Data Privacy


Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary. You are not obliged to provide the data. Non-provision of the data has no consequences. This only applies insofar as no other statement to the contrary is given in the following processing procedures. "Personal data" means any information relating to an identified or identifiable natural person.


Server log files

You can visit our websites without providing any personal information. Every time our website is accessed, usage data is transmitted by the respective Internet browser and stored in log files, also called server log files. The stored data includes, for example, the name of the requested page, date and time of access, amount of data transferred and the requesting provider. These data serve exclusively to ensure a trouble-free operation of our website and to improve our services. It is not possible to attribute these data to a specific person.


Data collection and processing when using the contact form

When using the contact form, we collect and process your personal data (name, email address, comments) only to the extent that you have provided it. The processing of data serves the purpose of establishing contact. By submitting your message, you consent to the processing of the transmitted data. Processing will be carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. We will only use your email address to process your request. Your data will be deleted subsequently if you have not agreed to further processing and use thereof.


Customer Account

When you open a customer account, we collect your personal data to the extent specified therein. The data processing serves the purpose of improving your shopping experience and simplifying the order processing. The processing is based on Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing that was carried out based on your consent before its revocation. Your customer account will then be deleted.


Data collection when writing a comment

When you comment on an article or post, we collect your personal data (first name, email address, comment text) only to the extent that you provide it. The processing serves the purpose of enabling commenting and displaying comments. By submitting the comment, you consent to the processing of the transmitted data. The processing is based on Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing that was carried out based on your consent before its revocation. Your personal data will then be deleted. When your comment is published, the first name you provided and the date the comment was created will be published.


Collection, processing, and use of personal data when ordering

When you place an order, we collect and use your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is based on Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you. Your data will not be disclosed to third parties without your express consent, except for our service partners that we need to involve in the processing of the contractual relationship or service providers that we use in the context of order processing. These may include recipients in the following categories: shipping providers, payment service providers, web hosts, IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transmission is limited to a minimum.


Cookies

Our website uses cookies. Cookies are small text files that are stored by the internet browser or on the computer system of a user. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a distinct string of characters that enables the browser to be uniquely identified when the website is accessed again. We use cookies to make our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change.

The processing is carried out on the basis of ยง 15 (3) TMG and Art. 6 (1) lit. f GDPR pursuant to the legitimate interest in the aforementioned purposes. The data collected in this way is pseudonymized by technical means. Therefore, it is no longer possible to assign the data to your specific person. The data is not stored together with other personal data from you. You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 (1) f GDPR. Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can prevent the storage of cookies and the transmission of the data they contain. Already stored cookies can be deleted at any time. However, we would like to point out that you may not be able to use all functions of this website to their full extent. You can find information on how to manage cookies (including deactivation) in the most important browsers at the following links:

Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac


Duration of storage

After the contract has been processed completely, the data will initially be stored for the duration of the warranty period and then, taking into account legal, in particular tax and commercial retention periods, stored and deleted after the deadline has expired, unless you have consented to further processing and use thereof.


Rights of the affected person

If the legal requirements are met, you enjoy the following rights under Art. 15 to 20 GDPR: right to information, right to correction, right to deletion, right to restriction of processing, right to data portability. Furthermore, according to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) f GDPR and to processing for the purpose of direct advertising. Please contact us if you wish. You can find our contact details in our imprint.


Use of Secupay as a payment method

The data controller has integrated the secupay.Lastschrift and secupay.Rechnungskauf components of secupay AG (hereinafter "secupay"), Goethestr. 6, 01896 Pulsnitz on this website. secupay is a payment institution within the meaning of the Payment Services Supervision Act (ZAG) and is registered with the Federal Financial Supervisory Authority (BaFin), Graurheindorfer Str. 108, 53117 Bonn (registration number: 126737), and enables cashless payment of products and services on the internet. secupay represents a procedure by which the purchase price claim is assigned to secupay. This enables a trader to deliver goods, services, or downloads to the customer immediately after the order is placed. If you, as a data subject, choose "direct debit" or "invoice purchase" as a payment option during the ordering process in our online shop, data from you will be automatically transmitted to secupay. By selecting this payment option, you consent to the transmission of personal data required for payment processing. When processing purchases through secupay, as a buyer, you transmit payment information to secupay. secupay then carries out a technical check of the payment default risk. The implementation of the financial transaction is then automatically communicated to the online trader. The personal data exchanged with secupay consists of first name, last name, address, email address, IP address, telephone number, or other data necessary for payment processing. The transmission of the data is for payment processing and fraud prevention purposes. The data controller will also transmit other personal data to secupay if there is a legitimate interest in the transmission thereof. The personal data exchanged between secupay and the data controller may be transmitted to credit reporting agencies under certain circumstances. This transmission is for identity and credit checks. secupay may also share personal data with affiliated companies and service providers or subcontractors to the extent necessary to fulfill contractual obligations or to process data on behalf of the data controller. The data subject has the option to revoke consent for the handling of personal data at any time with secupay. Revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing. The applicable privacy policy of secupay can be accessed at https://www.secupay.com/de/datenschutz.

Last updated: 17.04.2018


Use of PayPal as a payment method

All PayPal transactions are subject to the PayPal privacy policy, which can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=de_DE


Use of credit card as a payment method

All credit card payments are subject to the HEIDELPAY privacy policy,

which can be found at https://www.heidelpay.com/de/datenschutz/

Last updated: November 2018