Data protection policy

 

1. Data protection - General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. For detailed information on the subject of data protection, please refer to our data protection declaration listed under this text.

 

Data collection on our website

Who is responsible for data collection on our website?

The data processing on this website is carried out by the website operator. You can find his contact data in the imprint of this website.


How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may be data that you enter into a contact form, for example.

Other data is automatically collected by our IT systems when you visit the website. These are mainly technical data (e.g. Internet browser, operating system or time of the page call). This data is collected automatically as soon as you enter our website.


What we use your data for?

Part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyse your user behaviour.


How long do we store your data?

The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Furthermore, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the person responsible is subject. The data is also blocked or deleted when a storage period prescribed by the above-mentioned standards expires, unless there is a need to continue storing the data in order to conclude or fulfil a contract


What rights do you have regarding your data?

You have the right to receive information free of charge about the origin, recipient and purpose of your stored personal data at any time. You also have the right to demand the correction, blocking or deletion of this data. For this purpose, as well as for further questions regarding data protection, you can contact us at any time at the address given in the imprint.


Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke a previously given consent at any time. For this purpose an informal notification by e-mail to us is sufficient. The legality of the data processing carried out up to the revocation remains unaffected by the revocation..

 

Right of appeal to the competent supervisory authority

In the event of violations of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The competent supervisory authority for our company is the Bavarian State Office for Data Protection Supervision.

 

Bavarian State Office for Data Protection   
Promenade 18
91522 Ansbach
Phone: +49 (0) 981 180093-0
E-mail: poststelle@lda.bayern.de
www.lda.bayern.de

 

Right to data portability

You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible person, this will only take place to the extent that it is technically feasible.

 

2. Data protection at a glance

As operators of these pages we take the protection of your personal data very seriously. We treat your personal data confidentially and according to the legal data protection regulations as well as this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

 

Information about the responsible body

Responsible body for data processing on this website is:

doppler H. Würflingsdobler GmbH
A.-Kolping-Str. 3
D-84359 Simbach am Inn
Managing Director: Hermann Würflingsdobler

Phone.: +49 (0) 8571 / 9122 - 355
Fax: +49 (0) 8571 / 9122 - 321
Homepage: https://www.doppler-regenschirme.com
E-mail: regenshop(at)dopplerschirme.com

Register of companies: County Court Landshut HRB 7264
USt-IdNr. DE814879791.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

 

SSL- or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties


Encrypted payment transactions on this website

If there is an obligation to transmit your payment data (e.g. account number for direct debit authorisation) after the conclusion of a contract with costs, this data is required for payment processing.

The payment transactions via the usual means of payment (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and the lock symbol in your browser line.

With encrypted communication your payment data, which you transmit to us, cannot be read by third parties.



3. Data protection officer

Data Protection Officer required by law

Andreas Ofner
aigner business solutions GmbH
Goldener Steig 42
D-94116 Hutthurm
GERMANY

Phone: +49 (0)8505 / 91927 - 0
E-mail: andreas.ofner(at)aigner-business-solutions.com



4. Data collection on our website
 

Cookies

Cookies are small text files containing information that can be placed on the user's end device via the browser when visiting a website. The cookie and the information stored in it can be retrieved when the website is called up again using the same terminal device.

First-party and third-party cookies - Depending on where a cookie comes from, so-called first-party cookies and third-party cookies can be distinguished:

First-Party-Cookies: Cookies that are set and retrieved by the operator of the website as data controller or by a processor commissioned by the operator.

Third-Party-Cookies: Cookies set and accessed by data controllers other than the website operator who are not acting as processors on behalf of the website operator.  

 

Transient and persistent cookies - Depending on the validity period, so-called transient and persistent cookies can also be distinguished:

Transient cookies (Session cookies): Cookies that are automatically deleted when you close your browser.

Persistent cookies: Cookies, which remain stored on your end device for a certain period of time after closing the browser.  

 

Consent Free and Consent Required Cookies - Depending on their function and purpose, the use of certain cookies may require the user's consent. In this respect, cookies can be distinguished according to whether the user's consent is required for their use: 

Consent free cookies: Cookies whose sole purpose is to carry out the transmission of a message over an electronic communications network.

Cookies that are strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to be able to provide that service ("essential cookies")

Consent required cookies: Cookies for all purposes other than those mentioned above.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

 

Name

Provider

Purpose

Duration

Type

__tawkuuid

Knirps

This cookie is required for using the live chat serviceTawk.to

6 Monate

HTTP - cookie

TawkConnectionTime

Knirps

This cookie is required for using the live chat serviceTawk.to

Session

HTTP - cookie

TawkCookie

Knirps

This cookie is required for using the live chat serviceTawk.to

Dauerhaft

 

HTTP - cookie

Tawk_5bb1dd43b033e9743d01ea56

Knirps

This cookie is required for using the live chat serviceTawk.to

 

HTTP - cookie

_utma

Knirps

This cookie contains information about when the visitor first visited the site, how often he visited it and when he last visited it.

2 Jahre

HTTP - cookie

Mouseflow

Knirps

This cookie determines preferences for the website appearance.

Perma-nent

HTTP - cookie

_ga

Knirps

Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

2 years

HTTP - cookie

ga-disable-UA

Knirps

 

This cookie is used to deactivate Google Analytics

Perma-nent

HTTP - cookie

session-1

Knirps

Is needed to manage the cookies you have stored yourself

Session

HTTP - cookie

x-cache-context-hash

Knirps

Hash value of the control group and visitor group.

Session

HTTP - cookie

x-ua-device

Knirps

The cookie is necessary for the assignment of the screen type in order to display the contents of the page correctly.

Session

HTTP - cookie

__csrf_token-1

Knirps

Token for CSFR security function: CSRF Protection ensures that each request from the client to the server is provided with a unique "token" that ensures that the request comes from the client.

 Session

HTTP - cookie

amazon-pay-abtesting-apa-migration

Knirps

The cookie is required for payment method Amazon Pay.

 Session

HTTP - cookie

amazon-pay-abtesting-new-widgets

Knirps

The cookie is required for payment method Amazon Pay.

 Session

HTTP - cookie

apay-session-set

Knirps

The cookie is required for payment method Amazon Pay.

1 year

HTTP - cookie

Session-id

Amazon

The session ID is an identification number that is generated on the server side to assign user requests to a session.

20 years

HTTP - cookie

__cfduid

Tawk.to

This cookie is used for trusted web traffic.

Session

HTTP - cookie

ss

Tawk.to

This cookie is used for the chat facility

Session

HTTP - cookie

__tawkuuid

Tawk.to

This cookie is required for using the live chat serviceTawk.to

6 months

HTTP - cookie

sb

Facebook

Used by Facebook to display a range of advertising products, such as real-time bids from third party advertisers. (Facebook pixels)

2 years

HTTP - cookie

CONSENT

Google

This cookie is used for advertising.

19 years

HTTP - cookie

_ga

Google

 

Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

2 years

HTTP - cookie

GAPS

Google

This cookie stores the preferences and other information of the user. This includes in particular the preferred language, the number of search results to be displayed on the page and the decision whether or not to activate Google's SafeSearch filter

2 years

HTTP - cookie

Conversion

Google

This cookie is used for advertising.

4 months

HTTP - cookie

Test_cookie

Doubleclick

This cookie is set by DoubleClick (which is owned by Google) to determine whether the site visitor's browser supports cookies. The primary purpose of this cookie is: Target/advertising

15 minutes

HTTP - cookie

_distillery

Mouseflow.com

This cookie is used to generate statistical data on how the visitor uses the website.

1 year

 

HTTP - cookie

_ga

Mouseflow.com

Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

2 years

HTTP - cookie

 

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

·        Browser type and browser version

·        Operating system used

·        Referrer URL

·        Host name of the accessing computer

·        Time of the server request

·        IP address

 

This data is not merged with other data sources.

The basis for the data processing is the legitimate interest according to Art. 6 para. 1 lit. f GDPR, in order to be able to provide you with a secure functioning of our internet presence.

 


Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The data entered in the contact form is processed in accordance with Art. 6 Para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent for storage or the purpose for which the data was stored ceases to apply (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

 


Live-Chat

Tawk.to (SMS SIA)

On our website we use the live chat system of SMS SIA, Tirgonu iela, 6, Riga, Latvia, LV1050, (www.tawk.to). Anonymized data is collected and stored for the purpose of web analysis and to operate the live chat system for answering live support requests. From this anonymous data, user profiles can be created under a pseudonym. Cookies can also be used for this purpose. These cookies enable the recognition of the Internet browser. At the following Internet address you can obtain further information about the data protection regulations of tawk.to: https://www.tawk.to/privacy-policy/.

If the information collected in this way contains a personal reference, the legal basis for the processing is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in the effective customer service and the statistical analysis of user behaviour for optimisation purposes.

The data will not be used to personally identify the visitor of this website without the consent of the person concerned. No data will be merged with personal data about the bearer of the pseudonym.

You can avoid the storage of cookies by setting your Internet browser so that no more cookies can be stored on your computer in the future or by deleting already stored cookies.

However, this may mean that some functions on our website can no longer be executed. You have the possibility to object to the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with effect for the future. Please send us your objection informally by e-mail to our e-mail address mentioned in point I.

 

Social media / Plug-ins

The 2-click solution ensures that your Internet browser does not initially establish a connection to servers of the provider of the respective plug-in when you call up the website. When you call up the website, the provider of the respective plug-in cannot collect any personal data from you via the respective plug-in. Only when you click on the button provided to activate the respective plug-in will the plug-in be activated. As a result of the activation, a connection is established to the servers of the provider of the respective plug-in. This allows the provider of the respective activated Plug-In to collect personal data from you. The activation of the respective plug-in is technically comparable to clicking on a link to an external website, with the difference that the contents called up in the process do not appear in a new window/tab of your Internet browser, but are visually embedded in our website. The data exchange initiated by your activation and use of the Plug-In takes place exclusively between your Internet browser and the servers of the provider of the respective Plug-In. If you activate a third-party plug-in, you are therefore using a functionality offered by the provider of the respective plug-in under their responsibility, which is visually embedded in the display of our website.

 

When activating the respective plug-in, the provider of the respective plug-in (comparable to calling up an external website via a link) may receive, in particular, your IP address and the address (URL) of the website from which you are activating the plug-in. In addition, the provider of the respective activated plug-in may receive information from any cookies of the respective provider stored in your Internet browser. The provider of the respective plug-in can therefore already receive information from the activation of the respective plug-in initiated by you, at least that our website was called up under the IP address assigned to you at the time of the call. If you are registered as a user with the respective third-party provider, the provider of the respective plug-in can usually also assign the data received to your user account. Please note that we have no knowledge of the data specifically collected by the provider of the respective plug-in. We also have no knowledge of the concrete purposes of the processing of the collected data by the provider of the respective plug-in or of further details of the data processing of the respective provider. In particular, we do not know whether the respective provider processes the collected data only to provide the functionality of the respective plug-in (e.g. to share certain contents or to submit a comment) or whether it processes the data for any other purposes (e.g. to create user profiles or to personalize advertising).

 

Third-party plug-ins integrated on the website

Plug-in

Third-party

Further information from the provider about the plug-in

Decision on adequacy or appropriate or adequate safeguards for transfers to third countries and/or international organisations

YouTube Player

Google:

Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

For more information on functionality, refer to the description of the provider:
https://developers.google.com/youtube/iframe_api_reference.

Further information on data processing by the provider can be found in the provider's data protection information:
https://policies.google.com/privacy

Google is certified under the EU-US privacy shield:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

The EU-US data protection shield is covered by a Commission adequacy decision:
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016D1250.

Facebook

Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA

For more information on functionality, refer to the description of the provider:
https://developers.facebook.com/docs/plugins/..

Further information on data processing by the provider can be found in the provider's data protection information:
https://facebook.com/policy.php

Facebook is certified under the EU-US privacy shield:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

The EU-US data protection shield is covered by a Commission adequacy decision:
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016D1250

Instagram

Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA

For more information on functionality, refer to the description of the provider:
https://developers.facebook.com/docs/plugins/..

Further information on data processing by the provider can be found in the provider's data protection information:
https://facebook.com/policy.php

Facebook is certified under the EU-US privacy shield:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

The EU-US data protection shield is covered by a Commission adequacy decision:
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016D1250

Google Maps

Google:

Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

This site uses the map service Google Maps via an API.

To use the functions of Google Maps it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

You can find more information on the handling of user data in the Google privacy policy: https://policies.google.com/privacy

Google is certified under the EU-US privacy shield:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

The EU-US data protection shield is covered by a Commission adequacy decision:
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016D1250

 


5. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics, which is offered by Google Ireland Limited ("Google"), a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called "cookies". These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both his website and his advertising.

 

IP Anonymization

We have activated the IP anonymization function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.

 


Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

 

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link An opt-out cookie will be set to prevent the collection of your information on future visits to this site: Disable Google Analytics.

For more information on how Google Analytics handles user data, please see the Google privacy policy:
https://policies.google.com/terms?hl=en
https://policies.google.com/privacy?hl=en

https://support.google.com/analytics/answer/6004245?hl=en

If you want to block Google Analytics in general, we recommend using the browser add-in "NoScript" or "Ghostery".

 

DoubleClick by Google 

Doubleclick by Google is a service provided by Google Ireland Limited ("Google"), a company incorporated and organised under the laws of Ireland, having its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.

Doubleclick by Google uses cookies to show you advertisements that are relevant to you. In doing so, a pseudonymous identification number (ID) is assigned to your browser in order to check which ads have been shown in your browser and which ads have been viewed. The cookies do not contain any personal information.

DoubleClick's use of the DoubleClick cookie only enables Google and its partner websites to serve ads based on previous visits to our or other websites on the Internet. The information generated by the cookies is transferred by Google to a server in the USA for evaluation and stored there. A transfer of the data by Google to third parties only takes place due to legal regulations or within the scope of order data processing. Under no circumstances will Google combine your data with other data collected by Google. By using our website, you agree to the processing of the data collected about you by Google and to the aforementioned method of data processing and the stated purpose.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website.

You can also prevent the collection of the data generated by the cookies and related to your use of the websites to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link under the item DoubleClick deactivation extension. Alternatively, you can deactivate the Doubleclick cookies on the Digital Advertising Alliance website by clicking on the following link.

For more information, please refer to the Google Terms of Use and Privacy Policy at:
https://policies.google.com/terms?hl=en
https://policies.google.com/privacy?hl=en

 

6. Mouseflow

This website uses Mouseflow, a web analysis tool of Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected individual visits (only with anonymised IP address). This results in a protocol of mouse movements, mouse clicks and keyboard interaction, with the intention of randomly reproducing individual visits to this website as so-called session replays as well as evaluating them in the form of so-called heat maps and deriving potential improvements for this website. The data collected by Mouseflow is not personal and will not be passed on to third parties. The storage and processing of the collected data takes place within the EU. If you do not wish to have your data collected by Mouseflow, you can object to it on all websites that use Mouseflow by clicking on the following link:https://mouseflow.com/opt-out/

 

7. Facebook-Pixel, Custom Audiences / Facebook-Conversion

We use on our website the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

Our legitimate interest according to Art. 6 para. 1 lit.f GDPR is the analysis, optimization and economic operation of our online offer as well as the exploitation of the financial potential of our website.

With the help of the Facebook pixel, Facebook is able to determine the visitors of our website as a target group for the presentation of advertisements (so-called "Facebook ads"). Accordingly, the Facebook Pixel is used to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). At the same time, we want to ensure that our Facebook ads do not harass the user because they do not match his or her interests at all. In addition, the pixel allows us to track the effectiveness of our Facebook Ads, and for our statistical market research purposes, we can see if a user has reached our website after clicking on a Facebook advertisement (so-called "conversion").

The processing of data by Facebook is carried out within the framework of the Facebook Data Use Policy. General information on the display of Facebook ads can be found in the Facebook Data Usage Policy: https://www.facebook.com/policy.php.

Special information and details about the Facebook pixel and its functionality can be found in the Facebook help area: https://www.facebook.com/business/help/651294705016616.

You may object to the collection by the Facebook Pixel and use of your data to display Facebook Ads at any time. You can control what types of ads are displayed to you within Facebook by following the instructions provided there: https://www.facebook.com/settings?tab=ads. The settings are platform-independent.

You can also opt-out of the use of cookies for reach measurement and advertising purposes by visiting the Network Advertising Initiative opt-out page (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/). You can deactivate the use of the Facebook pixel here.

 

8.  Trusted Shops Trustbadge

On our website, we integrate the Trusted Shops trust badge to display the Trusted Shops seal of approval and any ratings that may have been collected, as well as to offer Trusted Shops products to buyers after an order has been placed.

This serves the protection of our in the context of a balancing of interests predominant legitimate interests (art. 6 exp. 1 lit. f GDPR) in an optimal marketing of our offer. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When you call up the Trustbadge, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.

Further personal data is only transmitted to Trusted Shops if and insofar as you decide to use Trusted Shops products after completing an order or if you have already registered for use. In this case the contractual agreement between you and Trusted Shops applies.

 

You can find further information in the Trusted Shops data protection regulations underhttps://shop.trustedshops.com/de/privacy-policy

 

9. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data will not be collected or only on a voluntary basis. We use these data exclusively for sending the requested information and do not pass them on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example by clicking on the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you have provided us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you cancel the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected.

 

10.  Use of our webshop and registration

If you want to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. We process the data you provide to process your order.

For this purpose we can pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 p. 1 lit. b GDPR.

On our website we also offer users the possibility to register by entering personal data. The data is entered into an input mask, transmitted to us and stored. The data will not be passed on to third parties. The following data is collected during the registration process:

- Title
- Name 
- Adress
- Phone
- E-mail adress
- Date of birth


During the registration process, the user's consent to the processing of this data is obtained.

A registration of the user is required to keep the user's order history available on our website. Registration also facilitates the user's further orders by not having to enter his user data again. The user can keep a notepad in his customer account and store the items he wants to remember there.

The data is deleted as soon as it is no longer required for the purpose of its collection.

This is the case for the data collected during the registration process if the registration on our website is cancelled or changed. As a user, you have the possibility to cancel the registration at any time. You can have the data stored about you changed at any time.

To do so, you can send us an informal message by e-mail.

We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years.

 

11. Comment function

Within the framework of the comment function on this website, in addition to your comment, information on the time of the creation of the comment and the name of the commentor you have chosen will be saved and published on the website. Furthermore, your IP address will be logged and saved. This storage of the IP address is done for security reasons and in case the person concerned violates the rights of third parties or posts illegal content by posting a comment.

We need your e-mail address in order to contact you in case a third party should complain about your published content as illegal. The legal basis for the storage of your data is article 6 paragraph 1 lit.b and f GDPR. We reserve the right to delete comments if they are objected to as illegal by third parties.

 

12. Request form

The user has the possibility to make a concrete inquiry about a certain article. For this purpose, the user can enter his e-mail address on the respective article page in the inquiry form and ask his question about the article in the input field. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. For the processing of the data, your consent will be obtained during the sending process and reference will be made to this privacy policy. In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given his or her consent.

 

13. External service providers

We offer several payment methods for the use of the webshop and use different payment service providers. Depending on which payment method you choose, different data is transmitted to the respective payment service provider. The legal basis for the transmission is Art. 6 para. 1 sentence 1 lit. a GDPR. In the following we list our payment service providers.

 

PayPal

If you choose the payment method PayPal, the data relevant for the purchase contract will be transmitted to PayPal. The prerequisite for using PayPal is the opening of a PayPal account. With the use or opening of a PayPal account, name, address, telephone number and e-mail address must be transmitted to PayPal. The legal basis for the transmission of data is article 6 paragraph 1 lit. a GDPR (consent) and article 6 paragraph 1 lit. b GDPR (processing for the fulfilment of a contract).

 

The operator of the payment service PayPal is:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg
E-mail: service(at)paypal.com

Which further data is collected by PayPal can be found in the respective PayPal privacy policy. This can be found under: https://www.paypal.com/de/webapps/mpp/ua/privacy-full. You can ask questions about PayPal's privacy policy at https://www.paypal.com/de/selfhelp/contact/email/privacy.

 

Heidelpay

If you pay by credit card via Heidelpay, the payment is processed by the payment service provider Heidelberger Payment GmbH, Vangerowstraße 18, 69115 Heidelberg (hereinafter "Heidelpay"), to whom we pass on the data you provide during the ordering process exclusively for the purpose of processing payments in accordance with Art. 6 Para. 1 lit. b GDPR. The data will only be passed on to the extent that it is actually required for the processing of payment. Heidelpay will in turn transfer your data to HUELLEMANN & STRAUSS ONLINESERVICES S.A., 1, Place du Marché, 6755 Grevenmacher, Luxembourg, in order to process the payment - if necessary for this purpose - in accordance with Art. 6 Paragraph 1 lit. b GDPR.

If you select the payment method "purchase on account via Heidelpay" or "direct debit via Heidelplay", you will be asked to provide your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address and telephone number) during the ordering process.

In order to safeguard our legitimate interest in determining the solvency of our customers, we will forward this data in accordance with Art. 6 Para. 1 lit. f GDPR to Heidelberger Payment GmbH, Vangerowstr. 18, 69115 Heidelberg (hereinafter "Heidelpay") for the purpose of a credit assessment. On the basis of the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experiences), Heidelpay checks whether the payment option selected by you can be granted with regard to payment and/or bad debt risks. In order to decide on the establishment or execution of a contractual relationship, identity or creditworthiness information from the following credit agencies may also be included in accordance with Art. 6 Para. 1 lit. f GDPR:

– SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
– CRIF Bürgel GmbH, Gasstraße 18, 22761 Hamburg
– Arvato Infoscore GmbH, Rheinstraße 99, 76532 Baden-Baden
– Deltavista GmbH, Kaiserstraße 217, 76133 Karlsruhe
– UNIVERSUM Business GmbH, Hugo-Junkers-Straße 3, 60386 Frankfurt am Main
– Bisnode International Group, Robert-Bosch-Straße 11, 64293 Darmstadt
– Regis24 GmbH, Wallstraße 58, 10179 Berlin
– Creditreform AG, Hellersbergstraße 12, 41460 Neuss

 

The credit rating information may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data.

You can object to this processing of your data at any time by sending a message to the person responsible for data processing or to Heidelpay. However, Heidelpay may still be entitled to process your personal data if this is necessary for the contractual payment processing.

Further information about the Heidelpay data protection regulations: https://www.heidelpay.com/en/privacy-statement/

 

SOFORT

If you choose the payment method "IMMEDIATELY", the payment processing is carried out by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "IMMEDIATELY"), to whom we pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The passing on of your data takes place exclusively for the purpose of payment processing with the payment service provider IMMEDIATELY and only insofar as it is necessary for this purpose. At the following internet address you will receive further information about the data protection regulations of SOFORT: https://www.klarna.com/sofort/datenschutz

 

Amazon Pay

If you select the "Amazon Pay" payment method, payment is processed via the payment service provider Amazon Payments Europe S.C.A., 38 J.F. Kennedy, L-1855 Luxembourg (hereinafter referred to as "Amazon Payments"), to which we pass on the information you provided during the ordering process, together with the information about your order, in accordance with Art. 6 Para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. At the following Internet address you can obtain further information about the data protection regulations of Amazon Payments: https://pay.amazon.com/help/201751600

 

Shipping service providers

If the goods are delivered to you by the transport service provider

 

(a) DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg)

(b) GLS (General Logistics Systems, Germany GmbH & Co. OHG, GLS Germany-Straße 1 - 7, DE-36286 Neuenstein)

(c) DHL (DHL Express Germandy GmbH Heinrich-Brüning-Straße 5, 53113 Bonn)

 

for the purpose of delivery, if this is necessary for the delivery of the goods, we only pass on the name of the recipient and the delivery address to the transport service provider in accordance with Art. 6 Para. 1 lit. b) GDPR.

Only if you have given your express consent during the ordering process do we pass on your e-mail address to the transport service provider in accordance with Art. 6 Para. 1 lit. a) GDPR before delivery of the goods for the purpose of agreeing on a delivery date or for the purpose of announcing delivery.

This consent can be revoked at any time with future effect vis-à-vis the person responsible as described above or the respective transport service provider.

 

- End of the privacy policy -

 

 

 

recently viewed