Data policy
Data Protection Policy
1. General
1.1 What is personal data?
Personal data is information that discloses or can disclose the identity of the user. We adhere to the principle of data avoidance. As far as possible, we do not collect personal data.
1.2 Handling of personal data
Personal data is used exclusively for the purpose of establishing the contract, structuring its content, implementing or handling the contractual relationship (Art. 6 I S. 1 b GDPR).
In addition, personal data will only be processed if we have received your consent to do so (Art. 6 I p. 1 a GDPR) or if the processing of such data is necessary for our legitimate interests and provided that the weighing of interests shows that there are no overriding interests, fundamental rights or fundamental freedoms that conflict with your interests (Art. 6 I p. 1 f GDPR).
We may use contract processors to process your personal data, but will not pass on your personal data to third parties.
The data will only be passed on to the shipping company commissioned with the delivery for the fulfillment of the contract, insofar as this is necessary for the delivery of ordered goods. In order to process payments, the necessary payment data will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.
The processing of your personal data takes place exclusively within the EU unless otherwise stated below.
1.3 Usage data
General technical information is collected when visiting the website. These are the IP address used, time of day, duration of the visit, browser type and, if applicable, the originating page. This usage data is registered in a log file for technical reasons and can be used and stored for the purpose of statistical evaluation of this website. This usage data is not linked to your other personal data.
1.4 Duration of storage
We store your personal data after the end of the purpose for which the data was collected, only as long as this is necessary due to legal (especially tax) regulations.
2. Your rights
2.1 Information
You can request information from us as to whether we process your personal data and, if so, you have a right to information about this personal data and the further information specified in Art. 15 GDPR.
2.2 Right to Correction
You have the right to rectify the incorrect personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 GDPR.
2.3 Right to cancellation
You have the right to demand that we delete your personal data immediately. We are obliged to delete them immediately, in particular if one of the following reasons applies:
– Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
– You revoke your consent on which the processing of your data was based and there is no other legal basis for the processing.
– Your data have been processed unlawfully.
The right to deletion does not exist insofar as your personal data is necessary for the assertion, exercise or defence of our legal claims.
2.4 Right to limitation of processing
You have the right to demand that we restrict the processing of your personal data if
– you dispute the accuracy of the data and we therefore verify the accuracy,
– the processing is unlawful and you refuse to delete it and instead request the restriction of its use
– we no longer need the data, but you need it to assert, exercise or defend legal claims,
– you have objected to the processing of your data and it is not yet clear whether our legitimate reasons outweigh your reasons.
2.5 Right to Data Transferability
You have the right to receive the personal data relating to you that you have provided to us in a structured, common and machine-readable format and you have the right to communicate this data to another responsible person without our interference, provided that the processing is based on a consent or a contract and the processing is carried out by us using automated procedures.
2.6 Right of revocation
If the processing of your personal data is based on a consent, you have the right to revoke this consent at any time.
2.7 General and right of appeal
The exercise of your aforementioned rights is generally free of charge for you. If you have any complaints, you have the right to contact the supervisory authority responsible for us, the state data protection officer, directly.
3. Data security
3.1 Data security
All data on our website is protected by technical and organisational measures against loss, destruction, access, alteration and distribution.
3.2 Sessions and cookies
For the operation of our website, we use cookies or server-side sessions in which data can be stored. We ensure that no personal data is transferred from sessions or through cookies without your express consent and that cookies are only used if this is technically necessary for the website (e.g., spam protection for contact form, shopping basket function) and thus the weighing shows that no predominant interests on your part are opposed (Art. 6 I S. 1 f GDPR) or an express consent on your part is present.
After your express consent, we use cookies to personalize content and advertisements, to offer functions for social media and to analyze access to our website. With your consent, we can pass on the information on your use of our website to our partners for social media, advertising and analysis. Our partners may be able to combine this information with other data that the partners already have about you.
Below you will find the domain, name and duration of the cookies used only with your consent:
Site cookies
[cmplz–cookies]
4. Newsletter
If you register for our newsletter, we will use the data required for this purpose or data provided separately by you to send you our e-mail newsletter regularly on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. You can unsubscribe from the newsletter at any time and either by sending us a message via the contact details given in the imprint or via the link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner that goes beyond that which is legally permitted and about which we inform you in this declaration.
5. Third-party services
5.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google and operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), and collects and stores data via this web analytics service from which usage profiles are created using pseudonyms. The user profiles created in this way serve to evaluate visitor behavior in order to design and improve the offer presented on this website in line with demand. Google Analytics uses so-called “cookies”, small text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. Also, the user profiles maintained under a pseudonym are not merged with the personal data of the user without the express and separately declared consent of the user. Thus, the weighing of interests shows that there are no overriding interests on your part that conflict with this (Art. 6 I S. 1 f GDPR). You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
You can also prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent the collection of your data during future visits to this website: Disable Google Analytics. You can view the Google privacy policy at http://www.google.de/intl/de/policies/privacy/. Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html. We would like to point out that on this website Google Analytics has been extended by the code “anonymizeIp” in order to guarantee an anonymized collection of IP addresses (so-called IP-Masking).
5.2 Font Awesome Web Fonts
In addition, we use so-called web fonts from Font Awesome to provide you with a uniform font on our website. When you call up one of our pages, these are automatically stored in your browser cache to enable the desired display. If your browser does not support the web fonts used, a standard font of your computer may be used. This does not affect any user interests that outweigh this technical necessity (Art. 6 I p. 1 f DSGVO). The privacy policy of Font Awesome can be viewed here: https://fontawesome.com/privacy
5.3 Google Tag Manager
This website also uses the Google Tag Manager. This service allows website tags to be managed through an interface. This Google tool only implements tags. No cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags, as long as they are implemented with the Google Tag Manager.
5.4 Hotjar
We use on our website Hotjar, an analysis software of Hotjar Ltd. (“Hotjar”) (http://www.hotjar.com, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta, Europe). With Hotjar we have the possibility to measure and evaluate your clicks, mouse movements etc. on our website. The information generated by the “tracking code” and “cookie” about your visit to our website is transmitted to the Hotjar servers in Ireland and stored there. Cookies from Hotjar can remain valid for up to 365 days. The following information is collected:
End device specific data
The following information is collected in relation to your end device and your browser:
– IP address of the terminal device (it is collected and stored in anonymous form);
– Resolution of the screen/display of the terminal device screen;
– terminal device type (individual terminal device identification features), operating system, and browser type;
– geographical location (country only);
– preferred language when displaying the Hotjar-based web page.
User Interactions
– Mouse events (movements, position and clicks);
log data
Randomly, Hotjar’s servers automatically record information that is collected from our website and Hotjar’s website. Among other things, the following data is recorded:
– referring domain;
– visited pages;
– geographic location (country only);
– preferred language when viewing the website;
– date and time when the website pages were accessed.
This information is used by Hotjar to evaluate your use of our website, to generate reports on usage, and for other services related to website usage and internet analysis of the website. Hotjar also uses the services of third parties such as Google Analytics and Optimizely. These may store information that your browser sends during your visit to the website (e.g. cookies or IP requests). You can find more detailed information in the privacy policy of these services. The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation. If you do not wish a recording to be made, you can deactivate it by setting the DoNotTrack header in your browser. You can also prevent the recording of data by Hotjar by clicking on the following link and following the instructions there: https://www.hotjar.com/opt-out. The privacy policy of Hotjar can be viewed at https://www.hotjar.com/privacy.
5.5 Google Ads (formerly Google Adwords)
We use the offer of Google Ads Conversion, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to draw attention to our offers by means of advertising material (so-called Google Ads) on external websites.
These advertising media are delivered by Google via so-called “Ad Servers”. Ad server cookies are used for this purpose, by means of which certain parameters for measuring success, such as the display of the ads or clicks by users, can be measured. If you reach our website via a Google ad, Google Ads will store a cookie on your end device. These cookies usually expire after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information are usually stored as analysis values for this cookie.
If you visit our site as a result of such advertising and the cookie stored on your computer has not expired, Google and we can recognize that you have clicked on the ad and been redirected to this page. A different cookie is assigned to each ad client. This means that cookies cannot be tracked on the websites of ad clients. We ourselves do not collect and process any personal data in the advertising measures mentioned above. We only receive statistical evaluations from Google. By means of these evaluations we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of these tools and can therefore only inform you that Google is able to assign your visit to our website to your Google account if you are registered there. In addition, it is possible that Google may find out your IP address and store it, regardless of whether or not you have a user account.
6. Establishing contact
If you would like to contact us about data protection, please use the contact options below. Responsible person in the sense of the GDPR:
Tecurat
Sven Schaumann
Lennéstr. 44a
14469 Potsdam
E-Mail:
Telefon: 0049 331 27 97 89 89