Privacy Policy

1. Data protection at a glance

General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data are all data that can be used to personally identify you. This includes information such as your name, postal address, email address or telephone number, as well as other information that may be generated when using the online service, in particular information about the start, end and extent of use, as well as the transmission of your IP address. You can find detailed information on data protection in our privacy policy listed below this text.

Data collection on this website
Data processing on this website is carried out by the website operator. You can find the contact details of the website operator in the section "Note on the responsible party" in this privacy policy.

How do we collect your data?
Your data is collected in part by you providing it to us. This may involve data that you enter in a contact form, for example.

Other data is automatically or with your consent collected by our IT systems when you visit the website. This includes technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right to obtain information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have a right to lodge a complaint with the competent supervisory authority.

You can contact us at any time with regard to this and other questions concerning data protection.

Analysis tools and third-party tools
When you visit this website, your surfing behavior may be statistically evaluated. This is done primarily with so-called analysis programs.

Detailed information on these analysis programs can be found in the following privacy policy.

2. Hosting

Hetzner
We host our website with Hetzner Online GmbH. The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter referred to as "Hetzner"). For details, please refer to Hetzner's privacy policy: https://www.hetzner.com/de/legal/privacy-policy

The use of Hetzner is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in a reliable presentation of our website. If the corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or the access to information on the user's terminal device (e.g. device fingerprinting) in accordance with the TTDSG. The consent can be revoked at any time.

Data processing agreement
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a legally required contract that ensures that this provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General notes and mandatory information

Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

Note on the responsible body
The responsible body for data processing on this website is:

ALL IN NFT UG (limited liability)
represented by managing director Sebastian Michels
Zwickauer Straße 9
40627 Düsseldorf

E-mail: sebastian@allinnft.de

The responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Contractual fulfillment and pre-contractual measures
We process your personal data insofar as this is necessary for the fulfillment of a contract of which you are a party or for the implementation of pre-contractual measures based on your request. The data processing is based on Article 6(1)(b) of the GDPR. The purposes of the processing include the enabling of the use of our specific products and services within the scope of the online service. Please also refer to the details in the General Terms and Conditions of the online service and in corresponding documents that describe our products and services in addition to this data protection declaration.

Purchase of NFTs: Purchases are facilitated in accordance with the General Terms and Conditions of the online service. We process the information required to carry out the purchase transaction in accordance with the information provided in the General Terms and Conditions of the online service.

Please note that:

the processing of details related to the smart contract that assigns ownership of the NFTs is facilitated and controlled by the Ethereum blockchain network and its providers;
the processing of cryptocurrency transactions (ETH) and the storage of the allocated NFTs in your digital wallet are facilitated and controlled by your respective service provider;
given the peculiarities of smart contracts, your public address for digital wallets will be publicly visible when you perform a transaction, and certain personal data (including your username for the online service and your public address for digital wallets) will be embedded in the purchased NFTs and stored as long as the underlying distributed ledger technology functions.

Protection of legitimate interests
We process your personal data to pursue legitimate interests of us or third parties, unless your rights that require the protection of your personal data take precedence over these interests. The data processing is based on Article 6(1)(f) GDPR. Processing to protect legitimate interests is carried out for the following purposes, or to protect the following interests:

Development of products, services and support offerings as well as other measures to manage business processes and transactions;
Improvement of product quality, elimination of errors and malfunctions;
Processing of non-contractual inquiries and requests;
Ensuring compliance with laws, prevention and defense against legal violations (especially criminal offenses), asserting and defending legal claims, internal and external compliance measures;
Ensuring the availability, operation and security of technical systems as well as technical data management;
Responding to and evaluating contact inquiries and feedback.

When you access the online service, data about your device and your use of the online service are processed and stored in a so-called log file. This concerns in particular technical data such as date and time of access, duration of visit, type of device, operating system used, functions used, amount of data sent, IP address and referrer URL. We process this data to ensure technical operation and to identify and eliminate malfunctions. We also use the data contained in the log file to track and understand the use of the online service (number of users, duration of use, use of certain functions, referring websites, etc.). We pursue the interest of ensuring the technical functioning of the service on a permanent basis and improving the online service. We do not use this data to draw conclusions about your person or your identity.

Storage period
Unless a more specific storage period has been mentioned in this data protection declaration, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods); in the latter case, deletion will occur after the reasons for storage no longer apply.

General information on the legal bases for data processing on this website
If you have given your consent to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data according to Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have given your consent to the storage of cookies or access to information on your device (e.g. via device fingerprinting), data processing is additionally carried out on the basis of § 25(1) TTDSG. Consent can be revoked at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR. The relevant legal bases for each individual case are provided in the following paragraphs of this data protection declaration.

Notice regarding data transfer to the USA and other third countries
We use tools from companies based in the USA or other countries that do not provide adequate data protection. When these tools are active, your personal data may be transferred to and processed in these third countries. We would like to inform you that there is no guarantee that these countries provide the same level of data protection as the EU. For example, US companies are obligated to provide personal data to security authorities without the ability for you to legally contest this. Therefore, it cannot be excluded that US authorities (e.g. intelligence agencies) may process, analyze, and store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

Withdrawal of your consent for data processing
Many data processing operations are only possible with your explicit consent. You may revoke your consent at any time. The legality of data processing prior to revocation remains unaffected.

Right to object to data collection in special cases as well as to direct advertising (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, INCLUDING PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSES OF DIRECT ADVERTISING (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with a supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged violation. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability
You have the right to receive the data that we process on the basis of your consent or in fulfillment of a contract automatically in a standard, machine-readable format and to have this data transmitted to yourself or to a third party. If you request the direct transfer of the data to another responsible party, this will only be done if it is technically feasible.

Information, deletion and correction
You have the right, under the applicable legal provisions, to obtain free information at any time about your stored personal data, its origin and recipients, and the purpose of the data processing, and if applicable, the right to correct or delete this data. For this purpose, as well as for further questions regarding personal data, you can contact us at any time.

Right to restriction of processing
You have the right to request the restriction of processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of processing of your personal data.
If the processing of your personal data was/is done unlawfully, you can request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of processing of your personal data instead of deletion.
If you have objected pursuant to Art. 21 (1) GDPR, a balancing of interests between your and our interests must be carried out. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of processing of your personal data.
If you have restricted the processing of your personal data, these data - apart from their storage - may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries, that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to advertising emails
The use of contact data published within the framework of the imprint obligation for the transmission of not expressly requested advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

4. Data Collection on this Website

Cookies
Our websites use so-called "cookies." Cookies are small text files that do not cause any damage to your device. They are either temporarily stored for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit ends. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Some cookies may also be stored on your device by third-party companies when you enter our site (third-party cookies). These allow us or you to use certain services of the third-party company (e.g., cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or display advertising.

Cookies that are necessary for the electronic communication process, to provide certain functions you have requested (e.g., for the shopping cart function) or to optimize the website (e.g., cookies for measuring web audiences) are stored based on Art. 6 para. 1 lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of his services. If consent to the storage of cookies and similar recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG); the consent can be revoked at any time.

You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately within the framework of this data protection declaration and, if necessary, request your consent.

Contact form
If you send us inquiries via the contact form, your data from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b DSGVO, provided that your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO) if this has been requested; the consent can be revoked at any time.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – especially retention periods – remain unaffected.

Inquiry by email
If you contact us by email, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided that your request is related to the fulfillment of a contract or is necessary for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if it has been requested; the consent can be revoked at any time.

The data you submit to us via contact requests will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been completed). Mandatory legal provisions - in particular retention periods - remain unaffected.

5. Social media

Twitter
This website includes features of the Twitter service, offered by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

If the social media element is active, a direct connection is established between your device and the Twitter server. Twitter thus receives information about your visit to this website. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Twitter. For more information, please see Twitter's privacy policy at https://twitter.com/en/privacy.

If consent has been obtained, the above service is used on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TTDSG. The consent can be revoked at any time. If no consent has been obtained, the service is used on the basis of our legitimate interest in the broadest possible visibility in social media.

The transfer of data to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.

You can change your privacy settings for Twitter in your account settings at https://twitter.com/account/settings.

Instagram
This website includes features of the Instagram service, offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thus receives information about your visit to this website.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. Instagram can then associate your visit to this website with your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

To the extent that personal data is collected on our website and transmitted to Facebook or Instagram using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited to the collection of data and its transmission to Facebook or Instagram. The processing by Facebook or Instagram after transmission is not part of the joint responsibility. The obligations jointly incumbent on us have been recorded in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for providing information on data protection when using the Facebook or Instagram tool and for implementing the tool on our website in a manner that is compliant with data protection law. Facebook is responsible for the data security of its products. If you wish to exercise your rights as a data subject (e.g. to obtain information), with respect to data processed by Facebook or Instagram, you can do so directly with Facebook. If you exercise your data subject rights with us, we are obliged to forward them to Facebook.

The transfer of data to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

Further information can be found in the privacy policy of Instagram: https://instagram.com/about/legal/privacy/.

6. Analysis Tools and Advertising

Google Analytics
This website uses features of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. If consent has been requested (e.g. consent to the storage of cookies), processing will only be carried out on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.

Date of Entry into Force
The latest version of this privacy policy shall apply.
This version is dated April 17, 2023.