Information on data protection
1) Information about the collection of personal data and contact details of the person responsible
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.
1.2 The person responsible for data processing within the meaning of the General Data Protection Regulation (DSGVO) is Matthias Görlich, Schillerstr. 12, 35447 Reiskirchen, Germany, Tel .: 0152/23325362, E-Mail: firstname.lastname@example.org. The person responsible for processing personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
When you contact us (e.g. using the contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit.f DSGVO. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Paragraph 1 lit. b GDPR. Your data will be deleted after your request has been processed; this is the case if the circumstances indicate that the matter in question has been finally clarified and provided that there are no statutory retention requirements.
3) Data processing for order processing
3.1 To process your order, we work together with the following service provider (s) who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
3.2 The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of the payment processing, if this is necessary for the payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for forwarding the data is Article 6 (1) (b) DSGVO.
3.3 customer account
You can optionally create a customer account in our online shop. The data required for this and processed by us result from the input mask for opening the customer account. The customer account will only be set up at your request. The legal basis is therefore your consent in accordance with Article 6 (1) (a) DSGVO. We keep the personal data associated with the customer account stored until you delete the customer account or you ask us to delete it. For personal data from contracts that have already been concluded, the retention periods as set out in the section “When you order from us” remain, regardless of the customer's account.
4) rights of the data subject
4.1 The applicable data protection law grants you comprehensive data protection rights (information and intervention rights) vis-à-vis the person responsible with regard to the processing of your personal data, about which we will inform you below:
Right to information in accordance with Art. 15 DSGVO: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned Storage duration or the criteria for determining the storage duration, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if we have not collected them from you, the Existence of automated decision-making including profiling and, if necessary, meaningful information about the logic involved and the scope and the intended effects of such processing, as well as your right to be informed about the guarantees in accordance with Art. 46 DSGVO when your data is forwarded in D rittlands exist;
Right to correction according to Art. 16 DSGVO: You have the right to immediate correction of incorrect data concerning you and / or completion of your incomplete data stored by us;
Right to deletion in accordance with Art. 17 DSGVO: You have the right to request the deletion of your personal data if the requirements of Art. 17 Para. 1 DSGVO are met. However, this right does not exist in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
Right to restriction of processing in accordance with Art. 18 DSGVO: You have the right to request that the processing of your personal data be restricted as long as the correctness of your data is being checked, if you refuse to delete your data due to inadmissible data processing and instead request the Request restriction of the processing of your data if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have objected to reasons of your particular situation, as long as it is not yet certain whether our legitimate Reasons outweigh;
Right to information in accordance with Art. 19 DSGVO: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, the person responsible is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or Notification of the restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Right to data portability in accordance with Art. 20 DSGVO: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another person responsible, insofar as this is technically feasible;
Right to revoke consent given in accordance with Art. 7 Paragraph 3 DSGVO: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, provided that further processing cannot be based on a legal basis for processing without consent. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of withdrawal;
Right to lodge a complaint in accordance with Art. 77 DSGVO: If you are of the opinion that the processing of your personal data violates the DSGVO, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement.
4.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR MAIN LEGITIMATE INTEREST, YOU HAVE THE EVERY TIME TO PROCESS YOUR PERSONAL DATA ON THE BASIS OF A REASONS WHICH ARE GIVEN BY YOUR SPECIFIC SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED. FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPULSORY REASONS FOR PROCESSING THAT OUTSIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING OR EXPRESSION OF THE EXPRESSION APPLIES.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY OBJECTIVE AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
5) Duration of storage of personal data
The duration of the storage of personal data is based on the respective statutory retention period (e.g. commercial and tax retention periods). After the period has expired, the relevant data is routinely deleted, provided that it is no longer required to fulfill or initiate a contract and / or we have no legitimate interest in further storage.