Datenschutzerklaerung: Cloudflare Turnstile und Missbrauchsprotokoll
- Abschnitt V (DE/EN/ES/FR): neuer Absatz zum Schutz von Kontaktformular und Registrierung mit Cloudflare Turnstile (Daten, Zweck, Art. 6 Abs. 1 lit. f DSGVO, USA-Uebermittlung) sowie Rate-Limit und 30-Tage-Protokoll abgewiesener Anfragen - Stand auf 09.10.2026 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
parent
4c944aa15d
commit
ae59679150
5 changed files with 46 additions and 13 deletions
|
|
@ -1,6 +1,6 @@
|
|||
# Spam über das Kontaktformular – Entwicklungsplan & Protokoll
|
||||
|
||||
Stand: 09.10.2026 · Status: **Kontaktformular + Registrierung umgesetzt, als `v1.6.0` getaggt** (Deploy siehe Abschnitt 7)
|
||||
Stand: 09.10.2026 · Status: **Kontaktformular + Registrierung umgesetzt, als `v1.6.0` getaggt, Datenschutzerklärung in `v1.6.1`** (Deploy siehe Abschnitt 7)
|
||||
|
||||
Beispiel-Mail: [spam-mail.md](spam-mail.md)
|
||||
|
||||
|
|
@ -208,8 +208,8 @@ Hinweis Routing: Auf der Hauptdomain überschreibt `routes/domains/main.php` die
|
|||
TURNSTILE_SECRET_KEY=...
|
||||
```
|
||||
✅ Widget angelegt am 09.10.2026. **Ohne diese Schlüssel lehnen Kontaktformular und Registrierung jede Anfrage ab.** Lokal sind die Cloudflare-Testschlüssel eingetragen, die immer bestehen.
|
||||
3. **Datenschutzerklärung** anpassen: Google reCAPTCHA raus, Cloudflare Turnstile (Kontakt + Registrierung) rein.
|
||||
4. Deploy wie üblich per Tag (`dev/betrieb/README.md`), keine Migration: `bash dev/betrieb/deploy.sh v1.6.0`
|
||||
3. ✅ **Datenschutzerklärung** angepasst (09.10.2026): neuer Absatz „Schutz unserer Formulare vor Missbrauch (Cloudflare Turnstile)“ am Ende von Abschnitt V in `resources/lang/{de,en,es,fr}/dataprotect.php`, inkl. Rate-Limit und 30-Tage-Protokoll; „Stand“ auf 09.10.2026. reCAPTCHA war dort nie erwähnt. Die Erklärung wird ohnehin komplett neu gefasst – dabei Abschnitt XI prüfen (verweist noch auf das ungültige „Privacy Shield“).
|
||||
4. Deploy wie üblich per Tag (`dev/betrieb/README.md`), keine Migration: `bash dev/betrieb/deploy.sh v1.6.1` (enthält v1.6.0)
|
||||
5. Danach den alten reCAPTCHA-Schlüssel in der Google-Konsole löschen (das Secret liegt in der Git-Historie).
|
||||
6. SQL-Abfrage aus Abschnitt 5 (Benutzer ohne Account) auf Live ausführen.
|
||||
7. Nach ein paar Tagen das Log auswerten (Befehl oben) und hier im Protokoll eintragen.
|
||||
|
|
@ -231,3 +231,4 @@ Hinweis Routing: Auf der Hauptdomain überschreibt `routes/domains/main.php` die
|
|||
| 09.10.2026 | Passwort-Mindestlänge systemweit auf 8 Zeichen (zentral über `Password::defaults()`), Turnstile-Widget bei Cloudflare angelegt | noch nicht deployt |
|
||||
| 09.10.2026 | Echte Turnstile-Schlüssel lokal geprüft: Secret von Cloudflare akzeptiert, Site-Key auf Hauptseite und Berater-Shop ausgeliefert, gefälschtes Token wird abgelehnt und protokolliert | noch nicht deployt |
|
||||
| 09.10.2026 | Auf dem Testsystem im Browser geprüft (läuft), Commit + Tag für den Deploy | v1.6.0 |
|
||||
| 09.10.2026 | Datenschutzerklärung (DE/EN/ES/FR) um Cloudflare Turnstile und Missbrauchsprotokoll ergänzt | v1.6.1 |
|
||||
|
|
|
|||
|
|
@ -82,6 +82,14 @@ return [
|
|||
Aufgrund der Regelungen des Telemediengesetzes (TMG) sind wir zur Angabe einer allgemeinen Mailadresse im Impressum unserer Website verpflichtet, über die Sie uns per Mail kontaktieren können. Weiterhin haben Sie die Möglichkeit, über Kontaktformulare auf unserer Website Kontakt mit uns aufzunehmen. Über die Kontaktformulare können Sie u.a. Anfragen zu den Produkten oder unserem Geschäft stellen bzw. sich als Berater bei uns bewerben. Die von Ihnen per Mail oder unsere Kontaktformulare an uns übermittelten personenbezogenen Daten werden automatisch für Zwecke der Bearbeitung oder der Kontaktaufnahme zu Ihnen gespeichert.
|
||||
<br><br>
|
||||
Mit Absenden Ihrer Nachricht willigen Sie in die Verarbeitung der übermittelten Daten ein. Die Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. a DSGVO mit Ihrer Einwilligung. Sie können Ihre Einwilligung jederzeit durch Mitteilung an uns widerrufen, ohne dass die Rechtmäßigkeit der aufgrund der Einwilligung bis zum Widerruf erfolgten Verarbeitung berührt wird. Ihre E-Mail-Adresse nutzen wir nur zur Bearbeitung Ihrer Anfrage. Ihre Daten werden anschließend gelöscht, sofern Sie der weitergehenden Verarbeitung und Nutzung nicht zugestimmt haben.
|
||||
<br><br>
|
||||
<strong>Schutz unserer Formulare vor Missbrauch (Cloudflare Turnstile)</strong>
|
||||
<br>
|
||||
Zum Schutz unseres Kontaktformulars und unserer Registrierung vor Spam und automatisierten Zugriffen (Bots) setzen wir den Dienst „Turnstile“ der Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, ein. Turnstile prüft beim Aufruf dieser Formulare im Hintergrund, ob die Eingabe von einem Menschen stammt. Dabei werden insbesondere Ihre IP-Adresse sowie technische Merkmale Ihres Browsers und Geräts (z. B. Browserkennung/User-Agent und Merkmale der verschlüsselten Verbindung) an Cloudflare übermittelt und dort ausgewertet. Cloudflare verarbeitet diese Daten in unserem Auftrag zur Erkennung von Bots und nach eigenen Angaben außerdem zur Verbesserung der Bot-Erkennung.
|
||||
<br><br>
|
||||
Rechtsgrundlage ist Art. 6 Abs. 1 lit. f DSGVO. Unser berechtigtes Interesse liegt darin, unsere Formulare vor missbräuchlicher Nutzung zu schützen, insbesondere davor, dass über unsere Website Spam-Nachrichten an Dritte verschickt werden. Dabei kann eine Übermittlung in die USA erfolgen. Cloudflare ist unter dem EU-US Data Privacy Framework zertifiziert; ergänzend gelten die EU-Standardvertragsklauseln. Weitere Informationen: https://www.cloudflare.com/turnstile-privacy-policy/ und https://www.cloudflare.com/privacypolicy/
|
||||
<br><br>
|
||||
Zusätzlich begrenzen wir die Anzahl der Anfragen je IP-Adresse und protokollieren abgewiesene Anfragen (Zeitpunkt, IP-Adresse, aufgerufene Seite, Domain-Teil der angegebenen E-Mail-Adresse und Grund der Abweisung) für 30 Tage, ebenfalls auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Inhalt Ihrer Nachricht und Passwörter werden dabei nicht protokolliert.
|
||||
<br><br>',
|
||||
'data_protect_copy6' => '<strong>VI. Rechtsgrundlagen der Verarbeitung</strong>
|
||||
<br>
|
||||
|
|
@ -260,8 +268,8 @@ Finden Sie weitere Datenschutzinformationen von Google unter: https://www.googl
|
|||
Es werden jedoch keine Informationen herausgegeben, mit denen sich Nutzer persönlich identifizieren lassen.<br>
|
||||
Wenn Sie nicht an dem Tracking-Verfahren teilnehmen möchten, können Sie auch das hierfür erforderliche Setzen eines Cookies ablehnen – etwa per Browser-Einstellung, die das automatische Setzen von Cookies generell deaktiviert. Sie können Cookies für Conversion-Tracking auch deaktivieren, indem Sie Ihren Browser so einstellen, dass Cookies von der Domain „www.googleadservices.com“ blockiert werden.<br>
|
||||
Googles Datenschutzbelehrung zum Conversion-Tracking finden Sie hier ( https://services.google.com/sitestats/de.html )',
|
||||
'data_protect_stand_shop' => 'Stand: 18.02.2022',
|
||||
'data_protect_stand_site' => 'Stand: 05.10.2018',
|
||||
'data_protect_stand_shop' => 'Stand: 09.10.2026',
|
||||
'data_protect_stand_site' => 'Stand: 09.10.2026',
|
||||
'data_protect' => 'Datenschutz',
|
||||
|
||||
];
|
||||
|
|
|
|||
|
|
@ -10,12 +10,20 @@ return [
|
|||
'data_protect_copy2' => '<strong>I. Definitions</strong> <br> To make our data protection declaration easier to understand, we would first like to explain to you some of the terms used. For the purposes of this privacy policy, the term: <br><br> 1) “personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); An identifiable natural person is a natural person who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features that express the physical , physiological, genetic, psychological, economic, cultural or social identity of that natural person; <br><br> 2) "Processing" means any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data, such as the collection, recording, organization, structuring, storage, adaptation or modification, reading, retrieving, using, disclosing by transmission, dissemination or any other form of provision, matching or combination, restriction, deletion or destruction; <br><br> 3) "Restriction of processing" means the marking of stored personal data with the aim of restricting their future processing; <br><br> 4) "Profiling" means any type of automated processing of personal data, which consists in using these personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to analyze or predict that natural person\'s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movements; <br><br> 5) "Pseudonymization" means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data is not assigned to an identified or identifiable natural person; <br><br> 6) “Controller” means the natural or legal person, public authority, institution or other body which, alone or jointly with others, decides on the purposes and means of processing personal data; If the purposes and means of this processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law <br><br> 7) “Processor” means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller; <br><br> 8) “Recipient” means a natural or legal person, public authority, agency or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, public authorities which may receive personal data in the context of a specific investigative task under Union or Member State law shall not be deemed to be recipients; the processing of these data by the said authorities will be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing; <br><br> 9) “Third party” means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or the processor to process personal data; <br><br> 10) “Consent” of the data subject means any voluntary, informed and unambiguous expression of will in the specific case in the form of a statement or other clear confirmatory act by which the data subject indicates that he or she agrees to the processing of personal data concerning them; <br><br> 11) “personal data breach” means a breach of security that, whether accidental or unlawful, results in the destruction, loss, alteration, or unauthorized disclosure of or access to personal data, that have been transmitted, stored or otherwise processed. <br><br>',
|
||||
'data_protect_copy3' => '<strong>II. Responsible person</strong> <br> The person responsible within the meaning of the General Data Protection Regulation as well as the data protection laws applicable in the member states of the European Union and other data protection regulations is: <br><br> <strong>mivita care gmbh</strong><br> Mr Alois Ried<br> Leinfeld 2<br> 87755 Kirchhaslach<br> Telephone: +49 (0) 8333 94 61 767<br> Mail: info@mivita.care<br> <br><br>',
|
||||
'data_protect_copy4' => '<strong>III. Cookies</strong>',
|
||||
'data_protect_copy5' => '<br> Our website uses cookies. Cookies are small text files that are stored and stored on a computer system via an Internet browser. <br> Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string through which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID. <br> By using cookies, we can provide you with more user-friendly services that would not be possible without the cookie setting. <br> Using a cookie, the information and offers on our website can be optimized for the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for you to use our websites. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website because this is done by the website and the cookie stored on the user\'s computer system. <br> The data processed by cookies is necessary for the purposes mentioned to protect our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. <br> You can prevent the setting of cookies through our website at any time by adjusting the appropriate settings on the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If you deactivate the setting of cookies in the Internet browser you use, not all functions of our website may be fully usable. <br><br> IV. Data and information that is stored when you visit our website <br> Every time you visit our website, general data and information is recorded that is stored in the server\'s log files. <br><br> <strong>The following data/information may be collected:</strong> <br> - the browser types and versions used - the operating system used, - the website from which you access our website - the sub-sites, which are accessed on our website - the date and time of access to our website, - your IP address - your Internet service provider - other similar data and information that serves to avert danger in the event of attacks on our IT systems . <br><br> We need this information in order to be able to accurately provide the content of our website. to ensure the long-term functionality of our IT system and to be able to provide the authorities with the information necessary for criminal prosecution in the event of a cyber attack. This is also our legitimate interest within the legal basis for processing this data in accordance with Article 6 Paragraph 1 Letter f of the GDPR. When using this general data and information, we do not draw any conclusions about the data subject. We store the anonymous data from the server log files separately from all personal data. V. Contacting us electronically <br><br> Due to the regulations of the Telemedia Act (TMG), we are obliged to provide a general email address in the imprint of our website, which you can use to contact us by email. You also have the option of contacting us using the contact forms on our website. You can use the contact forms to make inquiries about the products or our business or apply to us as a consultant. The personal data you send to us via email or our contact forms will be automatically stored for the purposes of processing or contacting you. <br><br> By sending your message, you consent to the processing of the transmitted data. Processing is carried out on the basis of Article 6 Paragraph 1 Letter a GDPR with your consent. You can revoke your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out based on your consent before its revocation. We only use your email address to process your request. Your data will then be deleted unless you have consented to further processing and use. <br><br>',
|
||||
'data_protect_copy5' => '<br> Our website uses cookies. Cookies are small text files that are stored and stored on a computer system via an Internet browser. <br> Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string through which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID. <br> By using cookies, we can provide you with more user-friendly services that would not be possible without the cookie setting. <br> Using a cookie, the information and offers on our website can be optimized for the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for you to use our websites. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website because this is done by the website and the cookie stored on the user\'s computer system. <br> The data processed by cookies is necessary for the purposes mentioned to protect our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. <br> You can prevent the setting of cookies through our website at any time by adjusting the appropriate settings on the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If you deactivate the setting of cookies in the Internet browser you use, not all functions of our website may be fully usable. <br><br> IV. Data and information that is stored when you visit our website <br> Every time you visit our website, general data and information is recorded that is stored in the server\'s log files. <br><br> <strong>The following data/information may be collected:</strong> <br> - the browser types and versions used - the operating system used, - the website from which you access our website - the sub-sites, which are accessed on our website - the date and time of access to our website, - your IP address - your Internet service provider - other similar data and information that serves to avert danger in the event of attacks on our IT systems . <br><br> We need this information in order to be able to accurately provide the content of our website. to ensure the long-term functionality of our IT system and to be able to provide the authorities with the information necessary for criminal prosecution in the event of a cyber attack. This is also our legitimate interest within the legal basis for processing this data in accordance with Article 6 Paragraph 1 Letter f of the GDPR. When using this general data and information, we do not draw any conclusions about the data subject. We store the anonymous data from the server log files separately from all personal data. V. Contacting us electronically <br><br> Due to the regulations of the Telemedia Act (TMG), we are obliged to provide a general email address in the imprint of our website, which you can use to contact us by email. You also have the option of contacting us using the contact forms on our website. You can use the contact forms to make inquiries about the products or our business or apply to us as a consultant. The personal data you send to us via email or our contact forms will be automatically stored for the purposes of processing or contacting you. <br><br> By sending your message, you consent to the processing of the transmitted data. Processing is carried out on the basis of Article 6 Paragraph 1 Letter a GDPR with your consent. You can revoke your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out based on your consent before its revocation. We only use your email address to process your request. Your data will then be deleted unless you have consented to further processing and use. <br><br>
|
||||
<strong>Protection of our forms against misuse (Cloudflare Turnstile)</strong>
|
||||
<br>
|
||||
To protect our contact form and our registration against spam and automated access (bots), we use the “Turnstile” service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When these forms are loaded, Turnstile checks in the background whether the input comes from a human. In particular, your IP address and technical characteristics of your browser and device (e.g. browser identifier/user agent and characteristics of the encrypted connection) are transmitted to Cloudflare and evaluated there. Cloudflare processes this data on our behalf to detect bots and, according to its own information, also to improve its bot detection.
|
||||
<br><br>
|
||||
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in protecting our forms against misuse, in particular against our website being used to send spam messages to third parties. Data may be transferred to the USA in this context. Cloudflare is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply in addition. Further information: https://www.cloudflare.com/turnstile-privacy-policy/ and https://www.cloudflare.com/privacypolicy/
|
||||
<br><br>
|
||||
In addition, we limit the number of requests per IP address and log rejected requests (time, IP address, page accessed, domain part of the email address provided and reason for rejection) for 30 days, likewise on the basis of Art. 6 (1) (f) GDPR. The content of your message and passwords are not logged.
|
||||
<br><br>',
|
||||
'data_protect_copy6' => '<strong>VI. Legal basis for processing</strong> <br> If we obtain your consent for a specific processing purpose, Art. 6 I lit. a GDPR serves as the legal basis for the processing operation. <br><br> If the processing of personal data is necessary to fulfill a contract, the processing is based on Art. 6 I lit. b GDPR. This also applies to processing operations that are necessary to carry out pre-contractual measures, such as inquiries about our products or other services. <br><br> If we are subject to a legal obligation that requires the processing of personal data, such as to fulfill tax obligations, the legal basis for the processing is Art. 6 I lit. c GDPR. <br><br> If the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, the processing would be based on Art. 6 I lit. d GDPR. <br><br> Ultimately, Art. 6 I lit. f GDPR can be the legal basis for a processing operation. This is the case if the processing operation is not covered by any of the aforementioned legal bases and the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. If the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is to carry out our business activities for the benefit of the well-being of our employees/shareholders. <br><br>',
|
||||
'data_protect_copy7' => '<strong>VII. Legal or contractual regulations for the provision of personal data</strong> <br> The provision of personal data is partly required by law (e.g. tax regulations) and can also result from contractual regulations (e.g. information about the contractual partner). If you want to conclude a contract with us, it is necessary that you provide us with personal data, which will subsequently be processed by us. Failure to provide personal data would mean that we would not be able to conclude a contract with you. <br><br>',
|
||||
'data_protect_copy8' => '<strong>VIII. Routine deletion/blocking of personal data</strong> <br> We only process and store personal data for the period necessary to achieve the storage purpose or if this is required by the European legislator or another legislator in laws or regulations was provided. If the storage purpose no longer applies or if a storage period prescribed by the European legislator or another responsible legislator expires, the personal data will be blocked or deleted routinely and in accordance with legal regulations. <br><br> After the respective statutory retention period has expired, the relevant data will be routinely deleted unless it is no longer required to fulfill the contract or initiate a contract. According to the legal requirements in Germany, storage takes place in particular for 10 years in accordance with Sections 147 Paragraph 1 AO, 257 Paragraph 1 Nos. 1 and 4, Paragraph 4 HGB (books, records, management reports, accounting documents, trading books, more relevant for taxation). documents, etc.) and 6 years in accordance with Section 257 Paragraph 1 Nos. 2 and 3, Paragraph 4 HGB (commercial letters). <br><br>',
|
||||
'data_protect_copy9' => '<strong>IX. Your rights</strong> <br> <strong>1) Right to confirmation and information</strong> <br> You have the right to request confirmation from us as to whether the relevant personal data is being processed. If you would like to exercise legal rights, you can contact us at any time. <br><br> You also have the right to receive free information from us about the personal data stored about you and a copy of this information. You are also entitled to information about the following information: <br> - the processing purposes - the categories of personal data that are processed - the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular recipients in Third countries or international organizations - if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria for determining that period - the existence of a right to rectification or deletion of the personal data concerning them or to restriction of processing by the controller or a right to object to this processing - the existence of a right to lodge a complaint with a supervisory authority - if the personal data are not collected from the data subject: all available information about the origin of the data - the existence of automated decision-making including profiling in accordance with Article 22 Para. 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject <br><br> You also have the right to information about: whether personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to receive information about the appropriate guarantees in connection with the transmission. <br><br> If you would like to exercise this right to information, you can contact us at any time. <br><br> <strong>2) Right to rectification</strong> <br> You have the right to request the immediate correction of incorrect personal data concerning you. You also have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - including by means of a supplementary declaration. <br><br> If you would like to exercise this right to correction, you can contact us at any time. <br><br> <strong>3) Right to deletion (“Right to be forgotten”)</strong> <br> You have the right to request that the personal data concerning you be deleted immediately, if one of the following reasons applies and to the extent that the processing is not necessary: <br> - The personal data were collected or otherwise processed for purposes for which they are no longer necessary; - You revoke your consent on which the processing was based in accordance with Article 6 Paragraph 1 Letter a GDPR or Article 9 Paragraph 2 Letter a GDPR and there is no other legal basis for the processing; - You object to the processing in accordance with Art. 21 Para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 Para. 2 GDPR; - The personal data was processed unlawfully; - The deletion of personal data is necessary to comply with a legal obligation under Union or Member State law to which we are subject. - The personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR. <br><br>',
|
||||
'data_protect_stand_shop' => 'As of: February 18, 2022',
|
||||
'data_protect_stand_site' => 'As of: October 5, 2018',
|
||||
'data_protect_stand_shop' => 'As of: October 9, 2026',
|
||||
'data_protect_stand_site' => 'As of: October 9, 2026',
|
||||
'data_protect' => 'Privacy Policy',
|
||||
];
|
||||
|
|
|
|||
File diff suppressed because one or more lines are too long
|
|
@ -80,6 +80,14 @@ return [
|
|||
Vous pouvez nous contacter par e-mail via l’adresse indiquée dans les mentions légales ou par les formulaires de contact du site. Les données personnelles transmises par e-mail ou formulaire sont enregistrées automatiquement pour traiter votre demande et vous contacter.
|
||||
<br><br>
|
||||
En envoyant votre message, vous consentez au traitement des données transmises. Le traitement repose sur l’art. 6 al. 1 let. a RGPD. Vous pouvez révoquer ce consentement à tout moment. Votre adresse e-mail est utilisée uniquement pour traiter votre demande, puis supprimée sauf consentement à un traitement ultérieur.
|
||||
<br><br>
|
||||
<strong>Protection de nos formulaires contre les abus (Cloudflare Turnstile)</strong>
|
||||
<br>
|
||||
Afin de protéger notre formulaire de contact et notre inscription contre le spam et les accès automatisés (bots), nous utilisons le service « Turnstile » de Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, États-Unis. Lors du chargement de ces formulaires, Turnstile vérifie en arrière-plan si la saisie provient d’un être humain. À cette fin, votre adresse IP ainsi que des caractéristiques techniques de votre navigateur et de votre appareil (p. ex. identifiant du navigateur/user agent et caractéristiques de la connexion chiffrée) sont notamment transmises à Cloudflare et y sont analysées. Cloudflare traite ces données pour notre compte afin de détecter les bots et, selon ses propres indications, également pour améliorer sa détection des bots.
|
||||
<br><br>
|
||||
La base juridique est l’art. 6 al. 1 let. f RGPD. Notre intérêt légitime consiste à protéger nos formulaires contre toute utilisation abusive, en particulier contre l’envoi de messages de spam à des tiers via notre site web. Un transfert de données vers les États-Unis peut avoir lieu dans ce cadre. Cloudflare est certifiée dans le cadre du Data Privacy Framework UE-États-Unis ; les clauses contractuelles types de l’UE s’appliquent en complément. Plus d’informations : https://www.cloudflare.com/turnstile-privacy-policy/ et https://www.cloudflare.com/privacypolicy/
|
||||
<br><br>
|
||||
En outre, nous limitons le nombre de demandes par adresse IP et enregistrons les demandes refusées (date et heure, adresse IP, page consultée, partie domaine de l’adresse e-mail indiquée et motif du refus) pendant 30 jours, également sur la base de l’art. 6 al. 1 let. f RGPD. Le contenu de votre message et les mots de passe ne sont pas enregistrés.
|
||||
<br><br>',
|
||||
'data_protect_copy6' => '<strong>VI. Bases juridiques du traitement</strong>
|
||||
<br>
|
||||
|
|
@ -186,7 +194,7 @@ return [
|
|||
Les informations collectées servent à établir des statistiques de conversion. Aucune information permettant d’identifier personnellement les utilisateurs n’est transmise.<br>
|
||||
Vous pouvez refuser le cookie nécessaire via les paramètres de votre navigateur ou bloquer les cookies du domaine « www.googleadservices.com ».<br>
|
||||
La politique de confidentialité Google relative au conversion tracking est disponible ici (https://services.google.com/sitestats/de.html)',
|
||||
'data_protect_stand_shop' => 'Version : 18.02.2022',
|
||||
'data_protect_stand_site' => 'Version : 05.10.2018',
|
||||
'data_protect_stand_shop' => 'Version : 09.10.2026',
|
||||
'data_protect_stand_site' => 'Version : 09.10.2026',
|
||||
'data_protect' => 'Protection des données',
|
||||
];
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue