Copyright

All contents contained in this area are copyrighted!

OK, accepted!

Privacy Statement

The "controller" in the sense of the General Data Protection Regulation, and of other data protection laws applicable in the Member States of the European Union, and other data-protection provisions of legal character is Andreas Appel, Hauptstrasse 190, 53489 Sinzig, Germany (hereinafter referred to as the "Controller" or "We" or "Us").

 

A. General information regarding data processing

 

1) Personal data

"Personal data" means individual details about personal or factual circumstances of an identified or identifiable natural person. This includes information such as the name, address, telephone number and email address, but also the IP address that is assigned to a connection. Information that is not directly related to a person's identity – such as their favourite websites or number of users of a website – is not considered to constitute personal data.

 

2) Scope of the processing of personal data

We collect and use the personal data of our users only to the extent necessary for the provision of a functioning website and for our content and services. The collection and use of the personal data of our users normally takes place only with the consent of the user. An exception applies in those cases in which prior obtention of consent it is not possible for reasons of fact and the processing of the data is permitted by law. 

 

3) Legal basis for the processing of personal data

Insofar as We obtain the informed consent of the data subject for processing of personal data, Article 6(1a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

With regard to the processing of personal data, which is necessary for the performance of a contract to which the data subject is party, Article 6(1b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

As far as the processing of personal data is required for compliance with a legal obligation to which our company is subject, Article 6(1c) GDPR serves as the legal basis.

If the processing is required to maintain a legitimate interest of our company or of a third party, and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, then Article 6(1f) GDPR serves as the legal basis for the processing. 

 

4) Data deletion and duration of storage

The personal data of the data subject will be deleted or locked as soon as the purpose of storage no longer exists. Storage may also be carried out if required by European or national legislators in EU legal regulations, laws or other rules to which We are subject to. The locking or deletion of data is carried out even if the specified storage period given in the standards referred to expires, unless there is a requirement for further data storage for the purpose of the conclusion of a contract or for contract performance.

 

B. Provision of the website and creation of logfiles

Each time our website is accessed, We collect data and information via an automated system. 

The following data is collected:

  • (1) Information about the browser type and version used
  • (2) The operating system of the user
  • (3) The internet service provider of the user
  • (4) The IP address of the user
  • (5) The date and time of access
  • (6) The websites from which the user's system arrived at our website (referrer)
  • (7) Websites accessed by the user's system via our website.

 

This data is stored in our system's logfiles. This data is not stored along with other personal data of the user. 

 

Legal basis for data processing

The legal basis for the temporary storage of data and logfiles is Article 6(1f) GDPR.

 

Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable the website to be rendered on the user's computer. This requires the IP address of the user to be stored for the duration of the session. 

Logfile storage is carried out to ensure the functionality of the website. In addition, We need the data to optimise the website and to ensure and/or secure our IT systems. 

Our legitimate interest in data processing according to Article 6(1f) GDPR is also contained within these purposes.

 

Duration of storage

The data will be deleted as soon as it is no longer required for the achievement of the purpose of its collection. In the case of the collection of data for the provision of the website, this is the case once the session has finished. 

In the case of storing the data in logfiles, this is no later than 30 days after the event. Longer storage may be possible. In this case, the IP addresses of the users are deleted or altered, so that no assignment of the accessing client may be made.

 

Options to object and to remove

The collection of data in order to provide the website and the storage of the data in logfiles is absolutely necessary for the operation of the webpage. There is therefore no option to object on the part of the user. 

 

C. Use of cookies

Our webpages use "cookies". Cookies are small text files that are stored on your computer and stored by your browser. They make it possible to store specific information relating to you, the user, on your PC while you visit our website. Cookies help with conveying the frequency of use and the number of users of a webpage, and with structuring the internet offering for you so that it is as convenient and efficient as possible.

We only use "session cookies", which are cached for the duration of your use of our webpages. Session cookies are automatically deleted after your visit. 

The session cookies store and transmit the following data:

  • Articles in a shopping basket,
  • Log-in information.

 

Legal basis for data processing

The legal basis for the processing of personal data using cookies which are technically necessary is Article 6(1f) GDPR.

 

Purpose of the data processing

The purpose of using technically necessary cookies is to facilitate the users' use of websites. Some features of our webpage are not available without the use of cookies. For such features, it is necessary for the browser to be recognised even after changing to a different webpage.

We use cookies for the following applications:

  • For the shopping basket.

 

The user data collected by technically necessary Cookies will not be used to create user profiles.

 

Duration of storage

Cookies are stored on the user's computer and transmitted to our site. Therefore, you (as a user) have full control over the use of cookies. Modifying the settings in your internet browser allows you to disable or restrict the transfer of cookies. Previously stored cookies can be deleted at any time. This action can also be automated. If cookies are disabled for our website, it may be that not all features of the website can then be used to their full extent.

 

Options to object and to remove

Our website may also be used without cookies. You can disable the storage of cookies in your browser, limit them to certain websites or set your browser to notify you when a cookie is being sent. Please note, however, that in this case, limited page presentation and limited user guidance will be possible.

 

D. Subscription to our newsletter

If a user subscribes to the newsletter offered by us, this requires the input of the email address in the respective input mask. When subscribing to and unsubscribing from the newsletter, the IP address of the user is stored, as well as the date and time of registration. 

Your consent to the processing of the data is gathered within the framework of the subscription process, and this privacy statement referred to.

With regard to the sending of newsletters, no data is disclosed to third parties in the context of data processing. The data will be used solely for sending the newsletter.

Subscription to the newsletter may be cancelled at any time by the data subject. Likewise, consent to the storage of personal data may be revoked at any time. There is a corresponding link in every newsletter. 

 

Legal basis for data processing

The legal basis for the processing of the data after the user's subscription to the newsletter is – given in the consent of the user – Article 6(1a) GDPR. 

Purpose of the data processing

The user's email address is collected in order to deliver the newsletter. 

The collection of other personal data in the context of the subscription process is performed to prevent abuse of the services or of the email address.

 

Duration of storage

The data will be deleted as soon as it is no longer required for the achievement of the purpose of its collection. This is the case when you unsubscribe from receiving the newsletter. Other personal data gathered as part of the subscription process is usually deleted after a period of 30 days.

 

Options to object and to remove

Subscription to the newsletter may be cancelled at any time by the relevant user. There is a corresponding link in every newsletter.

In this way, a revocation of consent to the storage of personal data collected during the subscription process is also possible.

 

E. Registering as a customer

If you would like to become a customer of our services on our website, you must register, giving personal data. In the case of registration as a customer, the data entered into the respective input mask by you in this regard is sent to Us. Registration requires the input of the email address, password, first name and surname, and the full address. In addition, you may elect to enter other data, like your telephone number and your date of birth. 

At the time of registration, the IP address of the user is stored, as well as the date and time of registration.

As part of the registration process, the user's consent to process this data is obtained.

 

Legal basis for data processing

The legal basis for the processing of the data – given in the consent of the user – is Article 6(1a) GDPR. If registration serves the purposes of fulfilling a contract to which the user is a contracting party, or the purposes of performing pre-contractual measures, Article 6(1b) constitutes an additional legal basis for the processing of the data.

 

Purpose of the data processing

User registration is required in order to execute a contract with the user, or to perform pre-contractual measures. After registration, the stored data will be displayed when you log in again, and need not be re-entered. The data entered at registration will also be taken as a basis of your contact data when concluding a contract. 

 

Duration of storage

The data will be deleted as soon as it is no longer required for the achievement of the purpose of its collection. This is the case for pre-contractual measures effected during the registration process for the purpose of contract execution or performance, if the data is no longer required for the performance of the contract. Even after the conclusion of the contract, it may be necessary to store the personal data of the Contracting Party in order to comply with contractual or legal obligations.

 

Options to object and to remove

As a user, you have the opportunity to cancel the registration at any time. You may modify the data stored about you at any time. You may edit your data after logging in as a registered user, and thus remove or modify all data entered. 

 

F. Contacting Us by email or contact form

On our webpage, there is a contact form which can be used for electronic contact. Alternatively, contact may be via the email address provided. 

Using the contact form to contact Us will in any case require your name and email address to be sent to Us. In addition, the user's IP address and the date and time is stored. 

Your consent to the processing of the data is gathered within the framework of the sending process, and this privacy statement referred to.

In the event that you contact Us by email, your email address and your message is sent to Us and stored by Us. 

 

Legal basis for data processing

The legal basis for the processing of the data – given in the consent of the user – is Article 6(1a) GDPR.

The legal basis for the processing of the data transmitted in the course of sending an email is Article 6(1f) GDPR. If the aim of an email is the conclusion of a contract, then Article 6(1b) GDPR forms an additional legal basis.

 

Purpose of the data processing

The processing of the personal data from the input mask of the contact form is used solely for processing the contact form. In the event of contact via email, the legitimate interest in the processing of the data also lies herein.

The other personal data processed during the sending process serves to prevent the misuse of the contact form and to ensure the safety of our information technology systems.

 

Duration of storage

The data will be deleted after the expiry of the retention obligations under commercial and fiscal law. 

 

Options to object and to remove

The user has the option to revoke his/her consent to the processing of personal data at any time. If the user contacts Us by email, he/she may object to the storage of the personal data at any time. In such a case, the conversation may be discontinued. The revocation may be effected by sending Us an email, or by phone or by post. 

All personal data that has been stored in the course of the contact process will in this case be deleted.

 

G. Other disclosure of data to third parties

In the framework of the execution of the purchase order, it is necessary that your name and your address (consisting of the street and town/city) are transmitted to our payment service provider and to the parcel service provider. The transfer is necessary in order to complete your payment and to be able to deliver your order. The transmission of data is limited to the minimum necessary. The legal basis for this is Article 6(1b) GDPR.

If notification of the delivery date by the parcel service or forwarding agent is desired, your email address will also be transmitted to the parcel service or your telephone number to the forwarding agent. The email address and telephone number will be used by the parcel service or forwarding agent solely for the purpose of notifying you of the delivery date. The legal basis for this is Article 6(1a) GDPR.

After delivery of the goods, the data will be deleted by the parcel service / forwarding agent. 

By placing your purchase order, you agree that the aforementioned data will be transferred to our parcel service providers for the settlement of payments and the delivery of the goods. In terms of your rights, the provisions listed in this and the following sections shall apply accordingly. 

 

2. If using the payment method "PayPal", credit card via PayPal, invoice via PayPal or direct debit via PayPal, We will give your name, email address, postal address and payment information regarding your purchase to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). The disclosure shall be made in accordance with Article 6(1b) GDPR and only insofar as this is required for processing the payment.

When payment is made by PayPal invoice or part payment, PayPal performs a risk check and decides whether a payment using your selected payment source is possible. For this purpose, your payment data is – where appropriate and in accordance with Article 6(1f) GDPR – passed on to credit agencies on the basis of the legitimate interest of PayPal to determine your ability to pay. The result of the credit check with regard to the statistical probability of default is used by PayPal for the purposes of deciding on the provision of the respective payment method. The credit check may contain probability values ("score values"). Insofar as score values are incorporated into the result of the credit check, these have their basis in a scientifically recognised mathematical and statistical method. Address data, amongst other things, is used in the calculation of the score values. For additional data protection legal information, including on the credit agencies used, please refer to PayPal's privacy statement: https://www.paypal.com/de/webapps/mpp/ua/privacy-full 
You may object to this processing of your personal data at any time by sending a message to PayPal to this effect. However, PayPal may still be entitled to process your personal data, insofar as this is necessary for contractual payment processing.

 

3. If using the payment options credit card, bank transfer, Giropay or Apple Pay, We use our payment service provider, STRIPE (Stripe Inc., 185 Berry Street, Suite 550 San Francisco, CA 94107, USA).

In the context of payment processing, We give your name, email address, postal address and financial transaction data, such as EC or credit card numbers and account information used for your purchase to STRIPE. The disclosure shall be made in accordance with Article 6(1b) GDPR and only insofar as this is required for processing the payment.

The data transferred to STRIPE is used exclusively for processing a payment with Stripe Checkout, for contact purposes with a view to payment, and for the provision of that service. 

You may object to this processing of your personal data at any time by sending a message to STRIPE. In this case, the processing of your payment with the desired means of payment may no longer be feasible. 

 

H. Rights of the data subject

If your personal data is processed, then you are the data subject within the sense of The GDPR and you have the following rights vis-à-vis Us ("the controller"):

 

1) Right to information

You may confirmation of whether personal data concerning you will be processed by Us. 

If such a processing does occur, you may contact Us to demand the following information:

a. the purposes for which the personal data is processed;

b. the categories of personal data being processed;

c. the recipients or categories of recipients to whom the personal data has been or will be disclosed;

d. the planned duration of the storage of your personal data or, if no specific information is possible in this regard, criteria for determining the duration of storage;

e. the existence of a right to the correction or deletion of your personal data, of the right to restrict processing by Us or a right to object to this processing; 

f. the existence of a right to complain to a supervisory authority;

g. all information available about the origin of the data, if the personal data is not collected from the data subject;

h. the existence of an automated decision-making system including "profiling" according to Article 22(1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and desired impact of such processing for the data subject.

You have the right to demand information as to whether or not personal data is transferred to a third country or an international organisation. In this context you may demand, via the appropriate guarantees according to Article 46 GDPR, to receive information about the transmission.

 

2) Right to correction 

You have a right to have your data corrected and/or completed, if your processed personal data is inaccurate or incomplete. Such correction is to be performed by Us immediately.

 

3) Right to deletion

3.1) You have the right to demand that We immediately delete personal data, and We are obliged to delete this data immediately, insofar as one of the following grounds is applicable:

a. the relevant personal data is no longer required for the purposes for which they were collected or otherwise processed.

b.  you revoke your consent to the processing pursuant to Article 6(1a) or Article 9(2a) GDPR, and there is a lack of any other legal basis for the processing. 

c. you object to processing , pursuant to Article 21(1) GDPR and there are no prevailing legitimate reasons for the processing, or you object to the processing in accordance with Article 21(2) GDPR. 

d. your personal data has been processed unlawfully. 

e. the deletion of the your personal data required for compliance with a legal obligation, in accordance with EU law or the law of the Federal Republic of Germany. 

f. your personal data has been collected in relation to information society services offered in accordance with Article 8(1) GDPR.

3.2) If We have publicly disclosed your personal data and if We are obliged to delete it according to Article 17(1) GDPR, then We shall – taking into account the available technology and the implementation costs – undertake appropriate measures, including technical ones, to inform the party responsible for processing the personal data, that you, as the data subject, have demanded the deletion of all links to this personal data or copies or replicas thereof. 

3.3) The right to deletion does not apply if the processing is required:

a. in order to ensure the exercising of the right to freedom of expression and information;

b. for compliance with a legal obligation requiring the processing in accordance with EU law or the law of the Federal Republic of Germany, or to perform a task carried out in the public interest;

c. for reasons of public interest in the field of public health pursuant to Article 9(2h) and (2i), as well as Article 9(3) GDPR;

d. for archive purposes, for scientific or historical research purposes, or for statistical purposes, where such purposes are in the public interest, in accordance with Article 89(1) GDPR, to the extent that the right referred to in paragraph 1 is expected to render the achievement of the objectives of this processing impossible or seriously impaired, or

e. for the assertion, exercise or defence of legal claims.

 

4) The right to restrict processing

Under the following requirements, you may demand the restriction of the processing of your personal data:

a. if you contest the accuracy of the personal data concerning you for a period of time which allows Us to check the accuracy of the personal data;

b. the processing is unlawful and you reject the deletion of the personal data and instead demand the restriction of the use of the personal data;

c. We no longer need the personal data for the purposes of processing, though you do need it for the assertion, exercise or defence of legal claims, or

d. if you submit an objection to the processing in accordance with Article 21(1) GDPR and it has not yet been decided whether our legitimate grounds outweigh your grounds.

If the processing of your personal data is limited, this data may – apart from its storage – only be processed with your consent or for the assertion, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest of the EU or of a Member State.

If the restriction of the processing has been restricted according to the aforementioned prerequisites, you will be informed before the restriction is lifted.

 

5) Right to information

Where you have asserted the right to the correction, deletion or to the restriction of processing, We are obliged to notify all recipients to whom the personal data has been disclosed of this correction or deletion of the data or of the restriction of processing, unless this proves impossible or would involve disproportionate effort.

You also have the right to be informed of these recipients.

 

6) Right to data portability

You have the right to receive the personal data you have provided to Us in a structured, common and machine-readable format. You also have the right to transfer this data – without interference from Us – to another controller, insofar as

a.the processing is based on consent according to Article 6(1a) GDPR or Article 9(2a) GDPR or on a contract pursuant to Article 6(1b) GDPR and

b.the processing occurs with the aid of automated procedures.

In exercising this right, you also have the right to ensure that the personal data can be directly transferred from one controller to another, insofar as this is technically feasible. The freedoms and rights of other persons shall not be affected by this.

The right to data portability does not apply to the processing of personal data which is required for the performance of a task carried out in the public interest. 

 

7) Right of objection

You have the right – for reasons related to your specific situation, and at any time – to submit an objection to the processing of your personal data, where this occurs under Article 6(1e) or (1f) GDPR; this also applies to profiling based on these provisions. 

Following an objection, We will no longer process your personal data, unless We can prove compelling, legitimate grounds for processing, which outweigh your interests, rights and freedoms, or unless the processing serves the assertion, exercise or defence of legal claims.

If the personal data is processed in order to effect direct advertising, you have the right to object (at any time) to the processing of your personal data for the purposes of such advertising; this also applies to profiling, insofar as it is connected with such direct advertising.

If you object to the processing for purposes of direct marketing, your personal data will not be processed for these purposes.

You have the option, in connection with the use of information society services – and regardless of Directive 2002/58/EC – to exercise your right of objection by means of automated processes in which technical specifications may be used.

 

8) Right of revocation of the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. Revoking consent does not affect the legality of processing carried out on the basis of the consent.

 

9) Automated decision on a case-by-case basis, including profiling

You have the right to not be subject to decision based solely on automated processing – including profiling – where this decision has a legal effect on you or significantly impacts you in a similar way. This does not apply if the decision 

a. is required for the conclusion or performance of a contract between you and Us,

b. is permissible on the basis of the laws of the EU or the Federal Republic of Germany, and this legislation contains appropriate measures in order to safeguard your rights and freedoms, as well as your legitimate interests or

c. occurs with your explicit consent.

However, these decisions may not be based on special categories of personal data according to Article 9(1) GDPR, unless Article 9 (2a) or (2g) applies, and adequate measures for the protection of rights and freedoms and of your legitimate interests have been taken.

With regard to the cases referred to in a. and c., the controller shall take appropriate measures in order to safeguard the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, the right to presentation of one's own position and the right to challenge the decision.

 

10) Right to file a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you are entitled to file a complaint with a supervisory authority, in particular your Member State of residence, place of work or of the location of the alleged infringement, if you are of the opinion that the processing of personal data breaches the GDPR. 

The supervisory authority to which the complaint was filed will provide information to the complainant about the status and the results of the complaint, including the possibility of judicial remedy pursuant to Article 78 GDPR.

Viewed