17 of the GDPR.
28.4 You have the right to restriction of processing pursuant to Article 18 of the GDPR.
28.5 You have the right to data portability pursuant to Article 20 of the GDPR.
28.6 You have the right to object to processing pursuant to Article 21 of the GDPR.
28.7 You have the right to withdraw your consent at any time in accordance with Article 7(3) of the GDPR.
29. You can contact the relevant authority as follows
29.1 You have the right to lodge a complaint with the supervisory authority for personal data protection pursuant to Article 77 of the GDPR.
30. You may exercise your right to object at any time.
30.1 Under certain circumstances, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation, or where the personal data is used for direct marketing purposes, and we may be required to cease processing your personal data.
In addition, you have the right to object at any time to the processing of personal data concerning you for direct marketing purposes. This also applies to profiling, insofar as it is related to such direct advertising. In this case, we will no longer process personal data for these purposes.
To exercise your rights as described above, please send us an email at
datenschutz@pfando.cz
or contact us by mail at
Pfando’s cash & drive GmbH
Hohenzollerndamm 184
10713 Berlin
Keyword: my personal data
31. Changes to the Privacy Policy
31.1 We reserve the right to amend this privacy policy to ensure that it always complies with current legal requirements or changes to our services.
31.2 The current version published on the website www.pfando.cz will apply to your next visit.