Privacy Policy
§ 1 General Information
Your personal data (e.g. title, name, address, email address, telephone number, bank details, credit card number) will be processed by us only in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following regulations inform you not only about the purposes of processing, recipients, legal bases, and storage periods, but also about your rights and the controller responsible for your data processing. This privacy policy applies only to our websites. If you are redirected to other pages via links on our site, please inform yourself there about the respective handling of your data.
§ 2 Data Processing for Contract Fulfillment
(1) Purpose of Processing
Your personal data provided during the order process is necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, without your address, we cannot send you the goods. For certain payment methods, we need the required payment data to pass on to a payment service provider commissioned by us. The processing of the data entered during the order process is therefore for the purpose of contract fulfillment.
If you send us an inquiry by email or via a contact form prior to the conclusion of a contract, we will process the data received in this way to carry out pre-contractual measures and to respond to your questions about our products.
In the case of opening a customer account, your data (especially name, address, payment method, email, and password) will be processed for registration and the creation of a customer login. With the stored data, you can shop faster and view your past orders at any time. You can delete the account at any time by notifying us or using a deletion function.
(2) Legal Basis
The legal basis for this processing is Art. 6 para. 1(b) GDPR.
(3) Categories of Recipients
Payment service providers, shipping service providers, hosting providers, if applicable merchandise management systems, if applicable suppliers (dropshipping).
(4) Storage Period
We store the data required for contract processing until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.
We retain the data required under commercial and tax law for the legally specified periods, regularly ten years (see § 257 HGB, § 147 AO).
The data processed for the execution of pre-contractual measures is deleted as soon as the measures have been carried out and it is clear that a contract will not be concluded.
§ 3 Comments
(1) Purpose of Processing
It is possible to leave a comment. Your data (e.g. name/pseudonym, email address, website) will then only be processed for the purpose of publishing your comment.
(2) Legal Basis
The legal basis for this processing is Art. 6 para. 1(f) GDPR.
(3) Legitimate Interest
Our legitimate interest is the public exchange of user opinions on specific topics and products. The publication serves, among other things, transparency and the formation of opinions. Your interest in data protection is safeguarded, as you can publish your comment under a pseudonym.
(4) Storage Period
A specific storage period is not provided. You may request the deletion of your comment at any time.
(5) RIGHT TO OBJECT
You have the right to object at any time to data processing based on Art. 6 para. 1(f) GDPR that is not for direct marketing purposes, for reasons arising from your particular situation.
In the case of direct marketing, however, you may object to the processing at any time without giving reasons.
§ 4 Shop Rating by EHI Retail Institute GmbH
(1) Purpose of Processing
If you decide to rate our service, we will process your email address as well as your order number and date to send you a confirmation request and a final review request, and to associate your rating and prevent abuse.
(2) Legal Basis
This processing is based on our legitimate interest in improving our services and preventing rating abuse under Art. 6 para. 1(f) GDPR.
(3) Recipient
EHI Retail Institute GmbH
(4) Storage Period
Your data is stored as long as the EHI shop rating is displayed on our website.
§ 5 PayPal Transactions
Please note that all PayPal transactions are subject to the PayPal privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
§ 6 Web Analysis with Google Analytics
(1) Purpose of Processing
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies", which are text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will, however, be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website usage and internet usage.
(2) Legal Basis
The legal basis for this processing is Art. 6 para. 1(a) GDPR.
(3) Categories of Recipients
Google and its partner companies.
(4) Transfer to Third Countries
Google Ireland Limited is affiliated with Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).
(5) Storage Period
14 months
(6) RIGHT TO OBJECT
You may prevent the storage of cookies by selecting the appropriate settings in your browser software; however, we point out that in this case, you may not be able to use all functions of this website to the full extent.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link: optout
You can also prevent the collection by setting an opt-out cookie. To prevent future collection of your data when visiting this website, please click here: Deactivate Google Analytics
§ 7 Information About Cookies
(1) Purpose of Processing
Technically necessary cookies are used on this website. These are small text files that are stored on your computer system by your internet browser. These cookies enable, for example, placing several products in a shopping cart.
(2) Legal Basis
The legal basis for this processing is Art. 6 para. 1(f) GDPR.
(3) Legitimate Interest
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies is not used to create user profiles. This preserves your interest in data protection.
(4) Storage Period
Technically necessary cookies are generally deleted when the browser is closed. Permanently stored cookies have varying lifespans from a few minutes to several years.
(5) RIGHT TO OBJECT
If you do not wish to accept these cookies, please disable the acceptance of such cookies in your internet browser. This may, however, limit the functionality of our website. Permanently stored cookies can also be deleted at any time via your browser.
§ 8 Your Rights as a Data Subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against us as the controller:
Right of Access
You may request information about your personal data processed by us under Art. 15 GDPR.
Right to Rectification
If the data concerning you is not (or is no longer) accurate, you may request rectification under Art. 16 GDPR. If your data is incomplete, you may request completion.
Right to Erasure
You may request the deletion of your personal data under the conditions of Art. 17 GDPR.
Right to Restriction of Processing
You have the right to request the restriction of processing under the conditions of Art. 18 GDPR.
Right to Data Portability
Under Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or to request the transmission to another controller.
Right to Withdraw Consent
Under Art. 7 para. 3 GDPR, you have the right to withdraw your consent under data protection law at any time. The lawfulness of the processing carried out on the basis of the consent until the withdrawal remains unaffected.
Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR (especially in the Member State of your residence, workplace or the location of the alleged infringement).
Please also note your Right to Object under Art. 21 GDPR:
a) General: Objection with Justification
If the processing of your personal data is carried out
to protect our overriding legitimate interests (legal basis according to Art. 6 para. 1(f) GDPR) or
in the public interest (legal basis according to Art. 6 para. 1(e) GDPR),
you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or the processing is for the establishment, exercise or defense of legal claims.
b) Special Case of Direct Marketing: Simple Objection is Sufficient
If your personal data is processed for the purpose of direct marketing, you have the right to object to this processing at any time without stating reasons; this also applies to profiling, insofar as it is related to such direct marketing.
If you object to the processing for purposes of direct marketing, your personal data will no longer be processed for these purposes.
Controller for Data Processing:
KCU GmbH
Tuchmacherallee 4
03130 Spremberg
Phone: (03563) 601887
info@praxenshop.de