Data protection declaration - status: 27.06.23
If you do not provide any other information, the provision of the personal data is neither contractually nor legally required, nor is it necessary for the conclusion of the contract/purchase. You don't have to provide any data. This has no consequences. This is only valid if no other information is given in the subsequent processing.
"Personal Data" means any information relating to an identifiable natural person.
Logged files of the visit - so-called server log files/usage data
You can visit our shop/website without providing any information about yourself.
Every time you visit our shop/website, usage data is sent to our internet/web host from your internet browser and stored in so-called server log files. The data that is stored includes, for example, the IP address, name of the page visited, the date and time of the visit, the amount of data that was transmitted during the visit and the provider who made the request. The processing of the data is based on Art. 6 Para. 1 lit. f GDPR. It also serves to optimize our offer.
It is possible that your data will be transmitted to third countries outside the EU (European Union). In this case, there is a so-called adequacy decision by the EU Commission. If this adequacy decision by the EU Commission is not available, for example for the transfer of data to the USA, the transfers are based on standard contractual clauses as suitable guarantees for the protection of personal data. You can find out more about this here:https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
Our contact details, under which you can contact us at any time, are:
Contact person:
Berit Kerber Rowe Roberts
Duisburger Strasse 12
68723 Schwetzingen
Federal Republic of Germany
Mobile: 0176 - 370 99 003
E-mail:berit.kerber@gmx.de
Contact for you as a customer with e-mail
If you contact us by e-mail, we collect the personal data (first name, surname, e-mail address, your message) only within the scope of the e-mail provided. The processing of your data only serves the purpose of processing or responding to your request/mail.
If you contact us by e-mail as a pre-contractual measure (e.g. to request the preparation of an offer or advice if you are interested in buying) or if this concerns an already existing contract that was concluded jointly, the processing of the data will be based on Art. 6 Para. 1 lit b GDPR made.
If there are other reasons for contacting us, the data will be processed on an article basis. 6 Paragraph 1 lit. f GDPR. This is done out of a legitimate interest in initiating business by responding to your request.
You have the right to object to the collection, processing or processing of your personal data based on Article 6 Paragraph 1 Letter f GDPR at any time.
Your email address will only be used to process your request. Your personal data will then be deleted in compliance with statutory retention periods if you have not expressly consented to further processing and use of the data.
Data processing when using the contact form
In this case, we collect your personal data (first name, last name, e-mail address, text of your message) only to the extent provided by you. The data is processed exclusively for the purpose of contacting you.
If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Article 6 Paragraph 1 lit. b GDPR.
If you have other reasons for contacting us, your data will be processed on the basis of Article 6 (1) (f) GDPR. In this case, you have the right, for reasons arising from your particular situation, to object to the processing of your personal data based on Article 6 (1) (f) GDPR at any time.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Information on payment transactions
stripes
We offer the option of processing the payment transaction via the payment service provider Stripe, ℅ Legal Process, 510, Townsend St., San Francisco, CA 94103 (Stripe). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 Para. 1 lit. f GDPR). In this context, we pass on the following data to Stripe insofar as this is necessary for the fulfillment of the contract (Article 6 (1) (b) GDPR).
Name of Cardholder
E-mail address
customer number
Order number
Bank details
credit card details
Validity period of the credit card
Credit Card Verification Number (CVC)
Date and time of the transaction
transaction total
Vendor name
Location
The processing of the data specified under this section is not required by law or contract. Without the transmission of your personal data, we cannot make a payment via Stripe. [You have the option to choose another payment method.]
Stripe takes on a dual role as controller and processor in data processing activities. As the controller, Stripe uses your transmitted data to fulfill regulatory obligations. This corresponds to Stripe's legitimate interest (according to Art. 6 Para. 1 lit. f GDPR) and serves to execute the contract (according to Art. 6 Para. 1 lit. b GDPR). We have no influence on this process.
Stripe acts as a processor in order to be able to complete transactions within the payment networks. As part of the order processing relationship, Stripe acts exclusively according to our instructions and has been contractually obliged to comply with the data protection regulations within the meaning of Art. 28 DSGVO.
Stripe has implemented compliance measures for international data transfers. These apply to all worldwide activities in which Stripe processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).
You can find more information about the options for objecting to and removing Stripe from:https://stripe.com/privacy-center/legal
Your data will be stored by us until the payment has been processed. This includes the time it takes to process refunds, claims management and fraud prevention. [According to [§ 147 AO / § 257 HGB], we have a legal retention period of [X] years for the following documents: [ ]]
Use of PayPal
PayPal transactions are subject to the PayPal Privacy Policy. You can find them here:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of cookies
Our shop uses cookies. Cookies are small text files that are stored by the Internet browser/in the browser on the computer system of the shop visitor. If the shop is called up by a user, a cookie can be stored on the user's operating system. The cookie contains a clear character string that enables the browser to be identified when you visit the shop again.
The cookies are stored on your computer. This gives you complete control over the use of cookies. Existing cookies on your computer can be deleted at any time. You can configure your Internet browser so that you are notified before cookies are placed and can decide for yourself whether you want to accept the cookie(s) and thus avoid storing the cookie. However, we would like to inform you that you may not be able to fully use all the functions of the shop.
Further information on the setting of Internet browsers regarding, for example, the deactivation of cookies can be found below:
Opera:
https://help.opera.com/de/latest/web-preferences/
Mozilla Firefox:
https://support.mozilla.org/de/kb/cookies-allow-and-reject
Safari:https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Chrome:https://support.google.com/accounts/answer/61416?hl=en
Technically necessary cookies
If no other information is given in this data protection declaration, we only use the technically necessary cookies, which make our shop more user-friendly and secure.
In addition, these technical cookies help our systems to recognize your browser even after you have visited another website.
Users of our shop can object to the processing of personal data at any time.
Facebook of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://www.facebook.com/policy.php
Your personal data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The transfer of data is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data.
You will find these clauses below:https://www.facebook.com/legal/EU_data_transfer_addendum.
Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland)
Your personal data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The transfer of data is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data.
You will find these clauses below:
https://help.instagram.com/155833707900388.
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.
The functionality of the website is not guaranteed without processing.
Usercentrics is the recipient of your personal data and works for us as a processor.
The data will be deleted after 3 years.
Please note our general explanations about the deletion and deactivation of cookies above.
Data subject rights and storage period
Duration of storage
After the contract has been fully processed, your data will be stored for the duration of the warranty period and thereafter, taking into account statutory, tax and commercial retention periods, and deleted after the period has expired. Unless you have not consented to further processing and use.
rights of the data subject
If the legal requirements are met, you have the rights under Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.
Right of appeal to the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that your personal data is not being processed lawfully.
You can submit complaints to the supervisory authority responsible for us:
The State Commissioner for Data Protection and
freedom of information in Baden-Württemberg
Lautenschlagerstrasse 20
70173 Stuttgart
PO Box 10 29 32
70025 Stuttgart
Phone: 0711/615541-0
FAX: 0711/615541-15
The data processing of your personal data will then be stopped.
