Privacy Notice and Information Regarding
Any Consents You Have Granted Us
In our capacity of a controller, in
accordance with the provisions of the data protection laws, allow us to inform
you below on how we process your personal data.
I. The term “Personal Data” and other key
terms
Personal data, in simple terms, is all
information relating to you personally as the data subject. Provisions on what
the term "personal data" means and what other terms that are
essential for the following data protection information shall mean, can be
found in Article 4 of the GDPR (General Data Protection Regulation).
II. Name and contact details of the
Controller
Controller, in simple terms, means the one
who, alone or jointly with others, decides on the purposes and means of the
processing of personal data. You can find the name and the contact details of
the Controller in our imprint.
III. Purposes of processing your Personal
Data; Legal basis for the processing
We process your personal data as part of
our operations for the following purposes in accordance with the respective
legal basis, particularly mentioned each time.
1. In order to protect our legitimate
interest in keeping our website running properly, in providing the users with
user-friendly functions to the maximum possible extent and in analyzing the use
of our website, your personal data is processed in accordance with Article 6
(1) (f) of the GDPR.
2. For the purpose of taking preliminary
actions before entering into a contract, which are based on a request received
from you, your personal data is processed in accordance with Article 6 (1) (b)
of the GDPR.
3. In order to protect our legitimate
interest in responding to requests and taking any other actions based on your
request, your personal data is processed in accordance with Article 6 (1) (f)
of the GDPR.
4. In order to perform a contract to which
you are a party, your personal data is processed in accordance with Article 6
(1) (b) of the GDPR.
5. To allow us to take actions for the
advertising purposes, your personal data is processed either upon your consent
in accordance with Article 6 (1) (a) of the GDPR, or in accordance with Article
6 (1) (f) of the GDPR.
6. In order to fulfill legal obligations to
which we are subject, your personal data is processed in accordance with
Article 6 (1) (c) of the GDPR.
7. In order to protect our legitimate
interest in enforcing our rights and defending against claims that have been
made against us, your personal data is processed in accordance with Article 6
(1) (f) of the GDPR.
Our systems are secured by
state-of-the-art technical and organizational tools to protect your personal
information from unauthorized access, unauthorized alteration or disclosure,
loss or destruction.
For information on the processing of your
personal data for each individual processing purpose, please refer to the
relevant additional notes in this Privacy Notice.
IV. Disclosure of your Personal Data to
third parties; Categories of recipients of your Personal Data
If deemed necessary to achieve the purpose
of processing of your personal data, we disclose your personal data to third
parties to the extent permitted by law. Detailed information on the disclosure
of your personal data to third parties for each processing purpose can be found
in the relevant additional notes contained in this Privacy Notice. In cases of
disclosure of your personal data to third parties, the amount of data disclosed
is restricted to a bare minimum.
V. Scope of processing of your Personal
Data for each processing purpose
Please find below detailed information on
the processing of your personal data for various processing purposes.
Your personal data will be deleted if it
is no longer needed for the processing for the respective purpose unless we are
allowed to continue processing the data for another processing purpose to the
extent permitted by law and according to the information contained in this
Privacy Notice.
1. Use of our website for informational purposes
If you visit our website without providing
us with information, we will only process that portion of your personal data
that your browser transfers to our server. It includes the following data that
is required, due to technical reasons, in order to present you our website
properly and to ensure stability and security of:
- the page you have called up,
- the date and time of the request,
- the transferred amount of data,
- the source or reference from which you have entered our page,
- the browser you are using,
- the operating system you are using,
- your IP address.
Your personal data is processed in
accordance with Article 6 (1) (f) of the GDPR in order to protect our
legitimate interest in keeping our website running properly, in providing the
users with user-friendly functions to the maximum possible extent and in
analyzing the use of our website.
Your personal data will be deleted after 6
months unless it is still needed for the assertion of rights or the enforcement
of claims due to actions against the proper operation of our website. In this
case, the data will be deleted immediately after completion of the
corresponding procedure.
You are not obliged to provide us with
your personal data. However, if your personal data is not provided, this would
mean that you would not be able to display the contents of our website.
2. Processing of requests
If you contact us with a request or a
matter of concern, we will process personal data and information/documents you
have provided us with. Regardless of the way in which you submit your request
or matter of concern to us, these may include:
- Date and time of contact,
- Name details;
- Contact details;
- Details of the request/matter of concern;
- Submitted information/documents.
The processing of your personal data and
the information/documents you have provided us is based – depending on the
contents of your request or your matter of concern – on your consent in
accordance with Article 6 (1) (a) of the GDPR for answering your request, or in
accordance with Article 6 (1) (b) of the GDPR for taking preliminary actions
before entering into a contract, or in accordance with Article 6 (1) (b) of the
GDPR for performing a contract to which you are a party, or in accordance with
Article 6 (1) (f) of the GDPR in order to protect our legitimate interest in
answering requests/matters of concern and taking other measures in connection
with the processing of requests/matters of concerns.
Insofar as necessary for the processing of
your request/matter of concern, we disclose your personal data to third parties
to the extent permitted by law. If your personal data is disclosed to third
parties, the amount of data disclosed is restricted to a bare minimum.
Your personal data will be deleted if your
request/matter of concern is resolved, however no earlier than after expiry of
the statutory retention periods of 6 or 10 years under the tax and commercial
laws unless we are allowed to continue processing the data for another purpose
to the extent permitted by law and according to the information contained in
this Privacy Notice.
You are not obliged to provide us with
your personal data. However, if your personal data is not provided, this would
mean that we cannot process your request or your matter of concern.
3. Performance of contracts
If you provide us with your personal data
for the purpose of concluding a contract or in connection with a contract, we
will process the data you have provided us with for performing the contract.
These include your customer data (for example, your name and address) and
information regarding the contract (such as details on the products which are
the subject matter of the contract as well as payment and delivery details).
Your personal data will be processed in
accordance with Article 6 (1) (b) of the GDPR for performing a contract to
which you are a party.
Insofar as necessary for the performance
of a contract with you, we disclose your personal data to third parties to the
extent permitted by law. This data disclosure is made to the service providers
involved in the performance of the contract. These are providers of the
processing tools we use. These also include transport service providers and
payment service providers responsible for the payment matters.
As part of the processing of the shipment,
we transmit your data (name, address, if applicable e-mail address and / or
mobile phone number) as well as other, shipment-related data to our shipping
partner DPD Deutschland GmbH on the basis of the EU General Data Protection Regulation
Art. 6 para 1 f. You can contradict the transmission of additional information,
such as e-mail or mobile phone number at our site or directly at DPD under link
widerspruch_predictbenachrichtigung@dpd.de or at any package information via
link at any time.
If you use PayPal as your payment service
provider for the processing of your payment transactions, we expressly point
out that the PayPal Privacy Policy applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
If your personal data is disclosed to
third parties, the amount of data disclosed is restricted to a bare minimum.
Your personal data will be deleted after
expiry of the statutory retention periods of 6 or 10 years under the tax and
commercial laws unless we are allowed to continue processing the data for
another purpose to the extent permitted by law and in accordance with the
information contained in this Privacy Notice.
In order to enter into a contract with us
you should provide us with your personal data. You are not obliged to provide
us with your personal data. However, if your personal data is not provided,
this would mean that we cannot enter into a contract with you.
4. Newsletter advertising
When you sign up for our newsletter, we
will process the email address you have provided us with - and if you provide
us with other personal data – we will also process it to send you information
about our offers via email. Nevertheless, your email address is the only
obligatory data to be provided. If you provide us with further personal data at
your own free will, we will process this data, if necessary, to address you
personally in the newsletter.
If you subscribe to our newsletter, you
hereby grant your consent with the following content: "I hereby agree to
be informed via email about interesting offers, and therefore, I hereby grant
my consent to the processing of my email address and the other personal data I
have provided you with for the purposes of sending me your newsletter. I can
revoke this consent at any time and without stating reasons with effect for the
future. The lawfulness of the processing carried out until revocation remains
unaffected in case of revocation."
The processing of your personal data is
based on granting your consent regarding this matter in accordance with Article
6 (1) (a) of the GDPR.
You can revoke your consent at any time
and without stating reasons with effect for the future. For this purpose,
sending a corresponding message to the person in charge, whose contact details
you can find under the details of the Controller, shall be deemed sufficient.
The lawfulness of the processing carried out until revocation remains unaffected
in case of revocation.
If you revoke your consent or unsubscribe
from our newsletter, we will immediately delete your email address and any
other data you have provided us with unless we are allowed to continue using
the data for another processing purpose to the extent permitted by law and
according to the information contained in this Privacy Notice.
To receive our newsletter, you should
provide us at least with your email address. You are not obliged to provide us
with your email address. However, if your email address is not provided, this
would mean that you would not be able to subscribe to our newsletter.
5. Fulfillment of legal obligations to
which we are subject
We process your personal data to fulfill
legal obligations to which we are subject to the extent permitted by law.
In order to fulfill legal obligations to
which we are subject, your personal data is processed in accordance with
Article 6 (1) (c) of the GDPR.
Insofar as this is necessary for the fulfillment of legal obligations to which
we are subject, we transfer your personal data to third parties to the extent
permitted by law. In cases of disclosure of your personal data to third
parties, the amount of data disclosed is restricted to a bare minimum.
Your personal information will be erased
if it is no longer needed to fulfill any of the legal obligations to which we
are subject, unless we may continue processing the data for another processing
purpose to the extent permitted by law and in accordance with the information
contained in this Privacy Notice.
6. Use of cookies
We use cookies on our website. These are
tiny files that are stored on your device and through which specific
information is disclosed to us. The use of cookies enables you to use specific
functionalities and make our offer more user-friendly in all aspects.
Some of the cookies we use are deleted
after the end of the browser session, i.e. after closing your browser
(so-called session cookies). Other cookies remain on your device even after the
end of the browser session, i.e. after closing your browser, and allow us or
our affiliate (third-party cookies) to recognize you on your next visit to our
website (so-called persistent cookies).
Some of the cookies we use are required,
due to technical reasons, in order to enable you to use specific features. This
applies, for example, to the storage of entries in connection with the use of
the shopping cart function. Your personal data is processed in accordance with
Article 6 (1) (b) of the GDPR for taking preliminary actions before entering
into a contract, which are based on your request as a data subject, or in
accordance with Article 6 (1) (b) of the GDPR for performing a contract to
which you are a party, or in accordance with Article 6 (1) (f) of the GDPR for
the purpose of protecting our legitimate interest in providing functionalities
that are user-friendly to the maximum possible content. Insofar as we or our
partner companies use cookies for the purposes of measuring the coverage or for
marketing purposes, you can find detailed information on this subject matter,
if applicable, in the relevant additional notes contained in this Privacy
Notice.
You may prevent the cookies from being
stored by making the corresponding settings in your browser software. Stored
cookies can be deleted via the corresponding settings. If necessary, please
refer to the program help for the browser you are using to find out how the
corresponding settings can be made. We point out, however, that in this case
you may not be able to use all the features of our website to the full extent.
For example, we would like to refer you to the information regarding the
following popular browsers:
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
A general objection to the use of cookies
used for online marketing purposes can be declared for many of the services,
especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/.
7. Use of Google Analytics
On our website, we use Google Analytics, a
web analysis service provided by Google Ireland Limited, Gordon House, Barrow
Street, Dublin 4, Ireland ("Google").
Your personal data is processed to this
extent in accordance with Article 6 (1) (f) of the GDPR in order to protect our
legitimate interest in analyzing the use of our website.
Google Analytics uses so-called
"cookies". These are text files that are stored on your computer and
enable us to conduct an analysis of how you use our website. The information
generated by the cookies on how you use the website will normally be transmitted
to a Google server in the US, where it is stored.
We point out in this context that the Google Analytics on our website has been
extended by "anonymizeIp" code. This guarantees an anonymous
collection of IP addresses (so-called IP masking), which ensures that your IP
address will be abbreviated by Google within the member states of the European
Union or within other member states to the Agreement on the European Economic
Area in order to exclude a personal reference. Only in exceptional cases, the
full IP address will be transmitted to the Google server in the US, where it is
abbreviated. Google will use this information on our behalf to evaluate your
use of our website, to compile reports on website activities and to provide
further services associated with the website use and the internet use to us as
the website operators. The IP address transmitted by your browser in the
context of Google Analytics will not be linked to other data retrieved by
Google.
You may prevent the cookies from being
stored by making the corresponding settings in your browser software. Stored
cookies can be deleted via the corresponding settings. If necessary, please
refer to the program help for the browser you are using to find out how the
corresponding settings can be made. However, we should point out that in such
case you might not be able to use the full functionalities of our website.
In addition, you can prevent Google from
collecting the data generated by cookies and related to your use of our website
(including your IP address) and prevent the processing of this data by Google
by downloading and installing the browser plug-in available under the following
link. The updated link is as follows: https://tools.google.com/dlpage/gaoptout?hl=en
More information regarding the use of data
by Google and the settings and opt-out options can be found in the Google
Privacy Policy https://policies.google.com/technologies/ads and in the Google
ads blocker settings: https://adssettings.google.com/authenticated.
Google has signed up for the Privacy
Shield Agreement, ensuring compliance with European data protection law: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
8. Enforcement of our rights and defense
against claims
If necessary, we process your personal
data in order to protect our legitimate interest in enforcing our rights and in
defending against claims that have been made against us.
In this case, your personal data is
processed in accordance with Article 6 (1) (f) of the GDPR.
Insofar as necessary to protect our
legitimate interests, we disclose your personal data to third parties to the
extent permitted by law. This data disclosure is made to debt collection
service providers involved or to our lawyers.
In cases of disclosure of your personal data to third parties, the amount of
data disclosed is restricted to a bare minimum.
Your personal data will be deleted after
closing the proceedings, however no earlier than after expiry of the statutory
retention periods of 6 or 10 years under the tax and commercial laws unless we
are allowed to continue processing the data for another purpose to the extent
permitted by law and according to the information contained in this Privacy
Notice.
VI. Period of storage and/or criteria for
determining the duration of the period
Your personal data will be deleted if it
is no longer needed for processing for the respective processing purpose unless
we are allowed to continue processing the data for another processing purpose
to the extent permitted by law and according to the information contained in
this Privacy Notice. For information on the duration of the period for which
your personal information is stored or on the criteria for determining that
duration, please refer to the information contained in this Privacy Notice on
how your personal data is processed for each processing purpose.
VII. Your rights
1. Overview
In order to ensure a fair and transparent
processing of personal data, you as the data subject have the following rights
according to the data protection laws:
Right to information under Article 15 of
the GDPR,
Right of correction under Article 16 of
the GDPR,
Right of cancellation under Article 17 of
the GDPR,
Right to restriction of processing under
Article 18 of the GDPR,
Right to data portability under Article 20
of the GDPR,
Right to revoke consent at any time
according to Article 7 (3) of the GDPR,
Right to object to the processing
according to Article 21 of the GDPR, about which we inform you separately
below,
and the right to lodge a complaint with a
supervisory authority according to Article 77 of the GDPR, about which we
inform you separately below.
2. Your right to object to the processing
PROCESSING OF PERSONAL DATA SHALL BE
ADMISSIBLE WHERE THE PROCESSING IS NECESSARY IN ORDER TO PROTECT THE LEGITIMATE
INTERESTS OF THE CONTROLLER OR A THIRD PARTY, EXCEPT WHERE SUCH INTERESTS ARE
OVERRIDDEN BY THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA
SUBJECT, WHICH REQUIRE PROTECTION OF PERSONAL DATA, IN PARTICULAR WHERE THE
DATA SUBJECT IS A CHILD, ARTICLE 6 (1) (F).
YOU, AS A PARTY CONCERNED, HAVE THE RIGHT,
FOR REASONS ARISING OUT OF YOUR SPECIAL SITUATION, TO OBJECT TO THE PROCESSING
OF YOUR PERSONAL DATA, WHICH IS CARRIED OUT IN ACCORDANCE WITH ARTICLE 6 (1)
(F) OF THE GDPR AT ANY TIME; THIS SHALL ALSO APPLY TO THE PROFILING BASED ON
THESE PROVISIONS.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE
SHALL NO LONGER PROCESS YOUR PERSONAL DATA, EXCEPT WHERE WE ARE ABLE TO PROVIDE
COMPELLING LEGITIMATE REASONS FOR THE PROCESSING, WHICH OVERRIDE YOUR
INTERESTS, RIGHTS AND FREEDOMS AS A DATA SUBJECT, OR WHERE THE PROCESSING IS
USED FOR ESTABLISHING, EXERCISING OR DEFENDING THE LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA TO DO A
DIRECT ADVERTISING, YOU AS A DATA SUBJECT HAVE THE RIGHT, AT ANY TIME, TO
OBJECT TO THE PROCESSING OF YOUR RESPECTIVE PERSONAL DATA FOR THE PURPOSES OF
SUCH ADVERTISING; THIS SHALL ALSO APPLY TO PROFILING, IF IT IS ASSOCIATED WITH
SUCH DIRECT ADVERTISING. IF YOU, AS A DATA SUBJECT, OBJECT TO THE PROCESSING
FOR THE PURPOSES OF DIRECT ADVERTISING, YOUR PERSONAL DATA WILL NO LONGER BE
PROCESSED FOR THIS PURPOSE.
3. Your right to lodge a complaint with a
supervisory authority
As a data subject, without prejudice to
any other administrative or judicial remedy, you have the right to lodge a
complaint with a supervisory authority, in particular in the Member State of
your domicile, in the place of work or place of alleged infringement, if you
believe that the processing of your personal data violates the GDPR terms and
conditions.
VIII. Information on the ground for the
provision of your Personal Data and possible consequences of your failure to
provide such data
To the extent necessary to ensure fair and
transparent processing, you will find information on the ground for the
provision of your personal data and on possible consequences of non-provision
of such data attached to the information on the processing of your personal
data for each processing purpose.