Catit Official Brand Site

1. Basic Information

We are delighted to have you visit our website, and we would like to thank you for your interest. In the following, we would like to inform you about how we handle your personal data when you use our web services, like our website and our online shop. The following information also refers to the use of our offer with mobile devices, e.g. smartphones or tablets. Personal data includes all data which could be used to identify you personally, or which make you identifiable via a username or identification code, such as your IP address or credit card number.

This Privacy Statement explains the legal basis and the purpose for this collection or processing of your data. We would like to inform you of your rights regarding the use of your personal data. If you have any questions regarding the use of your personal data by us, please contact us as the responsible party.

For security reasons and to protect the transfer of personal data and other confidential information (e.g., queries sent to Controllers), these online services use SSL or TLS encryption. You can identify an encrypted connection by checking that the letters “https://” and a lock symbol appear in your browser address line.

If you have any questions regarding data protection, please contact us:

Rolf C. Hagen INC.,
20500 Trans-Canada Hwy
Baie d’Urfé, Quebec
H9X 0A2, Canada

Registry ID: 450294,
Corporation Number: 045029-4,
Business Number (BN): 104606843,

registered as a Federal Corporation at the Government of Canada under Canada Business Corporation Act – 1979-08-07,

represented by the directors: Thomas Marshall (109 chemin de l’Anse, Vaudreuil QC J7V 8P3, Canada); Rolf Hagen Jr. (8 Caron Point, Baie d’Urfé QC H9X 2Z4, Canada); Mark Hagen (57 Mount Victoria, Hudson QC J0P 1H0, Canada); Dieter Hagen (260 Main Road, Hudson QC J0P 1H0, Canada); J.W. Joergensen (13274 London Drive, Pierrefonds QC H4Z 1G4, Canada); Bradley Charles Rogers (16 Vincent Blouin St., Kirkland QC H9J 4B2, Canada); Thomas Hagen (12200 Albert Prevost, Montreal QC H4K 2S9, Canada)

Contact:
Tel.: +1-514-457-0914

Contact information for our company Data Protection Officer: [email protected].

Controller in the EU:

HAGEN Deutschland GmbH & Co. KG,
represented by personally liable partners of HAGEN Deutschland GmbH,
represented by the managing directors Rolf H. Hagen, Christian Parbs
Lehmweg 99-105
25488 Holm
Germany
Local court Pinneberg, HRA 3169
VAT ID no. DE 13 45 22 000

Tel.: +49 41 03 – 960 – 0
Fax: +49 41 03 – 960 – 2249
E-Mail: [email protected]

3. Data collection when accessing our online services

Accessing our web pages (without registration) will result in the automatic anonymised collection of the following data on our servers:

  • masked IP address,
  • access date/ time/ time zone,
  • access status,
  • type of access,
  • type of protocol,
  • type and number of pages accessed on our site,
  • name and size of accessed files,
  • referring website,
  • web browser,
  • operating system.

The listed non-personal data are collected automatically as part of the normal operations of our internet services. The information gathered about the use of our pages is not combined with any personal information provided through the online registration form. We do not have any personal references in our usage data.

We use the above data for the purposes of troubleshooting, generating statistics and measuring website activity with the aim of improving the value and use of our services. This also constitutes a legitimate interest for the purposes of processing (permissible in the EU pursuant to: Art. 6 (1) (f) GDPR).

We work with Mario Elsen Media, Witwenkamp 3a, 21357 Bardowick to maintain and to program the services we offer on the web, with whom we have job processing agreements for that purpose.

The above data are only collected for the period of use; once the use has ended, the data shall be deleted without delay, after seven days at the latest.

We receive information via cookies and web analysis services as soon as your web browser accesses our pages. These identifiers support various service functions of our website and are automatically transferred via your web browser to the hard disk of your computer or other mobile devices. You can prevent this function by setting your browser accordingly. In this case, however, personalized service is not possible. In these cases, your anonymized IP address may also be transmitted to the USA. You will find more information on the cookies and tools we use under the heading “Use of cookies and tools” below.

4. Contact

On our pages, we have provided an online form which enables you to make contact with us electronically. Your first and last name, address, e-mail address and country is required information. Your phone number is an optional entry. We need these data to process your request. You can also choose to provide us with additional information. It is also possible to contact us at any time by e-mail. Contacting us is always voluntary.

These data are solely used for the purpose of answering your request or responding to your request for contact, and the technical administration involved (permissible within the EU pursuant to: Art. 6 (1) (b) GDPR), because we need the above-mentioned data for the initiation, implementation or termination of a contractual relationship with you.

We do not transfer your requests to third countries or organisations outside the EU.

After your request has been processed, we delete your contact information, at the latest, seven days after your request has been dealt with. This period of storage may be subject to statutory storage periods, for example, when your request is in connection with the processing of a contract or a warranty or guarantee. In this case, we store your request beyond seven days only for the purpose of complying with our legal obligations (permissible within the EU pursuant to: Art. 6 (1) (c) GDPR). In this case, we delete your data on termination of the statutory storage period (§ 147 (3) AO – fiscal code), i.e. after a period of 10 years, beginning at the conclusion of the contract. We will delete your data at the end of this retention period without any request to do so on your part.  

5. Use of cookies and tools

5.1 What are cookies?

We use cookies and tools to obtain information as soon as your web browser accesses our website. These identifiers enable a range of our website’s service functions and are automatically transferred to the hard drive of your computer or other mobile device via your browser.

To improve the look of our website and to enable certain functions, we use cookies on various pages. Cookies are small text files that are stored on your device. These text files are used for the temporary storage of information. Your browser stores cookies in the form of a readable text file once you access our site. If you are registered with us, cookies help us to recognise you, your device (computer, tablet or smart phone) the next time you access one of our pages. Some cookies may contain personal data.

5.2 What cookies do we use?

According to function, we classify our cookies as Required, Functional, Analysis & Statistics, and Advertising and Marketing. Some of the cookies we use are required for you to use our web pages (so called session cookies). If you disable this cookie, our pages may not be accessed. The authentication cookie provides you with access to the log-in page. Without this cookie, you cannot register or access the log-in page. These session cookies will be deleted when you close your browser.

Other cookies remain on your device and allow us and our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). Persistent cookies are automatically deleted after a certain period of time, which differs from cookie to cookie. For advertising purposes, we use a retargeting cookie which allows us to show you interesting offers, even outside of our web pages. For more information, see the following overview of cookies used.

5.3 What is the purpose of using cookies?

Most of the cookies we use do not store any information that can identify you personally or that makes you identifiable. Rather, these cookies provide us with general and anonymised information regarding the use of our websites, the pages that are visited, the browsers and operating systems used and the cities our visitors are located. We only collect masked IP addresses which make it impossible to recognise individual users or be assigned to any one individual.

In some cases, settings may be saved using cookies to simplify certain processes (e.g. registration). This processing is carried out in order to fulfil our obligations to you (permissible within the EU pursuant to: Art. 6 (1) (b) GDPR).

Any cookies we collect are for the purposes of gathering information for improving the functioning and content of our online services. These functional cookies serve a legitimate interest as they enable the technical adaptation of our service and make it easier for you to use our pages (permissible within the EU pursuant to: Art. 6 (1) (f) GDPR). We also use cookies to measure the success of our online marketing. Using statistical data, we can also identify disruptions and understand cost calculations for advertising media. We only undertake this processing when you have granted us consent for the use of these cookies for analysis and statistics or for advertising and marketing (permissible within the EU pursuant to: Art. 6 (1) (a) GDPR). You may withdraw your consent at any time with future effect. The processing of your data remains lawful until your consent is withdrawn.

5.4 How to disable cookies

You can set your browser to inform you about the setting of cookies and whether you wish to accept cookies individually, or to accept only specific kinds of cookies, or to disable all cookies. Each browser is different in the way it administers its cookie settings. The Help menu of your browser provides information on how to change your cookie settings. You can find this information for your browser using the links below:

Alternatively, the Digital Advertising Alliance provide information on cookies and settings at www.aboutads.info.

5.5 Do we use cookies from third parties?

We sometimes work with web partners who help us to make our web pages more interesting for you. For this purpose, when you access some of our pages online, cookies from our partner companies may also be stored in your device (third-party cookies). This section provides more information regarding the use of these kinds of cookies, their scope, and the data they collect.

We use some cookies or tools because they are necessary for us to provide you with our online services. In this case, the legal basis for the processing is the user agreement concluded with you (Art. 6 Para. 1 Letter b DSGVO) or our legitimate interest, provided that no conflicting interests are discernible, and no contradiction exists (Art. 6 Para. 1 Letter f DSGVO). We use all other cookies exclusively on the basis of your consent (Art. 6 para. 1 letter a DSGVO). 

The third-party cookies used by us partially lead to data processing in the USA. In this case, too, we only use cookies with your consent (Art. 6 para. 1 letter a DSGVO). Although these providers (e.g. Google, Facebook) have undertaken to comply with the data protection provisions of the EU-US data protection shield, the legal framework governing the transatlantic transmission of data which the European Commission and the United States have agreed (COMMISSION IMPLEMENTING DECISION (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-U.S. Privacy Shield (notified under document C(2016) 4176)). These providers are also registered with the “Privacy Shield” Program of the U.S. Department of Commerce. However, the European Court of Justice has declared this agreement invalid and found that the USA does not have a level of data protection comparable to that in the EU (ECJ, judgment of 16 July 2020 – C-311/18, para. 200, Facebook/Schrems II). US legislation gives various security authorities unlimited powers of surveillance, including the use of surveillance programmes that enable the mass collection and analysis of data. US providers are obliged under national law to grant the security authorities access to the data processed by them, even if the data is processed by a foreign company. If consent is granted, there is a risk that the data collected via cookies will become part of the mass surveillance in the USA. There is no legal remedy or efficient legal proceedings available in the USA against such surveillance.

In order to enable the user of catit.com to choose which cookies are stored on his device when using the website, catit.com uses a so-called Cookie-Consent Tool, which is displayed when catit.com is called up for the first time.

The user has the possibility to choose for the categories statistics, marketing and external media whether the cookies may be set. Required cookies are necessary for the functionality of the website and the storage of the consent and cannot be deactivated.

Below is an overview of the cookies used by us:

Required Cookies

Required cookies enable basic technical functions and are necessary for the proper functioning of the website and cannot be blocked. In addition to the cookies listed under point 8, the cookies listed here are particularly relevant.

To store these consents (Opt-In), it is necessary to set a separate cookie. If a user deletes his browser cache, catit.com will query the cookie consent again.

Type of CookieCookie NameDescriptionDuration
Required Cookies   
borlabs-cookieSaves the settings of visitors selected in the Cookie Box of Borlabs Cookie.1 year

The following cookies are used as standard on our website to ensure the functionality of certain contents (e.g. shopping cart, web shop, secure login to customer account):

Type of CookieCookie NameDescriptionDuration
Function   
 pll_languageUsed to identify the language of a website visitor1 day
 catit_storeThis cookie stores information on which store the visitor prefers (US, UK, CA etc).1 year
spu_closing_*Tracks if a popup was closed
Used to remember not to show the popup again for a set period of time.
1day, 1 month,
6 months, 1 year
spu_conversion_*Tracks if a popup has made a conversion.
Used to remember not to show the popup again for a set period of time.
1day, 1 month,
6 months, 1 year
Type of CookieCookie NameDescriptionDuration
Analysis & Statistics Statistics Cookies collect information about the behaviour of visitors to our website. This information helps us to understand how our visitors use and navigate our website. 
 _ga, _gid, _ga_xxx, uetvid, _gcl_auCookie from Google for website analysis. Generates statistical data about how visitors use the website.1 minute, 1 day, 2 years
 _hjFirstSeenThis is set to identify a new user’s first session. It stores a true/false value, indicating whether this was the first time Hotjar saw this user. It is used by Recording filters to identify new user sessions.Session
 _hjAbsoluteSessionInProgressThis cookie is used to detect the first pageview session of a user. This is a True/False flag set by the cookie.30 minutes
 hjIncludedInPageviewSampleThis cookie is set to let Hotjar know whether that user is included in the data sampling defined by your site’s pageview limit.30 minutes
 _hjid, _hjSessionUser_xxxHotjar cookie that is set when a user first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.1 year
 _hjIncludedInSessionSampleThis cookie is set to let Hotjar know whether that user is included in the data sampling defined by your site’s daily session limit.30 minutes
 _hjSession_xxxA cookie that holds the current session data. This ensures that subsequent requests within the session window will be attributed to the same Hotjar session.30 minutes
Type of CookieCookie NameDescriptionDuration
Marketing Marketing cookies are used by third-party vendors or publishers to display personalized advertisements. They do this by tracking visitors across websites. 
 Google AdsCookie by Google used for conversion tracking of Google Ads.1 month
Type of CookieCookie NameDescriptionDuration
External media External media integrated on our website, such as content from video platforms and social media platforms, are blocked by default. If cookies from external media are accepted, access to this content no longer requires manual consent. 
 YoutubeIs used to unlock Youtube content.6 months

5.7 Web analysis services

5.7.1 Google Analytics

We use online services provided by the web analysis service Google Analytics. This service is offered in the EU, the EEA and Switzerland by Google Ireland Limited Gordon House, Barrow Street Dublin 4., Ireland and in the USA by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies that are stored on your computer to analyse the use of our online web presence. 

The information collected by the cookie regarding your use of our online web presence (including your masked IP address) is transferred to and stored in a Google server in the USA. Google uses this information to evaluate the use of our website to prepare reports about the activities on our online presence and provide us with additional services associated with that use. The IP address provided by your browser as part of the Google Analytics service is not added to any other Google data.

We use Google Analytics in our online presence for web analysis purposes exclusively with an add-on that provides an “anonymise IP” function. This setting ensures that Google Analytics erases the last part of your IP address. This anonymisation of your IP address removes any direct trace of you personally. When using this feature, Google masks your IP address within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area prior to transferring that information outside of the EU. The full IP address will only be sent to a Google server for masking in the USA in exceptional cases. In this way, we do not receive data that provides us with a way to identify you personally.

We also use the Universal Analytics function with Google Analytics. Universal Analytics allows us to analyse the use of our online services across devices (e.g. access via a laptop and then later from a tablet). As a user, you will be given a pseudonymous User ID on registration. This is how the system recognises your User ID when you access our site from another device. We do not allocate any names to the User ID, nor do we provide Google with any personal data. Privacy measures such as IP masking and Browser Add-ons are not restricted by the use of the Universal Analytics function.

You can prevent the installation of cookies using the settings in your browser software. You can also prevent the collection and processing of the data created by the use of cookies and related to your use of our online services (including your IP address) by Google by downloading and installing the browser plug-in available at: https://support.google.com/analytics/answer/181881?hl=en

This will prevent all future collection of data by Google Analytics within our web pages. This opt-out cookie only works only in that browser and only for this domain.

If you undertake any of the above cookie deactivation measures, you may not be able to use all the functions of our website to their full extent.

For more information regarding how Google Analytics deals with user information, please refer to Google’s Privacy Statement: https://policies.google.com/privacy?hl=en

5.7.2 Hotjar

We use the Hotjar web analysis service for our online services. This is a service offered by Hotjar Limited, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe.

Hotjar is a service that helps us to analyse the behaviour of visitors to our site. We receive reports and visual renderings which show us where and how you ‘move’ through our site. This allows us to see how far you scroll as a user, and which buttons you click, and how often. This tool also allows us to collected feedback directly from users of our pages. In this way, we ob-tain valuable information for making our online services even faster and more customer friendly. Data is collected anonymously and is not sent to Hotjar servers. Some areas of our online services which display your personal information or that of a third party are automatical-ly hidden by Hotjar and are therefore not recognisable at any time.

While you are visiting our web pages, Hotjar saves data in the browser, and collects the fol-lowing information about how you use our site:

  • anonymised IP address of your computer
  • screen size,
  • browser information (which browser, which version, etc.),
  • location (country only),
  • preferred language setting,
  • pages visited (sub-pages),
  • date and time of sub-page or website use.

In principle, Hotjar does not provide any of its collected data to third parties. However, they do explicitly state that it is sometimes necessary to provide data to Amazon Web Services.

Hotjar provides every user with the opportunity to prevent the use of Hotjar tools with a “Do not track” header, which prevents data from being collected from a visit to an individual inter-net page. This is a setting supported by all standard browsers in their current versions. For this, your browser sends a request to Hotjar, with a notice that tracking should be deactivated. Should you use our online services with a range of browsers/end devices, you will need to set up the “Do not track” header separately on each browser/end device. For detailed instructions with information for your browser, visit: https://www.hotjar.com/policies/do-not-track/

Hotjar tools have a storage duration of 1 year. Collected data will be automatically deleted after 1 year has elapsed.

More information on Hotjar Ltd. And the Hotjar tool is available at https://www.hotjar.com

The Hotjar Privacy Policy is available at: https://www.hotjar.com/privacy

5.8 Targeted Messages On 3rd-Party Advertising Platforms

5.8.1 Processing

We use third-party advertising platforms, such as Meta, Google, TikTok, etc. to send you messages that are targeted at you, based on your behaviour and browsing pattern, at specific times and locations of these platforms to increase the efficiency of our advertising campaigns. In order to do this, we share your Personal Data with our Advertising Agency Partners as well as Social Media Platforms. We use third-party solutions such as Google Analytics and MetaBusiness Manager tools to help us do a better job at targeting our campaigns and messages for our consumers. Social Media Platforms will attempt to match your profile in their database to determine the optimal time and place (the page you are browsing) to show you an advertisement from Catit. We also need to analyse necessary information to understand the impact of our campaigns. If you don’t accept that we track you for this purpose, you will still see Catit advertisements on Social Media Platforms and other third-party platforms at random. Please also read the privacy notice on the Social Media Platforms to understand how your Personal Data is used by them for this purpose.

5.8.2 Improved Data Models

We use data science and your profile and personal data to create data models that can help us improve the logic in our analytics activities that give us more insight about your comments and feedback, your interactions, preference and needs in our products and services. We will compare the data model we created using your profile with other similar consumer profiles and categories to further predict and analyse your preference. 

You can learn more about how our Advertising Partners and Social Media Platforms help us achieve this purpose by visiting their sites:

Google Personalised Advertising: https://support.google.com/adspolicy/answer/143465?hl=en

Google Advertising Policies: https://support.google.com/adspolicy/answer/6020956

Facebook Lookalike Audiences: https://www.Facebook.com/business/help/164749007013531

Facebook Custom Audience Terms: https://www.Facebook.com/legal/terms/customaudience

6. Integration of social media and other services

On our website we refer to our profiles in social networks. You can only access these profiles via our online offer if you give your consent to access our profiles (Art. 6 para. 1 letter a DSGVO). These social network providers (e.g. Google, Facebook) have undertaken to comply with the data protection provisions of the EU-US data protection shield, the legal framework governing the transatlantic transmission of data which the European Commission and the United States have agreed (COMMISSION IMPLEMENTING DECISION (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-U.S. Privacy Shield (notified under document C(2016) 4176)). These providers are also registered with the “Privacy Shield” Program of the U.S. Department of Commerce. However, the European Court of Justice has declared this agreement invalid and found that the USA does not have a level of data protection comparable to that in the EU (ECJ, judgment of 16 July 2020 – C-311/18, para. 200, Facebook/Schrems II). US legislation gives various security authorities unlimited powers of surveillance, including the use of surveillance programmes that enable the mass collection and analysis of data. US providers are obliged under national law to grant the security authorities access to the data processed by them, even if the data is processed by a foreign company. If consent is granted, there is a risk that the data collected through social media and other services will become part of the mass surveillance in the USA. There is no legal remedy or efficient legal proceedings available in the USA against such surveillance.

6.1 Integration of YouTube videos

We have integrated YouTube videos into our web pages that can be played on YouTube directly from our web pages. This uses the “Privacy-Enhanced Mode” which only allows YouTube access to your data when you play the video. The transmission of your data to YouTube will therefore only take place with your consent (Art. 6 para. 1 letter a DSGVO).

YouTube is a service operated in the EU, the EEA and Switzerland by Google Ireland Limited Gordon House, Barrow Street Dublin 4., Ireland and in the USA by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We have used the privacy-enhanced mode to integrate YouTube videos into our site. Opening one of our pages which include YouTube videos, and clicking on a video, does not result in your data being provided to Google. Your consent will be sought before such data provision takes place, using the consent declaration that we have provided.

Once you have given your consent, or if you have called up a video on YouTube itself (e.g., in our YouTube channel), your data may be sent to a Google server in the USA and stored there. Google uses these data to evaluate your use of our videos on YouTube, to create anonymised reports about the videos watched and to offer video-use related services to us. We have an agreement with Google between our respective Controllers (Art. 26 GDPR) for the use of our YouTube channel. In it, we have committed ourselves to informing you about the processing of data when using our YouTube channel.

More information on data protection for the Google service “YouTube” is available in the provider’s Privacy Statement at: https://policies.google.com/privacy?hl=en&gl=en

6.2 Social media presence and use of social media icons on our pages

We do not use social plug-ins as active buttons on our website. We only use icons to refer to our presence in the following social networks:

  • Facebook: Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland;
  • Instagram: Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland;
  • Twitter: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland;
  • Pinterest: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland;
  • YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We only display the social media icons on our pages, and they are not activated. To ensure your privacy, we have implemented a solution which only sends the address of our servers to these services and not your IP address should you click and activate a social media plug-in.

If you click on a plug-in on our pages, this indicates your consent to connect with these third parties via a separate tab in your browser, and allows these third-parties to follow your visit to our pages. If you are a member of a social network, you can share the content of our web pages with other members of that social media network by clicking the button.

Your data may be processed outside of the EU if you are a member of a social network or when you visit or call up one of our social media pages. This may carry risks, for example, by making it harder for you to enforce your rights.

When you call up a social network, cookies are generally set to collect data on your user behaviour which is then stored in your end device. As long as you have a user account on any network, and are logged in, your user behaviour can be saved to your user account. The social networks may use this user behaviour information for market research and advertising purposes. This may result in advertisements being displayed to you both within and outside of your social networks. We have no influence over this.

We have no influence over the personal data collected and stored by social networks. We receive evaluations of user behaviour from the social media sites listed above and may use this to send relevant advertising to users. If users interact with our social media pages and are logged into a user account, we can also recognise the user profile and see the content of comments or postings on our page. The processing of these data is carried out in joint responsibility with the provider of the social network in question. We have concluded an agreement with the individual providers of our social media pages on joint responsibility for the evaluation of data collected in connection with our social media pages (Art. 26 GDPR). In it, we have committed ourselves to providing you with this privacy information. More information is available from the privacy policies of the individual social networks. You may also exercise the rights to which you are entitled against us. However, as the social network provider stores and evaluates your data, they are able to more comprehensively fulfil your rights.  

6.3 Instagram

We operate a social media presence on https://www.instagram.com/catitdesignproducts/, which we use to present photographs and posts related to our company, provide information on our services, and to communicate with customers. When using and accessing our Instagram page, your user data are processed by both the Ireland based company, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, as well as the USA based Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 (hereinafter referred to as “Facebook”). Facebook uses Instagram to enable a system (among other things) that distributes advertising across its network.

We analyse all access and interactions on our Instagram page. Facebook creates user profiles for this purpose, but only provides us with anonymised data in this regard. This involves aggregate data which provides us with insights of how users interact with our Instagram page. The resulting statistics are only provided to us in anonymised form. We have no access to the underlying data. We process your data in conjunction with Facebook to provide this insight service. For this reason, we have concluded an agreement with Facebook between our respective Controllers.

Our Instagram page can be accessed whether or not you have an Instagram user account. We only process personal data when you interact with our Instagram page, e.g. if you leave a comment, click a Like button or send us a message. We do not provide these data to third parties. The Instagram Terms of Use are available at: https://help.instagram.com/519522125107875

Depending on your activity, this use is lawful pursuant to either your consent (Art. 6 (1) (a) GDPR) or due to our legitimate interest in providing tailored marketing to our customers (Art. 6 (1) (f) GDPR). Instagram users may withdraw consent on publishing their comment or Like at any time with future effect by deleting the comment or content in question. The legality of any processing that has occurred prior to the revocation of that consent remains unaffected.

Facebook offers you the opportunity to object to certain data processing; the relevant information and possibilities to opt-out can be found at https://www.facebook.com/policies/cookies/ and for registered users at https://www.facebook.com/settings?tab=ads.

Instagram users can influence the extent to which their user behaviour may be recorded on our Instagram page at https://www.facebook.com/help/109378269482053. Alternatively, the relevant settings can be changed at https://www.facebook.com/settings and https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/ or you can reject the processing of your data at: https://www.facebook.com/help/contact/367438723733209.

You can also use the settings in your browser to prevent the processing your data using Facebook cookies.

Facebook only transfers user data to countries which have been granted an Adequacy Decision by the European Commission pursuant to Art. 45 GDPR or based on guarantees offered pursuant to Art. 46 GDPR. Facebook Inc. and all its affiliated companies are certified under the EU-US Privacy Shield but this does not provide an appropriate level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

6.4 Facebook Fanpage

In addition to our company website, we also operate a Facebook page (known as a fanpage). This can be found at https://www.facebook.com/catitdesign. We use this page to introduce our company, provide information on our products and services, and to communicate with customers and interested parties.

We only process personal data when you interact with our Facebook page, e.g. if you leave a comment, click a Like button or send us a message. This use is lawful pursuant to either your consent (Art. 6 (1) (a) GDPR) or due to our legitimate interest in providing tailored marketing to our customers (Art. 6 (1) (f) GDPR). This includes for example, showing our current range, you send us a query in relation to a contract, or if you like or comment on one of our posts, or if you upload content to our Facebook page.

Analysis of user activity

We analyse all access and interactions on our Facebook page. Facebook creates user profiles for this purpose, but only provides us with anonymised data in this regard. This involves aggregate data which provides us with insights of how users interact with our Facebook page.

When using and accessing our Facebook page, your personal data are processed by both the Ireland based company, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, as well as the USA based Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 (hereinafter referred to as “Facebook”). In addition to the processing described above, Facebook processes your personal data for analysis and advertising purposes, including personalised advertising. To the extent of our knowledge, Facebook also uses cookies that are stored in your end device (also across end devices). This allows Facebook to use targeted advertising within its own platform, as well as on third-party sites. Facebook creates identifiable user profiles on the basis of valid consent pursuant to Art. 6 (1) (a) GDPR. For more information, see the Facebook privacy policy: https://www.facebook.com/about/privacy/.

Facebook only transfers user data to countries which have been granted an Adequacy Decision by the European Commission pursuant to Art. 45 GDPR or based on guarantees offered pursuant to Art. 46 GDPR. Facebook Inc. and all its affiliated companies are certified under the EU-US Privacy Shield but this does not provide an appropriate level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

Use of the data by Facebook:

When using and accessing our Facebook page, your personal data are processed by both the Ireland based company, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, as well as the USA based Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 (hereinafter referred to as “Facebook”). In addition to the processing described above, Facebook processes your personal data for analysis and advertising purposes, including personalised advertising. To the extent of our knowledge, Facebook also uses cookies that are stored in your end device (also across end devices). This allows Facebook to use targeted advertising within its own platform, as well as on third-party sites. Facebook creates identifiable user profiles on the basis of valid consent pursuant to Art. 6 (1) (a) GDPR. For more information, see the Facebook privacy policy: https://www.facebook.com/about/privacy/.

Facebook only transfers user data to countries which have been granted an Adequacy Decision by the European Commission pursuant to Art. 45 GDPR or based on guarantees offered pursuant to Art. 46 GDPR. Facebook Inc. and all its affiliated companies are certified under the EU-US Privacy Shield but this does not provide an appropriate level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

You may revoke your consent at any time with future effect. The legality of any processing that has occurred prior to the revocation of your consent remains unaffected. You may delete a comment or uploaded material yourself at any time.

Facebook offers you the opportunity to object to certain data processing; the relevant information and possibilities to opt-out can be found at https://www.facebook.com/policies/cookies/ and for registered users at https://www.facebook.com/settings?tab=ads.

6.5 Twitter

We operate a social media presence on https://twitter.com/catit, which we use to present photographs and posts related to our company, provide information on our services, and to communicate with customers. When using or accessing our Twitter page, user data are also processed by the USA based company Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 , USA (hereinafter referred to as “Twitter”). Twitter also offers a system for distributing advertising on Twitter at https://ads.twitter.com/.

We analyse all access and interactions on our Twitter page. Twitter creates user profiles for this purpose, but only provides us with anonymised data under https://analytics.twitter.com/. This involves aggregate data which provides us with insights of how users interact with our Twitter page. The resulting statistics are only provided to us in anonymised form. We have no access to the underlying data. We process your data in conjunction with Twitter to provide this insight service. For this reason, we have concluded an agreement between our respective Controllers.

Our Twitter page can be accessed whether or not you have a Twitter user account. We only process personal data when you interact with our Twitter page, e.g. if you leave a comment, click a Like button or send us a message. We do not provide these data to third parties. More information on privacy and data protection at Twitter: https://twitter.com/privacy.

Within the EU, this data processing is lawful as per your consent (Art. 6 (1) (a) GDPR). Twitter users may withdraw consent for publishing their comment or Like at any time with future effect by deleting the comment or content in question. The legality of any processing that has occurred prior to the revocation of that consent remains unaffected.

Twitter offers you the opportunity to object to certain data processing; the relevant information and possibilities to opt-out can be found at https://twitter.com/personalization.

Twitter users can influence the extent to which their user behaviour may be recorded on our Twitter page at https://twitter.com/personalization. You can also personalise the relevant settings.

You can also use the settings in your browser to prevent the processing of your data using Twitter cookies.

Twitter Inc. participates in the EU-US Privacy Shield but this alone does not provide an appropriate level of data protection:
 https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

6.6 Pinterest

We operate a social media presence on https://www.pinterest.com/catitdesignproducts/, which we use to present pins (photographs, links, and text) provide information on our services, and to communicate with customers. Pinterest is a service operated in the EU by Pinterest Europe Ldt., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, in the USA by Pinterest Inc., 505 Brannan Street, Suite 900, San Francisco, CA 94107, USA (hereinafter referred to as “Pinterest”). Pinterest also offers a system for distributing advertising on Pinterest at https://ads.pinterest.com/ .

We analyse all access and interactions on our Pinterest page. Pinterest creates user profiles for this purpose, but only provides us with anonymised data in this regard under https://analytics.pinterest.com/, known as Audience Insights. This involves aggregate data which provides us with insights of how users interact with our Pinterest page. The resulting statistics are only provided to us in anonymised form. We have no access to the underlying data. We process your data in conjunction with Pinterest to provide this Audience Insights service. For this reason, we have concluded an agreement between our respective Controllers.

Our Pinterest page can be accessed whether or not you have a Pinterest user account. We only process personal data when you interact with our Pinterest page, e.g. if you leave a comment, click a Like button, re-pin our pin, or send us a message. We do not provide these data to third parties. The Pinterest data protection provisions apply: https://policy.pinterest.com/privacy-policy.

Within the EU, this data processing is lawful as per your consent (Art. 6 (1) (a) GDPR). Pinterest users may withdraw consent on publishing their comment, Like, or pin at any time with future effect by deleting the comment or content in question. The legality of any processing that has occurred prior to the revocation of that consent remains unaffected.

Pinterest offers you the opportunity to object to certain data processing; the relevant information and possibilities to opt-out can be found at  https://www.pinterest.com/settings/privacy/ .

Pinterest users can influence the extent to which their user behaviour on our Pinterest page may be recorded at https://www.pinterest.com/settings/privacy/.

You can also use the settings in your browser to prevent the processing of your data using Pinterest cookies.

7. Your rights as enforceable in the EU

Please read the following information about your rights as a data subject regarding the processing of your personal data.

7.1 The right of access

You have the right to request a confirmation whether your personal data are being processed. Should this be the case, you have the right to be informed of the personal data that have been collected, stored or processed, as well as to the following information:

  • the processing purpose;
  • the recipients or categories of recipients to whom these data have been disclosed or will be disclosed;
  • the duration of storage or the criteria for determining that duration;
  • your additional rights (see below);
  • if the personal data have not been collected from you, all available information regarding its source;
  • the existence of automated decision-making, including profiling, and where existent, further relevant information.

You have the right to be informed of the appropriate safeguards available pursuant to Art. 46 GDPR against the transfer of your data to a third country or international organisation.

7.2 The right to rectification

You have the right to request the correction without delay of incorrect or incomplete personal data.

7.3 Right to erasure (right to be forgotten)

You have the right to request that we delete all your personal data without delay. For a request to delete personal data, you can contact us here. We are obliged to delete your personal data without delay where one of the following grounds applies:

  • your personal data are no longer required for the purpose for which they were collected or otherwise processed.
  • you are withdrawing your consent and there are no other legal grounds for processing that data.
  • you are filing an objection (see below) to the data processing.
  • your personal data were unlawfully processed.
  • the deletion of your personal data is necessary to fulfil an obligation under EU law or the law of the Member States.
  • a child has provided consent to the collection of personal data.

7.4 Right to restriction of processing:

You have the right to request a restriction of our data processing when one of the following conditions is met:

  • you are contesting the accuracy of the personal data;
  • the data processing is unlawful, but you do not agree to the deletion of the personal data, instead requesting a restriction of its use;
  • we no longer need the personal data for the purposes of processing, but you need the data to establish, exercise or defend legal claims; or
  • you have objected to processing (see below) and it is not yet clear whether our legitimate interest will prevail.

7.5 Right to notification

If you have exercised your right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients to whom your personal data have been disclosed of this rectification, erasure of the data or restriction of the data processing unless this proves impossible or requires a disproportionate effort. You have the right to be informed of those recipients.

7.6 Right to data portability

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transfer these data to another controller without interference on our part provided that:

  • the processing is based on consent granted pursuant to Art. 6 (1) (a) GDPR or Art.9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR; and
  • the processing is carried our using automated methods.

In exercising this right, you may request that personal data related to you be transferred directly from us to another controller in so far as this is technically feasible, and does not infringe on the freedoms and rights of any other person. The right to data portability does not apply to the processing of personal data required for fulfilling a task carried out in the public interest or in the exercise of an official authority invested in the controller.

7.7 Right to object

You have the right, based on grounds relating to your particular personal situation to object at any time to the processing of your personal data, unless it is based on one of the following grounds:

  • the processing of your personal data by us is required for the fulfilment of a task that lies in the public interest or in the exercise of public authority that has been delegated to us; or
  • the processing is necessary to safeguard our legitimate interest or the legitimate interest of a third-party, in so far as your interests or basic rights require that protection of your personal data prevail.

The right to object also applies to profiling based on these processes.

If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object to the processing of your personal data for such marketing purposes. This also applies to profiling insofar as it is associated with such direct marketing.

You also have the right, on grounds arising from your particular personal situation, to object to the processing of your personal data undertaken by us for scientific or historical research purposes or for statistical purposes, unless such processing is necessary for the performance of a task in the public interest.

7.8 Right to withdraw consent and data protection law

You may revoke your consent at any time with future effect. The revocation may be simply sent to us at any time, e.g., an informal email. Processing of your data which occurred prior to the withdrawal of consent is not affected.

7.9 Right of appeal to the supervisory authority

Do you think that the processing of your personal data was illegal? Then you have the right to lodge a complaint with a supervisory authority, particularly in your country of residence or country of work, or at the location the alleged breach took place. If you are in doubt, contact the agency responsible for us at Marit Hansen, ULD – Independent State Center for Data Protection Schleswig-Holstein, E-Mail: [email protected], Holstenstraße 98, 24103 Kiel, Germany, Phone: 0431 988-1200, Fax: 0431 988-1223). Other administrative or judicial remedies are not affected by the exercise of these rights.

Version: February 2024

© Rolf C. Hagen INC.