Data privacy statement
A. Responsible for data processing
Responsible for the processing of personal data in the context of this website in accordance with the provisions of the General Data Protection Regulation (DSGVO) is:
Mr. Bastian Hüsch,
Tel .: 02622 8853686
B. Data processing
As part of the operation of our website, we process data. Processing of the data also includes disclosure by transmission.
For data transfers to the US there is an adequacy decision by the EU Commission, the EU-US Privacy Shield. In it, the Commission has certified that the guarantees for the transfer of data to the US based on the EU-US Privacy Shield comply with EU data protection standards. As far as we submit data to the US, we have identified the participation of our service providers in the EU-US Privacy Shield.
The specific data, processing, legal bases, recipients and transfers to third countries concerned are listed below:
a) Log file
We log your visit to our websites. The following data is processed: name of the retrieved website, date and time of retrieval, the amount of data transferred, the browser type and version, the operating system you are using, the referrer URL (the previously visited website), your IP address and the requesting provider. This is necessary to ensure the security of the website. We process the data accordingly on the basis of our legitimate interests in accordance with Art. 6 para. 1 f) DSGVO. The log file will be deleted after seven days, unless it is required to clarify or to prove concrete infringements that have become known within the retention period.
Hosting will store all data to be processed in connection with the operation of this website. This is necessary to enable the operation of the website. We process the data accordingly on the basis of our legitimate interests in accordance with Art. 6 para. 1 f) DSGVO. To provide our online presence, we use the services of web hosting providers to whom we provide the above data.
If you contact us, your data (name, contact details, if provided by you) and your message will be processed solely for the purpose of processing and processing your request. These data are processed by us on the basis of Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR to handle your request.
d) Customer account
When you open a customer account, you consent to the storage of your inventory data (name, address, e-mail address, bank details) as well as your usage data (username, password). This allows us to identify you as a customer and gives you the ability to manage your orders.
Your data will be processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
We process your order data to process the purchase contract. The processing of the data is carried out accordingly on the basis of Art. 6 para. 1 b) GDPR.
We transmit your address data to the company commissioned with the delivery. If it is necessary to process the contract, we will also provide your e-mail address or telephone number to coordinate a delivery date (Avis) to the company commissioned with the delivery.
We will transmit your transaction data (name, date of order, method of payment, date of dispatch and / or receipt, amount and payee, if applicable bank details or credit card details) to the payment service provider responsible for processing the payment.
C. Duration of data storage
We only store personal data for as long as it is necessary for the purposes for which it is processed or if your consent has been revoked. As far as statutory storage requirements are concerned, the storage period for certain data can be up to 10 years, regardless of the processing purposes.
D. Your rights
Upon request, you will receive information about all personal data that we have stored about you free of charge at any time.
b) Correction, cancellation, limitation of processing (blocking), opposition
If you no longer consent to the storage of your personal data or if these have become incorrect, we will, upon appropriate instructions, arrange for the deletion or blocking of your data or make the necessary corrections (to the extent permitted by applicable law). The same applies if we are to process data in the future only in a restrictive way.
c) Data portability
Upon request, we will provide you with your data in a standard, structured and machine-readable format, so that you can transfer the data to another person on request.
d) Right of appeal
There is a right of appeal to the competent supervisory authority:
e) Right of revocation in the case of consent with effect for the future
Any given consent can be revoked at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of revocation.
Data where we are unable to identify the data subject, for example, if they have been anonymised for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with respect to such information if you provide us with additional information that allows us to identify it.
g) Exercise of your rights
If you have any questions regarding the processing of your personal data, information, correction, blocking, opposition or deletion of data or the desire to transfer the data to another company, please contact firstname.lastname@example.org.