Privacy Policy

1. General Information

Protecting your personal data is very important to us. We process your data solely in accordance with the applicable legal provisions, in particular the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the Telecommunications and Telemedia Data Protection Act (TTDSG). This privacy policy explains which personal data we collect, how we use it and what rights you have as a data subject.

2. Controller

Controller within the meaning of the GDPR:
Canvasi GmbH & Co. KG
Siemensstr. 25, 06449 Aschersleben
Email: info@canvasi.de

3. Data Protection Officer

Our external data protection officer is:

Manfred Grühn
Heiligenhafer Chaussee 48/50
23758 Oldenburg in Holstein
Email: datenschutz@brenn.online

4. Data Processing on Our Website

When you visit our website, our hosting provider automatically collects the following technical data (so-called server log files): browser type and version, operating system, referrer URL, pages visited, IP address (anonymised), date and time of access. This data is necessary to ensure the security and stability of the website and is not merged with other data sources. Legal basis: Article 6 (1)(f) GDPR (legitimate interest in maintaining a secure website).

5. Cookies & Tracking Technologies

We use essential cookies to enable the basic functions of our website. In addition, we use optional tracking cookies to analyse website usage and improve our services. For all non-essential cookies (e.g. tracking and advertising cookies), we require your explicit consent in accordance with the TTDSG and GDPR. You can choose to accept all cookies, allow only essential cookies, or withdraw your consent at any time via our cookie settings. Legal basis: Article 6 (1)(a) GDPR (consent) and Article 6 (1)(f) GDPR (legitimate interest).

6. Web Analytics & Tracking

We use Google Analytics, a web analytics service provided by Google Ireland Ltd., Dublin, Ireland. Google uses cookies to analyse the use of our website. Key data protection measures: IP anonymisation within the EU, data processing only with consent, and server-side data handling. You can disable Google Analytics at any time via our cookie settings. Legal basis: Article 6 (1)(a) GDPR (consent). For more information, see the Google Privacy Policy.

7. Social Media & External Content

Our website uses plugins from Meta (Facebook & Instagram). When you visit our pages, Meta may collect data through cookies if you are logged in. Data is transferred to Meta only with your explicit consent, which you can withdraw at any time via our cookie settings. For more information, see the Meta Privacy Policy.

8. Online Payment Services

If you pay using PayPal, your payment data will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. This is necessary to process your payment. PayPal may pass on data to third parties (e.g. banks, credit agencies). For further details, see the PayPal Privacy Policy. Legal basis: Article 6 (1)(b) GDPR (performance of a contract).

9. Contact

If you contact us via the contact form or by email, we will process your data to handle your enquiry. Legal basis: Article 6 (1)(b) GDPR (enquiries related to contracts) and Article 6 (1)(f) GDPR (legitimate interest in communication).

10. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

Right of access (Art. 15 GDPR) – Find out what data we hold about you.
Right to rectification (Art. 16 GDPR) – Correct inaccurate data.
Right to erasure (Art. 17 GDPR) – “Right to be forgotten”.
Right to restriction of processing (Art. 18 GDPR) – Limit data processing.
Right to data portability (Art. 20 GDPR) – Request your data in a portable format.
Right to object (Art. 21 GDPR) – Object to data processing.

11. Changes to This Privacy Policy

This privacy policy may be updated to reflect legal changes or adjustments to our services. Please review our privacy information regularly.

Last updated: 31 January 2025