Privacy policy

This privacy policy applies to the website of cold.world GmbH, which is accessible under the domain cold.world and the various subdomains.

Who is responsible and how can I reach you?

Person responsible

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

cold.world GmbH

Köpenicker Str. 325, Haus 11
12555 Berlin
DE
+49 30 549 092 285
info@cold.world

Data Protection Officer

We are not legally obliged to appoint a data protection officer. If you have any questions about data protection, please contact us directly using the details above.

This privacy policy fulfills the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior when visiting a website. Information for which we cannot (or only with disproportionate effort) establish a connection to your person, e.g. through anonymization, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of processing has been achieved and there are no legitimate grounds for further retention of the data. We inform you about the specific retention periods or criteria for storage in the respective processing operations. Regardless of this, we store your personal data in individual cases for the assertion, exercise, or defense of legal claims and in the presence of statutory retention obligations.

We only disclose your personal data processed on our website to third parties if this is necessary for the fulfillment of purposes and is covered on a case-by-case basis by the legal basis (e.g., consent or safeguarding of legitimate interests). In addition, we disclose personal data to third parties in individual cases if this serves the establishment, exercise, or defense of legal claims. Potential recipients may then include, for example, law enforcement authorities, legal counsel, auditors, courts, etc.

Insofar as we use service providers for the operation of our website who process personal data on our behalf as part of order processing in accordance with Art. 28 GDPR, they may be recipients of your personal data. You can find more information on the use of processors and web services in the overview of the individual processing operations.

Cookies are small text files that we send to your device’s browser and store there when you visit our website. As an alternative to using cookies, information can also be stored in your browser’s local storage. Some features of our website cannot be provided without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to perform various analyses, allowing us, for example, to recognize the browser you are using when you visit our website again and to transmit various pieces of information to us (non-essential cookies). Among other things, cookies help us make our website more user-friendly and effective for you.

You can find detailed information about the cookies used in the cookie settings or in the Consent Manager on this website.

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

• Information pursuant to Article 15 of the GDPR;
• Rectification pursuant to Art. 16 of the GDPR;
• Erasure pursuant to Art. 17 of the GDPR;
• Restriction of processing pursuant to Art. 18 of the GDPR;
• Data portability pursuant to Article 20 of the GDPR;
• Objection pursuant to Art. 21 of the GDPR;
• Withdrawal of consent granted pursuant to Article 7(3) of the GDPR;
• File a complaint with a supervisory authority pursuant to Article 77 of the GDPR.

Below, we provide information about the individual data processing operations, the scope and purpose of data processing, the legal basis, and the respective retention period.

Type and scope of processing

Our website is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). When you access and use our website, we or the host collect the personal data that your browser automatically transmits to the server (log files: IP address, date/time, file accessed, referrer URL, browser/operating system).

Purpose and Legal Basis

Hosting is provided to fulfill the contract (Art. 6(1)(b) GDPR) and in the interest of ensuring secure, fast service delivery by a professional provider (Art. 6(1)(f) GDPR). A Data Processing Agreement (DPA) pursuant to Article 28 of the GDPR has been concluded.

Storage duration

Log file data is stored for a maximum of 7 days and then deleted.

We use the consent management tool “Complianz” to obtain and document consent for cookies and other tools. A cookie is set to store your choice. The legal basis for this is compliance with a legal obligation pursuant to Article 6(1)(c) of the GDPR.

We use Google Analytics 4 from Google Ireland Limited (Dublin, Ireland) for web analytics. IP anonymization is enabled. Data processing is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. Google is certified under the EU-U.S. Data Privacy Framework (adequacy decision pursuant to Article 45 of the GDPR). Data is automatically deleted after 14 months.

Our website uses Google Fonts, which are installed locally on our own web server (using OMGF). No connection to Google’s external servers is established when the fonts are loaded.

If you contact us via the email address provided (mailto link), your message—including your contact information—will be forwarded to our email service (Microsoft Exchange) and stored there. It will not be stored on our WordPress website. The legal basis is Article 6(1)(b) or (f) of the GDPR.

We use Google Maps (Google Ireland Limited) to display locations. This use is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. Certified under the EU-U.S. Data Privacy Framework.

We use Google reCAPTCHA (Google Ireland Limited) for bot detection and spam prevention. Data processing is based on your consent in accordance with Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. Certified under the EU-US Data Privacy Framework.

We maintain online presences on social media platforms (including Facebook, Instagram, X/Twitter, LinkedIn, and XING) for communication purposes. The respective privacy policies of the platform operators apply. The legal basis is our legitimate interest in effective communication pursuant to Art. 6(1)(f) of the GDPR.