Data protection declaration

Data protection declaration
Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.
“Personal data” is any information relating to an identified or identifiable natural person.

Server log files
You can use our websites without submitting personal data.
Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1) f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services.

Contact

Responsible
Contact us on request. The contact details of the person responsible for data processing can be found in our imprint.

Unsolicited contact via email
If you initiate business contact with us via e-mail, we only collect your personal data (name, e-mail address, message text) to the extent that you have provided. The data processing serves to process and answer your contact request.
If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interests, preparation of offers) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR based on our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to do so at any time in accordance with Art. to object to processing based on the GDPR relating to your personal data.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent that you provide. The data processing serves the purpose of establishing contact. By submitting your message, you consent to the processing of the transmitted data. Processing is based on Art. 6 Para. 1 lit. a GDPR with your consent.
You can revoke your consent at any time by notifying us without affecting the lawfulness of the processing carried out based on your consent until you revoke it. We only use your email address to process your request. Your data will then be deleted unless you have consented to further processing and use.
WhatsApp Business
If you contact us via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland; “WhatsApp”). If you have your stay outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves to process and answer your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, if provided your name and other data to the extent you have provided. We use a mobile device for the service, the address book of which only stores data from users who have contacted us via WhatsApp. There will be no transfer of personal data to WhatsApp without your consent to WhatsApp.
Your data is transmitted from WhatsApp to Facebook Inc.’s server in the USA. Both WhatsApp and Facebook have been certified according to the US-EU data protection agreement “Privacy Shield” and thus committed to comply with the European data protection guidelines.
If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interests, preparation of offers) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in providing quick and easy contact and in answering your request.
In this case, you have the right, for reasons that arise from your particular situation, at any time to refer to Art. 6 Para. 1 lit. to object to processing based on the GDPR relating to your personal data.
We only use your personal data to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Further information on terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.

Customer account      Orders      

Customer account
When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.

Collection, processing, and transfer of personal data in orders
When you submit an order we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of Article 6(1) b) GDPR and is required for the fulfilment of a contract with you.
Your data is transferred here for example to the shipping companies and dropshipping providers, payment service providers, service providers for handling the order and IT service providers that you have selected. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum. 

Reviews

Data collection when you post a comment
When you comment on an article or a contribution, we collect your personal data (name, email address, comment text) only in the scope provided by you. The processing serves to allow you to comment and to display comments. By submitting the comment you agree to the processing of the transmitted data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. You personal data will then be deleted.

On publication of your comment only the name you have entered will be published.

On submission of your comment your IP address will also be saved in order to prevent misuse of the comment function and to ensure the security of our IT systems. By submitting the comment you agree to the processing of the transmitted data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your IP address will then be deleted.

Shop information customer rating
For our website we use the rating tool “shopauskunft.de” from the dealers’ association Management AG (Torgauer Straße 233 B, 04347 Leipzig; “Shopauskunft”).
After placing your order, we would like to ask you to rate and comment on your purchase from us. For this purpose, we will write to you by e-mail, using the technical system “Legal Assessment Request (RBA)”. We process the data for your order (order number / invoice number, purchase value and shipping costs) and your email address.
Processing is based on Art. 6 Para. 1 lit. a GDPR with your consent, provided that you have expressly consented to the transfer of your data and the receipt of the evaluation request.
You can revoke your consent at any time using the corresponding link in the e-mail or by sending us a message, without affecting the legality of the processing carried out based on your consent until you revoke it.
Further information on data protection when using shop information can be found at:

https://www.shopauskunft.de/datenschutz.

Shop information widget
The shop information widget is integrated on our website. This serves the purpose of displaying the number and result of our ratings received so far via shop information and for advertising.
To display the widget, it is technically necessary to transmit usage data through your Internet browser to the Shopauskunft server and to save it in log data (so-called server log files) for 7 days. These stored data include the name and URL of the file accessed, date and time of access, the IP address of the requesting computer, website from which access is made (referrer URL), the browser used and, if applicable, the operating system of yours Computer and the name of your access provider.
Processing is based on Art. 6 Para. 1 lit. f GDPR based on our overriding legitimate interest in advertising our offers by displaying the customer reviews already received. This data is not stored together with other personal data.

Shipping service provider

Forwarding of the email address to shipping companies for information about the shipping status
We will forward your email address to the transport company as part of the contract, provided you have expressly agreed to this in the ordering process. The purpose of the transfer is to inform you of the shipping status by email. Processing is based on Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company without affecting the legality of the processing carried out based on your consent until the revocation.

Payment service provider

Using PayPal
All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
 

Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. If a user calls up a website, a cookie can be saved on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is called up again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide individually whether to accept them and prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.

Technically necessary cookies
Unless otherwise stated in the data protection declaration below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.

Cookies or comparable technologies are used on the basis of Section 15 (3) sentence 1 TMG. Your personal data is processed on the basis of Art. 6 Para. 1 lit. f GDPR based on our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.

You have the right for reasons arising from your particular situation at any time to Art. 6 Para. 1 lit. to object to processing based on the GDPR relating to your personal data.

Plug-ins and other

Use of Google reCAPTCHA
We use the reCAPTCHA service from Google LLC on our website (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”).
If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws. The purpose of the query is to differentiate between the input by a person or by automated, mechanical processing. Your entry will be transmitted to Google and used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and, if necessary, also transmitted to the USA. Google has certified itself according to the US-EU data protection agreement “Privacy Shield” and thus committed to comply with the European data protection guidelines.

Processing is based on Art. 6 Para. 1 lit. f GDPR for the legitimate interest of protecting our website from automated spying, misuse and SPAM. You have the right for reasons arising from your particular situation at any time to Art. 6 Para. 1 lit. to object to processing based on the GDPR relating to your personal data.

Further information on Google reCAPTCHA and the associated data protection declaration can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

 
Use of YouTube
We use the function to embed YouTube videos from Google Ireland Limited on our website (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”). YouTube is a partner of Google LLC (1600 Amphitheater Parkway, Mountain View, CA) 94043, USA; “Google”) affiliate.
The function displays videos stored on YouTube in an iFrame on the website. The option “Extended data protection mode” is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video will information about it be transmitted to YouTube and stored there. Your data may be transferred to the United States. Google has certified itself according to the US-EU data protection agreement “Privacy Shield” and thus committed to comply with the European data protection guidelines.
Data processing is based on Art. 6 Para. 1 lit. f GDPR from the legitimate interest in the needs-based and targeted design of our website. You have the right for reasons arising from your particular situation at any time to Art. 6 Para. 1 lit. to object to processing based on the GDPR relating to your personal data.
You can find more information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy in YouTube’s data protection information at https://www.youtube.com/t/privacy.

 

rights and storage duration

Duration of storage
After completion of the contract, the data will be stored for the duration of the warranty period, then taking legal, in particular tax and commercial, retention periods into account and then deleted after the deadline, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability.
In addition, you have the right to object to processing based on Article 6 (1) (f) GDPR and processing for direct marketing purposes in accordance with Article 21 (1) GDPR.

Right to lodge a complaint with the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

Right to object
The personal data processing listed here is based on our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR, you have the right to object to this processing at any time with future effect for reasons that arise from your particular situation.
After the objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If the personal data processing takes place for the purposes of direct advertising, you can object to this processing at any time by notifying us. After the objection has been made, we stop processing the data concerned for the purpose of direct advertising.

last update: 20.07.2020