Cookies that the site cannot function properly without. This includes cookies for access to secure areas and CSRF security. Please note that Craft’s default cookies do not collect any personal or sensitive information. Craft's default cookies do not collect IP addresses. The information they store is not sent to Pixel & Tonic or any 3rd parties.
Name: CraftSessionId
Description: Craft relies on PHP sessions to maintain sessions across web requests. That is done via the PHP session cookie. Craft names that cookie “CraftSessionId” by default, but it can be renamed via the phpSessionId config setting. This cookie will expire as soon as the session expires.
Provider: this site
Expiry: Session
Name: *_identity
Description: When you log into the Control Panel, you will get an authentication cookie used to maintain your authenticated state. The cookie name is prefixed with a long, randomly generated string, followed by _identity. The cookie only stores information necessary to maintain a secure, authenticated session and will only exist for as long as the user is authenticated in Craft.
Provider: this site
Expiry: Persistent
Name: *_username
Description: If you check the "Keep me logged in" option during login, this cookie is used to remember the username for your next authentication.
Provider: this site
Expiry: Persistent
Name: CRAFT_CSRF_TOKEN
Description: Protects us and you as a user against Cross-Site Request Forgery attacks.
Provider: this site
Expiry: Session
Name: PayPal
Description: This is a payment service.
Processing Company
PayPal (Europe) S.à r.l. et Cie, S.C.A
22-24 Boulevard Royal, L-2449 Luxembourg
Data Purposes
This list represents the purposes of the data collection and processing. A consent is only valid for the stated purposes. The collected data can't be used or stored for any other purpose than the purposes listed below.
Payment
Functionality
Technologies Used
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Name
Address
Bank details
Passwords
TANs and checksums
Contract details
Payment information
Credit and Debit card number
Transaction information
Purchase activity
IP address
Browser information
Internet Service Provider
Geographic location
Legal Basis
In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed.
Art. 6 Abs. 1 S. 1 lit. b GDPR
Location of Processing
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
PayPal (Europe) S.à r.l. et Cie, S.C.A
Financial institutions
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
dpo@paypal.com
Click here to read the privacy policy of the data processor https://www.paypal.com/de/webapps/mpp/ua/privacy-full#2
Click here to read the cookie policy of the data processor https://www.paypal.com/de/webapps/mpp/ua/cookie-full
Provider: PayPal
Expiry:
Name: Stripe
Description: This service provides technology for operating online payment systems.
Processing Company
Stripe, Inc.
3180 18th Street, San Francisco, CA 94110, United States of America
Data Purposes
This list represents the purposes of the data collection and processing. A consent is only valid for the stated purposes. The collected data can't be used or stored for any other purpose than the purposes listed below.
Payment
Technologies Used
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Payment method
Date of purchase
Purchase amount
Payment method information
Legal Basis
In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed.
Art. 6 para. 1 s. 1 lit. b GDPR
Location of Processing
United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
Stripe, Inc.
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
privacy@stripe.com
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
United States of America
Click here to read the privacy policy of the data processor https://stripe.com/us/privacy/
Provider: Stripe
Expiry:
Functional cookies help us understand how visitors interact with websites by collecting and reporting information anonymously.
Name: YouTube Video
Description: This is a video player service.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Purposes
This list represents the purposes of the data collection and processing. A consent is only valid for the stated purposes. The collected data can't be used or stored for any other purpose than the purposes listed below.
Displaying Videos
Technologies Used
Cookies (if "Privacy-Enhanced Mode" is not activated)
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP Address
Referrer url
Device information
Watched Videos
Legal Basis
In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
Alphabet Inc.
Google LLC
Google Ireland Limited
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
Worldwide
Click here to read the privacy policy of the data processor https://policies.google.com/privacy?hl=en
Click here to opt out from this processor across all domains https://safety.google/privacy/privacy-controls/
Click here to read the cookie policy of the data processor https://policies.google.com/technologies/cookies?hl=en
Provider: YouTube
Expiry:
Name: Vimeo
Description: This is a service for displaying video content.
Processing Company
Vimeo LLC
555 West 18th Street, New York, New York 10011, United States of America
Data Purposes
This list represents the purposes of the data collection and processing. A consent is only valid for the stated purposes. The collected data can't be used or stored for any other purpose than the purposes listed below.
Displaying video
Technologies Used
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
Browser type
Device information
Browser information
Cookie information
Browser language
Referrer URL
Pages visited
Operating system
Search query
Information from third party sources
Information users provide on this site
Legal Basis
In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
Google Analytics
Vimeo LLC
Service Partner
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
Privacy@vimeo.com
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
United States of America
Click here to read the privacy policy of the data processor https://vimeo.com/privacy
Click here to opt out from this processor across all domains https://vimeo.com/cookie_policy
Click here to read the cookie policy of the data processor https://vimeo.com/cookie_policy
Provider: Vimeo
Expiry:
