Privacy policy

Information

We welcome you to our website and appreciate your interest in our company. We take the protection of your personal data very seriously. Our data protection regulations are in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) and in accordance with the country-specific data protection regulations applicable to MGA Zapf Creation GmbH. Please therefore take a moment to read our data protection information. It explains what data we collect via our website, what we use it for and what options you have.

The controller within the meaning of data protection law is MGA Zapf Creation GmbH, postal address:
Mönchrödener Str. 13, 96472 Rödental, Germany.

Contact information:
Phone: +49 9563 725-0
Fax: +49 9563 725-116
E-mail: info@zapf-creation.com

Contact data protection:
datenschutz@zapf-creation.de

Subject matter of data protection

The subject of data protection is personal data. According to Art. 4, 1st EU GDPR, this is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes, for example, information such as name, postal address, e-mail address or telephone number, but may also include usage data such as your IP address.

Data is anonymous if no personal reference to the user can be established.

Purposes and legal bases of data processing

When processing your personal data, we comply with the provisions of the EU GDPR and all other applicable data protection regulations . The legal basis for data processing arises in particular from Art. 6 EU GDPR.

We use your data to initiate business, to fulfill contractual and legal obligations, to implement the contractual relationship, to offer products and services and to strengthen the customer relationship, which may also include analyses for marketing purposes and direct advertising.

Your consent to data processing may also constitute a data protection authorization provision. Before you give your consent, we will inform you about the purpose of the data processing and your right of withdrawal.

Data collection: categories and origin of the data

Which data we process is determined by the respective context: this depends on whether, for example, you enter an inquiry in our contact form or take part in one of our competitions

We collect and process the following data when you visit our website:

  • Name of the Internet service provider
  • Information about the website from which you are visiting us
  • Web browser and operating system used
  • The IP address assigned by your Internet service provider
  • Requested files, transferred data volume, downloads
  • Information about the websites you visit on our site, including date and time

For reasons of technical security (in particular to defend against attempted attacks on our web server), this data is stored in accordance with Art. 6 para. 1 lit. f EU-GDPR. This data is deleted after 7 days at the latest.

In the context of a contact request, we collect and process the following data depending on the type of request:

  • Surname, first name
  • Contact details
  • Address
  • Salutation
  • Message

As part of a product-related contact, we collect and process the following data depending on the type of request (Art. 6 para. 1 lit. a, b EU-GDPR):

There are two types of forms on our website that are intended for product-related electronic contact. These are spare parts inquiries and complaints. If you write to us using these forms, we will process the data you provide in the form to contact you and answer your questions and requests.

The principle of data minimization and data avoidance is observed in that you only have to provide the data that we absolutely need to contact you. These are your first name, surname, country, e-mail address as well as the message field and the subject itself. These fields must be filled in according to the product-specific categories. Your IP address is also processed for technical reasons and for legal protection. All other data are voluntary fields and can be provided optionally (e.g. for a more personalized response to your questions).

If you contact us by e-mail, we will process the personal data provided in the e-mail solely for the purpose of processing your request.

We collect and process the following data for competitions:

  • Surname, first name
  • Surname, first name of the legal guardian
  • Address or address

At present, data is still transmitted unencrypted, meaning that the possibility of unauthorized third parties reading this data during transmission cannot be ruled out. However, it is possible to use alternative communication channels (e.g. letter post or fax), which offer more security than unencrypted e-mail.

Obligation to provide the data

Various personal data are necessary for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

We have summarized the details for you in the point above. In certain cases, data must also be collected or made available due to legal provisions. Please note that it is not possible to process your request or execute the underlying contractual relationship without providing this data.

Contact form / contact by e-mail (Art. 6 para. 1 lit. a, b EU-GDPR)

There is a contact form on our website that can be used to contact us electronically. If you write to us via the contact form, we will process the data you provide in the contact form to contact you and answer your questions and requests.

The principle of data minimization and data avoidance is observed in that you only have to provide the data that we absolutely need to contact you.

Different data is collected here depending on the type of inquiry. For example, it is sufficient if you give us your name and e-mail address if it is a general inquiry. If you are interested in a catalog, we will also ask for your address so that we can send you the catalog.

In addition, your IP address is processed for technical reasons and for legal protection. All other data are voluntary fields and can be provided optionally (e.g. to answer your questions more individually).

If you contact us by e-mail, we will process the personal data provided in the e-mail solely for the purpose of processing your request.

Competition (Art. 6 para. 1 lit. a, b EU-GDPR)

You have the opportunity to take part in our competition on our website. If you fill in the competition form, we will process the data you provide there exclusively for the purpose of running the competition.

The principle of data minimization and data avoidance is observed in that you only have to provide the data that we absolutely need from you to carry out the competition and to notify you of the prize. This is, for example, your name and address.

Unfortunately, we cannot run the competition without the mandatory fields. Participation is then not possible.

Birth certificate

You can create a birth certificate for your BABY born on our website. To do this, you can enter the name, date and place of birth chosen for your BABY born and the child's name (doll's mom/dad) in the input mask provided. The birth certificate is then generated as a PDF with the data entered, which you can save locally on your device. We do not store the data entered in our database. It is only saved for a short time, which is necessary to create the PDF. The data will be deleted after one hour.

Wish list

It is possible to create a wish list on our website. The name that is entered, the time of creation and the products that are added to the wish list are saved. You also have the option of entering various comments on individual products. If you use this option, the data entered there will also be saved. This data is stored in our database and as a PDF file. The purpose of the processing is to enable you to generate the wish list as a PDF file and store it locally. All data will be deleted after 180 days at the latest.

Cookies (Art. 6 para. 1 sentence 1 lit. a, f EU-GDPR, § 25 para. 1, 2 TDDDG)

Cookies only contain pseudonymous, usually even anonymous data. Some cookies remain in place for the duration of a browser session (so-called session cookies), others are stored for longer periods (so-called persistent cookies, e.g. consent settings). The latter are automatically deleted after the specified time (usually 6 months). In addition to our own cookies, we also use cookies that are controlled by third-party providers. These use the information contained in the cookies, e.g. to show you content or to record the pages you have visited.

On the basis of our legitimate interest (Art. 6 para. 1 sentence 1 lit. f EU GDPR), we set technically necessary cookies that are absolutely necessary for the operation of the website and to ensure its functionality. Furthermore, we use cookies without your consent if their sole purpose is to store or access information stored in the terminal device for the transmission of messages or if they are absolutely necessary to provide the service you have expressly requested, Section 25 (2) TTDSG.

Subject to your consent, other cookies are used to enable us or third parties to analyze how our services are used, for example. This enables us to tailor the content to user needs. Cookies also enable us to measure the effectiveness of a particular advertisement and to place it according to the thematic interests of the user, for example. The legal basis for this is your express consent (Art. 6 para. 1 sentence 1 lit. a EU GDPR, Section 25 para. 1 TTDSG).

You can revoke your consent via our consent banner at any time with effect for the future and change the cookie settings. Please note that changes must be made separately for each end device.

If you have given your consent here, you can of course revoke it at any time without giving reasons via the link in the next paragraph.

If you have accounts with the third-party providers we use and are logged in there, your data may be linked to the respective account. You can avoid such a combination by not giving or revoking your consent to the relevant cookies or by logging out of the respective third-party providers in advance.

Most browsers accept cookies automatically. You can also deactivate, restrict or delete cookies on your end device manually via your browser settings or with the help of software. If you deactivate the setting of cookies, you will not be able to use our website to its full extent or only to a limited extent.

Please also note our information in the section of the respective service that uses cookies.

Google Analytics 4 (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG)

We use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website. By using Google Analytics 4, we can analyze the behavior of website visitors and thus improve the user-friendliness of our website. For example, the click paths of users are analyzed in order to gain insights into the usage patterns of the website.

The following data is therefore collected with your consent:

  • Page views
  • Dwell time
  • Operating system used
  • Location data
  • Device data

This data is assigned to the user's end device. This allows individual users to be recognized.

This service will only be active if you have given us your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). You can revoke your consent at any time with effect for the future via our consent banner - the direct link can be found in the next section, on the Puppenfinder website it can also be accessed by clicking on the blue "fingerprint symbol" in the left-hand corner of the website - and change the cookie settings. Please note that changes must be made separately for each end device.

The data collected is stored for 14 months and then automatically deleted.

Google is an active participant in the EU-U.S. Data Privacy Framework, which regulates the correct and secure transfer of personal data.
You can find more information on this at  https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&tid=311141511.

Weitere Informationen zum Datenschutz bei finden Sie hier:

Google Tag Manager (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG)

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland on our website. Google Tag Manager can be used to centrally integrate and manage tags from various tracking tools that we use on our website. Tags are individual sections of code that record your activities on our website. Google Tag Manager can be used to integrate tags from Google products, such as Google Analytics, or from other providers. Various tracking tools, such as Google Analytics, are integrated to make our website as appealing as possible for website visitors. We use the Google Tag Manager to integrate these.

Although the Google Tag Manager itself does not set any cookies, website visitor data is transmitted to the tools integrated via the Google Tag Manager after consent has been given.

This service will only be active if you have given us your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). You can revoke your consent at any time with effect for the future via our consent banner - the direct link can be found in the next section - and change the cookie settings. Please note that changes must be made separately for each end device.

The data collected is stored for 14 months and then automatically deleted.

Google is an active participant in the EU-U.S. Data Privacy Framework, which regulates the correct and secure transfer of personal data. You can find more information on this at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&tid=311141511.

Further information on data protection can be found here:

Datenschutzerklärung – Datenschutzerklärung & Nutzungsbedingungen – Google

Google Signals (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG)

We use Google Signals on our website. This is a function of Google Analytics 4 that links the visit data collected by our website with Google information from accounts of registered users of the Google account who have consented to this link for the purpose of ad personalization. Granular location and device data is collected at country level. As part of Google Signals, cross-device tracking also takes place across different websites and apps, provided you are logged into your Google account and have activated personalized advertising. We may also receive information about your interests and demographic characteristics, such as your age, language, place of residence or gender. By using Google Signals, we can gain aggregated and anonymized insights into cross-device behavior, which we use, for example, to create remarketing lists in Google Analytics 4.

The following data will be collected with your consent:

  • Location data
  • Search history
  • YouTube history
  • Further data from websites that work with Google

This data is assigned to the user's end device. This allows individual users to be recognized.

This service will only be active if you have given us your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). You can revoke your consent at any time with effect for the future via our consent banner - the direct link can be found in the next section - and change the cookie settings. Please note that changes must be made separately for each end device.

The data collected is generally stored for a period of 26 months and then automatically deleted.

Google is an active participant in the EU-U.S. Data Privacy Framework, which regulates the correct and secure transfer of personal data. You can find more information on this at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&tid=311141511.

Further information on data protection can be found here:

Privacy Policy - Privacy Policy & Terms of Use - Google

Google Ads (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG)

We use Google Ads Conversion Tracking on our website to draw attention to our offers. For this purpose, we place ads in the Google search network and banner ads in the Google display network (banners on third-party websites) and use Google Ads remarketing. We can combine ads with search terms or use individual ads to advertise our products that you have viewed on our site. Ads remarketing lists allow us to optimize search and display campaigns if you have visited our site before.

If you have reached our website via an ad placed by Google, Google Ads will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an ad placed by Google. We and Google then receive information that you have clicked on an ad and have been redirected to us. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective and can optimize them as a result.

The statistics that Google provides us with include the number of users who have clicked on one of our ads and show which of our websites you have been redirected to. We can also target you better if you have already visited our website. We can also track which search terms were clicked on particularly often and which ads lead to the purchase of one of our products, for example.

Depending on the browser used, these cookies lose their validity after a maximum of 90 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page.

The legal basis is the consent given by you in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Ads Advertising, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.

You can prevent this technology by preventing the use of cookies via your browser settings, deselecting individual types of ads in Google's ad settings, deactivating interest-based ads on Google or deactivating cookies from advertising providers with the help of the respective deactivation help of the Network Advertising Initiative. We and Google will then only receive statistical information about how many users have visited a page and when. This can only be prevented by appropriate browser extensions.

Please note that you must not delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

Google is an active participant in the EU-U.S. Data Privacy Framework, which regulates the correct and secure transfer of personal data. You can find more information on this at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&tid=311141511.   

Further information on data protection can be found here:

Privacy Policy - Privacy Policy & Terms of Use - Google

Meta Pixel (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG)

We have implemented the Meta pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, on our websites.

With your consent, data on your user behavior from our website is collected and analyzed. Provided you have given your consent, a cookie is set for this purpose, which can be used to analyze the target groups on Facebook and track the customer journey. This serves our campaign optimization. This means that the effectiveness of Facebook ads can be evaluated for statistical and market research purposes and future web measures can be improved as a result.

The data collected will also be linked to any existing Instagram or Facebook account.

 The following information from website visitors is collected for this purpose:

  • Activity and information provided
  • Friends, subscribers and other contacts
  • App, browser and device information
  • Information from partners, providers and other third parties

This service will only be active if you have given us your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). You can revoke your consent at any time with effect for the future via our consent banner - the direct link can be found in the next section - and change the cookie settings. Please note that changes must be made separately for each end device.

The data collected is stored for 14 months and then automatically deleted.

Meta is an active participant in the EU-U.S. Data Privacy Framework, which regulates the correct and secure transfer of personal data. You can find more information about this at https://www.facebook.com/privacy/policies/data_privacy_framework

Further information on data protection at Meta can be found here:

Meta Privacy Policy - How Meta collects and uses user data | Privacy Center | Manage your privacy on Facebook, Instagram and Messenger | Facebook Privacy

Pinterest Pixel (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG)

We have implemented the pixel of Pinterest, Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, on our website.

With your consent, we use Pinterest pixels on our website to analyze target groups and play out corresponding campaigns. The analysis of the user data is used to display targeted ads on Pinterest and thus optimize the advertising campaigns.

The following data is collected from website visitors for this purpose:

  • Account details
  • Contents
  • Precise location data
  • Communication with Pinterest
  • Contacts
  • Device data
  • Protocol data
  • Data from cookies
  • Usage data and conclusions
  • User decisions

This service will only be active if you have given us your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). You can revoke your consent at any time with effect for the future via our consent banner - the direct link can be found in the next section - and change the cookie settings. Please note that changes must be made separately for each end device.

The data collected is stored for 14 months and then automatically deleted.

Further information on data protection can be found here: Privacy Policy | Pinterest Policy

YouTube (Art. 6 para. 1 lit. a EU-GDPR, § 25 para. 1 TDDDG)

We have integrated YouTube videos from the provider Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) into our online offering, which are stored on http://www.youtube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. However, the extended data protection mode only refers to the recording of user behavior, not to the provision of ads, as well as the reloading of further third-party content, font transfer and possible links to your user account on YouTube. When you start the video, this triggers further data processing operations. We have no influence on this. The legal basis is your consent, Art. 6 para. 1 sentence 1 lit. a EU GDPR.

You can revoke your consent at any time in our cookie settings.

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. However, we take the possible measures required under data protection law in accordance with Art. 44 et seq. EU GDPR to establish the level of data protection in the third country.

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. Data is transmitted regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores the data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Further information on data protection can be found at: https://policies.google.com/privacy

Google reCAPTCHA(Art. 6 para. 1 lit. f)

On this website, we use the reCAPTCHA function of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This function is primarily used to differentiate whether an entry is made by a natural person or abusively by machine and automated processing.

The legal basis for processing is Art. 6 para. 1 lit. f EU GDPR based on our legitimate interest in the security of our website and the prevention of misuse and spam.

The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input will be transmitted to Google and used there.

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes without you having any legal recourse. However, we take the possible measures required under data protection law in accordance with Art. 44 et seq. EU GDPR to establish the level of data protection in the third country.

You can view Google's terms of use at http://www.google.de/intl/de/policies/terms/regional.html, the additional detailed information on data protection can be found on Google's website ("Google Privacy Policy"): http://www.google.de/intl/de/policies/privacy/

Opt-out: https://adssettings.google.com/authenticated.

Cloudfront (Art. 6 para. 1 lit. f EU-GDPR)

This website uses the Cloudfront Content Delivery Network (CDN). This is a service of Amazon Web Services Inc, 410 Terry Avenue North, Seattle, WA 98109-5210. The Cloudfront CDN provides duplicates of data from a website on various Amazon Web Services (AWS) servers distributed worldwide . This results in faster website loading times, greater reliability and increased protection against data loss. Some of the images and videos embedded on this website are retrieved from the Cloudfront CDN when the page is accessed. Through this retrieval, information about your use of our website (such as your IP address) is transferred to Amazon servers in other EU countries and stored there. This happens as soon as you enter our website. The use of Amazon Web Services and the Amazon CDN Cloudfront is in the interest of greater reliability of the website, increased protection against data loss and better loading speed of this website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Information on the data protection measures and the privacy policy of Amazon Web Service can be found at: https://aws.amazon.com/de/privacy/.
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes without you having any legal recourse. However, we take the possible measures required under data protection law in accordance with Art. 44 et seq. EU GDPR to establish the level of data protection in the third country.

Links Social media

On our website you will find links to the social media services of Facebook, Instagram and YouTube. You can recognize links to the websites of the social media services by the respective company logo. If you follow these links, you will reach the company website of MGA Zapf Creation GmbH on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This tells the social media service's servers that you have visited our website. In addition, further data is transmitted to the provider of the social media service. These are, for example

  • Address of the website on which the activated link is located
  • Date and time the website was accessed or the link was activated
  • Information about the browser and operating system used
  • IP address

If you are already logged in to the relevant social media service when you activate the link, the provider of the social media service may be able to determine your user name and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand.

The servers of the social media services are located in the USA and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as is the case in the member states of the European Union.

Please note that we have no influence on the scope, type and purpose of data processing by the provider of the social media service. For more information on the use of your data by the social media services integrated on our website, please refer to the privacy policy of the respective social media service.

Commerce Connector ("Buy now button") (Art. 6 para. 1 lit. b EU-GDPR)

We provide you with a selection of different online retailers on our website, which you can reach via a link from our website. The link is made via a >buy now button< or via a store logo of the respective retailer. If you click on the link, our partner - Commerce Connector GmbH - will store a cookie on your device for a limited period of time (usually 7 days). If you make a purchase from the merchant within this period, Commerce Connector may access the cookie to obtain information about your purchase from the merchant once you reach the merchant's order confirmation page.
Commerce Connector does not receive any personal information that can be used to identify you, only a unique cookie number. Commerce Connector uses the purchase information obtained to generate anonymized sales statistics of our products purchased via the link and then provides us with these statistics.
If you would like more information about this "sales tracking" or want to know how you can deactivate it, please read the Commerce Connector online privacy policy at https://www.commerce-connector.com/web/de/policy-cco/

Use and disclosure of personal data/purpose limitation

We will only collect, process and use all personal data that we obtain from you in the course of your use of the MGA Zapf Creation GmbH website for the stated purpose. In doing so, we ensure that this only takes place within the framework of the applicable legal provisions or only with your consent.
The personal data collected will not be published, sold or passed on to third parties in any other way. This data will not be used for advertising purposes.

Recipients of the data/categories of recipients    

Within our company, we ensure that only those persons receive your data who need it to fulfill contractual and legal obligations.

In many cases, service providers support our specialist departments in performing their tasks. The necessary data protection contracts have been concluded with all service providers. These are the following categories of service providers:

  • IT
  • Credit check
  • Marketing
  • Payment services
  • Shipping
  • Service provider for responding to our complaint requests.

Third country transfer / intention to transfer to a third country

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual relationship, is required by law or if you have given us your consent to do so.

We do not transfer your personal data to any service provider outside the European Economic Area.

Rights of data subjects Art. 15 - 22 EU GDPR

You have the right to obtain information about the personal data concerning you, as well as the right to rectification or erasure, provided that this does not conflict with any statutory retention obligations. You also have the right to obtain from MGA Zapf Creation GmbH restriction of processing, the right to object to processing and the right to data portability. Furthermore, you also have the right to lodge a complaint with the supervisory authority.

To assert these rights, please contact: Datenschutz@zapf-creation.de or by post to MGA Zapf Creation GmbH, reference "Datenschutz", Mönchrödener Str. 13, 96472 Rödental, Germany.

Routine deletion and blocking of personal data

MGA Zapf Creation GmbH processes and stores personal data of the data subject only for the period necessary to achieve the purpose of storage or as long as a statutory retention period exists. After the purpose has been achieved or the period has expired, the corresponding data is routinely deleted, provided that it is no longer required for contract fulfillment or contract initiation.

Data security

We have taken appropriate technical and organizational measures to protect the data of our employees/customers/suppliers stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.

The exchange of data to and from our website is encrypted. We offer HTTPS as the transmission protocol for our website, using the latest encryption protocols. It is also possible to use alternative communication channels (e.g. by post).

Online offers for children

Persons under the age of 16 may not transmit any personal data to us or submit a declaration of consent without the consent of their legal guardian. We would like to encourage parents and legal guardians to actively participate in the online activities and interests of their children.

Links to other providers

Our website also contains - clearly recognizable - links to the websites of other companies. Where links to websites of other providers are available, we have no influence on their content. Therefore, no guarantee or liability can be assumed for this content. The respective provider or operator of the pages is always responsible for the content of these pages.

The linked pages were checked for possible legal violations and recognizable infringements at the time of linking. Illegal contents were not recognizable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of an infringement. If we become aware of any legal infringements, such links will be removed immediately.

Automated decisions in individual cases

We do not use purely automated processing to reach a decision.

Privacy policy / Information on data protection in social media

MGA Zapf Creation GmbH maintains appearances for BABY born in the "social media", in this case on Facebook, Instagram and YouTube. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with.

Below you will find the most important information on data protection law in relation to our websites.

We would like to point out that you use these platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).

Name and address of the person responsible for the company

In addition to MGA Zapf Creation GmbH, the following is responsible for the company websites within the meaning of the EU General Data Protection Regulation (EU GDPR) and other data protection regulations

  • Facebook
    (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • Instagram
    (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • Youtube
    (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland)

However, you use these platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).

We would also like to point out that your data may be processed outside the European Union.

Purposes and legal basis

We maintain the fan pages ourselves in order to communicate with visitors to these pages and to inform them about our offers in this way.

We also collect data for statistical purposes in order to further develop and optimize the content and to make our offer more attractive. The data required for this (e.g. total number of page views, page activities and data provided by visitors, interactions) are processed by the social networks and made available to us. We have no influence on the generation and presentation of this data.
Your data may also be processed for market research and advertising purposes. For example, user profiles can be created from your usage behavior and the resulting interests. This allows, for example, advertisements to be placed within and outside the platforms that presumably correspond to your interests. Cookies are usually stored on your computer for this purpose. Irrespective of this, data that is not collected directly from your end devices may also be stored in the user profiles (especially if you are a member of the respective platforms and are logged in to them).
As the provider of this information service, we only collect and process the data to reply to the messages that you can write to us. We do not use your data for any other purpose.  

The processing of users' personal data is based on our legitimate interests in effective user information and communication with users in accordance with Art. 6 para. 1 lit. f. EU-GDPR.

If you are asked by Facebook for consent to data processing (i.e. you give your consent, e.g. by ticking a checkbox or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 EU-GDPR.

Possibility of objection

If you are a member of Facebook and do not want the network to collect data about you via our website and link it to your stored membership data with the respective network, you must

  • log out of the respective network before visiting our website,
  • delete the cookies present on the device and
  • Close and restart your browser.

After logging in again, however, you will once again be recognizable to the network as a specific user.

For a detailed description of the respective processing and the opt-out options, please refer to the information linked below:

You have the following rights with regard to the processing of your personal data:

Right of access; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; right to lodge a complaint about unlawful processing of your personal data with the competent data protection authority.

However, since MGA Zapf Creation GmbH does not have complete access to your personal data, you should contact the social media providers directly if you wish to make a claim, as they have access to the personal data of their users and can take appropriate measures and provide information.

If you still need help, we will of course try to support you. Please contact datenschutz@zapf-creation.de

Notes on copyright and artistic copyright

If you wish to publish images, texts, plans, videos, music etc. on our website, you should be aware that you may be assigning all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights holder yourself.

Questions about data protection?

If you have any questions about data protection, please contact: datenschutz@zapf-creation.de or by post to MGA Zapf Creation GmbH, reference "Datenschutz", Mönchrödener Str. 13, 96472 Rödental, Germany.

Loading...