This website is operated by: Smokeless.world GmbH.
It is very important to us to handle the data of our website visitors with confidence and to protect them in the best possible way. For this reason, we make every effort to comply with the requirements of the GDPR.
In the following, we explain to you how we process your data on our website. We use the clearest and most transparent language possible so that you really understand what happens to your data.
Data protection applies to the processing of personal data. Personal data means all data with which you can be personally identified . This is, for example, the IP address of the device (PC, laptop, smartphone, etc.) in front of which you are currently sitting . Such data is processed when 'something happens to it'. Here, for example, the IP is transmitted from the browser to our provider and automatically stored there. This is then a processing (according to Art. 4 No. 2 GDPR) of personal data (according to Art. 4 No. 1 GDPR).
These and other legal definitions can be found in Art. 4 GDPR.
In addition, the TTDSG supplements the provisions of the GDPR as far as the use of cookies is concerned.
Responsible for data processing on this website is the controller within the meaning of the GDPR. This is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
You can reach the person responsible at :
Smokeless.world GmbH
Schlossstrasse 19, 82031 Grünwald
legal@smokeless.world
We have appointed a data protection officer for our company. You can reach this under:
Martin Bastius
heyData GmbH, Kantstr. 99, 10627 Berlin
datenschutz@heydata.eu
As we have already established, there are data (e.g. IP address) that are collected automatically. This data is mainly required for the technical provision of the homepage. If we also use personal data or collect other data, we will inform you of this at or ask for your consent.
Other personal data you share with us consciously.
Detailed information on this is available below.
What these rights look like in detail and how to exercise them can be found in the last section of this privacy policy.
What these rights look like in detail and how to exercise them can be found in the last section of this privacy policy.
For us, data protection is more than just an annoying duty! Personal data is of great value and careful handling of this data should be a matter of course in our digitalised world. In addition, as a website visitor, you should be able to decide for yourself what "happens" to your data, when and by whom. We therefore undertake to comply with all legal provisions, collect only the data that is necessary for us and, of course, treat it confidentially.
The transfer and deletion of data are also important and sensitive issues. Therefore, we would like to briefly inform you in advance about our general approach to this at.
A transfer of data only takes place on the basis of a legal basis and only if this is unavoidable. This may be the case in particular if it is a so-called processor and a processing contract has been concluded in accordance with Art. 28 GDPR.
We delete your data when the purpose and the legal basis for processing cease to apply and there are no other legal obligations to prevent deletion. A 'good' overview of this is also provided by Art. 17 GDPR.
For all further information , please refer to this data protection declaration and . If you have any specific questions, please contact the person responsible.
This website is hosted externally. The personal data collected on this website is stored on the hoster's servers. This includes the automatically collected and stored log files (see below for more details), as well as all other data provided by website visitors.
The external hosting is for the purpose of a secure, fast and reliable provision of our website and serves in this context the fulfilment of the contract with our potential and existing customers.
The legal basis for the processing is Art. 6 para. 1 lit. a, b and f GDPR, as well as § 25 para. 1 TTDSG, insofar as consent includes the storage of cookies or access to information in the end device of the website visitor or user within the meaning of the TTDSG.
Our hoster only processes data that is necessary for the fulfilment of its service obligation and acts as our order processor, i.e. it is subject to our instructions. We have concluded a corresponding contract on commissioned processing with our hoster.
We use the following hoster:
Webflow, Inc
398 11th Street, 2nd Floor, San Francisco, CA 94103, USA.
https://webflow.com/legal/eu-privacy-policy
Google Ireland Limited,
Gordon House Barrow Street, Dublin 4, Ireland
The processing of personal data always requires a legal basis. The GDPR provides for the following possibilities in Art. 6 para. 1 sentence 1:
a) The data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes;
b) the processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject's request;
c) processing is necessary for compliance with a legal obligation to which the controller is subject;
d) the processing is necessary in order to protect the vital interests of the data subject or of another natural person;
e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
f) processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
In the following sections, we will inform you of the specific legal basis for the respective processing.
By visiting our website, we process personal data of you.
In order to protect this data in the best possible way against unauthorised access by third parties, we use SSL or TLS encryption. You can recognise this encrypted connection by the fact that a https:// or a lock symbol is displayed in the address bar of your browser.
In the following you will find out what data is collected when you visit our website, for what purpose this is done and on what legal basis.
When the website is accessed, information is automatically stored in so-called server log files. This information is as follows:
• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address
This data is temporarily required to enable to display our website permanently and without problems. In particular, this data serves the following purposes:
• System security of the website
• System stability of the website
• Troubleshooting on the website
• Connecting to the website
• Presentation of the website
The data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR and is based on our legitimate interest in processing this data, in particular the interest in the functionality of the website as well as its security.
If possible, this data is stored pseudonymously and deleted after the respective purpose has been achieved.
Insofar as the server log files allow the identification of the person concerned, the data will be stored for a maximum period of 14 days. An exception exists if a security-relevant event occurs. In this case, the server log files are stored until the elimination and final clarification of the security-relevant event.
In all other respects, the data is not merged with other data.
This website uses so-called cookies. This is a data record, information that is stored in the browser of your end device and is related to our website.
The setting of cookies can in particular make it easier for the visitor to navigate the website.
In our Cookie Consent Tool you will find all information about the cookies we use on our website (if applicable after your consent).
All cookies that are not technically necessary can be managed directly via our cookie consent tool.
You can prevent cookies from being set by adjusting the settings of your browser .
Here you will find the corresponding links to frequently used browsers:
Mozilla Firefox:
Google Chrome:
https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de
Microsoft Edge:
Safari:
https://support.apple.com/de-de/guide/mdm/mdmf7d5714d4/web and https://support.apple.com/de-de/guide/safari/sfri11471/mac
If you use another browser , it is recommended to enter the name of your browser and 'Delete and manage cookies' into a search engine and follow the official link to your browser.
Alternatively, you can also manage your cookie settings at
We use technically necessary cookies on this website to ensure that our website functions without errors and in accordance with the applicable laws. They help to make the website user-friendly. Some functions of our website cannot be displayed without the use of cookies.
The legal basis for this is, depending on the individual case, Art. 6 para. 1 lit. b, c and/or f.
GDPR
We also use cookies on our website that are not technically necessary. These cookies are used, among other things, to analyse the surfing behaviour of the website visitor or to offer website functions that are, however, not technically necessary.
The legal basis for this is your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
Technically unnecessary cookies will only be set with your consent, which you can revoke at any time in the Cookie Consent Tool.
We offer the following (service) on our website: Newsletter.
We collect the following data for this purpose:
E-mail address
The legal basis for this data processing is Art. 6 para. 1 lit. b GDPR.
The data will be deleted as soon as the respective purpose ceases to apply and it is possible in accordance with the legal requirements.
a) E-mail
If you contact us by e-mail, we process your e-mail address and, if applicable, other data contained in the e-mail. This data is stored on the mail server and partly on the respective end devices. Depending on the request, the legal basis for this is regularly Art. 6 para. 1 lit. f GDPR or Art. 6 para. 1 lit. b GDPR. The data is deleted as soon as the respective purpose ceases to apply and it is possible in accordance with the legal requirements.
To ensure that only those cookies are set on our website for which there is a legal basis, we use the consent management tool Cookiebot from Cybot A/S, havnegade 39, 1058 Copenhagen, Denmark.
This service is used to obtain the consent of the website visitor to the storage of certain cookies in his/her browser or the use of certain technologies and to document this in accordance with data protection law.
When this website is accessed, the consent given by the website visitor(s) to or the revocation of consent is stored as a Cookibot cookie in the browser of the website visitor. For this purpose, a connection is established to the Cookiebot servers.
The legal basis is Art. 6 para. 1 lit. c GDPR. Cookiebot is used to obtain the legally required consent for the use of cookies.
Until the website visitor requests us to delete the data or deletes Cookiebot itself or the purpose for storing the data no longer applies, the collected data will be stored. This does not affect the mandatory statutory retention periods.
We use rapidmail to provide our newsletter. This service is provided by rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany.
Through this service, the sending of newsletters can be organised and analysed. The data entered to receive the newsletter is stored on Rapidmail's servers.
With the help of Rapidmail, interactions with the newsletter can be analysed and the users of the newsletter can be categorised in order to adapt the newsletter to the different target groups.
This analysis can be objected to via the link in each newsletter message.
The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time by unsubscribing from the newsletter. The lawfulness of the processing already carried out remains unaffected by any revocation.
The data will be deleted when the contract between us and Rapidmail ends, unless the website visitor revokes his/her consent beforehand. If this is the case, the data will be deleted from the distribution list.
In addition, after unsubscribing from the newsletter, the email address is stored on a blacklist separately from other data for an indefinite period of time. The legal basis for this is Art. 6 para. 1 lit.f GDPR. It serves the interest of the website visitor as well as our interest to use/operate a newsletter according to the legal requirements.
More details:
https://de.rapidmail.wiki/kategorien/statistiken
https://www.rapidmail.de/datensicherheit
We use Google Analytics on this website. Google Analytics is a web analytics service. This service is provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies to recognise the user and thus to analyse usage behaviour. These cookies are only set with consent. Consent can be revoked at any time and managed in our cookie consent tool.
The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG.
The information collected here is usually transferred to a Google server in the USA and stored there.
In the case of data transfer to the USA, the standard contractual clauses (SCC) of the EU Commission apply.
Through the use of Google Analytics, IP anonymisation takes effect. The IP address of the respective user is shortened within the member states of the EU (or the European Economic Area) in such a way that it is no longer possible to trace it back to a natural person. In addition, Google undertakes to ensure appropriate data protection via the Google Ads data processing terms and conditions and compiles an evaluation of website use and website activity and provides the services associated with use. The Google Ads Privacy Policy applies to companies that are subject to the European Economic Area (EEA) General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) or similar regulations.
An additional browser plugin can be used to prevent the information collected (such as the IP address) from being sent to Google and used by Google. You can find the plugin and further information about it at https://tools.google.com/dlpage/gaoptout?hl=de.
Otherwise, the storage period depends on the type of data processed. Each customer can choose how long Google Analytics stores data before it is automatically deleted.
You can also find more information on the use of data by Google at https://support.google.com/analytics/answer/6004245?hl=de. For all other queries you can also contact support-deutschland@google.com directly.
We use Facebook Conversion API on this website. Facebook Conversion API is a web analytics service. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
With the help of Facebook Conversion API, we can record the interaction of the website visitor with the website and transmit it to Facebook in order to optimize the advertising performance on Facebook.
The data collected is also transferred to the USA and other third countries.
In the case of data transfer to the USA, the standard contractual clauses (SCC) of the EU Commission apply.
https://www.facebook.com/legal/EU_data_transfer_addendum
https://de-de.facebook.com/help/566994660333381.
The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be revoked at any time.
Insofar as personal data is collected on this website with the help of Meta Pixel and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Habour,Dublin 2, Ireland are jointly responsible for the data processing pursuant to Art. 26 GDPR. This joint responsibility is limited exclusively to the collection and transfer of data to Facebook. There is an agreement on joint processing for this purpose:
https://www.facebook.com/legal/controller_addendum.
We are responsible for providing the data protection information when using the Facebook tool and for the secure integration of the tool on the corresponding website in accordance with data protection law. Facebook, on the other hand, is responsible for the data security of its products. It follows from this that data subjects' rights with regard to the data processed by Facebook must be asserted directly against Facebook.
More details:
https://de-de.facebook.com/about/privacy
We use Facebook Custom Audiences on this website. Facebook Custom Audiences is a web analytics service. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
When using the online offer, personal data of the website visitor is collected. If the website visitor has given us permission to use Facebook Cutsom Audiences, this data will be transmitted to Facebook in order to display suitable advertising to the website visitor and to define target groups.
The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be revoked at any time.
In the case of data transfer to the USA, the standard contractual clauses (SCC) of the EU Commission apply.
https://www.facebook.com/legal/terms/customaudience
https://www.facebook.com/legal/terms/dataprocessing
We use LinkedIn Insight Tag on this website. LinkedIn Insight Tag is a web analytics service. This service is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
With the help of LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we can analyse key professional data in order to target our website to specific groups. For the purpose of targeting advertising, cross-device conversion measurement and retargeting may also take place. LinkedIn Insight also collects tag log files. The IP address is anonymised.
LinkedIn Insight Tag uses cookies to recognise the website visitor and to analyse user behaviour.
The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as this consent includes access to information in the user's terminal device or the storage of cookies within the meaning of the TTDSG.
The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days, the remaining pseudonymised data within 180 days.
The data collected is also transferred to the USA and other third countries.
In the case of data transfer to the USA, the standard contractual clauses (SCC) of the EU Commission apply.
More details:
https://www.linkedin.com/legal/l/dpa
https://www.linkedin.com/legal/l/eu-sccs
https://de.linkedin.com/legal/l/cookie-table
Elements of the social network Facebook are integrated on this website. This service is offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
If the social media element is activated, a direct connection is established between the website visitor and the Facebook servers and his/her IP address is transmitted to Facebook. If the website visitor has a user account at , the visit to this website can be assigned to the corresponding user account.
The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be revoked at any time.
If personal data is collected on this website with the help of Facebook and forwarded to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Habour, Dublin 2, Ireland are jointly responsible for the data processing pursuant to Art. 26 GDPR. This joint responsibility is limited exclusively to the collection and transfer of data to Facebook. There is an agreement on joint processing for this purpose:
https://www.facebook.com/legal/controller_addendum
We are responsible for providing the data protection information when using the Facebook tool and for integrating the tool on the relevant website in a manner that is secure from a data protection perspective. Facebook, on the other hand, is responsible for the data security of its products. It follows from this that data subject rights with regard to the data processed by Facebook must be asserted directly against Facebook.
In the case of data transfer to the USA, the standard contractual clauses (SCC) of the EU Commission apply.
Further information:
https://www.facebook.com/legal/EU_data_transfer_addendum
https://de-de.facebook.com/help/566994660333381
https://www.facebook.com/policy.php
https://de-de.facebook.com/privacy/explanation
Elements of the social network Instagram are integrated on this website. This service is offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If the social media element is activated, a direct connection is established between and Instagram's servers and the visitor's IP address is transmitted to Instagram. If the website visitor has a user account at , the visit to this website can be assigned to the corresponding user account. As the website operator, we have no knowledge of the content of the transmitted data.
The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be revoked at any time.
If personal data is collected on this website with the help of Facebook or Instagram and forwarded to Meta, , the website operator and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Habour, Dublin 2, Ireland are jointly responsible for the data processing in accordance with Art. 26 GDPR. This joint responsibility is limited exclusively to the collection and transfer of data to Facebook and Instagram. There is an agreement on joint processing for this purpose:
https://www.facebook.com/legal/controller_addendum
The website operator is responsible for providing the data protection information when using the Instagram tool and for the secure integration of the tool on the corresponding website in accordance with data protection law. Facebook and Instagram, on the other hand, are responsible for the data security of their products. It follows that data subjects' rights with regard to the data processed by Facebook or Instagram must be asserted directly against Facebook or Instagram.
In the case of data transfer to the USA, the standard contractual clauses (SCC) of the EU Commission apply.
https://www.facebook.com/legal/EU_data_transfer_addendum
https://de-de.facebook.com/help/566994660333381
https://www.facebook.com/policy.php
https://instagram.com/about/legal/privacy
Elements of the social network LinkedIn are integrated on this website. This service is offered by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
If the social media element is activated, a direct connection is established between and the LinkedIn servers and the IP address is transmitted to LinkedIn. If the website visitor has a user account at , the visit to this website can be assigned to the corresponding user account. The website operator has no knowledge of the content of the transmitted data.
The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be revoked at any time.
In the case of data transfer to the USA, the standard contractual clauses (SCC) of the EU Commission apply.
More information:
https://www.linkedin.com/legal/privacy-policy
3.8 Third-party content
3.8.1 Google Fonts
We use Google Fonts on this website. Google Fonts is a tool that enables a uniform display of fonts (so-called Google Fonts). This service is provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
As soon as a website visitor visits a website that uses Google Fonts, the browser used must establish a connection to the Google servers. No cookies are set in this process. However, the IP address of the website visitor is recorded and used for analysis purposes.
The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as this consent includes access to information in the user's terminal device or the storage of cookies within the meaning of the TTDSG. This consent can be revoked at any time.
Details:
https://developers.google.com/fonts/faq?hl=de
https://policies.google.com/privacy?hl=de
Auf unserer Website verwenden wir Google Fonts. Hier werden Schriften von Google zur Verfügung gestellt und verwendet, um diese entsprechend darstellen zu können. Dieser Dienst wird angeboten von der Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Irland).
Finally, we would like to inform you in detail about your rights and to let you know how you will be informed about changes to the data protection requirements.
You can request information about whether personal data from is being processed. If this is the case, you can request further information on the type and manner of processing. A detailed list can be found in Art. 15 Para. 1 lit. a to h GDPR.
This right includes the correction of inaccurate data and the completion of incomplete personal data.
This so-called 'right to be forgotten' gives you the right, under certain conditions, to demand the deletion of personal data by the data controller. This is generally the case if the purpose of the data processing has ceased to exist, if consent has been revoked or if the initial processing took place without a legal basis. A detailed list of reasons can be found in Art. 17 Para. 1 lit. a to f GDPR. This "right to be forgotten" also corresponds to the obligation of the controller under Article 17 (2) of the GDPR to take appropriate measures to bring about a general deletion of the data.
This right is subject to the conditions set out in Article 18(1)(a) to (d).
This regulates the basic right to receive one's own data in a common form and to transfer it to another data controller. However, this only applies to data processed on the basis of consent or contract according to Art. 20 (1) a and b and as far as this is technically feasible.
In principle, you can object to the processing of your personal data. This applies in particular if your interest in objecting outweighs the legitimate interest of the controller in the processing and if the processing relates to direct advertising and/or profiling.
In principle, you have the right not to be subjected to a decision based exclusively on automated processing (including profiling), which produces legal effects vis-à-vis you or affects you significantly in a similar way. However, this right is also subject to restrictions and supplements in Article 22 (2) and (4) of the GDPR.
The GDPR includes comprehensive rights to inform third parties about whether or how you have asserted rights under Art. 16, 17, 18 GDPR. However, this is only possible or feasible with reasonable effort.
We would like to inform you once again at this point about your right to withdraw your consent in accordance with Art. 7 (3) GDPR. However, this does not affect the lawfulness of the processing carried out up to that point.
In addition, we would like to inform you about your rights according to §§ 32 ff. BDSG, which, however, are largely identical in content to the rights just described.
You also have the right to complain to a data protection supervisory authority if you consider that any processing of personal data concerning you is in breach of this Regulation.
The current status of this privacy policy is 05.10.2023. As soon as we change this privacy policy, we will inform you about it on our website .
Created with the friendly support of Dieter macht den Datenschutz
