Privacy

Privacy Statement

and Information On Consent You May Have Given Us

As Controller in the sense of the data protection regulations we would like to herewith inform you about the processing of your personal data.

 

I.            1.  The Term Personal Data And Other Important Terms

In simple terms, personal data is all information regarding you personally as the data subject. The determination of what “personal data” means and what other important terms mean for the following information on data protection can be found in Art. 4 GDPR (General Data Protection Regulation).

 

II.           2. Name And Contact Data Of The Controller; Contact Data Of The Data Protection Officer

 In simple terms, the Controller is the person who, solely or together with others, decides on the purposes and means of processing personal data. Name and contact data of the Controller (and those of the data protection officer if there is one) can be found in our provider identification/imprint.

 

III.          3. Purpose Of The Processing Of Your Personal Data; Legal Basis For Processing

We process your personal data within the scope of our activities and for the purposes listed below in accordance with the corresponding legal foundations mentioned.

 

1.    To complete pre-contractual measures arising from your enquiry your personal data is processed on the basis of your consent pursuant to Art. 6 (1) point (a) or Art. 6(1), point (b) GDPR.

2.    To protect our legitimate interest in replying to queries and in carrying out other measures arising from your enquiry, your personal data is processed on the basis of your consent pursuant to Art. 6(1), point (a) or Art. 6(1), point (f) GDPR.

3.    To fulfil your contract with us your personal data is processed on the basis of your consent pursuant to Art. 6 (1) point (a) or Art. 6(1), point (b) GDPR.

To carry out advertising measures your personal data is processed either on the basis of your consent pursuant to Art. 6(1), point (a) or Art. 6(1), point (f) GDPR.

5.    To protect our legitimate interests in maintaining the proper operation of our website, in the provision of the most user-friendly functions and in the analysis of usage of our website your personal data is processed on the basis of Art. 6(1), point (f) GDPR.

6.    To protect our legitimate interests in the enforcement of our rights and in the defence of claims made against us your personal data is processed on the basis of Art. 6(1), point (f) GDPR.

Our systems are technically up-to-date and are secured by technical and organisational measures to protect your data from access, alteration or disclosure by unauthorised parties and from loss or destruction.


Information on the processing of your personal data and the individual processing purposes can be found in the respective additional information provided in this privacy statement.

 

I.                Transfer Of Your Personal Data To Third Parties; Categories Of Recipients Of Your Personal Data

If necessary for the purpose of processing your personal data we may transfer your personal data, within the statutory provisions, to third parties. Detailed information on the transfer of your personal data to third parties and the specific processing purposes can be found in the respective additional information provided in this privacy statement. In the event of your personal data being transferred to third parties the scope of the transferred data is kept to the required minimum.

 

II.            Scope Of The Processing Of Your Personal Data For The Specific Processing Purposes

In the following, we would like to inform you about the processing of your personal data for the different purposes.

Your personal data is erased when it is no longer required for the specific purpose of processing, unless we are permitted to keep processing the data for another purpose within the scope of the statutory provisions and in accordance with the information provided in this privacy statement.

 

1.    Gathering Information On Our Website

If you visit our website without transferring information to us we only process your personal data which is transferred by your browser to our server. This relates to the following data which is technically necessary to display our website and to guarantee its stability and security:

-        the page you have accessed

-        date and time of the enquiry

-        amount of data transferred

-        source or link you accessed our website from

-        browser you use

-        operating system you use

-        your IP address

Your personal data is processed on the basis of Art. 6(1), point (f) GDPR to protect our legitimate interests in maintaining the proper operation of our website.

Your personal data is erased after 6 months unless they continue to be needed for the assertion of rights or for the enforcement of claims based on measures against the proper operation of our website. In this event erasure will be carried out immediately after conclusion of the respective proceedings.

 

2.    Processing Enquiries

 

If you approach us with an enquiry or an issue we will process your personal data and information/documents you provided us with. Irrespective of how you raise your enquiry or issue, this includes:

-        date and time of contact

-        name data

-        contact data

-        data on enquiry/issue

-        information/documents provided

Your personal data and the information/documents provided are processed -depending on the content of your enquiry or issue - on the basis of your consent pursuant to Art. 6(1), point (a) GDPR to answer your enquiry, or pursuant to Art.6(1), point (b) GDPR to carry-out pre-contractual measures, or pursuant to Art. 6(1), point (b) GDPR to fulfil the contract you have signed, or pursuant to Art. 6(1), point (f) GDPR to protect our legitimate interest in the answering of queries/issues and the execution of other measures in connection with the answering on queries/issues.

As far as we have provided a contact form and you use it to contact us you are thus providing your consent to the following content, which the contact form also informs you of:

“I agree to the processing of my email address and the additional personal data provided for the purpose of answering my message. I can withdraw this consent with future effect at any time and without giving reasons. In the event of withdrawal, the lawfulness of processing which was already carried out before withdrawal remains unaffected.”

You can withdraw your consent with future effect at any time and without providing reasons. You only need to send a message to the Controller; contact details can be found in the information on the Controller. In the event of withdrawal, the lawfulness of processing which was already carried out before withdrawal remains unaffected.

If necessary for the purpose of answering your enquiry/issue we may transfer your personal data, within the statutory provisions, to third parties. In the event of your personal data being transferred to third parties the scope of the transferred data is kept to the required minimum.

Your personal data is erased when your enquiry/issue was solved, unless we are permitted to keep the data for another processing purpose within the scope of the statutory provisions and in accordance with the information provided in this privacy statement.

 

3.    Fulfilling Contracts

 

If you transfer your personal data to us to enter into contract with us or in connection with the setting up of a customer account, we will process your personal data to fulfil the contract.  

This is your customer data (e.g. your name and address) and the contractual data (e.g. information on the contracted products as well as information on payment and shipping).

 

Your personal data is processed on the basis of Art. 6(1), point (b) GDPR to fulfil the contract you are party to.

 

We will transfer your personal data to third parties within the framework of the statutory provisions if it is required in order to fulfil the contract you are party to. Transfer is to the service providers involved within the scope of implementing the contract. These are the providers of the processing tools we use. Furthermore, the companies contracted for shipping. Additionally, these are the payment service providers contracted by us to handle payments.

 

If the payment service provider PayPal is used for financial transactions, we would like to explicitly state that the PayPal Privacy Statement is effective for all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

 

In the event of transfer of your personal data to third parties the scope of the transferred data is restricted to the required minimum.

 

Your personal data are erased upon expiry of the retention periods of 6 or 10 years as defined in fiscal and commercial law, unless we are permitted to keep processing your data for another purpose within the scope of the statutory provisions and in accordance with the information in this privacy statement.

 

1.    Advertising in Newsletters

If you subscribe to our newsletter we process your email address and if you transfer additional personal data we process these too, to email you information on our offers. Therefore, only the provision of your email address is compulsory. As far as you volunteer us additional personal data we also process these to address you personally in our newsletter.

When you subscribe to our newsletter you consent to the following content: “I agree to being sent interesting offers by email and therefore agree to the processing of my email address and the additional personal data provided for the purpose of sending me the newsletter. I can withdraw this consent with future effect at any time and without giving reasons. In the event of withdrawal, the lawfulness of processing which was already carried out before withdrawal remains unaffected.”

Subscription to our newsletter involves the so-called double-opt-in-procedure. This means that you will receive an email after subscribing with a message about your subscription to the newsletter and a request to confirm subscription. Your confirmation is necessary to document the consent required to send the newsletter and to recognise subscriptions by third-party email addresses. In connection with the subscription to the newsletter and the confirmation, the IP address and the date and time are logged to provide evidence of consent, in accordance with statutory provisions.

Your personal data is processed on the basis of your consent pursuant to Art. 6(1), point (a) GDPR.

 

You can withdraw your consent with future effect at any time and without providing reasons. You only need to send a message to the Controller; contact details can be found in the  

information on the Controller. In the event of withdrawal, the lawfulness of processing which was already carried out before withdrawal remains unaffected.

If you withdraw your consent or unsubscribe from our newsletter, your email address and any additional personal data are immediately erased unless we are permitted to keep the data for another processing purpose within the scope of the statutory provisions and in accordance with the information provided in this privacy statement.

 

1.    Postal Advertising

We process your personal data regarding your first and last name and address to inform you of our offers by post, if applicable.

Your personal data is processed on the basis of Art. 6(1), point (f) GDPR to protect our legitimate interest in carrying out postal advertising.

 

You may withdraw your consent to the processing of your data for postal advertising at any time. You only need to send a message to the Controller; contact details can be found in the information on the Controller.

If you object to your data being processed for the purpose of advertising by post, your personal data, regarding first and last name and address, will be immediately erased, unless we are permitted to keep the data for another processing purpose within the scope of the statutory provisions and in accordance with the information provided in this privacy statement.

2.    Using Cookies

On our website we use so-called cookies. These are small files which are stored on your device and which transfer certain information to us. Using cookies serves to enable you to use specific functions and to make our offer generally more user-friendly.

Some of the cookies we use are deleted after you have ended your browser session, thus after closing your browser (so-called session cookies). Other cookies remain on your device after you have ended your browser session therefore after closing your browser and enable us or our partner companies (third party cookies) to recognise you on your next visit to our website (so-called persistent cookies).

Some of the cookies we use are technically required to enable you to use specific functions. For example, this is the case when data entries are stored when the shopping basket function is used. Your personal data are processed on the basis of Art. 6(1), point (b) GDPR to carry out pre-contractual measures arising from your enquiry as data subject or on the basis of Art. 6(1), point (b) GDPR to fulfil a contract you are party to or on the basis of Art. 6(1), point (f) GDPR to protect our legitimate interest in the provision of functions which are as user-friendly as possible. In so far as we or our partner companies use cookies for audience measurement or for marketing purposes, we have provided detailed information in the respective additional information within the scope of this privacy statement.

 

You can change the settings in your browser software to prevent cookies from being stored. Please consult the programme support for your browser on how to make the respective adjustment. We would like to draw your attention to the fact that you may not be able to fully use all the functions of our website in this case. You may consult the information on the following standard browsers:

Chrome:  https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Firefox:  https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Internet Explorer:  https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Safari:  https://support.apple.com/kb/ph21411?locale=de_DE

1.    Enforcement Of Our Rights And Defence Of Claims Made Against Us

If necessary, we process your personal data to protect our legitimate interest in enforcing our rights and defending ourselves from claims.

In this event your personal data is processed on the basis of Art. 6(1), point (f) GDPR.

In as far as this is necessary for the protection of our legitimate interests we transfer your personal data to third parties within the scope of the statutory provisions. This transfer is either to the collection service providers involved or to our lawyers.

In the event of transfer of your personal data to third parties the scope of the transferred data is restricted to the required minimum.

 

Your personal data is erased upon conclusion of the proceedings or upon expiry of the retention periods of 6 or 10 years at the earliest as defined in fiscal and commercial law, unless we are permitted to keep processing your data for another purpose within the scope of the statutory provisions and in accordance with the information in this privacy statement.

 

I.              Time Limit For The Storage Of Your Personal Data Or Criteria For Determining The Time Limit

 

Your personal data is erased when it is no longer required for the respective processing purpose, unless we are permitted to keep the data for another processing purpose within the scope of the statutory provisions and in accordance with the information provided in this privacy statement. Information on the time period your personal data is stored for and on the criteria for determining this time period can be found in the information on the processing of your personal data for the individual processing purposes in this privacy statement.

 

 

II.            Your Rights

 

1.    Overview

 

To ensure that personal data is processed fairly and transparently you, as the data subject, have the following rights pursuant to the data protection provisions:

 

The right of access pursuant to Article 15 GDPR,

 

The right to rectification pursuant to Article 16 GDPR,

The right to erasure pursuant to Article 17 GDPR,

The right to restriction of processing pursuant to Article 18 GDPR

The right to data portability pursuant to Article 20 GDPR,

The right to withdraw consent at any time pursuant to Article 7(3) GDPR,

The right to object to processing pursuant to Article 21 GDPR, of which we will separately inform you in the following

The right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR of which we will separately inform you in the following.


2.    Your Right To Object To Processing

THE PROCESSING OF PERSONAL DATA IS PERMITTED IF THE PROCESSING IS NECESSARY FOR THE PURPOSES OF THE LEGITIMATE INTERESTS PURSUED BY THE CONTROLLER OR BY A THIRD PARTY, EXCEPT WHERE SUCH INTERESTS ARE OVERRIDDEN BY THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA SUBJECT WHICH REQUIRE PROTECTION OF PERSONAL DATA, IN PARTICULAR WHERE THE DATA SUBJECT IS A CHILD, ART 6(1), POINT (F) GDPR.

YOU, AS THE DATA SUBJECT SHALL HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH IS BASED ON ARTICLE 6(1), POINT (F); INCLUDING PROFILING BASED ON THOSE PROVISIONS.

IF YOU EXERCISE YOUR RIGHT TO OBJECT WE SHALL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS AS THE DATA SUBJECT OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU SHALL HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING, WHICH INCLUDES PROFILING IF IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU AS DATA SUBJECT OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES, YOUR PERSONAL DATA SHALL NO LONGER BE PROCESSED FOR SUCH PURPOSES.

3.    Your Right To Lodge A Complaint With The Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you as data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the provisions of the GDPR.

 

I.              Information About The Requirements To Access Your Personal Data

If you wish to enter into contract with us or if you send us an enquiry we require your personal data to conclude a contract or to process your enquiry. You are not obliged to provide your personal data. However, if you do not provide your personal data we cannot enter into contract with you or answer your enquiry.