Data protection regulations

Data protection declaration

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.
“Personal data” is any information relating to an identified or identifiable natural person.

Server log files
You can use our websites without submitting personal data. 
Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1) f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services.
 


Customer account      Orders      

Customer account
When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.
 
Collection, processing, and transfer of personal data in orders
When you submit an order we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of Article 6(1) b) GDPR and is required for the fulfilment of a contract with you. 
Your data is transferred here for example to the shipping companies and dropshipping providers, payment service providers, service providers for handling the order and IT service providers that you have selected. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
 


Contact       Evaluations       Newsletter      

Collection and processing when using the contact form 
When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact. By submitting your message you agree to the processing of your transmitted data. Processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent.You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. We will only use your email address to process your request. Finally your data will be deleted, unless you have agreed to further processing and use.
 
Käufersiegel customer rating tool 
Our website uses the ‘Käufersiegel’ customer rating tool by Händlerbund Management AG (Torgauer Straße 233 B, 04347 Leipzig). Following your order, we would like to ask you to evaluate and comment on your purchase with us.
We will write to you for this purpose via email, making use of the technical system of the provider of the ‘Käufersiegel’ rating tool in processing the order.
As part of this, your data is processed either with your consent or on the basis of our legitimate interests.
Processing is carried out on the basis of Article 6(1)(a) GDPR with your consent, insofar as you have expressly consented to the receipt of feedback requests. You can withdraw your consent at any time using the corresponding link in the email, without affecting the legality of the processing carried out with your consent up to the withdrawal. Your email address will then be removed from the distributor.
Processing is carried out without your express consent on the basis of Article 6(1)(f) GDPR due to our justified interest in truthful, verified evaluations of our services as part of direct advertising. For this purpose we send you a feedback request electronically for our own goods or services which you have already purchased from us. Emails are sent to the address that we obtained from you in the course of selling a good or service. The sending of feedback requests is subject to the proviso that you have not objected to the use of your email address.
You can object to this at any time by notifying us. You will find the contact details for exercising your right to object in our imprint. You can also use the link provided in the feedback request. This will not involve any costs other than transmission costs at basic tariffs.
The personal data saved for this purpose in the technical system of the ‘Käufersiegel’ rating tool will be deleted three months after the delivery of goods recorded for evaluation.
 
Use of your email address for mailing of newsletters
We use your email address outside of contractual processing exclusively to send you a newsletter for our own marketing purposes, if you have explicitly agreed to this. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by contacting us. Your email address will then be removed from the distributor.
 


Merchandise management      

Use of an external merchandise management system
We use a merchandise management system in the course of order processing for the purposes of contractual processing. For this purpose your personal data as collected in the course of the order will be sent to

easybill GmbH, Düsselstr. 21, 41654 Kaarst, Germany 


Payment service providers      

Use of PayPal
All PayPal transaction are covered by the PayPal Data Privacy Statement. You can found this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en


Plug-ins

Use of social plug-ins via “Shariff”
Our website uses social network plug-ins. We use data protection-compliant “Shariff” buttons to ensure that you retain control over your data.No connection is made to the social network servers and no data submitted without your explicit consent. “Shariff” was developed by specialists at the computer magazine c't. It enables more personal privacy in the network and replaces the usual social network "share" buttons. You can find more information on the Shariff project here https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.
When you click the buttons a pop-up window appears, allowing you to log on with the relevant provider using your data. It is only after you actively login that a direct connection to the social network is set up. By logging in, you give your permission for the transfer of your data to the respective social media provider. At this time, information such as your IP address and which websites you have visited is transmitted. Should you be connected simultaneously with one or more of your social network accounts, the information collected is also assigned to your corresponding profiles. Therefore, you can only prevent this assignment by logging yourself out before visiting our website and before activating the button for your social media accounts. The social networks listed below are integrated with the “Shariff” function. You can find more detailed information on the scope and purpose of collection and use of the data, your associated rights and options for protecting your privacy in the provider’s privacy policy via the link.
 

Google+ by Google LLC (1600 Amphitheatre Parkway, Mountain View, California, 94043 USA) https://www.google.com/+/policy/+1button.html

Facebook by Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA) 
https://www.facebook.com/policy.php

Twitter by Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94107, USA) https://twitter.com/privacy

Pinterest by Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA) https://policy.pinterest.com/en/privacy-policy

Use of Facebook plug-ins
This Internet site uses plug-ins of the social network facebook.com operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").
Whenever you display one of our Internet pages that hosts a Facebook plug-in you will be linked to the Facebook servers, a message is sent to your browser, and the plug-in is run on the Internet page. This is telling the Facebook server which of our pages you have visited. Assuming you are logged on to your Facebook member account while running the Facebook plug-in, Facebook will allocate the information to your personal Facebook user account. Further information collected and allocated by Facebook is the use of plug-in functions (like clicking on the Like button or posting a comment). To prevent this data collection and allocation, you must log off your Facebook user account before running the plug-in.
If you do not wish Facebook to collect and directly allocate the above information to your Facebook profile, you will either have to log off from Facebook before visiting our site or run a "Facebook blocker" which stops the Facebook plug-ins from running on our pages.
To learn more about the collection and use of your personal data by Facebook as well as about your rights and what options you have to protect your privacy, please read Facebook's Privacy Policy at: https://www.facebook.com/policy.php
 

Using the Google “+1” button
On these webpages, the “+1” button of the social network Google Plus of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, 94043 USA, (hereafter referred to as “Google”) is used. If you invoke a webpage of our Internet presence, which is provided with the “+1” button, a link is established with the Google servers in the USA, and the button is displayed on the Internet page through a notification to your browser. Here, your IP address as well as the information, as to which of our Internet sites you have visited, is forwarded to the Google server. This is independent of whether you have registered with or are logged in on Google Plus. Data is transferred even in case of users who are not registered or logged in on these sites. The “+1” button is not used to record your visits on the Internet. When displaying a “+1” button, Google does not permanently log your browser history and also does not analyse your visit to a page with “+1” button in another manner. Google saves the data of your visit for about two weeks for system maintenance and troubleshooting purposes. However, this data is not structured as per the individual profiles, user names or URLs, and is also not forwarded to us.
Moreover, if you are a member of Google Plus, and if your are logged in on Google Plus during the period in which you use the plugin, the information collected about your website visit is linked to your Google Plus Account and disclosed to other users. Even in case of interactions, which are possible with various Google plugins, the corresponding information about you is collected and transmitted to Google and stored there. For an overview of the different types of Google plugins, log on to:
https://developers.google.com/+/web/

If you have made your profile publically accessible in the Google Plus settings, your “+1” can be superimposed by Google as information together with your profile names and your photo in Google services, e.g. in search results or in your Google profile, or at other places on websites and advertisements on the Internet. If you do not want Google to allocate the collected information directly to your Google Plus profile, you must first log out of Google Plus before visiting our site.
Other information about the collection and usage of the data by Google, about your relevant rights and options for protecting your privacy can be found in the Data Protection information of Google: www.google.com/intl/de/+/policy/+1button.html.

You have an option to prevent downloading Google plugins by installing corresponding add-ons in your browser.

Using Twitter plugins
The functions of the Twitter service are integrated on our website.
Twitter is a social media portal of the company Twitter Inc.,795 Folsom St., Suite 600, San Francisco, CA 94107, (USA).
We use Twitter plugins. If you invoke a corresponding website that has such a plugin, the data is exchanged with the Twitter servers located in the USA.
Even in case of interactions, which are possible with various Twitter plugins, the corresponding information about you is collected and transmitted to Twitter and stored there.
Moreover, if you are a member of Twitter, and if your are logged in on Twitter during the period in which you use the plugin, the information collected about your website visit is linked to your Twitter account and disclosed to other users.
If you do not wish that Twitter links and combines the information with the data of your Twitter account, you must log out from Twitter before visiting our website.
Log on to https://twitter.com/privacy for more information on the collection and use of data through Twitter.

Using Pinterest plugins
On these webpages, plugins of the social network, Pinterest, are used, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA ("Pinterest").
You can view the different logos which contain the plugin (e.g. “Pin-it-Button” or the “P″-button), at the following link: http://business.pinterest.com/pin-it-button/
If you invoke a corresponding website of our Internet presence, which contains such a plugin, a link between your computer and the servers of Pinterest is established, and the plugin is displayed on the Internet page through a notification to your browser. Here, your IP addresses as well as the information, as to which of our webpages you have visited, is transmitted to the Pinterest server in the USA. This is irrespective of whether you are registered with or logged in on Pinterest. Data is transferred even in case of users who are not registered or logged in on these sites.
Moreover, if you are a member of Pinterest, and if you are logged in on Pinterest during the period in which you use the plugin, the information collected about your website visit is linked to your Pinterest account and disclosed to other users. Even in case of interactions, which are possible with various Pinterest plugins, the corresponding information about you is collected and transmitted to Pinterest and stored there.
If you do not wish that Pinterest links and combines the information with the data of your Pinterest account, you must log out from Pinterest before visiting our website.
Log on to https://policy.pinterest.com/en/privacy-policy for more information on the collection and use of data through Pinterest.


Rights of persons affected and storage duration

Duration of storage 
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.
 
Rights of the affected person
If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR.
 
Contact us at any time. Our contact details can be found in our imprint.
 
Right to complain to the regulatory authority
You have the right to complain to the regulatory authority according to art. 77 GDPR if you believe that your data is not being processed legally.
 
Right to object
If the data processing outlined here is based on our legitimate interests in accordance with Article 6(1)f) GDPR, you have the right for reasons arising from your particular situation to object at any time to the processing of your data with future effect.
If the objection is successful, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests or rights and freedoms, or the processing is intended for the assertion, exercise or defence of legal claims.
 
If personal data is being processed for the purposes of direct advertising, you can object to this at any time by notifying us. If the objection is successful, we will no longer process the personal data for the purposes of direct advertising.
 

last update: 19.11.2018