Data protection
Table of contents
A. General Data Processing Provisions
1. Subject of this privacy policy
2. Definitions
3. Name and address of the person responsible for processing
4. Contact details of the data protection officer
5. Deletion and blocking of personal data/ storage period
6. Rights of the data subject
6.1. Right to confirmation
6.2. Right to information
6.3 Right to Rectification
6.4 Right to Erasure
6.5 Right to Restriction of Processing
6.6 Right to data portability
6.7 Right to Object
6.8 Automated Individual Decisions Including Profiling
6.9 Right to revoke consent under data protection law
6.10 Right to complain to a data protection supervisory authority
7. Legal Basis for Processing
8. Consideration of Legitimate Interests
9. Data protection when using our contact details
10. Data protection in applications and in the application process
11. Changes to this Privacy Policy
B. Special provisions for data processing on our website
1. Collection and use of your information
2. Informational use/ data collected/ cookies
3. Google Analytics (with anonymization function)
4. Google AdWords
5. Google Remarketing
6. Google Customer Reviews
7. Facebook Custom Audiences and Facebook Marketing Services
8. Use of offers on our website
8.1 Data processing for the purpose of concluding a contract
8.2 Contact Form
8.3 Newsletter dispatch to customers of our online shop
8.4 “Price Alert” and “Available” Notification by Email
9. Payment Providers
9.1 PayPal
10. Credit Check
11. Integration of the Trusted Shops Trustbadge
12. Social Plugins
13. Live Chat
14. Security Measures
A. General Data Processing Provisions
1. Subject of this privacy policy
We, ALLESTOCK, are pleased that you are interested in our website and our offers on our website.
The protection of your personal data is very important to us. In the following, we would therefore like to inform you in detail about which data is collected when you visit our website, when you use our offers there and how we subsequently process or use it. Furthermore, we will also inform you about the accompanying protective measures we have taken from a technical and organizational point of view.
The processing of personal data, such as the name, address, e-mail address or telephone number of a person concerned, always takes place in accordance with the applicable data protection regulations. By means of this data protection declaration, we would like to inform you about the type, scope and purpose of the personal data we collect, use and process and, if you are affected by the data processing, clarify this. Although we, as the person responsible for the processing of personal data, have implemented numerous technical and organizational measures, internet-based data transmission can generally have security gaps, so that absolute protection cannot be guaranteed. We ask you to take this into account when using our website.
2. Definitions
In this data protection declaration, terms are used that were specified by the legislator in the General Data Protection Regulation (hereinafter also GDPR). You can access the GDPR under the following link:
http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=DE
The aim of our data protection declaration is to inform you in a simple and understandable way about the processing of your personal data on our website.
3. Name and address of the person responsible for processing
Responsible in terms of data protection law is:
ALLESTOCK
Adress: Grefenberger Allee 293, 40237 Düsseldorf Germany
e-mail: info@allestock.de
Personally liable partner of ALLESTOCK:
Company: Allestock GmbH
Adress: Grefenberger Allee 293, 40237 Düsseldorf Germany
Managing Director: Erhan Kaya
Phone: +90 549 770 8989
e-mail: info@allestock.de
4. Contact details of the data protection officer
ALLESTOCK
Erhan Kaya
Adress: Grefenberger Allee 293, 40237 Düsseldorf Germany
Phone: +90 549 770 8989
e-mail: info@allestock.de
5. Deletion and blocking of personal data/ storage period
Unless otherwise regulated in the respective processing of personal data in Chapter B. of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations. If the data of the person concerned is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data on the person concerned that must be retained for commercial or tax reasons. According to the legal requirements, the storage takes place for six years in accordance with § 257 Para. 1 HGB (trading books, inventories, opening balance sheets, annual financial statements,
6. Rights of the data subject
6.1. right to confirmation
Every data subject has the right, granted by the European directive and regulation giver, to request confirmation from the person responsible for processing as to whether personal data relating to them are being processed. If a data subject wishes to exercise this right to confirmation, they can contact us at any time.
6.2. right to information
Every person affected by the processing of personal data has the right to receive free information about the personal data stored about him and a copy of this information from the person responsible for processing at any time. Furthermore, the person concerned is entitled to information about the following:
the processing purposes
the categories of personal data being processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria used to determine that duration
the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing
the existence of a right of appeal to a supervisory authority
if the personal data is not collected from the data subject: all available information about the origin of the data
the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject
Furthermore, the data subject has a right to information as to whether personal data has been transmitted to a third country or to an international organization. If this is the case, the person concerned has the right to receive information about the appropriate guarantees in connection with the transmission. If a data subject wishes to exercise this right to information, they can contact us at any time.
6.3 Right to Rectification
Every person affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data by means of a supplementary statement. If a data subject wishes to exercise this right to rectification, they can contact us at any time.
6.4 Right to Erasure
Every person affected by the processing of personal data has the right to demand that the person responsible delete the personal data concerning them immediately if one of the following reasons applies and if the processing is not necessary:
The personal data were collected for such purposes or otherwise processed for which they are no longer necessary.
The data subject revokes their consent on which the processing was based pursuant to Art. 6 Para. 1 Letter a GDPR or Art. 9 Para. 2 Letter a GDPR and there is no other legal basis for the processing.
The data subject objects to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 (2) GDPR.
The personal data have been unlawfully processed.
Erasure of the personal data is necessary to fulfill a legal obligation in Union or Member State law to which the controller is subject.
The personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.
If one of the above reasons applies and a data subject wishes to have personal data stored at ALLESTOCK deleted, they can contact us at any time. We will ensure that the request for deletion is complied with immediately. If the personal data was made public by ALLESTOCK and our company, as the person responsible, is obliged to delete the personal data in accordance with Art. 17 Para. 1 DSGVO, ALLESTOCK shall take into account the available Technology and the implementation costs appropriate measures, also of a technical nature, to other persons responsible for data processing who process the published personal data, to be informed that the data subject has requested the deletion of all links to this personal data or copies or replications of this personal data from these other data controllers, insofar as the processing is not necessary. We will arrange what is necessary in individual cases.
6.5 Right to Restriction of Processing
Any person affected by the processing of personal data has the right to request that the person responsible restrict the processing if one of the following conditions is met:
The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject refuses the deletion of the personal data and instead requests the restriction of the use of the personal data.
The person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims.
The data subject has lodged an objection to the processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
If one of the aforementioned cases applies and a data subject wishes to request the restriction of personal data stored at ALLESTOCK, they can contact us at any time. We will then arrange for the processing to be restricted.
6.6 Right to data portability
Every person affected by the processing of personal data has the right to receive the personal data relating to them, which the person concerned has provided to a person responsible, in a structured, common and machine-readable format. The data subject also has the right to transmit this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that the processing is based on the consent in accordance with Article 6 Paragraph 1 Letter a GDPR or Article 9 Paragraph 2 letter a GDPR or on a contract pursuant to Article 6 paragraph 1 letter b GDPR and the processing is carried out using automated procedures, unless the processing is necessary for the performance of a task,
Furthermore, when exercising their right to data portability in accordance with Art. 20 Para. 1 GDPR, the data subject has the right to obtain that the personal data be transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible and insofar as this is not the case the rights and freedoms of other people are impaired. The person concerned can contact us at any time to assert the right to data portability.
6.7 Right to Object
Every person affected by the processing of personal data has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data relating to them, which is based on Article 6 (1) (e) or (f) GDPR . This also applies to profiling based on these provisions. In the event of an objection, ALLESTOCK will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves the purpose of Assertion, exercise or defense of legal claims.
If ALLESTOCK processes personal data in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to ALLESTOCK to the processing for direct marketing purposes, ALLESTOCK will no longer process the personal data for these purposes. In addition, the data subject has the right, for reasons arising from their particular situation, against the processing of personal data relating to them, which is carried out at ALLESTOCK for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 GDPR to object, unless such processing is necessary to fulfill a task in the public interest. In order to exercise the right to object, the person concerned can contact us directly. The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise their right to object by automated means using technical specifications. In order to exercise the right to object, the person concerned can contact us directly. The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise their right to object by automated means using technical specifications. In order to exercise the right to object, the person concerned can contact us directly. The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise their right to object by automated means using technical specifications.
6.8 Automated Individual Decisions Including Profiling
Every person affected by the processing of personal data has the right granted by the European directive and regulation giver not to be subjected to a decision based solely on automated processing - including any profiling - which has legal effects on them or on them in a similar way significantly affected, unless the decision
is necessary for entering into, or the performance of, a contract between the data subject and the controller, or
is permissible on the basis of legal provisions of the Union or the Member States to which the person responsible is subject and these legal provisions contain appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, or
with the express consent of the data subject.
Is the decision
necessary for the conclusion or performance of a contract between the data subject and the person responsible, or
it is based on the data subject's explicit consent, the ALLESTOCK shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, heard to state their own point of view and to challenge the decision.
If the data subject wishes to assert rights relating to automated decisions, they can contact us at any time.
6.9 Right to revoke consent under data protection law
Any person affected by the processing of personal data has the right to revoke consent to the processing of personal data at any time. If the data subject wishes to assert their right to revoke consent, they can contact us at any time. Every data subject can contact us directly at any time with any questions or suggestions regarding data protection.
6.10 Right to complain to a data protection supervisory authority
Every person affected by the processing of personal data has the right to complain to a data protection supervisory authority about the processing of your personal data by us.
7. Legal Basis for Processing
Unless otherwise stated in the description of the respective data processing operation in the following chapter B. of this data protection declaration, the following regulations apply.
Art. 6 I lit. a GDPR serves ALLESTOCK as the legal basis for processing operations in which consent must be obtained for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract to which the data subject is a party, the processing is based on Article 6(1)(b) GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in the case of inquiries about our services and products. If ALLESTOCK is subject to a legal obligation which requires the processing of personal data, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data could become necessary to protect the vital interests of the data subject or another natural person. In this case, the processing is based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of ALLESTOCK or a third party, provided that the interests, fundamental rights and fundamental freedoms of the person concerned do not prevail. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator (cf.
8. Consideration of Legitimate Interests
Unless otherwise specified in the description of the respective data processing procedure in Chapter B. of this data protection declaration and the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is the performance of our business activities and the associated economic interest.
9. Data protection when using our contact details
If you use the contact details provided on our website (such as our e-mail address or fax number) to contact us, the personal data you provide will only be processed for the purpose of contacting us. If the reason for your contact is your interest in our services or products or the fulfillment of an existing contract with us, the legal basis is Article 6 Paragraph 1 Letter b GDPR. In all other cases of contact, we have a legitimate interest in data processing based on the communication initiated by you in accordance with Article 6 (1) (f) GDPR. We store the data required to process the contract until the statutory warranty and, if applicable, contractual warranty periods have expired. We store the data required under commercial and tax law for the legally stipulated periods, usually ten years (cf. Section 257 HGB, Section 147 AO). The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and a contract is clearly not concluded. The personal data stored by us on the basis of a legitimate interest will be stored until the purpose for which the contact was made has been achieved. You have the right to object at any time to the data processing that is based on Art. 6 Para. 1 f) GDPR and is not used for direct advertising for reasons that arise from your particular situation. In the case of direct advertising, however, you can object to the processing at any time without giving reasons.
10. Data protection in applications and in the application process
We collect and process the personal data of applicants for the purpose of carrying out the application process and thus on the basis of a pre-contractual measure within the meaning of Article 6 (1) (b) GDPR or our legitimate interest in accordance with Article 6 (1) (f) GDPR employment of employees. Processing can also take place electronically, for example if an applicant sends us the relevant application documents electronically, for example by e-mail or via our contact form. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the person responsible for processing does not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests of the person responsible for processing. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). Due to the digitized recording of the applications received, the recipients of the processed personal data are our IT service providers (in particular hosters), with whom we have concluded corresponding order processing within the meaning of Art. 28 DSGVO. provided that no other legitimate interests of the person responsible for processing stand in the way of deletion. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). Due to the digitized recording of the applications received, the recipients of the processed personal data are our IT service providers (in particular hosters), with whom we have concluded corresponding order processing within the meaning of Art. 28 DSGVO. provided that no other legitimate interests of the person responsible for processing stand in the way of deletion. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). Due to the digitized recording of the applications received, the recipients of the processed personal data are our IT service providers (in particular hosters), with whom we have concluded corresponding order processing within the meaning of Art. 28 DSGVO.
11. Changes to this Privacy Policy
ALLESTOCK reserves the right to change these data protection provisions at any time with effect for the future. A current version is available on the website. Please visit the website regularly and find out about the applicable data protection regulations.
B. Special provisions for data processing on our website
1. Collection and use of your information
The scope and type of collection and use of your data differs depending on whether you visit our website only to call up information or whether you use the services we offer, such as concluding a contract via the website, and register if necessary.
2. Informational use/ data collected/ cookies
(1) If you only use the website for informational purposes, i.e. if you do not make a booking via our website or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR):
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access Status/HTTP Status Code
Website from which the request comes
browsers
Operating system and its interface
Browser software language and version
(2) The data processed in accordance with paragraph 1 of this provision will be stored for the stated purposes for a maximum of 30 days and then deleted.
(3) In addition to the aforementioned data, cookies are stored on your computer when you use our website. This is based on our legitimate interest in the optimization and economic operation of our online offer in accordance with Article 6 Paragraph 1 Letter f GDPR. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using and through which certain information flows to the place that sets the cookie (here from us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.
(4) Use of cookies:
a) Our website uses the following types of cookies, the scope and functionality of which are explained below:
Transient cookies (see b)
Persistent cookies (see c).
b) Transient cookies are automatically deleted when you close your browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period, which differs depending on the cookie and can be several years. You can delete the cookies in the security settings of your browser at any time.
d) You can configure your browser settings according to your wishes and e.g. B. refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.
e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit.
(5) Recipients of the data processed in accordance with the above paragraphs are IT service providers (in particular hosters) with whom we have concluded corresponding order processing agreements in accordance with Art. 28 DSGVO.
3. Google Analytics (with anonymization function)
On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. DSGVO) we use Google Analytics, a web analysis service provided by Google Inc. Mountain View, CA 94043-1351, USA ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there.
We use the addition "_gat._anonymizeIp" for the web analysis via "Google Analytics". With this addition, the IP address of the Internet connection of the person concerned is shortened and anonymized by Google if our website is accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyze visitor flows on our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website. Google Analytics places a cookie on the end device of the data subject. By setting the cookie, Google is able to analyze the use of our website. Each time one of the individual pages of our website is accessed on which a Google Analytics component has been integrated, the Internet browser on the data subject's end device is automatically prompted by the respective Google Analytics component to transmit data to Google for online analysis purposes . As part of this technical process, Google gains knowledge of personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission statements. By setting the cookie, Google is able to analyze the use of our website. Each time one of the individual pages of our website is accessed on which a Google Analytics component has been integrated, the Internet browser on the data subject's end device is automatically prompted by the respective Google Analytics component to transmit data to Google for online analysis purposes . As part of this technical process, Google gains knowledge of personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission statements. By setting the cookie, Google is able to analyze the use of our website. Each time one of the individual pages of our website is accessed on which a Google Analytics component has been integrated, the Internet browser on the data subject's end device is automatically prompted by the respective Google Analytics component to transmit data to Google for online analysis purposes . As part of this technical process, Google gains knowledge of personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission statements. Each time one of the individual pages of our website is accessed on which a Google Analytics component has been integrated, the Internet browser on the data subject's end device is automatically prompted by the respective Google Analytics component to transmit data to Google for online analysis purposes . As part of this technical process, Google gains knowledge of personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission statements. Each time one of the individual pages of our website is accessed on which a Google Analytics component has been integrated, the Internet browser on the data subject's end device is automatically prompted by the respective Google Analytics component to transmit data to Google for online analysis purposes . As part of this technical process, Google gains knowledge of personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission statements.
The cookie is used to store personal information, such as access time, the location from which access was made and the frequency of visits to our website by the person concerned. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google Inc. in the USA. This personal data is stored by Google Inc. in the USA for 14 months. Google Inc. may pass on the personal data collected via the technical process to third parties. The person concerned can prevent the setting of cookies by our website at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
Furthermore, the person concerned has the option of objecting to and preventing the collection of data generated by Google Analytics relating to the use of our website and the processing of this data by Google. To do this, the person concerned must use a browser add-on under the link http://tools.google.com/dlpage/gaoptout?hl=dedownload and install. This browser add-on tells Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is evaluated by Google as a contradiction. If the data is later deleted, formatted or reinstalled on the data subject's end device, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person who is attributable to their sphere of influence, there is the possibility of reinstalling or reactivating the browser add-on.
You can prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will be set to prevent future collection of your data when you visit this website:
Disable Google Analytics
You can find more information on the terms of use and data protection at
http://www.google.com/analytics/terms/de.html or at
https://www.google.de/intl/de/policies/ .
Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/ .
4. Google AdWords
On the basis of our legitimate interests (ie interest in the economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. DSGVO) we use the "Google AdWords" service of Google Inc., 1600 Amphitheater Pkwy, Mountain on our website View, CA 94043-1351, USA. Google AdWords is an internet advertising service that allows advertisers to place ads in both Google search engine results and the Google advertising network. Google AdWords allows an advertiser to pre-define certain keywords that will be used to display an ad in Google's search engine results only when the user retrieves a relevant search result from the Google search engine.
The purpose of Google AdWords is to promote our website by displaying interest-based advertising on the websites of third-party companies and in the Google search engine results and displaying third-party advertising on our website. If a data subject accesses our website via a Google ad, a so-called conversion cookie is stored on the data subject's end device by Google Inc., which loses its validity after thirty days and is not used to identify the data subject. If it has not yet expired, the conversion cookie is used to determine whether certain sub-pages on our website have been accessed. The conversion cookie enables both us and Google to understand whether a data subject, who reached our website via an AdWords ad, generated sales, i.e. completed or canceled a purchase of goods. The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. In turn, we use these visit statistics to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future . Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the person concerned. The conversion cookie is used to store personal data, such as the websites visited by the data subject. Accordingly, each time you visit our website, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the USA. This personal data is stored by Google in the USA. Google may pass this personal data on to third parties. The person concerned can prevent the setting of cookies by our website at any time by means of a corresponding setting in the Internet browser and thus permanently object to the setting of cookies. Such a setting of the Internet browser would also prevent Google from setting a conversion cookie on the end device of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or using other software. Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the person concerned must click on the link from each of the Internet browsers they useGo to https://www.google.de/settings/ads and make the desired settings there. Further information and Google's applicable data protection regulations can be found at https://www.google.de/intl/de/policies/privacy/ .
5. Google Remarketing
On the basis of our legitimate interests (ie interest in the economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. DSGVO) we use the "Google Remarketing" service of Google Inc., 1600 Amphitheater Pkwy, on our website. Mountain View, CA 94043-1351, USA.
Google Remarketing is a Google AdWords feature that allows a company to serve ads to Internet users who have previously visited the company's website. The integration of Google Remarketing therefore allows a company to create user-related advertising and consequently to display interest-relevant advertisements to the Internet user. Google Remarketing places a cookie on the end device of the data subject. With the setting of the cookie, Google is able to recognize the visitor to our website if he or she subsequently calls up websites that are also members of the Google advertising network. With each visit to a website on which the Google Remarketing service has been integrated, The Internet browser of the person concerned automatically identifies itself to Google. As part of this technical process, Google gains knowledge of personal data, such as the IP address or the surfing behavior of the user, which Google uses, among other things, to display interest-based advertising. The cookie is used to store personal information, such as the Internet pages visited by the person concerned. Each time you visit our website, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google Inc. in the USA. This personal data is stored by Google Inc. in the USA. Google may pass this collected personal data on to third parties. The person concerned can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser would also prevent Google from setting a cookie on the end device of the person concerned. In addition, a cookie already set by "Google Analytics" can be deleted at any time via the Internet browser or using other software. Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the person concerned must click on the link via the respective Internet browser You can prevent this at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser would also prevent Google from setting a cookie on the end device of the person concerned. In addition, a cookie already set by "Google Analytics" can be deleted at any time via the Internet browser or using other software. Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the person concerned must click on the link via the respective Internet browser You can prevent this at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser would also prevent Google from setting a cookie on the end device of the person concerned. In addition, a cookie already set by "Google Analytics" can be deleted at any time via the Internet browser or using other software. Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the person concerned must click on the link via the respective Internet browser that Google places a cookie on the end device of the data subject. In addition, a cookie already set by "Google Analytics" can be deleted at any time via the Internet browser or using other software. Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the person concerned must click on the link via the respective Internet browser that Google places a cookie on the end device of the data subject. In addition, a cookie already set by "Google Analytics" can be deleted at any time via the Internet browser or using other software. Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the person concerned must click on the link via the respective Internet browserGo to https://www.google.de/settings/ads and make the desired settings there. Further information and Google's applicable data protection regulations can be found at https://www.google.de/intl/de/policies/privacy/ .
6. Google Customer Reviews
We use the "Google Customer Reviews" program, which is offered by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").
The program gives us the opportunity to obtain customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to take part in a Google email survey. If you give your consent in accordance with Article 6(1)(a) GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the shopping experience on our website. The rating you provide will then be aggregated with our other ratings and displayed on our Google Customer Reviews badge and on our Merchant Center dashboard, as well as being used for Google Seller Ratings.
You can revoke your consent at any time by sending a message to the person responsible for data processing or to Google.
Further information on Google's data protection in connection with the Google customer reviews program can be found under the following link: https://support.google.com/merchants/answer/7188525?hl=de
For more information about Google Seller Ratings privacy, please visit this link: https://support.google.com/adwords/answer/2375474
7. Facebook Custom Audiences and Facebook Marketing Services
Within our online offer, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1st Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
With the help of the Facebook pixel, Facebook is able to determine the visitors of our online offer as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel to only display the Facebook ads we have placed to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, which are based on the visited website). websites are determined), which we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users and are not annoying. With the help of the Facebook pixel, we can also understand the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Furthermore, the website uses the remarketing function “Custom Audiences” from Facebook Inc. (“Facebook”). As a result, users of the website can be shown interest-based advertisements ("Facebook Ads") when they visit the social network Facebook or other websites that also use the process. In doing so, we are interested in showing you advertising that is of interest to you in order to make our website more interesting for you. in which we can see whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Furthermore, the website uses the remarketing function “Custom Audiences” from Facebook Inc. (“Facebook”). As a result, users of the website can be shown interest-based advertisements ("Facebook Ads") when they visit the social network Facebook or other websites that also use the process. In doing so, we are interested in showing you advertising that is of interest to you in order to make our website more interesting for you. in which we can see whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Furthermore, the website uses the remarketing function “Custom Audiences” from Facebook Inc. (“Facebook”). As a result, users of the website can be shown interest-based advertisements ("Facebook Ads") when they visit the social network Facebook or other websites that also use the process. In doing so, we are interested in showing you advertising that is of interest to you in order to make our website more interesting for you. As a result, users of the website can be shown interest-based advertisements ("Facebook Ads") when they visit the social network Facebook or other websites that also use the process. In doing so, we are interested in showing you advertising that is of interest to you in order to make our website more interesting for you. As a result, users of the website can be shown interest-based advertisements ("Facebook Ads") when they visit the social network Facebook or other websites that also use the process. In doing so, we are interested in showing you advertising that is of interest to you in order to make our website more interesting for you.
To prevent the collection of your data using the Facebook pixel on our website, please click the following link: Facebook Opt-Out Note: If you click the link, an "opt-out" cookie will be stored on your device. If you delete the cookies in this browser, you must click the link again. Furthermore, the opt-out only applies within the browser you are using and only within our web domain on which the link was clicked. You can also opt out of the use of cookies, which are used to measure reach and for advertising purposes, via the deactivation page of the network advertising initiative ( http://optout.networkadvertising.org/ ) and also the US website ( http://www.aboutads.info/ choices) or the European website ( http://www.youronlinechoices.com/uk/your-ad-choices/ ).
8. Use of offers on our website
If you want to use the services offered on our website, such as paid bookings in our online shop or ordering a newsletter, you will need to provide additional personal data. Details on this can be found in the following regulations.
8.1 Data processing for the purpose of concluding a contract
(1) Your personal data, which you make available to us during the booking process, is required for the conclusion of a contract with us (e.g. information on the contractual partner) or is required by law (e.g. tax regulations). Failure to provide the personal data would mean that the contract with you could not be concluded. For some payment methods, we need the necessary payment data in order to pass them on to a payment service provider commissioned by us. If you send us an inquiry by e-mail, via a contact form or conclude a contract via our website before the contract is concluded, we will process the data received in this way to carry out pre-contractual measures and, for example, answer your questions about our services or products. You can voluntarily create a customer account through which we can save your data for future purchases. When you create an account under "My Account", the data you provide will be stored revocably. You can request the deletion of your customer account at any time by sending an email to info@fk-soehnchen.de. The data you entered is therefore processed for the purpose of fulfilling the contract or to carry out pre-contractual measures in accordance with Art. 6 Para. 1 b DSGVO and to fulfill legal obligations in accordance with Art. 6 Para. 1 c DSGVO. You can request the deletion of your customer account at any time by sending an email to info@fk-soehnchen.de. The data you entered is therefore processed for the purpose of fulfilling the contract or to carry out pre-contractual measures in accordance with Art. 6 Para. 1 b DSGVO and to fulfill legal obligations in accordance with Art. 6 Para. 1 c DSGVO. You can request the deletion of your customer account at any time by sending an email to info@fk-soehnchen.de. The data you entered is therefore processed for the purpose of fulfilling the contract or to carry out pre-contractual measures in accordance with Art. 6 Para. 1 b DSGVO and to fulfill legal obligations in accordance with Art. 6 Para. 1 c DSGVO.
(2) Recipients of the personal data processed according to this provision are payment service providers, shipping service providers, IT service providers (especially hosting), merchandise management systems with whom we have concluded corresponding order processing agreements in accordance with Art. 28 DSGVO.
(3) We store the data required for contract processing until the end of the statutory warranty and, if applicable, contractual warranty periods. We store the data required under commercial and tax law for the legally stipulated periods, usually ten years (cf. Section 257 HGB, Section 147 AO). The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and a contract is clearly not concluded.
8.2 Contact Form
(1) If you use our contact form voluntarily, you will be asked to provide your first name, surname, e-mail address, telephone number if applicable and the reason for your enquiry/contact (message). The only mandatory information for your request is your e-mail address. The information is only collected and stored to answer your request.
(2) When you register, we save your IP address and the time of registration. The purpose of the procedure is to be able to prove your request and, if necessary, to be able to clarify any possible misuse of your personal data.
(3) The legal basis for the processing of your personal data is your express consent pursuant to Article 6 Paragraph 1 Letter a GDPR and our legitimate interest pursuant to Article 6 Paragraph 1 Letter f GDPR in answering your inquiry about our Services or offers and proof of possible misuse of the e-mail address used for this purpose.
(4) After your confirmation, we store the information you provide via the contact form until the purpose of your request has been fulfilled. We store the personal data stored in accordance with paragraph 2 for a maximum of one month after receipt of the confirmation.
(5) Recipients of the data processed in accordance with this provision are IT service providers (in particular hosters) with whom we have concluded corresponding order processing agreements in accordance with Art. 28 GDPR.
8.3 Newsletter dispatch to customers of our online shop
(1) The newsletter is sent on the basis of the purchase of goods or the ordering of services from us via our online shop. If you purchase goods or services on our website and enter your e-mail address, this can subsequently be used by us to send a newsletter. In such a case, only direct advertising for your own similar goods or services will be sent via the newsletter.
(2) The legal basis for sending the newsletter is Section 7 (3) UWG or our legitimate interests under Article 6 (1) (f) GDPR in direct advertising to our customers for identical or similar products or services.
(3) The purpose of collecting the user's email address is to deliver the newsletter.
(4) The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the customer has not objected to the newsletter being sent.
(5) The customer can object to the use of his e-mail address for sending the newsletter at any time without giving reasons. By exercising the objection, the customer does not incur any costs other than the necessary transmission costs according to the basic tariffs. For this purpose, each newsletter contains a link to unsubscribe from the newsletter with the following text:
"If you have made a purchase of goods and services from us, we are entitled to send you information about our own similar goods and services via the e-mail address sent when you made the purchase. You can use your e-mail address at any time as a whole or for individual measures , e.g. by e-mail (info@fk-soehnchen.de), fax (02353/66795-55), letter (ALLESTOCK, Glörfeld 3, D-58553 Halver) or activation of the link below (" Would you like to unsubscribe from our newsletter? Then click here") without incurring any costs other than the transmission costs according to the basic tariffs."
(6) There is no transfer of data to third parties in connection with data processing for sending newsletters. The data will only be used by us to send the newsletter.
(7) We use rapidmail to send our newsletter. Your data will therefore be transmitted to rapidmail GmbH. Rapidmail GmbH is prohibited from using your data for purposes other than sending the newsletter. Rapidmail GmbH is not permitted to pass on or sell your data. rapidmail is a German, certified newsletter software provider that has been carefully selected according to the requirements of the GDPR and the BDSG.
We use SendGrid to send our order and shipping confirmations, as well as to use the Price Alert and Back in Stock features. The provider is SendGrid Inc., 1801 California Street, Suite 500, Denver, CO 80202. Sendgrid is a service with which e-mails can be sent and analyzed. If you enter data for the purpose of subscribing to the newsletter (e.g. e-mail address), this will be stored on the SendGrid servers.
For more information on how your personal data is handled, see SendGrid's privacy policy at: https://sendgrid.com/policies/privacy/
8.4 “Price Alert” and “Available” Notification by Email
(1) With your consent and by providing your e-mail address, you can use our "price alert" function, with which we can inform you about the current price of your desired product. The only mandatory information for sending the newsletter is your e E-mail address With your consent and by providing your e-mail address, you can use our "Again available" function, with which we can inform you about the new stock of your desired product if it is sold out. The only mandatory information for sending the newsletter is your e-mail address.
(2) We use the so-called double opt-in procedure to use the functions. This means that after you have registered, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you want the desired price information for the selected item. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to be able to clarify any possible misuse of your personal data. After your confirmation, we will store the information you have provided in accordance with para.
(3) The legal basis for the processing of your personal data is your express consent in accordance with Article 6 Paragraph 1 Letter a GDPR and, with regard to the data processed in accordance with Paragraph 2, our legitimate interest in accordance with Article 6 Paragraph 1 Letter f DSGVO on proof of possible misuse of the e-mail address used for this purpose.
(4) You can revoke your consent to the sending of information about the selected item at any time and thus unsubscribe. You can declare your revocation by clicking on the link provided in every information e-mail or by sending an e-mail to info@fk-soehnchen.de or by sending a message to the contact details given in the imprint.
(5) Your e-mail address will only be saved for the duration of the registration in order to send the requested information. The other data stored in accordance with paragraph 1 will be deleted by us after a maximum of one month after you unsubscribe.
(6) Recipients of the data processed in accordance with this provision are IT service providers (in particular hosters) with whom we have concluded corresponding order processing agreements in accordance with Art. 28 GDPR.
9. Payment Providers
If our customers use third-party payment services (e.g. PayPal or Sofortüberweisung), the terms and conditions and data protection notices of the respective third-party providers, which can be called up within the respective websites or transaction applications, apply.
9.1 PayPal
Since we also use components of the online payment service "PayPal" from PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg, we would like to point out that this is done on the basis of Article 6 (1) sentence 1 lit. f GDPR. Our legitimate interest in this lies in the outsourcing and optimization of payment processing. The legitimate interest on the part of PayPal is the collection of data for the purpose of processing payments. This service is used to process payments via so-called "PayPal accounts", which represent virtual private or business accounts. In addition, "PayPal" offers the option of processing virtual payments via credit cards if the user does not have a "PayPal account". A "PayPal Account" is maintained through an email address. "PayPal" makes it possible to make online payments to third parties or to receive payments. "PayPal" also assumes trustee functions and offers buyer protection services.
If the person concerned selects "PayPal" as the payment option during the ordering process in our online shop, the data of the person concerned is automatically sent to "PayPal (Europe) S.à.rl & Cie. SCA" transmitted. By selecting this payment option, the data subject agrees to the transfer of personal data required for payment processing. In the case of the “PayPal (Europe) S.à.rl & Cie. SCA" transmitted personal data is usually first name, last name, address, email address, IP address, telephone number, mobile phone number and other data necessary for payment processing. Personal data related to the respective online order are also required to process the purchase contract.
The transmission of the data is intended for payment processing and fraud prevention. We will use the "PayPal (Europe) S.à.rl & Cie. SCA" transmit personal data in particular if there is a legitimate interest in the transmission. Between the "PayPal (Europe) S.à.rl & Cie. SCA" and the personal data exchanged with us may be transmitted to credit reporting agencies. The purpose of this transmission is to check identity and creditworthiness. "PayPal (Europe) S.à.rl & Cie. SCA" may pass on the personal data to its affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill the contractual obligations or the data is to be processed on behalf of the company.
The data subject has the option of withdrawing their consent to the handling of personal data from PayPal (Europe) S.à.rl & Cie. SCA” to revoke. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing. The applicable data protection regulations of "PayPal (Europe) S.à.rl & Cie. SCA" can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full .
10. Credit Check
In the case of a purchase on account or direct debit, we make advance payments, which is why in these cases we pass on data to the financial service provider Creditreform Boniversum GmbH to check the creditworthiness of the applicant. For the information of the applicant, we are providing you with the following consumer information in accordance with Article 13 of the General Data Protection Regulation of Creditreform Boniversum GmbH. This consumer information was made available to us by Creditreform Boniversum GmbH. Creditreform Boniversum GmbH is responsible for the following content.
For consumers: Information according to EU-DSGVO about Creditreform Boniversum GmbH
1. Name and contact details of the responsible body and the company data protection officer
Responsible within the meaning of Art. 4 No. 7 EU General Data Protection Regulation (EU-DSGVO) is Creditreform Boniversum GmbH, Hellersbergstr. 11, 41460 Neuss, Tel.: +49 (0)2131/109-501. You can reach our data protection officer at the above address or by email at datenschutz@boniversum.de.
2. Data processing by Creditreform Boniversum GmbH
Purposes of data processing and legitimate interests pursued by Creditreform Boniversum GmbH or by a third party. Creditreform Boniversum GmbH is a consumer credit agency. It operates a database in which creditworthiness information about private individuals is stored. In particular, information about the name, address, date of birth, e-mail address, if applicable, payment history and shareholdings of persons is stored in the Creditreform Boniversum database. The purpose of processing the stored data is to provide information about the creditworthiness of the person requested. The legal basis for processing is Art. 6 Para. 1f EU-DSGVO. Information about this data may then only be given if a customer credibly demonstrates a legitimate interest in knowing this information. If data is transmitted to countries outside the EU, this is done on the basis of the so-called "standard contractual clauses", which you can find under the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/? uri=CELEX:32001D0497&from=DE or have it sent to you.
Legal bases for data processing
Creditreform Boniversum GmbH processes personal data on the basis of the provisions of the General Data Protection Regulation. The processing takes place on the basis of consent and on the basis of Art. 6 Para. 1 Letter f DS-GVO, insofar as the processing is necessary to protect the legitimate interests of the person responsible or a third party and not the interests or fundamental rights and freedoms of the person concerned, that require the protection of personal data prevail. Consent can be revoked at any time to the relevant contractual partner. This also applies to consents that were granted before the GDPR came into force. The revocation of the consent does not affect the legality of the personal data processed until the revocation.
Origin of the data
Creditreform Boniversum GmbH operates a database in which creditworthiness information about private individuals is stored. On this basis, Creditreform Boniversum GmbH provides credit information to its customers. Customers include, for example, credit institutions, leasing companies, insurance companies, telecommunications companies, receivables management companies, mail order, wholesale and retail companies and other companies that supply or provide goods or services. The data that Creditreform Boniversum GmbH has stored about you comes from publicly accessible sources, from collection agencies and their customers.
Categories of personal data that are processed
In the database of Creditreform Boniversum GmbH, information is stored in particular about the name, address, date of birth, e-mail address, if applicable, payment history and shareholdings of persons.
Categories of recipients of personal data
Recipients are exclusively contractual partners of Creditreform Boniversum GmbH. These are essentially mail order and e-commerce, telecommunications and insurance companies, energy supply and service companies, banks and financial service providers. Other recipients are clearing houses and lawyers.
Duration of data storage
The data will be stored for as long as knowledge of it is necessary to fulfill the purpose of storage. The knowledge is usually necessary for an initial storage period of three years. After expiry, it is checked whether storage is still necessary, otherwise the data will be deleted to the exact day. If a matter is settled, the data will be deleted to the exact day three years after settlement. According to § 882e ZPO, entries in the register of debtors are deleted to the day after three years from the date of the entry order. Further details can be found in the "Rules of Conduct for the Review and Deletion Periods of Personal Data by the German Credit Agencies" drawn up by the association "Die Wirtschaftsauskunfteien eV".
3. Rights of data subjects / right of objection
You have the right to information from Creditreform Boniversum GmbH about the data stored about you. If the data stored about you is incorrect, you have the right to have it corrected or deleted. If it cannot be determined immediately whether the data is incorrect or correct, you are entitled to have the respective data blocked until the matter has been clarified. If your data is incomplete, you can request that it be completed. If you have given your consent to the processing of the data stored by Creditreform Boniversum GmbH, you have the right to revoke this consent at any time. The revocation does not affect the legality of the processing of your data that has taken place on the basis of your consent up to a possible revocation. If you have any objections If you have any requests or complaints about data protection, you can contact the data protection officer at Creditreform Boniversum GmbH at any time. This will help you quickly and confidentially in all questions of data protection. Of course, you can also complain about the processing of the data by Creditreform Boniversum GmbH to the data protection officer responsible for your federal state. The processing of the data stored at Creditreform Boniversum GmbH takes place for compelling reasons worthy of protection of creditor and credit protection, which regularly outweigh your interests, rights and freedoms or serves to assert, exercise or defend legal claims. Only for reasons that arise from a special situation in your case and must be proven, you can object to the processing of your data by Creditreform Boniversum GmbH. If such special reasons are proven to exist, the data will no longer be processed there. We ask that you direct any queries to our Consumer Service, Tel.: +49 (0)2131/36845560, email: selbstauskunft@boniversum.de. You can also address an objection to data processing for reasons that arise from the particular situation of the person concerned (Art. 21 Para. 1 EU-DSGVO) to this office.
4. Profiling / Scoring
In order to describe your creditworthiness, Creditreform Boniversum GmbH creates a score for your data. The score value includes data on age and gender, address data and, in some cases, payment history data. This data is included in the score value calculation with different weighting. Creditreform Boniversum customers use the score values as an aid when making their own credit decisions.
11. Integration of the Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and any reviews collected, as well as to offer Trusted Shops products to buyers after an order. This serves to safeguard our overriding legitimate interests in optimal marketing of our offer in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the call, amount of data transferred and the requesting provider (access data) and documents the call. This access data is not evaluated and automatically overwritten no later than seven days after the end of your visit to the site. Other personal data will only be transmitted to Trusted Shops if you have given your consent, decide to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement made between you and Trusted Shops applies.
12. Social Plugins
No "social plugins" are used on our website. We only provide links to individual "social media services". Which data is collected and how it is used can be found in the data protection notices of the respective provider.
13. Live Chat
This website uses LiveChat, a real-time chat software from LiveChat, Inc, One International Place, Suite 1400, Boston, MA 02110-2619, United States of America.
To enable a personal conversation in the form of a real-time chat with us, LiveChat uses text files that are stored on your device ("cookies"). The information generated by the cookie about the use of our website is usually transmitted to a LiveChat, Inc. server in the USA and stored there.
The legal basis for data processing using LiveChat is the consent you gave before using the service in accordance with Article 6(1)(a) GDPR. As an American company, LiveChat follows the requirements of the General Data Protection Regulation (EU-GDPR). Information on how LiveChat uses your data in connection with the EU GDPR can be found here: https://www.livechatinc.com/general-data-protection-regulation/ .
14. Security Measures
We take organizational, contractual and technical security measures according to the state of the art to ensure that the data protection regulations are observed and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security measures include, in particular, the encrypted transmission of data between your browser and our server.