Privacy is a matter of trust and your trust is important to us. The data processing of JAB JOSEF ANSTOETZ KG, represented by personally liable partners: Ralph Anstoetz, Stephan Anstoetz, Heinz Anstoetz GmbH, Bielefeld, HRB 30095, Managing Director of Heinz Anstoetz GmbH: Ralph Anstoetz, Stephan Anstoetz, Claus Anstoetz, Chris-Jacob Schminnes (below also "we" or "us") as a responsible person within the meaning of Art. 4 No. 7 GDPR of course is based on the legal provisions.
These data usage notices inform visitors and customers who conclude contracts on our website, about the data collection, processing and use on visit, registration and conclusion of contract as well as opposition, revocation and other rights that you are entitled to as the data subject and user.
The following linked headings are intended to facilitate access to the requested information.
- A. General information
- 1. Scope, terms
- 2. Use without registration
- B. Notes on data usage
- I. Use of your personal data
- 1. What is personal information
- 2. Data usage for contract execution
- a) Establishing contact, contracting and settlement
- b) Consent
- c) Registration
- d) Cancellation possibility
- 3. Processing in the business organization
- a) Transmission to third parties
- b) Outsourced IT and Hosting
- 4. Transmission to payment service providers
- 5. Shipping status information
- 6. Geolocation
- 7. Data usage for advertising and market research purposes
- a) General uses
- b) Competitions
- c) Postal advertising
- d) E-mail advertising with separate consent
- 8. Right of revocation and objection to advertising
- 9. Use of data in your application
- 10. Deletion and blocking
- II. Data collection when visiting our pages
- 1. Technical information and cookies
- a) Technical information
- b) Cookies
- 2. Use of profiles
- 3. Web Analytics and Advertising Details (Google Analytics) (Google Maps)
- 4. Right of revocation and revocation of usage profiles and cookies
- III. How do we protect your personal information?
- 1. General protective measures
- 2. Protection of your payment details
- IV. What rights do I have?
- 1. Right to confirmation and information
- 2. Right to rectification
- 3. Right to object
- 4. Right to cancellation (right to be forgotten)
- a) Requirements for deletion
- b) Further right to be forgotten
- c) Exceptions to the deletion
- 5. Right to restriction of processing
- 6. Right to Data Portability
- 7. Asserting your rights
- V. What consents have I given?
A. General information
1. Scope, terms
1.1. These notes below apply to the use of the JAB website, including the online store, in which contracts can be concluded with traders on the JAB Marketplace.
1.2. Users within the meaning of this agreement are visitors to our site who use the websites, the marketplace, the functions or the content offered, even if this is done without registration.
2. Use without registration
Each user can also move without registration and registration free of charge and without giving any name or other identifying information on our site, there, among other things, information about JAB, the offers and providers on the marketplace and look for it. In addition, a newsletter from JAB can be subscribed via the website.
B. Notes on data usage
I. Use of your personal data
1. What is personal information
Personal data is any information relating to an identified or identifiable natural person (hereinafter the "data subject"). Identification does not necessarily require a name specification. Indirect identifiability, e.g. by assignment to an identification number, to location data, to an online identifier or to one or more special features. So it's about your identity. This includes, for example, your name, but also your telephone number, address, and other information that you provide us with.
Many legal bases for our data processing can be found in the European General Data Protection Regulation (GDPR), whose text and the associated recitals can be found on https://gdpr-info.eu. In the following notes, we refer to appropriate regulations as the respective legal basis of our processing.
2. Data usage for contract execution
a) Contacting, contracting and settlement
Contact us via our contact details (eg via e-mail or via contact form), we store your name and contact details as well as your request. The data will be used to process your request and to communicate with you. We use your e-mail to be able to reply to you by e-mail (legal basis Art. 6 para. 1 sentence 1 lit a and b GDPR). For questions about specific orders or if we should do something for you personally, we need your real name. For other questions, you can also specify a pseudonym. If your request has finally settled and there are no other storage requirements or a registration, the data will be deleted.
JAB collects, uses and processes your information to provide you with relevant information, such as search results, new content and functionality, and to answer your service requests.
In addition, data will be used (details of the intended or made order, your address, delivery address, e-mail address and payment processing data, if applicable) for initiating and arranging the conclusion of contracts on the Marketplace and for carrying out such transactions. In this case, your details are required, otherwise no conclusion can be made on JAB. The same applies to data usage of your address data and selection data when you issue a sample order from JAB. In this case, we will also transmit your address data to service providers we employ (transport company, logistics company).
In connection with the Marketplace, JAB will provide you with transaction data for you as a user for convenient tracking and control in the Customer Account area (accessible via "Login" after registration) and will provide it to the merchant involved in the transaction. The transmission of information about the transactions to the buyer or prospective customer usually takes place via the e-mail address you have provided, which we use for this purpose.
In addition, data is transmitted to those service partners who are involved in processing the order, ensuring payment processing or delivering the items (e.g., carrier, logistician, payment intermediary). JAB therefore uses the relevant data to fulfill the contractual obligations of the agency contract or to fulfill sample orders with JAB (legal basis Art. 6 para. 1 sentence 1 lit b GDPR).
In addition, commercial and tax law obliges us to archive data from the concluded transactions for the duration of the legal retention periods. The legal basis for the corresponding data uses is Art. 6 para. 1 lit. c GDPR.
JAB requires consent from users signing contracts in the marketplace for specific cases, without which JAB or the service providers can not provide the services offered. JAB has compiled the consent given to this purpose for the user in the provisions of VII. Of the Marketplace Conditions of Use which the user gives with the acceptance of the marketplace conditions of use. The legal basis for processing is Art. 6 para. 1 lit. a and b GDPR.
You can register with JAB (e-mail address and password). Once you have registered, you will have access to a contact form, the dealer locator and the product finder. You can save and manage favorites and your shopping cart. Your collection is always and everywhere available - as long as you want and from any Internet-enabled device. In addition to high-resolution images, the Product Finder offers a compact overview of important product data such as material composition and price. As an even clearer decision-making tool, you can also order free samples of the items that made your shortlist.
We collect the following information during registration for the following purposes:
- Address data for order processing
If you would like to close your access again, please use one of the contact options below.
Please note that your data will continue to be stored by us even when closed and used for the purposes stated (such as order processing, but also for advertising information). For your right to object to the use of data for advertising, cf. I. Paragraph 08.
d) The possibility of withdrawal
All consents granted by the user with the separate acceptance of the marketplace conditions of use may be revoked by the user with future effect. Before the revocation, data uses remain unaffected. However, a revocation may result in the user not being able to continue to use JAB's service offerings, especially on the Marketplace. In particular, a revocation of consent entitles JAB to stop the execution of the contract, if necessary, to make the further execution dependent on proof of identity and / or advance payments and to exclude the user from further participation in the marketplace or to terminate the customer relationship with a registered user.
A revocation can in all cases be explained to JAB. The user can also address his declaration of revocation to the company that has benefited from the consent. Details can be found in the Marketplace Conditions of Use under VII.
3. Processing in the enterprise organization
a) Transmission to third parties
As part of our corporate organization, JAB processes your data into IT systems operated by JAB and service providers and, if necessary, transmits data from customers, prospects, suppliers and personnel in accordance with statutory obligations to authorities such as tax authorities and consultants (tax consultants, lawyers, auditors) in accordance with JAB's interests in legally compliant and efficient corporate governance (legal basis Art. 6 (1) lit. c and f GDPR).
In this context, JAB analyzes data on all business and business processes for corporate control and market research purposes. Insofar as there is no other necessity for the specific purpose, the data will be largely anonymised or at least evaluated pseudonymously and, if possible, made accessible to third parties separately from persons. Legal basis Art. 6 para. 1 lit. c and f GDPR.
b) Outsourced IT and Hosting
JAB makes use of individual IT software and hosting services provided by service providers in the course of providing services and meeting their concerns and contractual obligations based on our interests in efficient and secure business and contract execution. Your data on your interests, concerns, orders and visits or perceptions of our services are also processed using the services of these service providers.
Insofar as required by law and not already covered by regulations on professional secrecy, JAB has contractually secured its access and the secure and confidential handling of your data in order processing cases. Legal basis Art. 6 para. 1 lit. f GDPR if applicable in conjunction with Art. 28 GDPR (conclusion of contract processing contract).
4. Transmission to payment service providers
Credit card information will not be stored with JAB or the dealers offering its services on the Marketplace, in consultation with the companies that process payment card payments. Rather, these are recorded directly via your secure input via a secure gateway based on a secure, encrypted process on the side of our payment service provider Concardis GmbH, Helfmann-Park 7, 65760 Eschborn. Only in case of returns does JAB have to submit data for reimbursements to the payment service provider. These are personal details of the credit card holder and the transaction (first name, name, internal payment ID, amount of the amount).
5. Shipping status information
The respective shipping service provider used to deliver the goods ordered on JAB transmits data on the status of the shipment to JAB. JAB stores this data and makes it available to the respective merchant for queries from the user (contract processing and delivery status) and to check the delivery. Again, an agreement of the user in the marketplace conditions of use is provided.
JAB is used for the purpose of geolocalizing the user's device, i. to associate the site with a region or city or area within a city, the user's IP address, or his or her input to the site, only in the context of consent given by the user by request in the browser and / or acceptance of the marketplace conditions of use. The legal basis is Art. 6 para. 1 lit. a GDPR.
If you give your consent, JAB uses the so-called geolocation API of your web browser. JAB then obtains approximate location estimation data determined by the browser manufacturer by matching your IP with IP databases and wireless access point entries in collaboration with the Google Location Services geolocation service. The accuracy varies and is often not identical to where you run the browser. If you are using a terminal with GPS support, as is often the case with smartphones, the GPS module can provide significantly more accurate data for location. If necessary, note further information from your browser manufacturer.
If you do not agree, JAB will not receive and use such information.
The data is used for the distance-dependent allocation of dealer offers to the user.
7. Data usage for advertising and market research purposes
a) General uses
JAB is interested in maintaining customer relationships with you, attracting new customers, reactivating old customers, and providing information and offers to their customers. For the purpose of exercising these legitimate interests, JAB processes on the basis of Art. 6 (1) lit. GDPR (also with the help of service providers) your data in order to provide you with information and offers from JAB or its offering partner, which are based on the same interest, and to improve their information and offers. JAB may provide for your separate consent outside of this document to be prepared for profiling and submission to traders and in such cases will base its use of data on Art. 6 (1) lit. a GDPR.
Please refer to our further information on our data processing in this regard, the advertising measures listed below and our instructions for the use of profiles in II. Section 2.
If you participate in our sweepstakes, we use your data for the conduct of the sweepstakes and in particular for the profit notification. If you have given us a separate consent to a specific contact, we use your data under the consent, e.g. to contact by e-mail or telephone (see consents below, legal basis Art. 6 (1) (a) GDPR). The participants' data will be deleted from our active systems after the competition has been carried out. They are archived by us only for legal defense purposes, at most until the statute of limitations conceivable claims (regularly three years). The legal basis is Art. 17 (3) lit. e DSGVO. Winners will be archived for the duration of statutory retention requirements for commercial and tax reasons as well as to avoid disadvantages for the winner (eg recall of products) (legal basis Art. 6 (1) (c) GDPR).
c) Postal advertising
We will use your first and last name, postal address and, as far as we have received this additional information from you, your title, academic degree, date of birth and your professional, industry or business name to send you offers and information about our company and ours Services and products by letter.
d) E-mail advertising with separate consent
If you have registered separately for our newsletter, your e-mail address and, if necessary, other personal data that you have voluntarily provided to us during registration (eg your name for the address), for your own advertising purposes and possibly in the newsletter included advertising partner offers used.
We evaluate statistically, when such an e-mail is called and, if necessary, which information offers and with what intensity they are of interest (for example, when a link is called). The evaluation is done to improve the delivery times and optimize the content of our offers and promotional information. As a service provider, we use the company networker Medienfabrik GmbH, with whom we have also concluded contractual agreements for data protection (order processing contract).
8. Right of revocation and objection to advertising
Of course, you can object to the use of your data for advertising purposes at any time - even if this use is permitted by law without your consent - by informal notification to JAB or revoke a granted consent. Opposition and revocation each effect a stop to future use. The temporal use of your rights will remain unaffected. Of course, we do not charge any extra costs for any objection or revocation. (In particular, if you notify us by e-mail, you will incur no additional costs, other than the transmission costs according to the basic rates of your provider). Simply direct your objection or revocation to one of the contact options listed at the end of these instructions.
In our advertising e-mails and in the newsletter, you will receive a notice with the e-mail address firstname.lastname@example.org for easy cancellation of this information. Please take into account that in individual cases you can still reach advertising despite opposition or revocation. Not in all cases commissioned advertising can still be stopped with reasonable effort before the next broadcast or a comparable other measure.
Their possibilities of contradiction also extend to profiling (profiling, compare to term II. 2) and the use of the data collected in the context of data collection when visiting our web pages for direct marketing purposes. We explain to you the technical possibilities to exercise the right of objection and to prevent the collection of data in detail in the information about the used web tools under II. Section 3. "Details on web analysis and advertising". As far as you exercise the right of objection, we no longer process the collected data for these purposes.
For more information about your rights, see IV. What rights do I have
9. Data usage in your application
If you apply to us, we use and transmit the data you have provided for the purposes of assessing your application documents and, if necessary, for carrying out the further application process (legal basis Art. 88 GDPR i.V.m. § 26 para. 1 sentence 1 BDSG). An automated supplementation of your data from other sources (for example from social networks, creditworthiness information) does not take place.
We save your data for the duration of the application process and beyond at the latest for three months from the notification of a binding decision to your application, unless an employment contract is concluded. Incidentally, longer storage is only possible with your express consent (legal basis Art. 6 I lit. a GDPR), as far as we have to comply with a legal requirement (legal basis Art. 6 I lit. c GDPR) or in the presence of legitimate reasons, e.g. if claims are raised against the failure to consider your application (legal basis also here Art. 6 para. 1 sentence 1 lit. b GDPR). At the end of the time, your data will be deleted or stored only in archive systems without direct access as far as legally prescribed for commercial and tax-law archiving purposes.
10. Cancellation and blocking
The storage of your personal data takes place until the achievement of the stated purposes or as long as we have a legitimate interest in storage.
Thereafter, a deletion takes place, as far as no other agreements were made with them or legal archiving obligations exist (for example, due to commercial or tax law). In the case of a legally required archiving, the data is blocked for other access. These documents are deleted after the expiry of the statutory retention periods in the context of regular actions and destroyed.
If you have consented to the collection, processing and use of your data, we will store and use your data indefinitely until revocation or discontinuation of the purpose for which you gave your consent. Thereafter, an archiving d. Consent u. Processing data until the statute of limitations (regularly three years) for legal defense purposes (legal basis Art. 17 para. 3 lit. e GDPR).
If you no longer wish to receive advertising from us, we will use your name, address and, if applicable, the e-mail address for blocking purposes in corresponding lists with which we will match our advertising measures so that you will not receive any further advertising. Deletion in this sense means that your data is blocked for advertising and marketing activities in our systems (legal basis Art. 6 para. If necessary, the data will continue to be processed for purposes other than advertising, for example in the context of contract execution and, if necessary, warranties as well as commercial and tax law documentation (legal basis Art. 6 (1) lit b and c GDPR).
Do you wish despite the case in the individual case possible consequence that you can continue to receive advertising, a deletion instead of blocking, please let us know.
At your request, we may block personal information completely or partially. For this purpose, you tell us to what extent and if so for what duration the blockage should take place. As far as technically possible, you can in this way exclude the processing and use of your data for certain areas completely or temporarily.
II. Data collection when visiting our pages
1. Technical information and cookies
a) Technical information
You can visit our site without making any input to your person. If you visit our websites, even if this happens, for example, via a link in a newsletter or an advertisement, certain data will nevertheless be recorded and saved in so-called log files. Be recorded - even if the visit if necessary via newsletter links or ad links on the Internet - only access data without direct personal reference such. For example,
- the website we visit
- the page being invoked or the name of a requested file
- the name of their Internet service provider
- Type and version of your browser,
- Time and date of access
- The operating system used on which the browser is running
- the name of your internet service provider
- the Internet address of the person accessing (IP address)
- Products and content that the visitor is interested in and the nature of the interest, such as duration, frequency, interaction with forms, navigation elements and links
It is not possible for us to draw any conclusions about you as a result of this data, nor will you combine your data with your personal data without your consent, unless it is about prosecuting infringements and attacks on our systems.
In addition, we have tried to reduce the IP address by making certain that this makes it more difficult or almost impossible for certain partners to use this IP as part of their services.
If we include third-party content (such as embedded films or other information) on our sites, they will receive your IP address solely for this purpose, otherwise the content will not be delivered to your browser.
On our website we use so-called cookies. Cookies are small files that are stored on your device and that store certain settings and data for exchange with our system or the systems of service providers via your browser. This storage helps us to customize the website for you and makes it easier for you to use it, for example by saving certain input from you so that you do not have to constantly repeat it. Cookies usually contain identification marks. This allows users and / or browsers (software to display Internet content) to be identified and distinguished from other users and browsers, and re-recognized during visits.
Many cookies are automatically deleted from your hard drive after the end of the browser session (end of the session) (hence session cookies). But there are also cookies that remain permanently stored with you. The expiration time is set for a time in the future for your convenience. On another visit, it is automatically recognized that you were already with us and what inputs and settings you prefer. (so-called long-term cookies). Some of these cookies are used to display information tailored to your interests on our website.
Cookies that provide functionality without which you may not use this website as intended are used only by us and their content is not made available to third parties. Such consent-free cookies are set on the basis of Art. 6 para. 1 lit. b DSGVO.
The cookies are deleted at the end of the session.
We have listed at www.jab.de/content/cookies an overview of the cookies we use. Please note the following general information on your technical contradictory options and our supplementary information on special uses under II. Section 3.
- Your technical contradictions
Regardless of the set duration, you can manually delete cookies in your browser. In some browser settings, the acceptance of cookies is preset without any restrictions. In the security settings of your browser, you can allow or prohibit temporary and saved cookies independently of each other. In addition to a browser setting that generally disables automatic cookies, you can also disable cookies by setting your browser to allow cookies from a particular domain, e.g. "googleadservices.com" are blocked. This setting prevents the execution of appropriate services that set cookies from this domain.
Some web services work with opt-out cookies. The cookie (hereinafter referred to as "blocked cookie") that you choose to recognize then, for example, a web analytics service that you do not want to collect. We have listed options for setting a blocked cookie separately in the web services we use under II. Google allows e.g. corresponding settings at https://myaccount.google.com/intro. Opportunities for numerous other networks to make advertising settings are available at http://www.youronlinechoices.com/preferencemanagement/ or at http://optout.aboutads.info/ and or http://optout.networkadvertising.org inform about many advertising measures and deselect them.
If you're using a mobile device, you can turn on "No Ad Tracking" (iOS) or "Disable Personalized Advertising" (Android) on the device with the appropriate operating system. This is to prevent the Advertising ID (a non-personal device identifier) from being used to provide interest-driven advertising.
If you use the possibility in your browser to delete all cookies, or set blocking cookies, remember that then, if necessary, appropriate settings or the setting of blocked cookies must be made again!
Accepting cookies is not a requirement for visiting our online offer. However, if you do not accept or disable cookies, certain features (such as services such as favorites and information) may not be available on our site, and some websites may not display properly.
If you want to contract with us, you must accept certain cookies. If you do not want this, then no conclusion can take place.
2. Use of profiles
The law knows the formation of automated data collections to a person under the term profiling. According to Art. 4 (4) GDPR, profiling is any kind of automated processing of personal data in that this personal data is used to assess certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location of that natural person to analyze or predict.
Like others, we use profiles that we create from your purchasing and usage habits. In no case shall we derive from this decision decisions that may be detrimental to you.
On the one hand, we base our interest in optimally tailoring our offer to your needs and optimizing business management (legal basis, Art. 6 (1) (f) GDPR). The evaluations help us to optimize the relevance of our advertising efforts, to inform us more purposefully about our company and our offers, to better manage resources and to optimally adapt our information offerings and make them more relevant. With our advertising measures, we also pursue the interest to protect you as possible from unwanted or uninteresting advertising.
To do this, we include such data in the selection of information you have been given that you know we know. These are e.g. Your transactions on our website, such as sample orders or orders on the Marketplace, as well as the occasion of the purchase (advertising, campaigns, recommendations), your information requests, information already sent to you or your reactions to relevant promotional information on postal advertising or our newsletters and e-mail information (see our information also under I. Section 7). In addition, we use identifiable interests from your calls to our information offerings on the Internet across different end devices, such as Your usage data with regard to our content and offers when using a PC, smartphone or tablet.
Where this is technically and economically sensible for the pursuit of the purposes, we separate appropriate data from your person in order to safeguard your interests, pseudonymize them and form groups (clusters) in which the individual information merges prior to an evaluation.
Without your separate consent, the data in the exercise of the above interests after an extensive pseudonymization or anonymization, which also allows us no conclusion on your person, evaluated, so we can improve our information, offers and their representation in the context of market research and application ,
In order to be able to consider your personal interests in a targeted manner, we also use the above-mentioned purchase and usage data in the context of personal evaluations upon granting the corresponding consent and form corresponding profiles whose data content is individually tailored to your person and assigned to your person.
In this case, the assignment to your person takes place when you log in using your e-mail address or username. The duration of the storage and use of the associations in our online activities to specific groups (such as visitors who have responded to a specific advertising) can be found in our comments on the cookies.
The processing otherwise takes place until revocation of the consent or objection to the processing.
For the deletion of the data in the case of granted consent, please note otherwise our information in I. Section 10.
To analyze user behavior, we use corresponding web analysis tools. For details, see "Web Analytics and Advertising Details" below.
You can also object to profiling with personal data as well as the further use of the profile data for advertising purposes and to revoke your consent (see I. point 7). The perception of the possibility of objecting to the profiling by web analysis and advertising measures - insofar as they work with personal data - takes place through technical measures, which we explain above to II. Section 1 b) in general and below under II. 3 each to the appropriate advertising tools ,
3. Details about web analytics and advertising
On the basis of our legitimate interests in the analysis, improvement and economic operation of our offers within the meaning of Art. 6 (1) lit. f. GDPR we use the following services:
Web analytics tools
This website uses Google Analytics in the form of Universal Analytics for web analysis. This is a service of Google LLC 1600 Amphitheater Parkway Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies". The information generated by the cookie about your use of our website (including your IP address) will be transferred to Google's computers and stored there. It is not excluded that data processing outside the scope of EU law takes place. Google has joined the Privacy Shield so that Google guarantees compliance with EU privacy standards. (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
For your protection, we have made settings that Google truncates the last part of the IP addresses of visitors to our website who have IP addresses from the EU or one of the contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. We also have a contract processing agreement with Google.
By means of an identification, for example when logging in to Google services, the above-mentioned data can also be captured and used across devices. This can be used to record that you are starting your visit to us on a PC and continue on a mobile device, and the data of both devices can be linked.
Google will use this information to evaluate your use of the website on our behalf, to compile reports on the website activity for us, to create interest-oriented target groups and to provide us with other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google. Google will not associate your IP address with other Google data. The deletion of Analytics data is set to 50 months. The time is based on our interest in making temporal comparisons with statistical data.
You can prevent the installation of cookies by setting your browser software accordingly.
- Use demographics with Google Analytics
Google offers the feature "demographics" This can be used to create compilations to the site visitors with statements on age, gender and interests.
Google extracts this data from interest-based advertising and third-party visitor data. The data is not assigned to any particular person and is anonymous.
- Your technical contradictions
Alternatively, or within browsers on mobile devices, using the following link may interfere with the use of Google Analytics. By activating the link, an opt-out cookie will be set in order to prevent future detection by Google Analytics within this website. Please note that this opt-out cookie only works in this browser and only for this domain. Once you delete your cookies in this browser, you must click the link again: disable Google Analytics.
Google Maps content enables us to provide map visualization and related services to Google LLC, Amphitheater Parkway, Mountain View, CA 94043, USA ("Google") By visiting this website, Google receives the information that you access the corresponding subpage of our website to have. In addition, the technical data are transmitted, as we have listed under II. Section 1. This happens regardless of whether this third party provider provides a user account that you are logged in to, or if there is no user account. If you are logged in to Google, this data can be assigned directly to your account and thus to your personal profile. According to information provided by Google, they are used for advertising purposes, market research purposes and the needs-based design of its services.
- Your technical contradictions
If you do not wish to associate your profile with the third party, it is best to log out before using our site and to delete cookies set by Google after your visit. Make sure, however, not to delete so-called opt-out cookies, which should prevent other data collection. To prevent or delete cookies, use the general options that we have provided to you under II. 1. Cookies.
If you want to oppose the creation of user profiles by Google, you must assert your rights there. For more information on the purpose and scope of the data collection and its processing by Google LLC, please visit https://www.google.com/intl/en/policies/privacy/.
4. Right to object and revoke user profiles and cookies
If you have any questions about the above-mentioned technical contradictions or our other protective measures, please do not hesitate to contact us. (Contact details below).
III. How do we protect your personal information?
1. General protective measures
The law requires companies to create an adequate level of data protection. It is u.a. to reconcile the respective risk for the data, the likelihood of occurrence, the state of the art and the costs. We have provided appropriate technical and organizational measures to ensure the security of your data and their processing according to legal requirements. If you have concerns about data entry or any other questions or suggestions, please contact our Customer Service or our Privacy Officer. Further contact details can be found at the end of these notes.
Your personal data will be securely transmitted by encryption when placing an order and when registering for your personal access. We use the coding system SSL (Secure Socket Layer). We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification and distribution of your data by unauthorized persons. You should always keep your access information confidential and close the browser window when you stop communicating with us, especially if you share your computer with others.
2. Protection of your payment data
The entry and transmission of your credit card details is done via a payment form of Concardis GmbH, Helfmann-Park 7, 65760 Eschborn (hereinafter "Concardis"). Concardis is a BAFIN regulated payment institution as well as others. a licensee of Mastercard and VISA. As a licensee of Mastercard and VISA, Concardis undergoes a regular security check. Concardis complies with the so-called Payment Card Industry Data Security Standard (PCI) - a security standard that is supported by all major credit card organizations - so you can pay securely online.
IV. Which rights do I have?
You may exercise legal rights as a data subject.
1. Right to confirmation and information
According to Art. 15 GDPR, you have the right to ask us for confirmation of the processing of your personal data. In the event that we process such data, you have a right to free information about your stored data. The information includes information about
- the processing purposes;
- the categories of personal data being processed;
- the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations;
- if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration;
- the existence of a right to rectification or erasure of the personal data concerning them, or to the restriction of processing by the controller or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- if the personal data are not collected from the data subject: all available information on the source of the data;
- the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
In addition, the data subject has a right of access as to whether personal data has been transmitted to a third country or to an international organization. If that is the case, the data subject is otherwise entitled to receive information about the appropriate guarantees in connection with the transfer. If you have any questions regarding the collection, processing or use of personal data, information or other assertion of your rights, please contact us via the contact details listed at the end of these instructions.
2. Right to rectification
You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.
3. Contradictory legal
You have the right at any time against the processing of personal data relating to you, which pursuant to Art. 6 para. 1 lit. e or lit. f GDPR takes an objection; this also applies to a profiling based on these provisions (see eg term II., section 2).
In the case of opposition to data processing for direct mail (Article 21 (2) GDPR), this processing will be terminated as soon as possible after the opposition has been received (see also I. Paragraph 8 for further details).
An objection to other processing (pursuant to Art. 21 (1) GDPR) pursuant to Art. 6 (1) lit. e or lit. f DSGVO (for example, identity and credit checks) can only be made for reasons that arise from your particular situation, in which case overriding legitimate reasons can justify our further processing.
Agreed consent can be revoked. (Contact details s.u.) There are no special costs (except delivery costs according to the basic tariffs of your provider).
Opposition and revocation of consent work for the future. The legality of data processing in the past remains unaffected.
Your objection to the identity and credit check can lead to the result that we can generally only offer you limited payment options or reject a contract.
4. Right to be erased (right to be forgotten)
a) Prerequisites for deletion
You have the right to request the deletion of your personal data. Please note that a right to immediate removal (Art. 17 GDPR) ("Right to be forgotten") only exists if one of the following reasons applies:
- The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- They revoke their consent, to which the processing pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. GDPR and there is no other legal basis for processing.
- In accordance with Art. 21 (1) GDPR, they object to the processing and there are no legitimate reasons for the processing, or they object to the processing for direct marketing purposes pursuant to Art. 21 (2) GDPR.
- Your personal data has been processed unlawfully.
- The erasure of personal data is necessary to fulfill a legal obligation under Union or national law to which the controller is subject.
- The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
b) Continuing right to be forgotten
Have we made the personal data concerning you public and we are acc. Article 17 (1) of the GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected by the technology and implementation costs Persons requesting deletion of all links to such personal data or of copies or replications of such personal data.
c) Exceptions to the deletion
Please note in addition to the above requirements that the following exceptions may justify a refusal of your request to cancel:
The right to erasure does not exist if the processing is necessary
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task of public interest or in the exercise of official authority conferred on the controller;
- for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
- for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, in so far as the right of cancellation is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
- to assert, exercise or defend legal claims.
5. Right to restriction of processing
Your right to restriction of the processing is yours, if you deny the accuracy of the personal data for a period that allows us to verify the accuracy of personal data or if you reject the deletion in case of unlawful processing and instead restrict the use of personal Require data. You are also entitled to the right, if we no longer need the data, you need this personal data for the assertion, exercise or defense of legal claims. Finally, you can assert this right if you object to the processing in accordance with. Art. 21 para. 1 GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.
If processing has been restricted, such data may be processed only with your consent or to assert, pursue or defend legal claims or protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State. The possibility of continuous storage remains unaffected. If the limitation of the processing after the o.g. If conditions are restricted, you will be informed by us before the restriction is lifted.
6. Right to data portability
You also have a right to data portability of the data you provide to us, processed on the basis of effective consent, or required to be processed to enter into or perform an effective contract, in a "structured, common and machine-readable format" You to. You also have the right to request direct transmission to another party, as far as technically feasible.
The right exists only insofar as the rights and freedoms of other persons are not affected.
7. Asserting your rights
Please contact our customer service for questions or to assert your rights (for example, at email@example.com).
You can also contact our data protection officer. This is responsible for complaints. You can reach our data protection officer via the following contact data:
In addition, if we do not treat your concerns adequately from your point of view, you have u.a. (Without prejudice to any other administrative or judicial remedy), the right of appeal to the data protection supervisory authority, in particular in the Member State of its place of residence, employment or the place of the alleged infringement.
V. What consents have I given?
You may have given us consent (for example, for a newsletter or services in the context of a customer login, etc.) for advertising contact or certain data uses. If you have given us consent, the consent texts are stored with us and can be retrieved. Simply call firstname.lastname@example.org for further information. We will then send you the requested information by e-mail.