Privacy Policy

Privacy policy

Below we inform you about the processing of your personal data by us. Personal data within the meaning of Art. 4 GDPR is all information relating to an identified or identifiable natural person (e.g. name, address, telephone number, e-mail, invoices, bank details, etc. as well as your user behaviour).

Contents

1.Contact details

2. Lawfulness of the processing of personal data

3. Collection and storage of personal data and the nature and purpose of their use

4. Storage period and data erasure

5. Transfer of data to third parties

6. Hosting

7. Cookies

8. Payment service providers

9. Credit information

10. Analysis services

11. Social media services

12. Other online services

13. Rights of data subjects

14. Right to object

15. Data security

16. Up-to-dateness and amendment of this privacy policy

1. Contact details

This data protection information applies to data processing by the following controller

Controller: Petra Roth

Address: Querstraße 6, 56479 Westernohe

Email: kontakt@steinzauber.de

Telephone: 01577 3595359

Fax: 02664 2878360

2 Lawfulness of the processing of personal data

We collect and use our users' personal data only insofar as this is necessary to provide a functional website and our content and services. The collection and use of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons or where the processing of the data is permitted by law.

According to Article 6 of the General Data Protection Regulation (DSGVO), the processing of personal data is lawful if one or more of the following conditions are met:

- You have given your express consent to the processing in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO,

- processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract in accordance with Art. 6 (1) (b) DSGVO

- there is a legal obligation on our part for the processing pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO

- processing is necessary in order to protect your vital interests or those of another natural person, Art. 6 para. 1 sentence 1 lit. d DSGVO,

- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us pursuant to Art. 6 para. 1 sentence 1 lit. e DSGVO

- processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data, pursuant to Article 6(1)(f) DSGVO.

3 Collection and storage of personal data and the nature and purpose of its use

When using our website, we may process personal data from the users of our website (these may be customers, interested parties and visitors to our website), such as contact data, usage data and communication data.

This is done, among other things, for the purpose of providing a functioning online offering, communicating with the users of our website, processing contact requests or customer enquiries and for the purpose of contract fulfilment. Furthermore, data may be collected and processed for marketing purposes.

In the following, we explain which of your data may be collected and processed and for what purpose.

When visiting the website

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a log file. The following information may be collected without any action on your part and stored until it is automatically deleted

- IP address of the requesting computer

- Date and time of access

- Content of the request (specific page)

- Name and URL of the retrieved file

- Access status/HTTP status code

- Amount of data transferred in each case

- Website from which access was made (referrer URL)

- Browser used and, if applicable, the operating system of your computer and the name of your access provider

- Language and version of the browser software

We process the aforementioned data - if it is collected - for the following purposes:

- Ensuring a smooth connection to the website,

- Ensuring a comfortable use of our website,

- analysing system security and stability and

- for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

In addition, we may use cookies and online services when you visit our website. You can find more detailed explanations in this privacy policy.

Contract initiation/contract fulfilment

We process personal data that we receive as part of pre-contractual enquiries and as part of our business relationship. For example, the following personal data may be collected and processed by us: Title, first name and surname, address, telephone number, e-mail address, IBAN / credit card number together with check digit (in each case only if this is necessary for the processing of payments).

Furthermore, data may be passed on to third parties (see point 5 ‘Passing on data to third parties’ in this privacy policy).

The processing and storage of your transmitted data takes place on the basis of Art. 6 para. 1 sentence 1 lit. b DSGVOfor the purpose of fulfilling a contract or implementing pre-contractual measures. In other cases, we process and store your data on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVOand on the basis of our legitimate interest in processing the enquiry addressed to us in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO.

When using our contact form

If you have questions of any kind, we offer you the opportunity to contact us using a form provided on the website. It is necessary to provide your first and last name and a valid email address so that we know who sent the enquiry and can respond to it. If necessary, the telephone number can be provided voluntarily.

The processing and storage of your transmitted data is based on Art. 6 para. 1 sentence 1 lit. b DSGVOfor the purpose of processing your enquiry. Furthermore, we process your data on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVOand on the basis of our legitimate interest in processing the enquiry addressed to us in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO.

When creating a customer account

You have the option of registering with us and setting up a customer account. The data required for this (e.g. name, address and e-mail address) are marked accordingly and can be found in the input mask. Your personal data is stored in the customer account so that you do not have to enter this data again when you visit our website at a later date and place further orders, thus simplifying the ordering process. The customer account is access-protected by the password you choose yourself at

You can delete your customer account at any time and revoke your consent, with the result that we will irrevocably delete the data stored in the customer account, provided that there are no legal retention periods to the contrary. All you need to do is send a message to the contact details provided in the legal notice (also possible by e-mail).

The processing and storage of your transmitted data takes place on the basis of Art. 6 para. 1 sentence 1 lit. a DSGVO within the scope of your previously given consent and on the basis of Art. 6 para. 1 sentence 1 lit. b DSGVO within the scope of contract fulfilment.

4 Storage period and data deletion

In principle, we only store personal data until the purpose for which you have entrusted us with the data has been fulfilled. The data will then be permanently deleted. However, if there are statutory retention periods for the storage of personal data, we will store it for as long as we are legally obliged to do so. Such obligations regularly arise from legal obligations to provide evidence and retain data, which are regulated in the German Commercial Code and the German Fiscal Code, for example ten years for tax purposes. Once the statutory retention period has expired, the data will be permanently deleted.

Consent to the processing and storage of your personal data in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO can be revoked at any time with the consequence that the data will be permanently deleted, provided that there are no legal retention periods to the contrary.

Further rights, which may prohibit us from processing your personal data, result from Art. 21 para. 1 and para. 2 DSGVO . Information on the resulting right to object can be found in this privacy policy under section 14 ‘Right to object’.

5 Disclosure of data to third parties

We only pass on your personal data to third parties if:

- You have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO ,

- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO is necessary to safeguard our legitimate interests or those of a third party, e.g. for the exercise, defence or assertion of legal claims, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail,

- in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO ,

- this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO , such as the transfer of address data to a transport company. Data may also be passed on to a drop shipper who then sends the goods to you on our behalf. If you order goods that are to be sent to an address other than yours, this is done on the basis of our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO in the proper processing of the contractual relationship, as well as

- pursuant to Art. 6 para. 1 sentence 1 lit. b DSGVO for the purpose of payment processing to the payment service provider commissioned with payment processing and pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO within the scope of our legitimate interests in being able to offer reliable and secure payment processes.

If necessary, an order processing contract has been concluded with the service provider used in accordance with Art. 28 para. 3 sentence 1 DSGVO .

In the event that the customer's personal data is processed in a third country (outside the EU), this is done with the customer's prior consent, as part of the fulfilment of the contract or due to existing legal obligations. The possible transfer takes place in compliance with the legal requirements. In particular, the provisions of Art. 44 to Art. 49 DSGVO apply here.

6. hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on the hoster's servers, possibly in the USA. This may include IP addresses, contact requests, communication data, contract data, contact details, website access and other data generated via a website.

Our hoster will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions with regard to this data. An order processing contract pursuant to Art. 28 para. 3 sentence 1 GDPR has been concluded with the hoster.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers in accordance with Art. 6 para. 1 lit. b DSGVO and in the interest of a secure, fast and effective provision of our online offer in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO .

Host: IONOS

We host our webshop with the following service provider: IONOS SE Elgendorfer Str. 57 56410 Montabaur

Further information on data protection at IONOS can be found at: https://www.ionos.de/impressum

7. cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that results in each case in connection with the specific end device used.

Cookies that are absolutely necessary for the use of the website are used to ensure the smooth functioning of the website and do not require consent. The use of these cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies. This generates a session ID that is assigned to the user's session and stored temporarily. In this way, several windows of our website can be opened and assigned to the same user; log-in data or the contents of the shopping basket are thus retained. Session cookies are deleted when the browser is closed.

We may also use functional cookies. These cookies save the settings made during your last visit to the website, such as the language selection or internal bookmarks, so that they do not have to be selected again. Future visits to our website can thus be made more pleasant.

Performance cookies may also be used. These contain information about how our website is used. For example, we can recognise how often and for how long our website is visited and which subpages are visited. This allows us to see which areas of our website are of particular interest to the user. Performance cookies enable us to analyse your surfing behaviour in order to optimise our online offering. It is not possible to draw conclusions about you as a user.

Marketing cookies from third-party providers may be placed on your end device. The purpose of this is to analyse user behaviour across several websites over a longer period of time as part of online marketing in order to place personalised advertising.

You can configure your browser settings according to your wishes and refuse to accept cookies. We would like to point out that you may then not be able to use all the functions of this website.

Cookies are used either on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO or within the scope of our legitimate interests in a functional website in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO .

8. payment service provider

The processing of personal data by a payment service provider is carried out on the basis of Article 6 (1) sentence 1 lit. b DSGVO for the purpose of contract processing and only to the extent necessary for this purpose and within the scope of our legitimate interests pursuant to Article 6 (1) sentence 1 lit. f DSGVO to be able to offer you reliable and secure payment processes. The responsibility for handling the data collected and processed by the payment provider in accordance with data protection regulations lies with the respective payment provider.

PayPal

When paying using a payment method provided by PayPal (direct debit, credit card, payment by instalments or purchase on account), payment is processed via the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (‘PayPal’ for short).

If you decide in favour of a PayPal payment method, you will be redirected to the PayPal website. For the use of this service, PayPal collects, processes and stores transaction data, such as the amount paid, technical usage data and location data. PayPal reserves the right to carry out a credit check for the above-mentioned payment methods. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency.

For further information on data protection, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-f...

9. creditworthiness information

No creditworthiness information is obtained.

10. analysis services

The tracking measures listed below and used by us are carried out on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO or on the basis of our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO . With the tracking measures used, we want to ensure a needs-based design and the continuous optimisation of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. If necessary, an order processing contract has been concluded with the service provider used in accordance with Art. 28 para. 3 sentence 1 DSGVO . Responsibility for data protection-compliant operation must be guaranteed by the respective provider.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case not all functions of this website may be fully usable. Unless otherwise stated, the data will be stored for a period of two years and then deleted.

Google Analytics

We use Google Analytics on our website. The company responsible is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

Google Analytics uses so-called ‘cookies’ (see section 7 ‘Cookies’). The information generated by the cookies about the use of this website is transmitted directly to Google servers, possibly in the USA, and stored there. We have activated IP anonymisation on this website so that the IP address is shortened by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse the use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The storage period for the personal data collected is 14 months. The data will be deleted after the storage period has expired.

You can also prevent Google from collecting the data generated by the cookie and relating to the use of the website (including the IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

If you do not agree with the display of adverts, you can deactivate them: https://www.google.com/settings/ads/onweb

Further information on Google's privacy policy and terms of use can be found at: https://policies.google.com/privacy

11. social media services

We use social media plugins on our website on the basis of our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO in order to publicise our website. Responsibility for data protection-compliant operation must be guaranteed by the respective provider.

When you access a page of our website that contains a social media plugin, your browser establishes a direct connection to the servers of the respective provider, possibly in the USA. The content of the plugin (including your IP address) is transmitted directly to your browser by the respective provider and integrated into the page. Through this integration, the provider receives the information that your browser has accessed the corresponding page of our website, even if you do not have a customer profile or are not currently logged in with the respective provider.

If you are logged in with a provider, the provider can directly associate your visit to our website with your user account. If you interact with the plugins, for example by clicking a button, this information is also transmitted directly to a server of the respective provider and stored there. The information is also published on your user account and displayed there to your contacts. The respective provider can use this information for the purposes of advertising, market research and the customised design of its pages.

If you do not want the provider to assign the data collected via our website directly to your user account, you must log out of the respective provider before visiting our website.

We would like to point out that, as the operator of the website, we have no knowledge of the content of the transmitted data or its use by the respective provider.

Social networks:

Facebook

We use social media plugins from the social network Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA (‘Facebook’), or - if you are based in the EU - Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Further information on Facebook's privacy policy can be found at

https://www.facebook.com/about/privacy/

Instagram

We use social media plugins from the social network Instagram. The Instagram services are a Facebook product provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (‘Instagram’).

Further information on Instagram's privacy policy can be found at

https://help.instagram.com/155833707900388/

12. other online services

We do not use any other online services.

13. rights of data subjects

You have the right:

- to request information about your personal data processed by us in accordance with Art. 15 DSGVO . In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;

- in accordance with Art. 16 DSGVO , to demand the immediate correction of incorrect or incomplete personal data stored by us

- in accordance with Art. 17 DSGVO , to demand the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims

- in accordance with Art. 18 DSGVO , to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 DSGVO ;

- in accordance with Art. 20 DSGVO , to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller

- in accordance with Art. 7 para. 3 DSGVO , to revoke your consent to us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future and

- pursuant to Art. 77 DSGVO , to lodge a complaint with a supervisory authority if you believe that your personal data has been processed unlawfully. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

14. right to object

IF YOUR PERSONAL DATA IS PROCESSED ON THE BASIS OF OUR LEGITIMATE INTERESTS PURSUANT TO ART. 6 ABS. 1 S. 1 LIT. F GDPR, YOU HAVE THE RIGHT TO OBJECT IN ACCORDANCE WITH ART. 21 ABS. 1 DSGVO TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. AS A RESULT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

YOU CAN ALSO OBJECT IN ACCORDANCE WITH. ART. 21 ABS. 2 DSGVO AGAINST THE PROCESSING OF PERSONAL DATA BY US THAT IS PROCESSED IN ACCORDANCE WITH ART. 6 ABS. 1 S. 1 LIT. F DSGVO FOR THE PURPOSE OF DIRECT MARKETING WITH THE CONSEQUENCE THAT WE WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING.

IF YOU WISH TO EXERCISE YOUR RIGHT OF REVOCATION OR OBJECTION, SIMPLY SEND AN E-MAIL TO THE E-MAIL ADDRESS STATED IN THE IMPRINT.

15 Data security

When you visit our website, we use the widely used SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

16. topicality and amendment of this privacy policy

This privacy policy is currently valid.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current privacy policy at any time on this website.

About this privacy policy

This privacy policy was created by www.gepruefter-webshop.de and is regularly checked for legal certainty. In the event of a warning, www.gepruefter-webshop.de assumes full liability for the legal texts created.