Privacy
PRIVACY POLICY
Information on the Collection of Personal Data and Contact Details of the Controller
Data Collection When Visiting Our Website
Contacting Us
Cookies
Data Processing for Order Handling
Data Processing When Opening a Customer Account and for Contract Processing
Use of Your Data for Direct Advertising
Online Marketing
Rights of the Data Subject
Duration of Storage of Personal Data
Use of the Withdrawal Button
1. Information on the Collection of Personal Data and Contact Details of the Controller
1.1
Thank you for visiting our website. Below, we would like to inform you about how we handle your personal data when you use our website. Personal data generally means all data by which you can be personally identified.
1.2
The controller responsible for data processing on our website within the meaning of the General Data Protection Regulation, GDPR, is:
Christoph Klug
Merricher Str. 10
50321 Brühl, Rheinland
Germany
Tel.: +49-2232-993388
Email: info@dropo.de
1.3
To protect the security of your data during transmission, we use encryption methods corresponding to the current state of the art, for example SSL or TLS, via HTTPS.
2. Data Collection When Visiting Our Website
Whenever our website is accessed, our system automatically collects data and information that your browser transmits to our server, known as server log files. The following data, which is technically necessary for us, is collected:
our website visited
date and time of access
amount of data sent in bytes
source/referrer from which you accessed the page
operating system used
browser used
IP address used, where applicable in anonymised form
The legal basis for the processing is Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in improving the stability and maintaining the functionality of our website.
The data is not passed on or used in any other way.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
We reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after no more than seven days. Storage beyond this period is possible. In this case, the users’ IP addresses are deleted or anonymised so that assignment to the accessing client is no longer possible.
The collection of data for the provision of the website and the storage of data in log files is strictly necessary for the operation of the website. Consequently, the user has no possibility to object.
3. Contacting Us
If you contact us via a contact form, the data entered in the input form will be transmitted to us and stored. The data collected can be seen from the respective input form. When contacting us by email, only the data entered by you there will be transmitted to us.
The data is used exclusively for processing the conversation and your request.
The legal basis for processing the data, where the user has given consent, is Art. 6 para. 1 lit. a GDPR.
The legal basis for processing data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR.
If the email contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
The data will be deleted as soon as it is no longer required for achieving the purpose for which it was collected and provided that no statutory retention obligations prevent deletion.
For personal data from the input form of the contact form and data sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter concerned has been conclusively clarified.
The user has the possibility at any time to withdraw their consent to the processing of personal data.
If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
4. Cookies
Our website uses cookies.
Cookies are text files that are stored on the user’s device. When a user accesses a website, a cookie may be stored on the user’s operating system.
Some functions of our website cannot be offered without the use of cookies. For this purpose, it is necessary for the browser to be recognised again even after a page change.
The user data collected through technically necessary cookies is not used to create user profiles.
These purposes also constitute our legitimate interest in processing personal data pursuant to Art. 6 para. 1 lit. f GDPR.
In addition, our website may use cookies that enable analysis of users’ browsing behaviour, known as third-party cookies. Further information on the scope, purpose, legal basis and objection options can be found in the respective sections of the corresponding chapter of this Privacy Policy.
As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable, restrict or delete the transmission of cookies.
If you disable cookies for our website, not all functions of the website may be fully usable.
You can prevent the transmission of Flash cookies by changing the settings of the Flash Player.
Help with the settings can be found in the help menu of your browser or under the following links:
Internet Explorer:
http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome:
http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari:
https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera:
https://help.opera.com/en/latest/web-preferences/#cookies
Some of the cookies used here are deleted after you close your browser, known as session cookies.
Other cookies remain on your device and enable us or our partner companies, third-party cookies, to recognise your browser on your next visit, known as persistent cookies.
If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
5. Data Processing for Order Handling
5.1
If you wish to place an order in our online shop, it is necessary for the conclusion of the contract that you provide the personal data we need to process your order.
We process the data provided by you for the purpose of processing your order.
In some cases, we work with external service providers to process your order. For this purpose, we must pass on the personal data required for this.
If we commission transport companies to deliver your goods, we pass on the data required for delivery of the goods to the respective transport company.
For payment processing, we pass on your data to the commissioned credit institution to the extent necessary.
If we use payment service providers, you will also be informed of this below.
The legal basis for passing on your data is Art. 6 para. 1 lit. b GDPR.
5.2 External Service Providers for Order Processing and Order Handling
JTL
Order processing is carried out via the service provider JTL:
JTL-Software-GmbH
Rheinstr. 7
41836 Hückelhoven
Germany
We pass on your name, address and, where applicable, further personal data to JTL in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of processing your order and only to the extent necessary.
Details on data protection at JTL and the Privacy Policy of JTL-Software-GmbH can be found at:
https://www.jtl-software.de/Datenschutz
5.3 Transfer of Your Personal Data to Shipping Service Providers
DHL
If the goods are delivered to you by the transport service provider DHL:
Deutsche Post AG
Charles-de-Gaulle-Straße 20
53113 Bonn
Germany
we pass on only the recipient’s name and delivery address to DHL for the purpose of delivery and to the extent necessary pursuant to Art. 6 para. 1 lit. b GDPR.
Only if you have given your express consent during the ordering process will we pass on your email address to DHL prior to delivery of the goods for the purpose of coordinating a delivery date or providing delivery notification, in accordance with Art. 6 para. 1 lit. a GDPR.
You may withdraw your consent at any time with effect for the future either from the controller named above or from the transport service provider DHL.
DPD
If the goods are delivered to you by the transport service provider DPD:
DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany
we pass on only the recipient’s name and delivery address to DPD for the purpose of delivery and to the extent necessary pursuant to Art. 6 para. 1 lit. b GDPR.
Only if you have given your express consent during the ordering process will we pass on your email address to DPD prior to delivery of the goods for the purpose of coordinating a delivery date or providing delivery notification, in accordance with Art. 6 para. 1 lit. a GDPR.
You may withdraw your consent at any time with effect for the future either from the controller named above or from the transport service provider DPD.
UPS
If the goods are delivered to you by the transport service provider UPS:
United Parcel Service Deutschland Inc. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany
we pass on only the recipient’s name and delivery address to UPS for the purpose of delivery and to the extent necessary pursuant to Art. 6 para. 1 lit. b GDPR.
Only if you have given your express consent during the ordering process will we pass on your email address to UPS prior to delivery of the goods for the purpose of coordinating a delivery date or providing delivery notification, in accordance with Art. 6 para. 1 lit. a GDPR.
You may withdraw your consent at any time with effect for the future either from the controller named above or from the transport service provider UPS.
5.4 Use of Payment Service Providers
5.5 bancontact
When paying via “bancontact” through PayPal Checkout, payment processing is carried out via the payment service provider PayPal:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
hereinafter referred to as “PayPal”.
Further information on PayPal Checkout can be found in the corresponding section below.
5.6 blik
When paying via “blik” through PayPal Checkout, payment processing is carried out via the payment service provider PayPal:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
hereinafter referred to as “PayPal”.
Further information on PayPal Checkout can be found in the corresponding section below.
5.7 mybank
When paying via “mybank” through PayPal Checkout, payment processing is carried out via the payment service provider PayPal:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
hereinafter referred to as “PayPal”.
Further information on PayPal Checkout can be found in the corresponding section below.
PayPal
When selecting the payment method PayPal, credit card via PayPal, direct debit via PayPal or, where offered, purchase on account or instalment payment via PayPal, payment processing is carried out via:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
hereinafter referred to as “PayPal”.
We pass on your personal data to PayPal to the extent necessary in accordance with Art. 6 para. 1 lit. b GDPR.
For the payment methods credit card via PayPal, direct debit via PayPal or, where offered, purchase on account or instalment payment via PayPal, PayPal reserves the right to carry out a credit check.
For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal’s legitimate interest in determining your solvency.
PayPal uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method.
The credit check may contain probability values, known as score values. Where score values are included in the result of the credit check, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values.
The further data collected by PayPal can be found in PayPal’s respective Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
5.8 PayPal Checkout
We use PayPal Checkout on this website:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
hereinafter referred to as “PayPal”.
PayPal Checkout is an online payment solution from PayPal that supports both PayPal payment methods and local payment methods from third-party providers.
If you select, where offered, the payment methods PayPal, credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, we pass on your necessary payment data to PayPal for the purpose of payment processing. This transfer is permissible pursuant to Art. 6 para. 1 lit. b GDPR.
For the payment methods credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, PayPal reserves the right to carry out a credit check in each case.
For this purpose, PayPal may pass on your necessary payment data to credit agencies. The processing takes place on the legal basis of Art. 6 para. 1 lit. f GDPR. PayPal has a legitimate interest in determining your solvency.
You may object to this processing of your data at any time by sending a message to PayPal, although further processing of your personal data by PayPal may remain lawful if it is necessary for contractual payment processing.
If you select the PayPal purchase on account payment method, we first transfer your payment data to PayPal pursuant to Art. 6 para. 1 lit. b GDPR. PayPal then forwards your data to Ratepay GmbH for payment processing:
Ratepay GmbH
Ritterstraße 12–14
10969 Berlin
Germany
Ratepay then carries out an identity and credit check in its own name. The legal basis for this is Art. 6 para. 1 lit. f GDPR, the legitimate interest in determining solvency.
For this purpose, Ratepay passes on your payment data to credit agencies pursuant to Art. 6 para. 1 lit. f GDPR.
Ratepay may access the following credit agencies:
https://www.ratepay.com/legal-payment-creditagencies/
If you choose a payment method from a local third-party provider, we first pass on your payment data to PayPal pursuant to Art. 6 para. 1 lit. b GDPR.
PayPal then forwards your payment data to the provider selected by you for the purpose of carrying out the payment pursuant to Art. 6 para. 1 lit. b GDPR:
iDEAL: Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands
giropay: Paydirekt GmbH, Stephanstraße 14–16, 60313 Frankfurt am Main, Germany
Sofort: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany
bancontact: Bancontact Payconiq Company, Rue d’Arlon 82, 1040 Brussels, Belgium
eps: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria
blik: Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland
Przelewy24: PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland
MyBank: PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France
Further information can be found in PayPal’s Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
6. Data Processing When Opening a Customer Account and for Contract Processing
If you open a customer account with us, personal data is collected and processed pursuant to Art. 6 para. 1 lit. b GDPR.
The scope of the data can be seen from the input form. The data entered by you is stored and used by us for contract processing.
You may delete your customer account at any time. This can be done by sending a message to the controller’s address or, where offered, directly in the customer account.
In this case, we will also block your data, taking into account tax and commercial law retention periods, and delete it after these periods have expired.
This may only be prevented by your consent to permanent storage or by further use of the data by us that is permitted by law.
7. Use of Your Data for Direct Advertising
7.1 Newsletter
On our website, it is possible to subscribe to a free newsletter.
When registering for the newsletter, the data from the input form is transmitted to us. The only mandatory information is your email address. If you provide further voluntary information, this will only be used for personal address.
The legal basis for processing your data after registration for the newsletter, where the user has given consent, is Art. 6 para. 1 lit. a GDPR.
We obtain this consent by sending you a confirmation email after you register for the newsletter, which contains a confirmation link. When you click this link, you simultaneously give your consent to receive the newsletter.
When the newsletter registration is submitted, we store your IP address as well as the date and time of registration. This storage serves to be able to trace any possible misuse of your email address.
We use the data collected by us during newsletter registration exclusively for the purpose of sending the newsletter.
You may unsubscribe from the newsletter at any time. For this purpose, every newsletter contains a corresponding link. This also enables withdrawal of consent to the storage of the personal data collected during the registration process.
7.2 Newsletter for Existing Customers
If you purchase goods or services on our website and provide your email address in the process, this address may subsequently be used by us to send a newsletter.
In such a case, the newsletter will only contain direct advertising for our own similar goods or services.
The legal basis for sending the newsletter following the sale of goods or services is Section 7 para. 3 of the German Act Against Unfair Competition, UWG, and Art. 6 para. 1 lit. f GDPR.
In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising.
If you have already objected to the use of your email address for the purpose of direct advertising, you will not receive this newsletter.
You also have the option, at any later time and at any time, to object to the use of your email address for the advertising purpose stated here with effect for the future by notifying us.
After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.
8. Online Marketing
Use of Google Ads Conversion Tracking
This website uses the online advertising programme “Google Ads” and, within the framework of Google Ads, conversion tracking by:
Google Ireland Limited
Gordon House
4 Barrow Street
Dublin
D04 E5W5
Ireland
hereinafter referred to as “Google”.
With the help of advertising materials, known as Google AdWords, our offers are advertised on external websites.
Our legitimate interest lies in displaying advertising that is of interest to you and in achieving fair calculation of advertising costs.
The legal basis is Art. 6 para. 1 lit. a GDPR, namely your express consent.
Google Ads uses cookies for conversion tracking, which are set when you click on a Google AdWords advertisement.
These cookies generally lose their validity after 30 days and are not used for personal identification.
Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Ads customers.
The information obtained in this way is used to create conversion statistics for Ads customers regarding the total number of users who clicked on their advertisement and were redirected to a page equipped with a conversion tracking tag.
You cannot be personally identified by this.
If you wish to prevent tracking, you can deactivate the Google Conversion Tracking cookie via your internet browser under user settings.
Google LLC, based in the USA, is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU.
Further information on Google’s privacy policy can be found at:
http://www.google.de/policies/privacy/
Further information on Google data protection can be found here:
https://business.safety.google/privacy/
You can permanently deactivate conversion cookies by selecting the appropriate settings in your browser or by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
In this case, certain functions of this website may not be usable or may only be usable to a limited extent.
Further information on Google data protection can be found here:
https://business.safety.google/privacy/
9. Rights of the Data Subject
9.1
The applicable data protection law grants you comprehensive data subject rights, rights of access and intervention, vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below.
Right of Access Pursuant to Art. 15 GDPR
You may request confirmation from the controller as to whether personal data concerning you is being processed by the controller.
In addition, you have a right to information about the purposes of processing, the categories of personal data, the recipients, the planned storage period and the existence of further rights such as correction of the data or the existence of a right to lodge a complaint with a supervisory authority.
You also have the right to information about the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you.
You also have the right to be informed about which guarantees exist pursuant to Art. 46 GDPR when your data is transferred to third countries.
Right to Rectification Pursuant to Art. 16 GDPR
You have the right to immediate rectification of inaccurate data concerning you and/or completion of incomplete data stored by us. The rectification or completion must be carried out without undue delay.
Right to Restriction of Processing Pursuant to Art. 18 GDPR
You have the right to request restriction of the processing of your personal data:
as long as the accuracy of your data disputed by you is being verified;
if you refuse deletion of your data due to unlawful data processing and instead request restriction of the processing of your data;
if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data once the purpose has been achieved;
or if you have objected for reasons relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds prevail.
Where the processing of personal data concerning you has been restricted, this data may, apart from its storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.
Right to Erasure Pursuant to Art. 17 GDPR
You have the right to immediate erasure of your personal data if the requirements of Art. 17 para. 1 GDPR are met.
However, this right to erasure does not exist, in particular but not exclusively, if processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
Right to Notification Pursuant to Art. 19 GDPR
If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.
You also have the right to be informed about these recipients.
Right to Data Portability Pursuant to Art. 20 GDPR
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller, where technically feasible.
Right to Withdraw Consent Pursuant to Art. 7 para. 3 GDPR
You have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR. This also applies to profiling based on these provisions.
You also have the right to withdraw your data protection consent at any time with effect for the future.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
Right to Lodge a Complaint Pursuant to Art. 77 GDPR
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
9.2 Right to Object
You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest following a balancing of interests.
If you exercise this right to object, we will stop processing your data unless compelling legitimate grounds for the processing can be demonstrated which override your interests, or if further processing serves the establishment, exercise or defence of legal claims.
10. Duration of Storage of Personal Data
The duration of storage of personal data depends in each case on statutory retention periods.
After these periods have expired, we routinely delete the data if it is no longer required for contract fulfilment or contract initiation and/or if we no longer have a legitimate interest in continued storage.
11. Use of the Withdrawal Button
As soon as the withdrawal button is used, we process the personal data entered there:
name
order data / contract data
communication data, withdrawal statement
time of withdrawal
where applicable, user account / IP data when using the online form
Processing is carried out for the purpose of identifying your contract and documenting your withdrawal.
We store the data for documentation purposes for a maximum of 10 years and delete it automatically, provided that no statutory retention obligations prevent deletion.
The legal basis is Art. 6 para. 1 lit. b GDPR, contract fulfilment, and Art. 6 para. 1 lit. c GDPR, compliance with a legal obligation.
Information on the Collection of Personal Data and Contact Details of the Controller
Data Collection When Visiting Our Website
Contacting Us
Cookies
Data Processing for Order Handling
Data Processing When Opening a Customer Account and for Contract Processing
Use of Your Data for Direct Advertising
Online Marketing
Rights of the Data Subject
Duration of Storage of Personal Data
Use of the Withdrawal Button
1. Information on the Collection of Personal Data and Contact Details of the Controller
1.1
Thank you for visiting our website. Below, we would like to inform you about how we handle your personal data when you use our website. Personal data generally means all data by which you can be personally identified.
1.2
The controller responsible for data processing on our website within the meaning of the General Data Protection Regulation, GDPR, is:
Christoph Klug
Merricher Str. 10
50321 Brühl, Rheinland
Germany
Tel.: +49-2232-993388
Email: info@dropo.de
1.3
To protect the security of your data during transmission, we use encryption methods corresponding to the current state of the art, for example SSL or TLS, via HTTPS.
2. Data Collection When Visiting Our Website
Whenever our website is accessed, our system automatically collects data and information that your browser transmits to our server, known as server log files. The following data, which is technically necessary for us, is collected:
our website visited
date and time of access
amount of data sent in bytes
source/referrer from which you accessed the page
operating system used
browser used
IP address used, where applicable in anonymised form
The legal basis for the processing is Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in improving the stability and maintaining the functionality of our website.
The data is not passed on or used in any other way.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
We reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after no more than seven days. Storage beyond this period is possible. In this case, the users’ IP addresses are deleted or anonymised so that assignment to the accessing client is no longer possible.
The collection of data for the provision of the website and the storage of data in log files is strictly necessary for the operation of the website. Consequently, the user has no possibility to object.
3. Contacting Us
If you contact us via a contact form, the data entered in the input form will be transmitted to us and stored. The data collected can be seen from the respective input form. When contacting us by email, only the data entered by you there will be transmitted to us.
The data is used exclusively for processing the conversation and your request.
The legal basis for processing the data, where the user has given consent, is Art. 6 para. 1 lit. a GDPR.
The legal basis for processing data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR.
If the email contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
The data will be deleted as soon as it is no longer required for achieving the purpose for which it was collected and provided that no statutory retention obligations prevent deletion.
For personal data from the input form of the contact form and data sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter concerned has been conclusively clarified.
The user has the possibility at any time to withdraw their consent to the processing of personal data.
If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
4. Cookies
Our website uses cookies.
Cookies are text files that are stored on the user’s device. When a user accesses a website, a cookie may be stored on the user’s operating system.
Some functions of our website cannot be offered without the use of cookies. For this purpose, it is necessary for the browser to be recognised again even after a page change.
The user data collected through technically necessary cookies is not used to create user profiles.
These purposes also constitute our legitimate interest in processing personal data pursuant to Art. 6 para. 1 lit. f GDPR.
In addition, our website may use cookies that enable analysis of users’ browsing behaviour, known as third-party cookies. Further information on the scope, purpose, legal basis and objection options can be found in the respective sections of the corresponding chapter of this Privacy Policy.
As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable, restrict or delete the transmission of cookies.
If you disable cookies for our website, not all functions of the website may be fully usable.
You can prevent the transmission of Flash cookies by changing the settings of the Flash Player.
Help with the settings can be found in the help menu of your browser or under the following links:
Internet Explorer:
http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome:
http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari:
https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera:
https://help.opera.com/en/latest/web-preferences/#cookies
Some of the cookies used here are deleted after you close your browser, known as session cookies.
Other cookies remain on your device and enable us or our partner companies, third-party cookies, to recognise your browser on your next visit, known as persistent cookies.
If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
5. Data Processing for Order Handling
5.1
If you wish to place an order in our online shop, it is necessary for the conclusion of the contract that you provide the personal data we need to process your order.
We process the data provided by you for the purpose of processing your order.
In some cases, we work with external service providers to process your order. For this purpose, we must pass on the personal data required for this.
If we commission transport companies to deliver your goods, we pass on the data required for delivery of the goods to the respective transport company.
For payment processing, we pass on your data to the commissioned credit institution to the extent necessary.
If we use payment service providers, you will also be informed of this below.
The legal basis for passing on your data is Art. 6 para. 1 lit. b GDPR.
5.2 External Service Providers for Order Processing and Order Handling
JTL
Order processing is carried out via the service provider JTL:
JTL-Software-GmbH
Rheinstr. 7
41836 Hückelhoven
Germany
We pass on your name, address and, where applicable, further personal data to JTL in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of processing your order and only to the extent necessary.
Details on data protection at JTL and the Privacy Policy of JTL-Software-GmbH can be found at:
https://www.jtl-software.de/Datenschutz
5.3 Transfer of Your Personal Data to Shipping Service Providers
DHL
If the goods are delivered to you by the transport service provider DHL:
Deutsche Post AG
Charles-de-Gaulle-Straße 20
53113 Bonn
Germany
we pass on only the recipient’s name and delivery address to DHL for the purpose of delivery and to the extent necessary pursuant to Art. 6 para. 1 lit. b GDPR.
Only if you have given your express consent during the ordering process will we pass on your email address to DHL prior to delivery of the goods for the purpose of coordinating a delivery date or providing delivery notification, in accordance with Art. 6 para. 1 lit. a GDPR.
You may withdraw your consent at any time with effect for the future either from the controller named above or from the transport service provider DHL.
DPD
If the goods are delivered to you by the transport service provider DPD:
DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany
we pass on only the recipient’s name and delivery address to DPD for the purpose of delivery and to the extent necessary pursuant to Art. 6 para. 1 lit. b GDPR.
Only if you have given your express consent during the ordering process will we pass on your email address to DPD prior to delivery of the goods for the purpose of coordinating a delivery date or providing delivery notification, in accordance with Art. 6 para. 1 lit. a GDPR.
You may withdraw your consent at any time with effect for the future either from the controller named above or from the transport service provider DPD.
UPS
If the goods are delivered to you by the transport service provider UPS:
United Parcel Service Deutschland Inc. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany
we pass on only the recipient’s name and delivery address to UPS for the purpose of delivery and to the extent necessary pursuant to Art. 6 para. 1 lit. b GDPR.
Only if you have given your express consent during the ordering process will we pass on your email address to UPS prior to delivery of the goods for the purpose of coordinating a delivery date or providing delivery notification, in accordance with Art. 6 para. 1 lit. a GDPR.
You may withdraw your consent at any time with effect for the future either from the controller named above or from the transport service provider UPS.
5.4 Use of Payment Service Providers
5.5 bancontact
When paying via “bancontact” through PayPal Checkout, payment processing is carried out via the payment service provider PayPal:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
hereinafter referred to as “PayPal”.
Further information on PayPal Checkout can be found in the corresponding section below.
5.6 blik
When paying via “blik” through PayPal Checkout, payment processing is carried out via the payment service provider PayPal:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
hereinafter referred to as “PayPal”.
Further information on PayPal Checkout can be found in the corresponding section below.
5.7 mybank
When paying via “mybank” through PayPal Checkout, payment processing is carried out via the payment service provider PayPal:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
hereinafter referred to as “PayPal”.
Further information on PayPal Checkout can be found in the corresponding section below.
PayPal
When selecting the payment method PayPal, credit card via PayPal, direct debit via PayPal or, where offered, purchase on account or instalment payment via PayPal, payment processing is carried out via:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
hereinafter referred to as “PayPal”.
We pass on your personal data to PayPal to the extent necessary in accordance with Art. 6 para. 1 lit. b GDPR.
For the payment methods credit card via PayPal, direct debit via PayPal or, where offered, purchase on account or instalment payment via PayPal, PayPal reserves the right to carry out a credit check.
For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal’s legitimate interest in determining your solvency.
PayPal uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method.
The credit check may contain probability values, known as score values. Where score values are included in the result of the credit check, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values.
The further data collected by PayPal can be found in PayPal’s respective Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
5.8 PayPal Checkout
We use PayPal Checkout on this website:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
hereinafter referred to as “PayPal”.
PayPal Checkout is an online payment solution from PayPal that supports both PayPal payment methods and local payment methods from third-party providers.
If you select, where offered, the payment methods PayPal, credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, we pass on your necessary payment data to PayPal for the purpose of payment processing. This transfer is permissible pursuant to Art. 6 para. 1 lit. b GDPR.
For the payment methods credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, PayPal reserves the right to carry out a credit check in each case.
For this purpose, PayPal may pass on your necessary payment data to credit agencies. The processing takes place on the legal basis of Art. 6 para. 1 lit. f GDPR. PayPal has a legitimate interest in determining your solvency.
You may object to this processing of your data at any time by sending a message to PayPal, although further processing of your personal data by PayPal may remain lawful if it is necessary for contractual payment processing.
If you select the PayPal purchase on account payment method, we first transfer your payment data to PayPal pursuant to Art. 6 para. 1 lit. b GDPR. PayPal then forwards your data to Ratepay GmbH for payment processing:
Ratepay GmbH
Ritterstraße 12–14
10969 Berlin
Germany
Ratepay then carries out an identity and credit check in its own name. The legal basis for this is Art. 6 para. 1 lit. f GDPR, the legitimate interest in determining solvency.
For this purpose, Ratepay passes on your payment data to credit agencies pursuant to Art. 6 para. 1 lit. f GDPR.
Ratepay may access the following credit agencies:
https://www.ratepay.com/legal-payment-creditagencies/
If you choose a payment method from a local third-party provider, we first pass on your payment data to PayPal pursuant to Art. 6 para. 1 lit. b GDPR.
PayPal then forwards your payment data to the provider selected by you for the purpose of carrying out the payment pursuant to Art. 6 para. 1 lit. b GDPR:
iDEAL: Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands
giropay: Paydirekt GmbH, Stephanstraße 14–16, 60313 Frankfurt am Main, Germany
Sofort: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany
bancontact: Bancontact Payconiq Company, Rue d’Arlon 82, 1040 Brussels, Belgium
eps: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria
blik: Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland
Przelewy24: PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland
MyBank: PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France
Further information can be found in PayPal’s Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
6. Data Processing When Opening a Customer Account and for Contract Processing
If you open a customer account with us, personal data is collected and processed pursuant to Art. 6 para. 1 lit. b GDPR.
The scope of the data can be seen from the input form. The data entered by you is stored and used by us for contract processing.
You may delete your customer account at any time. This can be done by sending a message to the controller’s address or, where offered, directly in the customer account.
In this case, we will also block your data, taking into account tax and commercial law retention periods, and delete it after these periods have expired.
This may only be prevented by your consent to permanent storage or by further use of the data by us that is permitted by law.
7. Use of Your Data for Direct Advertising
7.1 Newsletter
On our website, it is possible to subscribe to a free newsletter.
When registering for the newsletter, the data from the input form is transmitted to us. The only mandatory information is your email address. If you provide further voluntary information, this will only be used for personal address.
The legal basis for processing your data after registration for the newsletter, where the user has given consent, is Art. 6 para. 1 lit. a GDPR.
We obtain this consent by sending you a confirmation email after you register for the newsletter, which contains a confirmation link. When you click this link, you simultaneously give your consent to receive the newsletter.
When the newsletter registration is submitted, we store your IP address as well as the date and time of registration. This storage serves to be able to trace any possible misuse of your email address.
We use the data collected by us during newsletter registration exclusively for the purpose of sending the newsletter.
You may unsubscribe from the newsletter at any time. For this purpose, every newsletter contains a corresponding link. This also enables withdrawal of consent to the storage of the personal data collected during the registration process.
7.2 Newsletter for Existing Customers
If you purchase goods or services on our website and provide your email address in the process, this address may subsequently be used by us to send a newsletter.
In such a case, the newsletter will only contain direct advertising for our own similar goods or services.
The legal basis for sending the newsletter following the sale of goods or services is Section 7 para. 3 of the German Act Against Unfair Competition, UWG, and Art. 6 para. 1 lit. f GDPR.
In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising.
If you have already objected to the use of your email address for the purpose of direct advertising, you will not receive this newsletter.
You also have the option, at any later time and at any time, to object to the use of your email address for the advertising purpose stated here with effect for the future by notifying us.
After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.
8. Online Marketing
Use of Google Ads Conversion Tracking
This website uses the online advertising programme “Google Ads” and, within the framework of Google Ads, conversion tracking by:
Google Ireland Limited
Gordon House
4 Barrow Street
Dublin
D04 E5W5
Ireland
hereinafter referred to as “Google”.
With the help of advertising materials, known as Google AdWords, our offers are advertised on external websites.
Our legitimate interest lies in displaying advertising that is of interest to you and in achieving fair calculation of advertising costs.
The legal basis is Art. 6 para. 1 lit. a GDPR, namely your express consent.
Google Ads uses cookies for conversion tracking, which are set when you click on a Google AdWords advertisement.
These cookies generally lose their validity after 30 days and are not used for personal identification.
Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Ads customers.
The information obtained in this way is used to create conversion statistics for Ads customers regarding the total number of users who clicked on their advertisement and were redirected to a page equipped with a conversion tracking tag.
You cannot be personally identified by this.
If you wish to prevent tracking, you can deactivate the Google Conversion Tracking cookie via your internet browser under user settings.
Google LLC, based in the USA, is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU.
Further information on Google’s privacy policy can be found at:
http://www.google.de/policies/privacy/
Further information on Google data protection can be found here:
https://business.safety.google/privacy/
You can permanently deactivate conversion cookies by selecting the appropriate settings in your browser or by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
In this case, certain functions of this website may not be usable or may only be usable to a limited extent.
Further information on Google data protection can be found here:
https://business.safety.google/privacy/
9. Rights of the Data Subject
9.1
The applicable data protection law grants you comprehensive data subject rights, rights of access and intervention, vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below.
Right of Access Pursuant to Art. 15 GDPR
You may request confirmation from the controller as to whether personal data concerning you is being processed by the controller.
In addition, you have a right to information about the purposes of processing, the categories of personal data, the recipients, the planned storage period and the existence of further rights such as correction of the data or the existence of a right to lodge a complaint with a supervisory authority.
You also have the right to information about the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you.
You also have the right to be informed about which guarantees exist pursuant to Art. 46 GDPR when your data is transferred to third countries.
Right to Rectification Pursuant to Art. 16 GDPR
You have the right to immediate rectification of inaccurate data concerning you and/or completion of incomplete data stored by us. The rectification or completion must be carried out without undue delay.
Right to Restriction of Processing Pursuant to Art. 18 GDPR
You have the right to request restriction of the processing of your personal data:
as long as the accuracy of your data disputed by you is being verified;
if you refuse deletion of your data due to unlawful data processing and instead request restriction of the processing of your data;
if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data once the purpose has been achieved;
or if you have objected for reasons relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds prevail.
Where the processing of personal data concerning you has been restricted, this data may, apart from its storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.
Right to Erasure Pursuant to Art. 17 GDPR
You have the right to immediate erasure of your personal data if the requirements of Art. 17 para. 1 GDPR are met.
However, this right to erasure does not exist, in particular but not exclusively, if processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
Right to Notification Pursuant to Art. 19 GDPR
If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.
You also have the right to be informed about these recipients.
Right to Data Portability Pursuant to Art. 20 GDPR
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller, where technically feasible.
Right to Withdraw Consent Pursuant to Art. 7 para. 3 GDPR
You have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR. This also applies to profiling based on these provisions.
You also have the right to withdraw your data protection consent at any time with effect for the future.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
Right to Lodge a Complaint Pursuant to Art. 77 GDPR
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
9.2 Right to Object
You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest following a balancing of interests.
If you exercise this right to object, we will stop processing your data unless compelling legitimate grounds for the processing can be demonstrated which override your interests, or if further processing serves the establishment, exercise or defence of legal claims.
10. Duration of Storage of Personal Data
The duration of storage of personal data depends in each case on statutory retention periods.
After these periods have expired, we routinely delete the data if it is no longer required for contract fulfilment or contract initiation and/or if we no longer have a legitimate interest in continued storage.
11. Use of the Withdrawal Button
As soon as the withdrawal button is used, we process the personal data entered there:
name
order data / contract data
communication data, withdrawal statement
time of withdrawal
where applicable, user account / IP data when using the online form
Processing is carried out for the purpose of identifying your contract and documenting your withdrawal.
We store the data for documentation purposes for a maximum of 10 years and delete it automatically, provided that no statutory retention obligations prevent deletion.
The legal basis is Art. 6 para. 1 lit. b GDPR, contract fulfilment, and Art. 6 para. 1 lit. c GDPR, compliance with a legal obligation.