a) 'personal data' means any information relating to an identified or identifiable natural person ('the data subject'); a natural person is considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (eg cookie) or to one or more special features, that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
b) "Concerned person" means any identified or identifiable natural person whose personal data are processed by the controller.
c) 'Responsible person' means the natural or legal person, public authority, body or body that alone or jointly with others decides on the purposes and means of processing personal data.
d) 'Processor' means a natural or legal person, public authority, body or body that processes personal data on behalf of the controller.
e) "Recipient" means a natural or legal person, public authority, agency or other entity to whom personal data are disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as beneficiaries.
f) 'third party' means a natural or legal person, public authority, body or body other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or processor to process the personal data ,
g) "consent" means any expression of will voluntarily and unequivocally given by the data subject in the form of a statement or other unambiguous affirmative act by the data subject to indicate to the data subject that he is involved in the processing of the data personal data concerned.
h) "processing" means any process or series of operations related to personal data carried out with or without the aid of automated procedures. The term goes far and includes virtually every handling of data.
i) 'pseudonymisation' means the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data are personal data is not assigned to an identified or identifiable natural person.
j) "profiling" means any kind of automated processing of personal data which consists in using that personal data to evaluate certain personal aspects relating to a natural person, in particular
aspects relating to work performance, economic situation, health to analyze or predict personal preferences, interests, reliability, behavior, whereabouts or relocation of that natural person.
2. Person Responsible
Responsible in the sense of the DSGVO and thus direct contact person is:
3. Nature and purpose of the use of collected data
a) The exclusive visit of our website is possible without further information about your identity or other data input. However, by calling up our website, automatic information is transmitted by the server used and temporarily stored in any log files. This includes the IP address of the requesting computer, the date and time of the web page access, the name and URL of the retrieved file, the web page from which the access is made (referrer URL) as well as the browser you are using or the name of the provider you use
This provides a proper and easy connection to our website and a correspondingly comfortable use. It also safeguards system security and the stability of the website, and any administrative purposes can be met.
The legal basis for this is Art. 6 para. 1 p. 1 lit. f) GDPR, to which we refer for the named purposes. Any further processing of this data does not take place, certainly not for the purpose of further identification of your person.
b) You will be provided with a contact form for use. With this you can communicate directly with us electronically. However, this is only possible if the data given there are provided by you, which in particular concerns a valid email address. Additional information, such as the telephone number, you can volunteer, but they do not have to. Insofar as your request has been dealt with after the request has been made, the data will not be stored further by us but will be deleted automatically.
The legal basis for this is Art. 6 para. 1 p. 1 lit. a) GDPR. The use of the contact form as well as the transmission of the corresponding data are carried out on the basis of your voluntarily given consent.
c) Finally, you have the option of using our online shop. The use of the online shop is also under input of various data, which are required for the purchase and order processing. You are free to make a purchase as a guest and thus without the final registration and creation of a customer account or by means of registration and thus with the creation of a customer account. The latter makes it easier to log in again in the event of a repeated future order without the need for all your order and contact details to be transmitted again.
The data collected during the use of the online shop includes name and address data of the respective customer, the email address, if necessary the telephone number or comparable possibilities of establishing contact. This data is used exclusively for order processing. This also includes any further communication that may be required with you as well as the accounting. In addition, these data also serve to process any liability and recourse cases and / or to be able to assert existing claims against you from the contractual relationship. Furthermore, these data are purely technical administration. In the current order process you will be informed about the data usage.
The legal basis for this is the fulfillment of obligations arising from the closed purchase contract or other contractual relationship concluded via our shop page pursuant to Art. 6 (1) (1) (b) GDPR.
It is pointed out that these data are stored until the expiration of the statutory retention obligation specified by us and only subsequently deleted. A longer obligation may arise for us from tax or other legal requirements, cf. Article 6 (1) (1) (c) GDPR. This does not affect the voluntary consent of longer-term storage, see above and Article 6 (1) sentence 1 (a) GDPR.
4. Disclosure of collected data
Unless otherwise required for the contractual processing, a transfer or processing of the personal data collected to third parties is generally not. In the case of an on-demand transfer of personal data, this will only be done to the extent that this is required in accordance with Art. 6 (1) (1) (b) GDPR. This includes the forwarding to shipping companies to be commissioned or to the institutions used for payment. Any further disclosure will only take place if you have expressly consented to this, cf. Art. 6 para. 1 p. 1 a) of the GDPR, disclosure pursuant to Art. 6 p. 1 lit. f) of the GDPR is necessary for the assertion and enforcement of legal claims and there is no further protective interest for you or if, pursuant to Art. 6 para.
Insofar as we process data in a third country, ie outside the EU or the EEA, or by using third-party services, or by disclosing and transmitting data to third parties, this is done exclusively within the framework of the fulfillment of our contractual obligations, on the basis of the consent given by you, due to a legal obligation or due to our legitimate interests. However, such processing in a third country is always carried out in compliance with the requirements of Article 44 et seq. GDPR.
5. Processing of data by processors
There is the possibility that data collected by us through the use of our web offer are not processed directly by us, but that this is done by third parties, the so-called order processors. This can be the case, for example, in the technical implementation, expansion or backup of the shop system. However, we only work together with contract processors under the provisions of Art. 28 DSGVO. In particular, we observe Art. 28 (2) GDPR, according to which such processing takes place only on the basis of a prior written agreement between us and the processor.
6. Your right as affected persons
As affected persons, you are entitled to various rights that you and others can directly assert. These include:
a) the right of information according to Art. 15 GDPR regarding the processing of personal data in question. If so, you have a right of access to the purpose of the processing, the category of personal data, the categories of recipients to whom your data may have been disclosed, the planned retention period, the right to rectification, erasure, restriction of access Processing or opposition, the existence of a right of appeal, the source of your data, if not collected from me, and the existence of automated decision-making, including profiling and, where appropriate, meaningful information about their details;
b) the right to demand without delay the correction of inaccurate or completion of your stored personal data according to Art. 16 GDPR;
c) the right under Art. 17 GDPR to demand the deletion of your personal data stored by us, unless the processing for exercising the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert To exercise or defend legal claims;
d) the right under Art. 18 GDPR to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you require the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
e) the right under Art. 20 GDPR to receive your personal data provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible.
Furthermore, you have the right to revoke your consent to the processing of data pursuant to Art. 7 (3) GDPR with effect for the future. However, such a revocation of consent does not affect the processing already carried out, which was carried out on the basis of a previously legally granted consent.
In addition, you have a right of appeal under Art. 77 DSGVO. You can submit such a complaint directly to the relevant supervisory authority
In addition, under the conditions of Art. 21 DSGVO, you may object to the processing of personal data relating to you insofar as this processing is carried out in accordance with Art. 6 (1) sent. 1 (f) of the GDPR and if there are reasons that arise from your person or but the opposition in particular directed against direct mail. The contradiction acts for the future.
7. Data security
In order to ensure the security of your data, we use appropriate technical and organizational security measures to protect the data against manipulation of any kind, loss or destruction or against unauthorized access by third parties. The measures to be taken are subject to regular further development on the basis of the state of technical development. In particular, we use the ssl procedure for visiting our website. An indication of this can be found in the https specification in the address bar of your browser.
The page provided by us works using so-called cookies. These are small files that are created by your browser and stored on your own device when visiting the website.
Cookies serve to optimize the possibility of using the online offer of the website. Temporary or permanent cookies can be set. Temporary cookies are used for example for the content presentation of the shopping cart, permanent cookies, for example, for the recognition of your login status. Likewise, cookies can be used to store information used for range measurement or marketing purposes.
The possibility of using cookies arises for us from Art. 6 (1) (1) (f) GDPR
In addition, it is pointed out that it is possible for you to deactivate the storage of cookies on your device via the system settings of your browser used. You can also delete cookies stored in the system settings of your browser. Such deactivation or deletion may, however, result in limitations in the function of the online offer made by us.
9. Google AdWords / Google Analytics
In addition, the website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", cf. Number 8, The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=en
10. Involvement of third-party providers, especially social media
a) Facebook Social Plugins
On our website you may find social plugins from Facebook. These are initially as such to technical offers of Facebook itself.
As soon as you visit a website that contains such a Facebook plug-in, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and incorporated by him into the website. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the US and stored there.
If you are logged in on your visit to our website on Facebook, there is the possibility of assigning your visit to our website to your Facebook account through Facebook itself. This allows Facebook in turn use this information for promotional or similar purposes. If you do not want this, you must log out of your Facebook account before visiting our website.
On our website you will also find social plug-ins of the Twitter platform. Again, when using these plugins by confirmation in the form of clicking a connection between her browser and Twitter made. Here, too, an assignment of your web page visit can be done by Twitter. If this is not desired by you, you must log out of your Twitter account before visiting our website.
On our website you will also find social plugins of the GooglePlus platform. Again, when using these plugins by confirmation in the form of clicking a connection between their browser and GooglePlus made. Again, an assignment of your web page visit by the company Google done. If you do not want this, you must log out of your GooglePlus account before visiting our website.
Likewise, contents of the platform Pinterest can be integrated via our web offer. These include primarily media such as images or texts, as well as comparable media content. Here, too, an assignment of your web page visit can be made. As a result, you must log out of your Pinterest account before visiting our website, if you do not wish to have such an association.
11. Links to third party websites
On our website are links that refer to other websites. If we have set such a link here, it has been carefully checked before. However, we have no influence on the current or future design as well as the contents of the respective linked pages. We are not responsible for their content. Nor do we make their content as their own. Liability for illegal, incorrect or incomplete content is therefore the sole responsibility of the respective site operators. The same applies to any liability for damage caused by use. Here, too, the local site operator is liable. A liability for us exists at best if we have evidence of illegal, unlawful, punishable content and it is technically possible and reasonable for us to prevent the use of the link.
It is possible for you to subscribe to a newsletter. With this we inform you about current offers as well as other information about the services we offer. Registration for our newsletter is possible by specifying your email address. Additional data does not have to be provided by you. Registration for the newsletter is only possible with your consent. After registering for the newsletter, you will receive a registration email from us in which you will again be asked to confirm your previous registration on the website, so-called double-opt-in procedure.
The newsletter is thus sent on the basis of consent pursuant to Art. 6 (1) lit. b), Art. 7 GDPR. Insofar as consent is not necessary, the newsletter is sent on the basis of legitimate interests in direct marketing in accordance with Art. 6 (1) (1) (f) GDPR.
The registration for the receipt of the newsletter is neither condition nor other condition for the use of our on-line offer. In addition, the Newslettermpfang can be terminated or revoked at any time. This is done via the link to termination in the newsletter sent to you. It is pointed out, however, that there is the possibility of internal storage of your email address in order to be able to prove the prior consent if necessary.
The shipping service provider can use the data of the recipients in a pseudonymous form, that is, without being able to be assigned to a user, to optimize or improve their own services, e.g. for the technical optimization of shipping and the presentation of newsletters or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to address them themselves or to pass the data on to third parties.
The logo of our partner idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is integrated on our website. When we visit our website, the end users are automatically forwarded to the server at the current time. This information will be temporary in one. Server logfile saved for 7 days. The following information is stored here without your request and until automated deletion:
IP address of the requesting computer,
Date and time of access,
Name and URL of the split file,
Website from which the journey started (referrer URL),
used browser and possibly the operating system Your computer and your name Your access provider.
Prepared storage of the IP address by the system is optional to allow delivery of the website. The IP address must be stored for the duration of the session. Storage in log files is done to ensure the functionality of the website. The concerned to the Optimization of the website and the satisfaction of the information technical systems. There is no storage of this data with other personal data. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DS-GMO. "