DE

DATA PROTECTION

1. General

Information 1.1 What Is Personal Data
? Personal data refers to information that reveals or could reveal the user’s identity. We adhere to the principle of data minimization. We refrain from collecting personal data to the greatest extent possible.

1.2 Handling of Personal Data
Personal data is used exclusively for the establishment, content, performance, or fulfillment of the contractual relationship (Art. 6(1)(b) GDPR).

Furthermore, personal data is processed only to the extent that we have obtained your consent (Art. 6(1)(a) GDPR) or where the data in question is necessary for our legitimate interests and provided that a balancing test determines that no overriding interests, fundamental rights, or fundamental freedoms on your part stand in the way (Art. 6(1)(f) GDPR).

We may use processors to process your personal data, but we will generally not disclose the personal data to third parties.

The data is only disclosed to the shipping company responsible for delivery for the purpose of fulfilling the contract, to the extent that this is necessary for the delivery of ordered goods. To process payments, the necessary payment data is transferred to the financial institution responsible for the payment and, if applicable, to the designated and selected payment service provider.

The processing of your personal data takes place exclusively within the EU, unless otherwise stated below.

1.3 Usage Data
When you visit the website, general technical information is collected. This includes the IP address used, the time of the visit, the duration of the visit, the browser type, and, if applicable, the referring page. For technical reasons, this usage data is recorded in a log file and may be used and stored for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.

1.4 Duration of Storage
We store your personal data after the purpose for which the data was collected has been fulfilled only for as long as required by legal (in particular tax) regulations.


2. Your Rights

2.1 Right of Access
You may request information from us regarding whether we process your personal data, and if so, you have the right to access this personal data and to receive the additional information specified in Article 15 of the GDPR.

2.2 Right to Rectification
You have the right to have inaccurate personal data concerning you rectified and, pursuant to Article 16 of the GDPR, may request the completion of incomplete personal data.

2.3 Right to Erasure
You have the right to request that we erase personal data concerning you without undue delay. We are obligated to erase this data without undue delay, in particular if one of the following grounds applies:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent on which the processing of your data was based, and there is no other legal basis for the processing.
  • Your data has been processed unlawfully.

The right to erasure does not apply if your personal data is necessary for the establishment, exercise, or defense of our legal claims.

2.4 Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data if

  • you contest the accuracy of the data and we are therefore verifying its accuracy,
  • the processing is unlawful and you oppose erasure but instead request restriction of use
  • we no longer need the data, but you need it to assert, exercise, or defend legal claims,
  • you have objected to the processing of your data, and it has not yet been determined whether our legitimate grounds override your grounds.

2.5 Right to Data Portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us using automated means.

2.6 Right to Withdraw Consent
To the extent that the processing of your personal data is based on consent, you have the right to withdraw this consent at any time.

2.7 General Provisions and Right to File a Complaint
The exercise of your rights set forth above is generally free of charge for you. You have the right to contact the supervisory authority responsible for us, the State Data Protection Commissioner, directly in the event of a complaint.


3. Data

Security 3.1 Data
Security All data on our website is protected against loss, destruction, unauthorized access, alteration, and disclosure through technical and organizational measures.

3.2 Sessions and Cookies
To operate the website, we use cookies or server-side sessions in which data can be stored. We ensure that no personal data is collected from sessions or via cookies without your express consent, and that cookies are only used to the extent that this is technically necessary for the website (e.g., spam protection for contact forms, shopping cart functionality) and thus the assessment concludes that there are no overriding interests on your part that would preclude this (Art. 6(1)(f) 1(f) GDPR) or you have given your explicit consent.
With your explicit consent, we use cookies to personalize content and ads, to offer social media features, and to analyze traffic to our website. With your consent, we may share information about your use of our website with our social media, advertising, and analytics partners. Our partners may combine this information with other data they already hold about you.


4. Presence on Social Media Platforms


We use the following social media platforms for corporate representation and communication (express reference is made to the privacy policies and opt-out options linked below).


Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Privacy Policy: https://www.facebook.com/about/privacy/
Opt-out: http://www.youronlinechoices.com

Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)
Privacy Policy and Opt-out: http://instagram.com/about/legal/privacy/

These social media platforms may process personal data outside the EU; in this regard, we refer to the above-mentioned privacy policies of the social media platforms.
The respective social media platforms may create usage profiles based on your usage behavior and the resulting interests and actions on your part, and may store cookies on your computer that record your usage behavior. If you have an account on the respective social media platform and are logged in, your usage behavior may even be stored across devices. Your usage profile may be used, for example, to place advertisements that are presumed to match your interests.

We process personal data exclusively for the purpose of communicating with you via the social media platform you have chosen, as well as for optimizing our online presence, and ensure that no interests on your part are affected that would outweigh this legitimate interest on our part (Art. 6(1)(f) GDPR). To the extent that you have already provided the respective operator of the social media platform with valid consent for the corresponding data processing, the processing of your personal data is also based on this consent (Art. 6(1)(a) GDPR).


5. Third-Party

Services 5.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), and collects and stores data via this web analytics service, from which usage profiles are created using pseudonyms. The usage profiles created in this way serve to evaluate visitor behavior in order to tailor and improve the content presented on this website to meet user needs. Google Analytics uses so-called “cookies,” small text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. However, if IP anonymization is enabled on this website, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Furthermore, usage profiles maintained under a pseudonym are not merged with the user’s personal data without the user’s express and separately declared consent. Thus, the balancing of interests shows that there are no overriding interests on your part that would preclude this (Art. 6(1)(f) GDPR). You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
You can also prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set to prevent the collection of your data during future visits to this website: Disable Google Analytics. You can view Google’s privacy policy at http://www.google.de/intl/de/policies/privacy/. For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html. Please note that on this website, Google Analytics has been extended with the code “anonymizeIp” to ensure the anonymized collection of IP addresses (so-called IP masking).

5.2 Social Media Links
We have our own social media pages on the third-party platforms accessible via links from this website. By using these links, you will be redirected to the respective websites of the third-party providers (e.g., Facebook, Twitter, Instagram). To avoid unnecessary data sharing, we recommend that you log out of the respective third-party provider’s account before using a corresponding link, so that usage profiles cannot be created by the third-party provider merely through the use of the link.

5.3 Use of Google Maps
This website uses Google Maps, a map service provided by Google, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). When using Google Maps, data regarding visitors’ use of the map functions is also collected, processed, and used. No user interests are affected here that would outweigh this technical necessity of integrating the interactive map material (Art. 6(1)(f) GDPR). You can view Google’s privacy policy at http://www.google.de/intl/de/policies/privacy/. You can view the additional terms of use for Google Maps at http://www.google.com/intl/de_de/help/terms_maps.html.

5.4 Use of YouTube
This website and the integrated services contain so-called video embeds from YouTube. These enable a connection to YouTube and the videos stored there. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). No user interests are affected here that would outweigh this technical necessity of embedding the videos (Art. 6(1)(f) GDPR). For the purpose and scope of data collection and use by Google, as well as your rights and settings options for protection as a YouTube user, please refer to YouTube’s privacy policy. You can find this at: http://www.youtube.com/t/privacy/.

6. Use of an AI-powered assistant

We use an AI-powered chat assistant on this website. It is designed to automatically answer your questions regarding general information about the Allee-Center Leipzig (e.g., opening hours, shops, services, directions, events).

6.1 Provider and Data Processing
The AI service is technically provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The “Gemini 2.5 Flash” model is used, which is accessed via Google’s Gemini API. A data processing relationship with Google exists in accordance with Art. 28 GDPR based on the “Google Cloud Data Processing Addendum” (CDPA, as of November 8, 2023, available at https://cloud.google.com/terms/data-processing-addendum). The cloud project used is configured as a paid service.

6.2 Processed Data
When using the chat assistant, the following data is processed:

  • the content of your inputs (prompts) and the AI responses
  • a technical session identifier (Session-ID)
  • Your IP address and user agent identifier (browser identification)
  • technical usage data (AI model used, token consumption, timestamps)

Please do not enter any personal or confidential information in the chat. The assistant does not actively request such information and is not intended to handle individual, personal matters.

6.3 Retention
Period The content of your inquiries and the corresponding AI responses are stored in our system for a maximum of 90 days, along with your IP address, session ID, and user agent. After this period expires, these personal data fields are automatically anonymized (by overwriting them with zero values). Only anonymous, aggregated usage and statistical data (model, token, timestamp) remain for a maximum of 24 months for the analysis of usage trends and cost control. After that, these data records are also completely deleted.

6.4 Transfer to the U.S
. Your requests are processed on Google servers in the U.S. The transfer is based on EU Standard Contractual Clauses (SCCs) in the version of the Implementing Decision (EU) 2021/914 of the European Commission, which are part of the aforementioned CDPA (Appendix 3, Section 4.1 “Restricted Transfers”) and constitute “appropriate safeguards” within the meaning of Article 46(2)(c) of the GDPR.

6.5 No Training of AI Models
Since we use the service as a paid service, the content processed in the context of our requests (prompts and responses) is not used by Google for training or improving the AI models. This assurance is derived from the “Gemini API Additional Terms of Service” (https://ai.google.dev/gemini-api/terms).

6.6 Legal
Basis The legal basis for the use of the chat assistant is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing you with a modern, accessible information service and in improving our services. Upon consideration, it appears that there are no overriding interests on your part that would preclude this, as no personal data is used for profiling and you use the assistant voluntarily.

7. Contact

Information If you have any questions regarding data protection, please feel free to contact us using the contact options below. Data controller within the meaning of the GDPR:


c/o Kintyre Investments GmbH
Schillerstraße 27
60313 Frankfurt am Main



Our Data Protection Officer is also available to assist you: 

Kintyre Investments GmbH
Schillerstraße 27
60313 Frankfurt am Main