A) Responsible for data processing
B) Data processing
In the course of operating our website, we process data. The processing of data also includes disclosure through transmission. For data transfers to the USA, there is an adequacy decision of the EU Commission, the EU-US Privacy Shield. In this, the Commission has certified that the guarantees for the transfer of data to the USA on the basis of the EU-US Privacy Shield correspond to the data protection standards in the EU. To the extent that we transfer data to the USA, we have marked the participation of our service providers in the EU-US Privacy Shield. The individual data concerned, processing purposes, legal bases, recipients and transfers to third countries are listed below:
1a) Log file: We log your visit to our websites. The following data is processed. The name of the website accessed, the date and time of access, the volume of data transferred, the browser type and version, the operating system you are using, the referrer URL (the previously visited website), your IP address and the requesting provider. This is necessary to ensure the security of the website. We process the data accordingly on the basis of our legitimate interests pursuant to Art. 6, para. 1f) DSGVO. The log file is deleted after seven days, unless it is needed for clarification or proof of specific legal violations that have become known within the retention period.
2b) Hosting: Within the scope of hosting, all data to be processed in connection with the operation of this website is stored. This is necessary to enable the operation of the website. We process the data accordingly on the basis of our legitimate interests pursuant to Art. 6, para. 1f) DSGVO. To provide our online presence, we use services of web hosting providers to whom we transmit the above data.
3c) Contact: If you contact us, your data (name, contact details, if provided by you) and your message will be processed exclusively for the purpose of processing and handling your request. These data are processed by us on the basis of Art. 6, para. 1b) DSGVO or Art. 6, para. 1f) DSGVO to process your request.
In order to provide you with regular information about our company and our offers, we offer to send you a newsletter. When you register for the newsletter, we process the data you have entered (e-mail address and other voluntary information). The sending of the confirmation email for your registration is based on our legitimate interest in proving your proper registration according to Art. 6, para. 1f) DSGVO, the sending of the newsletter based on your consent according to Art. 6, para. 1a) DSGVO. The registration for the newsletter takes place in the so-called double opt-in procedure. To prevent misuse, we will send you an email after your registration asking you to confirm your registration. In order to be able to prove the registration process in accordance with the legal requirements, your registration is logged. This concerns the storage of the registration and confirmation time as well as your IP address.
E) Customer account
If you open a customer account, you agree that your inventory data (name, address, email address, bank details) and your usage data (user name, password) are stored. Dadurch können wir Sie als Kunden identifizieren und Sie haben die Möglichkeit, Ihre Bestellungen zu verwalten. Ihre Daten werden auf Grundlage Ihrer Einwilligung gemäß Art. 6, Abs. 1a) DSVGO verarbeitet.
F) Purchase processing
We process your order data for the processing of the purchase contract. The processing of the data takes place accordingly on the basis of Art. 6, para. 1b) DSGVO. We transmit your address data to the company commissioned with the delivery. If it is necessary for the processing of the contract, we additionally transmit your email address or your telephone number to the company commissioned with the delivery in order to coordinate a delivery date (notification). We transmit your transaction data (name, date of order, payment method, date of dispatch and/or receipt, amount and payee, bank details or credit card details, if applicable) to the payment service provider commissioned with processing the payment.
To enable the use of certain functionality of our website, we use so-called cookies. These are short data packets that are stored on your terminal device. Some of the cookies we use are deleted immediately after you close your browser (so-called session cookies). Other cookies remain on your end device and allow your browser to be recognized the next time you visit (persistent cookies). You can delete all cookies stored on your end device and set the common browsers to prevent cookies from being stored. In this case, you may have to make some settings again each time you visit this website and accept the impairment of some functions. The data processing is based on our overriding legitimate interest in ensuring the functionality of our website according to Art. 6, para. 1f) DSGVO.
H) Social plugins
We use third-party plugins on our websites. This allows you to inform your contacts whether you like our website, point to content or share content. The plugins are identified by the logo of the respective third-party provider. When you visit our site, your data is transferred to the respective third-party providers. If you are also a user of a third-party provider, this data can be assigned to the corresponding user account with the provider. A transmission of this data to the third-party provider may also occur if you are not registered as a user with the third-party provider and do not click on the plugin on our pages. In the case of a transmission without simultaneous registration with the third-party provider, however, it is not directly possible to establish a direct personal reference to you via, for example, the IP address; this would only be possible via information from your provider. The purpose and scope of data processing by the third-party provider can be found in the data protection information of the respective provider. The processing of this data is based on our overriding legitimate interest in optimal marketing of our online offer in accordance with Art. 6, Para. 1f) DSGVO.
I) Your rights as a data subject
1a) Information: upon request, you will receive information free of charge at any time about all personal data that we have stored about you.
2b) Correction, deletion, restriction of processing (blocking), objection:If you no longer agree with the storage of your personal files or if they have become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law) in response to a corresponding instruction. The same applies if we are to process data only in a restrictive manner in the future.
3c) Data portability: Upon request, we will provide your data in a common, structured and machine-readable format so that you can transfer the data to another responsible party upon request.
4d) Right of appeal: There is a right of appeal to a supervisory authority: (https://ww.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html). 5e) Right of revocation in case of consent with effect for the future: You can revoke given consents with effect for the future at any time. Your revocation will not affect the lawfulness of the processing until the time of revocation.
Data for which we are not able to identify the data subject, e.g. if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.
K) Exercising your data subject rights
If you have any questions regarding the processing of your personal data, if you wish to obtain information, correct, block, object to or delete data, or if you wish to have your data transferred to another company, please contact firstname.lastname@example.org.