Privacy Policy

Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

CigarKings GmbH
Drosselweg 15
81827 München
Germany

Represented by the managing director Philipp Kugler

Phone: +49 (0) 89 90422780
Email: kontakt@cigarkings.de
Website: www.cigarkings.de

General Information on Data Processing

The protection of your personal data is important to us. We process personal data exclusively within the framework of the applicable data protection provisions, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data is information relating to an identified or identifiable natural person. This includes, for example, names, email addresses, IP addresses and information you provide to us when contacting us.

We process personal data only to the extent necessary to provide our website, to handle inquiries, to comply with legal obligations or to safeguard legitimate interests, or where corresponding consent has been given.

Hosting and Provision of the Website

Our website is hosted by the following provider:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

Website: https://all-inkl.com

In the course of hosting, personal data that arises technically when you visit our website is processed. This may include, in particular, IP addresses, access data and technical information about the device used.

The processing serves the secure and reliable provision of our website and ensures technical stability and IT security.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, functional and trouble-free provision of our online offering.

We have concluded a data processing agreement pursuant to Art. 28 GDPR with our hosting provider ALL-INKL.COM – Neue Medien Münnich. Personal data is processed within the scope of the contractually agreed services and in compliance with the applicable data protection provisions.

Server Log Files

When you access our website, the web server may automatically collect technical information. This includes in particular:

• IP address of the requesting device
• Date and time of access
• Pages and files accessed
• Browser type and version
• Operating system used
• Referrer URL, if transmitted
• HTTP status code and amount of data transferred

This data is processed for the technical provision of the website, for error analysis and for the detection and defense against security attacks.

The legal basis is Art. 6(1)(f) GDPR.

The data is deleted as soon as it is no longer required for the stated purposes, unless statutory obligations or security-related reasons justify longer storage.

The server log files collected during the operation of the website are stored for a maximum of seven days and then automatically deleted. Longer storage takes place only to the extent necessary to investigate or defend against specific security incidents.

These data are not merged with other data sets for marketing purposes.

Contacting Us

You can contact us by email or phone. The contact buttons on our website merely open your email program; we do not offer a contact form.

When you contact us, we process the information you provide, in particular your name, your email address and the content of your message, as well as any further information you voluntarily provide.

The processing takes place exclusively to handle your inquiry and for the related communication.

The legal basis is Art. 6(1)(b) GDPR where your inquiry serves the implementation of pre-contractual measures or the performance of a contract. In all other cases, the processing is based on our legitimate interest in handling incoming inquiries pursuant to Art. 6(1)(f) GDPR.

Providing your information is voluntary; however, without it we cannot process and respond to your inquiry.

The data provided is deleted as soon as your inquiry has been fully handled and no statutory retention obligations or other legitimate grounds prevent deletion.

Your inquiries are handled exclusively by us internally.

Cookies and Similar Technologies

We do not use cookies for analytics, advertising or tracking purposes on this website.

For the age check, we store in your browser for the duration of your visit that you have confirmed your age (Session Storage). This entry contains no personal data, is not transmitted to our server and is deleted as soon as you close the browser tab or window. If you activate the “Accessible view,” we likewise store this setting only for the duration of your visit in your browser’s Session Storage so that it carries over when you move between pages. This entry also contains no personal data, is not transmitted to our server and is deleted when you close the browser tab or window. The legal basis is Section 25(2) No. 2 TDDDG, as you have expressly requested this display mode.

Access to this information on your device is necessary to provide the website you have requested in line with youth protection requirements and to avoid asking for age confirmation again on every page view. The legal basis is Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data is processed in this context, this is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in compliance with youth protection requirements.

No other cookies or similar technologies are used.

No Web Analytics and No Marketing Tracking

In its intended configuration, our website uses no services for analyzing individual user behavior and no tracking technologies for advertising or marketing purposes.

In particular, we do not use Google Analytics, Meta Pixel or comparable marketing tracking services.

No personal usage profiles are created for advertising purposes.

Locally Hosted Fonts

Our website uses the Roboto font family.

The font files are served locally from our web server. Loading these fonts therefore requires no connection to Google servers when you visit the website.

In connection with serving the font files, the technical access data described in Section 4 may be processed.

With the intended local hosting, no personal data is transmitted to Google merely because these fonts are displayed.

Recipients of Personal Data

Personal data is disclosed to third parties only to the extent necessary to provide our website, to handle your inquiry, to comply with legal obligations or for other permissible purposes.

Possible recipients include in particular technical service providers who process personal data on our behalf and in accordance with our instructions.

Data is not shared for advertising purposes.

A transfer of personal data to countries outside the European Union or the European Economic Area is not intended within the scope of the website functions described.

Storage Period

We store personal data only for as long as necessary for the respective processing purposes.

Afterwards, the data is deleted unless statutory retention obligations, in particular under commercial or tax law, or other permissible grounds prevent deletion.

The specific storage period depends on the respective data category, the purpose of the processing and the relevant statutory requirements.

Data Security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, manipulation and unlawful processing.

This includes in particular the encrypted transmission of data between your browser and our website using HTTPS or TLS.

We review our security measures regularly and adapt them to technical developments as required.

Rights of Data Subjects

Within the framework of the applicable statutory provisions, you have in particular the following rights:

• Access (Art. 15 GDPR): You may request information about the processing of your personal data.
• Rectification (Art. 16 GDPR): You may request the correction of inaccurate data or the completion of incomplete data.
• Erasure (Art. 17 GDPR): You may request the erasure of your personal data under the statutory conditions.
• Restriction (Art. 18 GDPR): You may request the restriction of processing under certain conditions.
• Data portability (Art. 20 GDPR): You may request the provision or transfer of your personal data under the statutory conditions.
• Objection (Art. 21 GDPR): You may object, on grounds relating to your particular situation, to the processing of personal data based on Art. 6(1)(e) or (f) GDPR.
• Withdrawal of consent (Art. 7(3) GDPR): You may withdraw any consent you have given at any time with effect for the future.

To exercise your rights, you can contact us at kontakt@cigarkings.de.

Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

The supervisory authority responsible for our company is generally:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany

Website: https://www.lda.bayern.de

You may also exercise your right to lodge a complaint with another competent data protection supervisory authority.

Automated Decision-Making

The data processing described does not involve automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements, technical functions of our website or the nature of the processing of personal data change.

The version published on our website at the relevant time applies.