Controller in the sense of data protection laws is
60323 Frankfurt am Main
General Manager: Sabrina Möhring
Telephone: +49 69 95014377
Collection and processing of data when visiting and using our website
Data automatically processed when visiting our website
Every time you visit our website, data is automatically collected and stored which is transmitted by your browser. These are stored in the log files of the server. This includes the following data ("log files data"):
- Information about browser type and version used,
- User's operating system,
- Internet service provider and IP address of the user,
- Date and time of the request.
We have log files data evaluated anonymously in order to continuously improve the website, adapt the website to the interests of the users and to find and correct errors more quickly. These purposes constitute our legitimate interest in data processing pursuant to Art. 6 (1) lit. f GDPR.
In a non-anonymous form, the log files data are used exclusively to identify malfunctions and to guarantee system security, including the detection and tracking of unauthorized access attempts and attempts at fraud and misuse. They are stored for 7 to 10 days and then deleted. Log files data, the further storage of which is required for evidence purposes, are excluded from deletion until the respective incident has been finally clarified and can be passed on to investigative authorities in individual cases.
When using the online shop
In addition, we process your personal data that you actively transmit to us when you register with our online shop or place an order.
When you register with our online shop or use the online shop as a registered user, we collect and process the following information from you:
- First and last name,
- Postal address,
- Email address,
- Phone number (optional),
- Purchase order history.
When you place an order, we will also collect and process the following information:
- Items ordered,
- Different delivery address, if applicable,
- Invoice and payment data.
We process the above data to maintain your registration and to process your orders. The legal basis is Art. 6 para. 1 lit. b) GDPR.
We store the data collected for performance of contract until any legal or contractual warranty and guarantee claims expire. We then store the information required by commercial and tax law for the periods specified by law solely in the event of an audit by the tax authorities.
Your payment data will be passed on to the respective payment service provider for payment processing. We will pass on the delivery address to the shipping partner commissioned by us. The respective data will be transmitted solely for the respective purposes and deleted after delivery.
You can also subscribe to a newsletter on our website. You will be asked to provide your email address and your consent to receive the newsletter. In this case, the legal basis for data processing is Art. 6 (1) lit. a) GDPR ("consent"). You can withdraw your consent at any time (e.g. by using the unsubscribe link contained in the e-mail). The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
If you purchase goods or services on our website and provide us with your email address, we may subsequently use it to send you a newsletter in accordance with legal requirements. In such a case, the newsletter will only send direct advertising for similar goods or services of our own. In this case, the legal basis is Art. 6 (1) lit. f) GDPR, whereby our legitimate interest is the provision of legally compliant direct marketing. You can object to the further sending of the newsletter at any time (e.g. by using the unsubscribe link contained in the e-mail).
If you contact us
On our website you will find various ways to contact us. If you use one these and contact us e.g. by email, we process the data provided by you in the course of contacting us in order to respond to your inquiry.
We have a legitimate interest in answering inquiries to us. The legal basis for data processing is Art. 6 (1) lit f) GDPR. If your request is aimed at concluding a contract, the legal basis is Art. 6 (1) lit b) GDPR.
Data transmitted to us within the scope of contacting us will be deleted after completion of your inquiry, unless and insofar as we are not obliged to store it for commercial and tax law reasons.
Transfer of data to third parties
Your data will not be passed on to third parties. An exception to this applies if this is necessary for the performance of the contract (e.g. transmission of the delivery address to the deliverer) or if we are legally obliged to do so.
If we use third parties to provide our website or to customize the orders, they will act on our behalf and on our instructions (" commissioned processor").
When you use our website, we store certain information on the hard disk of your computer using so-called cookies (small text or image files). Cookies allow us to adapt the website to your interests and needs. For example, a cookie may contain information about the pages you visit, which enables us to adjust the website accordingly on your next visit. Cookies do not allow us access to other areas of your computer.
Most internet browsers allow you to delete cookies or receive a warning before a cookie is stored on your hard drive. Please refer to your browser's documentation or help screen to learn more about this option. Please note, however, that you may not be able to use all services or offers on our website if you deactivate cookies.
The legal basis for data processing is Art. 6 para. 1 lit f) GDPR, whereby we have a legitimate interest in the demand-oriented design and optimisation of our website.
In addition, Facebook provides fan page operators with a tool ("Facebook Insights") with which statistical information about the use of their pages can be called up. Further information can be found HERE.
Data subject rightsAccording to the GDPR, data subjects have various rights at their disposal. These rights include in particular:
- Right to information: In accordance with Art. 15 GDPR, you can request confirmation as to whether we are processing personal data relating to you. If such processing is available, you can also request further information about the processing from us.
- Right of rectification: You have a right to rectification and/or completion in accordance with Article 16 of the GDPR if the personal data processed concerning you is incorrect or incomplete.
- Right to restriction of processing: In accordance with Article 18 of the GDPR, you may request that the processing of personal data concerning you be restricted.
- Right of erasure: In accordance with Art. 17 GDPR, you also have the right to request us to erase your personal data stored under certain conditions.
- Right to data portability: In accordance with Art. 20 GDPR, you also have the right to receive personal data relating to you that you have been provided in a structured, current and machine-readable format and to transfer it from us to another person in charge without any impediment.
Right to lodge a complaintYou have the right to complain about the handling of your personal data to the data protection authority responsible for you or us. Responsible for us:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Right of objectionIf your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.
Contact usIf you have any questions or concerns regarding the use of your personal data, please contact us by e-mail: firstname.lastname@example.org.