Privacy Policy
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Non-provision has no consequences. This only applies insofar as no other information is provided in the subsequent processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.
Server-Logfiles
You can visit our website without providing personal details.
Whenever you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in protocol data (so-called server log files). These stored data include, for example: the name of the page accessed, date and time of access, IP address, data volume transferred, and the requesting provider.
Processing is carried out on the basis of Art. 6(1)(f) GDPR, due to our overriding legitimate interest in ensuring the smooth operation of our website as well as improving our services.
Contact
Responsible party
Contact us if you wish. The data controller is: Sophia Sangodeyi, Eschenstr. 8, 91522 Ansbach, Deutschland, 015211957226, [email protected]
Customer-Initiated Contact by Email
If you contact us by email on your own initiative, we collect your personal data (name, email address, message text) only to the extent you provide it. Processing serves the purpose of handling and responding to your inquiry.
If the contact relates to pre-contractual measures (e.g., consultation regarding purchase interest, preparing an offer) or to an existing contract, processing is based on Art. 6(1)(b) GDPR.
If the contact occurs for other reasons, processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in handling and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data under Art. 6(1)(f) GDPR.
We will use your email address only to process your inquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Use of the Contact Form
When using our contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. Processing serves the purpose of contacting you.
If the contact relates to pre-contractual measures (e.g., consultation regarding purchase interest, preparing an offer) or to an existing contract, processing is based on Art. 6(1)(b) GDPR. Otherwise, processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in responding to inquiries.
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data under Art. 6(1)(f) GDPR.
Your email address will only be used to process your request. Afterwards, your data will be deleted in compliance with statutory retention periods, unless you have consented to further use.
Customer Account
When opening a customer account, we collect your personal data to the extent specified there. Processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of processing carried out until revocation. Your customer account will then be deleted.
Collection, Processing, and Disclosure of Personal Data in Orders
When placing an order, we collect and process your personal data only insofar as necessary to fulfil and process your order and handle your inquiries. The provision of data is required for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for performance of the contract.
Your data may be disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly observe legal requirements. The scope of data transmission is kept to a minimum.
Reviews & Advertising
Collection of Data When Submitting a Comment or Review
When commenting on/reviewing an article or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. Processing serves the purpose of enabling comments/reviews and displaying them.
By submitting your comment/review, you consent to the processing of the transmitted data. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of processing carried out until revocation. Your personal data will then be deleted.
When your comment/review is published, only the name you provide will be displayed.
Shopauskunft Customer Review
We use the “shopauskunft.de” review tool provided by Händlerbund Management AG (Kohlgartenstraße 11-13, 04315 Leipzig; “Shopauskunft”) on our website.
After your order, we may ask you to review and comment on your purchase with us. For this purpose, we will contact you by email using the technical system “Legally Secure Review Request (RBA).” We process order data (order/invoice number, purchase value, shipping costs) and your email address. If necessary, these data may also be used to verify your review.
Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent, provided you have explicitly agreed to the transfer of your data and receipt of the review request.
You can revoke your consent at any time using the relevant link in the email or by notifying us, without affecting the legality of prior processing.
Further information on data protection at Shopauskunft can be found here: https://www.shopauskunft.de/datenschutz.
Our website integrates the Shopauskunft widget. This serves to display the number and results of customer reviews we have received via Shopauskunft and to promote our services.
To display the widget, usage data must be transmitted by your internet browser to the Shopauskunft server and stored in server log files for 7 days. Data collected include: file name and URL requested, date and time of access, IP address, referrer URL, browser, operating system, and your access provider.
Processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our legitimate interest in promoting our offers by showing customer reviews. These data are not stored together with other personal data.
Shopauskunft Widget
Use of Email Address for Newsletters
We use your email address to send you newsletters with information and offers, provided you have explicitly consented. Processing serves exclusively for promotional purposes. We process your email address and, where applicable, further voluntary data you provide when subscribing.
Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of prior processing.
You can unsubscribe at any time using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. However, we may continue to store your address in a so-called blacklist to prevent future newsletters being sent to you. This is based on Art. 6(1)(f) GDPR, due to our and your legitimate interest in preventing further mailings. You have the right to object at any time, for reasons arising from your particular situation.
Shipping & Inventory Management
Disclosure of Email Address to Shipping Companies for Delivery Updates
If you explicitly agree during the order process, we will forward your email address to the shipping company so that they can inform you about the delivery status by email. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company.
We use an inventory management system to process contracts under a processing agreement. Your order data are transmitted to:
ikas Tech GmbH, Blezingerstraße 15, 73430 Aalen, Germany.
Processing serves the purpose of fulfilling the contract with you and is based on Art. 6(1)(b) GDPR.
Use of an External Inventory Management System
Payment Services
Use of PayPal Express
We use PayPal Express (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”).
The service enables payments via PayPal Express. For technical reasons, PayPal may collect device and browser data (IP address, device type, OS, browser type, location). Cookies may be used to recognize your browser.
Use of cookies or similar technology occurs with your consent under §25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Processing of personal data is likewise based on consent under Art. 6(1)(a) GDPR, which you may revoke at any time.
When you select and use PayPal Express, the necessary payment data are transmitted to PayPal to complete the contract. This is based on Art. 6(1)(b) GDPR.
Further information: PayPal Privacy Policy.
Use of PayPal Check-Out
We also use PayPal Check-Out (PayPal (Europe) S.à.r.l. et Cie, S.C.A., Luxembourg). With this service, you may pay via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal. The necessary data are transmitted to PayPal to complete the contract with the chosen payment method. Processing is based on Art. 6(1)(b) GDPR.
Cookies may be stored for browser recognition. This processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in offering customer-friendly payment options. You have the right to object at any time.
Credit Card, Direct Debit, and “Pay Later” via PayPal
For these payment types, PayPal may carry out a credit check with credit agencies. PayPal transfers necessary personal data to agencies and uses the returned probability values (“scores”) to decide whether to enter into or continue the contract. This processing is based on Art. 6(1)(f) GDPR for our legitimate interest in preventing payment default.
You may object at any time for reasons relating to your particular situation. However, provision of data is necessary to use these payment methods.
Third-Party Payment Services via PayPal
If you select a third-party payment method (e.g., Google Pay, Apple Pay), your payment data will be forwarded from PayPal to the provider for contract fulfilment. Processing is based on Art. 6(1)(b) GDPR.
Invoice Purchase via PayPal
If you choose invoice purchase, PayPal forwards your data to Ratepay GmbH (Berlin, Germany). Ratepay may also perform credit checks. Processing is based on Art. 6(1)(f) GDPR due to the interest in preventing payment default when advancing payments.
Details: Ratepay Privacy. (https://www.ratepay.com/legal-payment-dataprivacy/) und https://www.ratepay.com/legal-payment-creditagencies/ (https://www.ratepay.com/legal-payment-creditagencies/).
Nähere Informationen zur Datenverarbeitung bei Verwendung von PayPal finden Sie in der dazugehörigen Datenschutzerklärung unter https://www.paypal.com/de/webapps/mpp/ua/privacy-full (https://www.paypal.com/de/webapps/mpp/ua/privacy-full).
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Irland)
Cookies
Our website uses cookies. Cookies are small text files stored by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the operating system. This cookie contains a unique string of characters allowing the browser to be recognized when the site is revisited.
Cookies are stored on your computer. Therefore, you have full control over their use. By adjusting the technical settings of your browser, you can be notified before cookies are set, decide on acceptance individually, and prevent the storage of cookies and the transfer of their data. Stored cookies can be deleted at any time. However, please note that not all website functions may be fully usable if cookies are disabled.
Instructions for managing cookies in major browsers:
Chrome: Manage cookies in Chrome
Microsoft Edge: Manage cookies in Edge
Firefox: Manage cookies in Firefox
Safari: Manage cookies in Safari
Technically Necessary Cookies
Unless otherwise stated in this privacy policy, we use only technically necessary cookies to make our services more user-friendly, effective, and secure. Cookies also enable recognition of your browser across page changes and the provision of certain services. Some features cannot be offered without cookies.
Use of cookies or similar technologies occurs on the basis of §25(2) TDDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR due to our legitimate interest in ensuring optimal website functionality and a user-friendly experience.
You may object at any time for reasons arising from your particular situation.
Cookie Consent Manager (CCM19)
We use the Cookie Consent Manager CCM19 by HB legal tech GmbH (Kohlgartenstraße 11–13, 04315 Leipzig, Germany) as part of data processing on our website.The plug-in (hosted at consenttool.haendlerbund.de) enables you to give consent for data processing, in particular cookies, and to exercise your right of withdrawal for already given consents. Processing serves the purpose of obtaining, documenting, and complying with legally required consents.
Cookies may be used for this. Information stored may include: randomly assigned ID, consent status, date/time of approval/rejection. Data are stored for 1 year and 1 month, then deleted. No transfer of data to third parties occurs.
Processing is carried out on the basis of Art. 6(1)(c) GDPR to fulfil legal obligations.
More details: HB legal tech Privacy Policy.
Plug-ins and Other Services
Use of Google Maps
We use the Google Maps function from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
This enables the visual display of geographical information and interactive maps. When accessing pages with embedded Google Maps, visitor data are collected, processed, and used by Google.
Data may also be transferred to the USA. For the USA, an EU Commission adequacy decision exists: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under TADPF and is committed to complying with European data protection principles.
The use of cookies or similar technology occurs with your consent under §25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Processing of personal data is likewise based on consent under Art. 6(1)(a) GDPR. You may withdraw consent at any time.
Further details: Google Privacy Policy.
Integration of Händlerbund Member Logo
Our website integrates the Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11–13, 04315 Leipzig). When you access our website, your browser automatically sends information to the Händlerbund server. This data is temporarily stored in server log files for 7 days, including:
- IP address of requesting computer
- Date and time of access
- Name and URL of retrieved file
- Referrer URL
- Browser type/version, operating system, and access provider
Processing is based on Art. 6(1)(f) GDPR due to our legitimate interest.
Storing the IP address temporarily is necessary to deliver the website. Log file storage ensures website functionality, optimization, and IT system security. No combination with other personal data occurs.
Integration of Käufersiegel Logo
Our website also integrates the Käufersiegel logo (Händlerbund Management AG, Kohlgartenstraße 11–13, 04315 Leipzig). Access triggers automatic transmission of browser information to the Händlerbund Management AG server, stored in server log files for 7 days. Data collected include:
- IP address of requesting computer
- Date/time of access
- Name/URL of retrieved file
- Referrer URL
- Browser type/protocol, operating system, and access provider
Temporary IP storage is necessary to deliver the site. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our legitimate interest in functionality, optimization, and security.
Storage Duration
After complete contract fulfilment, data will first be stored for the duration of the warranty period, then in accordance with statutory retention periods (particularly tax and commercial law), and finally deleted after expiry of these periods unless you have consented to further processing.
Rights of Data Subjects
If the legal requirements are met, you have the following rights under Articles 15–20 GDPR:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
Additionally, under Article 21(1) GDPR, you have the right to object to processing carried out on the basis of Art. 6(1)(f) GDPR, as well as to processing for direct marketing purposes.