Privacy Policy
Data protection declaration and information on any consents you may have given
As the
controller within the meaning of the data protection regulations, we inform you
below about the processing of your personal data by us.
I. The concept of personal data and other important terms
In simple terms,
personal data is all information that relates to you personally as a data
subject. Provisions on what the term "personal data" means and what
other terms important for the following data protection information mean can be
found in Art. 4 of the GDPR (General Data Protection Regulation).
II. Name and contact
details of the controller; contact details of the data protection officer
In simple terms, the controller is the person who alone or jointly with others decides on the purposes and means of processing personal data. The name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / our legal notice.
III Purposes of processing your personal data; legal bases for processing
We process your personal data as part of our activities for the purposes listed below in accordance with the legal bases stated in each case.
1. to take steps at your request prior to entering into a contract, your personal data will be processed on the basis of your consent pursuant to Article 6(1)(a) GDPR or on the basis of Article 6(1)(b) GDPR
2. in order to safeguard our legitimate interest in responding to enquiries and in the implementation of other measures taken on the basis of an enquiry from you, your personal data will be processed on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.
3. for the fulfilment of a contract to which you are a party, your personal data will be processed on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (b) GDPR.
4. for the implementation of measures for the purpose of advertising, your personal data will be processed either on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.
5. in order to safeguard our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analysing the use of our website, your personal data is processed on the basis of Article 6 (1) (f) GDPR.
6. in order to safeguard our legitimate interest in the enforcement of our rights and in the defence against claims directed against us, your personal data is processed on the basis of Article 6 (1) (f) GDPR.
Our systems are secured by state-of-the-art technical and organisational measures to protect your personal data from access, modification or dissemination by unauthorised persons and from loss and destruction.
Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information in this privacy policy.
IV. Transfer of your personal data to third parties; categories of recipients of your personal data
Insofar as this is necessary to achieve the purposes of processing your personal data, we transfer your personal data to third parties within the framework of the legal requirements. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding further information in this privacy policy. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.
V. Scope of the processing of your personal data for the individual processing purposes
In the following, we will inform you in detail about the processing of your personal data for the various processing purposes.
Your personal data will be deleted when it is no longer required for the respective processing purpose, unless we are authorised to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.
1. use of our website for information purposes
If you visit our website without providing us with information, we only process the personal data that your browser transmits to our server. This is the following data, which is technically necessary to display our website to you and to ensure stability and security:
- the page you have called up
- Date and time of the enquiry
- Amount of data transferred
- Source or reference from which you accessed the page
- the browser you are using
- the operating system you are using
- your IP address
Your personal data is processed on the basis of Article 6(1)(f) GDPR to protect our legitimate interest in maintaining the proper operation of our website.
Your personal data will be deleted after 6 months, unless they are still required for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case, the deletion will take place immediately after the conclusion of the corresponding proceedings.
2. processing of enquiries
If you contact us with an enquiry or request, we will process the personal data and information/documents you provide. Irrespective of the way in which you send us your enquiry or request, this may include
- Date and time of contact
- Name data
- contact details
- Data on the enquiry/concern
- Information/documents transmitted
Your personal data and the information/documents transmitted are processed - depending on the content of your enquiry or request - on the basis of the consent you have given in accordance with Article 6(1)(a) of the GDPR to answer your enquiry or on the basis of Article 6(1)(b) of the GDPR to carry out pre-contractual measures or on the basis of Article 6(1)(b) of the GDPR for the performance of a contract to which you are a party or on the basis of Article 6(1)(c) of the GDPR for the performance of a contract to which you are a party or on the basis of Article 6(1)(d) of the GDPR for the performance of a contract to which you are a party. 1 (b) GDPR for the fulfilment of a contract to which you are a party or on the basis of Article 6 (1) (f) GDPR to safeguard our legitimate interest in responding to enquiries/concerns and in carrying out other measures in connection with the processing of enquiries/concerns.
If we provide a contact form and you contact us via this contact form, by sending your message you give your consent with the following content, about which you will be informed separately in the contact form:
"I consent to the processing of my email address and the other personal data I have provided for the purpose of responding to my message. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation."
You can revoke your consent at any time and without giving reasons with effect for the future. All you need to do is send a corresponding message to the controller, whose contact details can be found in the information on the controller. The legality of the processing carried out up to the revocation remains unaffected in the event of revocation.
If this is necessary to process your enquiry/request, we will transfer your personal data to third parties in accordance with the legal requirements. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum required.
Your personal data will be deleted once your enquiry/request has been resolved, unless we are permitted to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.
3. fulfilment of contracts
If you transmit personal data to us for the purpose of concluding a contract or in connection with the creation of a customer account, we process the data transmitted by you for the fulfilment of the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. details of the contractual products as well as payment and delivery information).
Your personal data is processed on the basis of Article 6(1)(b) GDPR for the fulfilment of a contract to which you are a party.
Insofar as this is necessary for the fulfilment of the contract with you, we transfer your personal data to third parties within the framework of the legal requirements. This transfer takes place to the service providers involved in the fulfilment of the contract. These are the providers of the processing tools we use. These are also the companies commissioned with the transport. Otherwise, these are the payment service providers commissioned with payment matters.
In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.
Your personal data will be deleted after the retention periods under tax and commercial law of 6 or 10 years have expired, unless we are authorised to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.
4. advertising by letter post
We may process the personal data you provide on your first name, surname and address to send you information about our offers by post.
In this respect,
your personal data is processed on the basis of Article 6(1)(f) GDPR to protect
our legitimate interest in carrying out advertising measures by post.
You can object to the processing of your personal data for the purpose of carrying out advertising measures by post at any time. All you need to do is send a corresponding message to the controller, whose contact details can be found in the information on the controller.
If you object to the processing of your personal data for the purpose of carrying out advertising measures by letter post, the personal data you have provided on your first name, surname and address will be deleted immediately, unless we are authorised to continue processing the data for another purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.
5. use of cookies
We use so-called cookies on our website. These are small files that are stored on your device and through which certain information is transmitted to us. Cookies are used to enable you to use certain functions and to make our website more user-friendly overall.
Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device even after the end of the browser session, i.e. after you close your browser, and enable us or our partner companies (third-party cookies) to recognise you on your next visit to our website (persistent cookies).
Some of the cookies we use are technically necessary to enable you to use certain functions. This is the case, for example, with regard to the storage of of entries in connection with the use of the shopping basket function. In this respect, your personal data is processed on the basis of Article 6(1)(b) GDPR for the performance of pre-contractual measures taken at your request as the data subject or on the basis of Article 6(1)(b) GDPR for the fulfilment of a contract to which you are a party or on the basis of Article 6(1)(f) GDPR to safeguard our legitimate interest in providing the most user-friendly functions possible. If we or our partner companies use cookies for reach measurement or marketing purposes, you can find detailed information on this in the corresponding further information in this privacy policy.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software. If necessary, please refer to the programme help for the browser you are using to find out how to make the appropriate setting. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. By way of example, we refer you to the information on the following common browsers:
Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en&sjid=6506615946632882450-EU
Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Internet Explorer: https://support.microsoft.com/en-gb/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
Safari: https://help.apple.com/safari/mac/8.0/en.lproj/sfri11471.html
6. enforcement
of our rights and defence against claims made against us
If necessary, we process your personal data to protect our legitimate interest in the enforcement of our rights and in the defence against claims made against us.
In this case,
your personal data will be processed on the basis of Article 6(1)(f) GDPR.
If this is necessary to safeguard our legitimate interests, we will transfer your personal data to third parties in accordance with the statutory provisions. This transfer takes place to the providers of debt collection services involved or to our lawyers.
In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.
Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the tax and commercial law retention periods of 6 or 10 years, unless we are authorised to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.
VI Duration for which your personal data will be stored or criteria for determining this duration
Your personal data will be deleted when it is no longer required for the respective processing purpose, unless we are authorised to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy. Information on the duration for which your personal data is stored or the criteria for determining this duration can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy.
VII. Your rights
1. overview
In order to ensure fair and transparent processing of personal data, you as a data subject have the following rights under data protection law:
the right of access under Article 15 GDPR,
the right to rectification in accordance with Article 16 GDPR,
the right to erasure in accordance with Article 17 GDPR,
the right to restriction of processing under Article 18 GDPR,
the right to data portability pursuant to Article 20 GDPR
the right to withdraw consent at any time in accordance with Article 7(3) GDPR
the right to object to processing in accordance with Article 21 GDPR, about which we will inform you separately below
and the right to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR, about which we will inform you separately below.
2. your right to object to the processing
The processing of personal data is authorised if the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, art. 6 abs. 1 letter f) GDPR.
As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on art. 6 abs. 1 letter f) GDPR; this also applies to profiling based on these provisions.
If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as the data subject or for the establishment, exercise or defence of legal claims.
If we process your personal data for direct marketing purposes, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you, as the data subject, object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
3. your right to lodge a complaint with the supervisory authority
Without prejudice to any other administrative or judicial remedy, as a data subject you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.
VIII. Information on the basis for the provision of your personal data
If you wish to conclude a contract with us or contact us with an enquiry, the provision of your personal data is necessary for the conclusion of a contract or the processing of your enquiry. You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we would not be able to conclude a contract with you or process your enquiry.