Privacy policy and information on any consent you may have given
As the controller within the meaning of data protection regulations, we inform you below about the processing of your personal data by us.
I. The concept of personal data and other important terms
Put simply, personal data is all information that relates to you personally as the data subject. Provisions on what the term "personal data" means and what other terms important for the following data protection information mean can be found in Art. 4 of the GDPR (General Data Protection Regulation).
II. Name and contact details of the person responsible; contact details of the data protection officer
In simple terms, the controller is the person who, alone or jointly with others, decides on the purposes and means of processing personal data. The name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider information/legal notice.
III. Purposes of processing your personal data; legal basis for processing
We process your personal data as part of our activities for the purposes listed below in accordance with the legal bases stated in each case.
1. In order to carry out pre-contractual measures based on a request from you, your personal data will be processed on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (b) GDPR.
2. In order to safeguard our legitimate interest in answering inquiries and in carrying out other measures based on an inquiry from you, your personal data will be processed on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.
3. For the performance of a contract to which you are a party, your personal data will be processed on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (b) GDPR.
4. For the implementation of advertising measures, your personal data will be processed either on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.
5. In order to safeguard our legitimate interest in maintaining the proper operation of our website, in providing functions that are as user-friendly as possible and in analyzing the use of our website, your personal data is processed on the basis of Article 6 (1) (f) GDPR.
6. In order to protect our legitimate interest in enforcing our rights and in defending against claims directed against us, your personal data will be processed on the basis of Article 6 (1) (f) GDPR.
Our systems are secured by technical and organizational measures in accordance with the state of the art in order to protect your personal data from access, alteration or distribution by unauthorized persons as well as from loss and destruction.
Information on the processing of your personal data for the individual processing purposes can be found in the corresponding additional information in this data protection declaration.
IV. Transfer of your personal data to third parties; categories of recipients of your personal data
If this is necessary to achieve the purposes of processing your personal data, we will transmit your personal data to third parties within the framework of the legal requirements. Detailed information on the transmission of your personal data to third parties for the individual processing purposes can be found in the corresponding additional information in this data protection declaration. In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the minimum required.
V. Scope of processing of your personal data for the individual processing purposes
Below we will inform you in detail about the processing of your personal data for the various processing purposes.
Your personal data will be deleted when it is no longer required for processing for the respective processing purpose, unless we are permitted to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.
1. Use of our website for information purposes
If you visit our website without sending us any information, we only process the personal data that your browser sends to our server. This is the following data, which is technically necessary to display our website to you and to ensure stability and security:
Your personal data will be processed on the basis of Article 6 (1) (f) GDPR to protect our legitimate interest in maintaining the proper operation of our website.
Your personal data will be deleted after 6 months, unless it is still required to assert rights or enforce claims due to measures against the proper operation of our website. In this case, deletion will take place immediately after completion of the corresponding procedure.
2. Processing of inquiries
If you contact us with an inquiry or request, we will process the personal data and information/documents you send us. Regardless of how you send us your inquiry or request, this may include:
The processing of your personal data and the information/documents submitted is carried out - depending on the content of your inquiry or request - on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR to answer your inquiry or on the basis of Article 6 (1) (b) GDPR to carry out pre-contractual measures or on the basis of Article 6 (1) (b) GDPR for the performance of a contract to which you are a party or on the basis of Article 6 (1) (f) GDPR to safeguard our legitimate interest in answering inquiries/requests and in carrying out other measures in connection with the processing of inquiries/requests.
If we provide a contact form and you contact us via this contact form, by sending your message you consent to the following content, about which you will be informed separately in the contact form:
"I consent to the processing of my email address and the other personal data I have provided for the purpose of answering my message. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out up to the time of revocation remains unaffected in the event of revocation."
You can revoke your consent at any time and without giving reasons with effect for the future. To do so, simply notify the person responsible, whose contact details you can find in the information about the person responsible. The legality of the processing carried out up to the time of revocation remains unaffected in the event of revocation.
If this is necessary to process your inquiry/request, we will transmit your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the minimum required.
Your personal data will be deleted once your request/concern has been clarified, unless we are permitted to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.
3. Fulfillment of contracts
If you send us personal data for the purpose of concluding a contract or in connection with the creation of a customer account, we will process the data you send us for the purpose of processing the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. details of the products covered by the contract as well as payment and delivery information).
Your personal data will be processed on the basis of Article 6 (1) (b) GDPR for the performance of a contract to which you are a party.
If this is necessary for the performance of the contract with you, we will transmit your personal data to third parties within the framework of the legal requirements. This transmission takes place to the service providers involved in the contract processing. These are the providers of the processing tools we use. These are also the companies commissioned with the transport. Furthermore, these are the payment service providers commissioned with payment matters.
If you use the payment service provider PayPal to process payment transactions, we expressly point out that the PayPal privacy policy applies to all PayPal transactions:https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the minimum necessary.
Your personal data will be deleted after the tax and commercial retention periods of 6 or 10 years have expired, unless we are permitted to continue to process the data for another purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.
4. Advertising via newsletter
If you sign up for our newsletter, we will process the email address you provide - and if you provide other personal data, this too - in order to send you information about our offers by email. The only mandatory information is your email address. If you voluntarily provide other personal data, we may process this data in order to address you personally in the newsletter.
If you sign up for our newsletter, you give your consent with the following content: "I agree to be informed about interesting offers by email and therefore consent to the processing of my email address and the other personal data I have provided for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out up to the time of revocation remains unaffected in the event of revocation."
Registration for our newsletter is carried out using the so-called double opt-in procedure. This means: After registration, you will first receive an email with a notification of your registration for the newsletter, together with a request to confirm your registration. Your confirmation of registration is required in order to document the required consent to send the newsletter and to be able to recognize registrations to third-party email addresses. In connection with the registrations for the newsletter and the confirmations, the IP address as well as the date and time are logged in order to be able to prove the granting of consent in accordance with legal requirements if necessary.
Your personal data will be processed on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR.
You can revoke your consent at any time and without giving reasons with effect for the future. To do so, it is sufficient to notify the person responsible, whose contact details you can find in the information about the person responsible. The legality of the processing carried out up to the time of revocation remains unaffected in the event of revocation.
If you revoke your consent or unsubscribe from our newsletter, your email address and any other transmitted data will be deleted immediately, unless we are permitted to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.
5. Advertising by post
We process the personal data you provide, such as your first and last name and address, if necessary to send you information about our offers by post.
Your personal data will be processed on the basis of Article 6 (1) (f) GDPR to safeguard our legitimate interest in carrying out advertising measures by post.
You can object to the processing of your personal data for the purpose of carrying out advertising measures by post at any time. To do so, simply notify the controller accordingly; you can find the controller's contact details in the controller's information.
If you object to the processing of your personal data for the purpose of carrying out advertising measures by post, the personal data you have transmitted, including your first name, surname and address, will be deleted immediately, unless we are permitted to continue processing the data for another purpose within the framework of the statutory requirements and in accordance with the information in this data protection declaration.
6. Use of cookies
We use so-called cookies on our website. These are small files that are stored on your device and through which certain information is transmitted to us. The use of cookies serves to enable you to use certain functions and to make our offer more user-friendly overall.
Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device even after the end of the browser session, i.e. after you close your browser, and enable us or our partner companies (third-party cookies) to recognize you the next time you visit our website (so-called persistent cookies).
Some of the cookies we use are technically necessary to enable you to use certain functions. This is the case, for example, with regard to the storage of entries in connection with the use of the shopping cart function. Your personal data will be processed on the basis of Article 6 (1) (b) GDPR to carry out pre-contractual measures at your request as the data subject or on the basis of Article 6 (1) (b) GDPR for the performance of a contract to which you are a party or on the basis of Article 6 (1) (f) GDPR to safeguard our legitimate interest in providing the most user-friendly functions possible. If we or our partner companies use cookies for reach measurement purposes or for marketing purposes, you can find detailed information about this in the corresponding additional information in this data protection declaration.
You can prevent cookies from being saved by selecting the appropriate settings on your browser software. Please refer to the program help for the browser you are using to find out how to make the appropriate settings. However, we would like to point out that if you do this, you may not be able to use all the functions of our website to their full extent. For example, we refer to the information on the following common browsers:
Chrome:https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox:https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera:https://help.opera.com/de/latest/web-preferences/#cookies
Internet Explorer:https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Safari:https://support.apple.com/kb/ph21411?locale=en_US
7. Enforcement of our rights and defense against claims against us
If necessary, we will process your personal data to protect our legitimate interest in enforcing our rights and defending against claims directed against us.
In this case, your personal data will be processed on the basis of Article 6 (1) (f) GDPR.
If this is necessary to protect our legitimate interests, we will transmit your personal data to third parties within the framework of the legal requirements. This transmission takes place to the providers of debt collection services involved or to our lawyers.
In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the minimum necessary.
Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the tax and commercial retention periods of 6 or 10 years, unless we are permitted to continue to process the data for another purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.
VI. Period for which your personal data will be stored or criteria for determining this period
Your personal data will be deleted when it is no longer required for processing for the respective processing purpose, unless we are permitted to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration. Information on the period for which your personal data will be stored or on the criteria for determining this period can be found in the information on the processing of your personal data for the individual processing purposes in this data protection declaration.
VII. Your rights
1. Overview
In order to ensure fair and transparent processing of personal data, you as the data subject have the following rights in accordance with data protection regulations:
the right to information pursuant to Article 15 GDPR,
the right to rectification pursuant to Article 16 GDPR,
the right to erasure under Article 17 GDPR,
the right to restriction of processing pursuant to Article 18 GDPR,
the right to data portability according to Article 20 GDPR
the right to revoke consent given at any time in accordance with Art. 7 Para. 3 GDPR,
the right to object to processing pursuant to Article 21 GDPR, about which we will inform you separately below
and the right to lodge a complaint with the supervisory authority pursuant to Art. 77 GDPR, about which we will inform you separately below.
2. Your right to object to processing
The processing of personal data is permitted if the processing is necessary to safeguard the legitimate interests of the controller or of a third party, unless the interests or fundamental rights and freedoms of the data subject which require protection of personal data prevail, in particular if the data subject is a child, Art. 6 (1) (f) GDPR.
You as the data subject have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (f) GDPR, for reasons related to your particular situation; this also applies to profiling based on these provisions.
If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as a data subject, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data in order to conduct direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you as the data subject object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
3. Your right to lodge a complaint with the supervisory authority
As a data subject, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy, if you consider that the processing of personal data concerning you violates the provisions of the GDPR.
VIII. Information on the basis for the provision of your personal data
If you would like to conclude a contract with us or contact us with an inquiry, the provision of your personal data is necessary for the conclusion of a contract or the processing of your inquiry. You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we would not conclude a contract with you or process your inquiry.