Data protection

Data protection

 

Below we will inform you about how we process your personal data. Personal data within the meaning of Art. 4 GDPR is all information that relates to an identified or identifiable natural person (such as name, address, telephone number, email, invoices, bank details, etc. as well as your user behavior).

 

Contents

 

    contact details
    Lawfulness of processing personal data
    Collection and storage of personal data as well as the nature and purpose of it

     

use

  1.     Storage period and data deletion
  2.     Transfer of data to third parties
  3.     Hosting
  4.     Cookies
  5.     Payment service provider
  6.     Credit reports
  7.     Analytics Services
  8.     Social media services
  9.     Other online services
  10.     Rights of those affected
  11.     Right to object
  12.     Data security
  13.     Currentness and changes to this data protection declaration

 

  1. contact details

 

This data protection information applies to data processing by the following persons responsible:

 

Responsible: Ronny Maibaum

Address: Neuendorfer Weg 29, 18246 Bützow OT Parkow

Email: info@rm-allesguenstiger.eu

Telephone: 038461596772

Fax: 03222-1754888

 

 

    Lawfulness of processing personal data

 

As a general rule, we only collect and use personal data from our users to the extent that this is necessary to provide a functional website and our content and services. The collection and use of our users’ personal data regularly only takes place with the user’s consent. An exception applies in cases where it is not possible to obtain prior consent for actual reasons or where the processing of the data is permitted by legal regulations.

According to Article 6 of the General Data Protection Regulation (GDPR), processing of personal data is lawful if one or more of the following points are met:

 

- you have given your express consent to the processing in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR,

- the processing is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR for the processing of contractual relationships with you or for the implementation of pre-contractual measures that are carried out at your request,

- there is a legal obligation on our part for processing in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR,

- the processing is necessary to protect your vital interests or those of another natural person, Art. 6 Paragraph 1 Sentence 1 Letter d GDPR,

- the processing is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter e of the GDPR for the performance of a task that is in the public interest or in the exercise of official authority vested in us,

- the processing is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR to protect our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data outweigh them.

 

 

    Collection and storage of personal data as well as the type and purpose of their use

 

As part of the use of our website, we may process personal data from users of our website (these can be customers, interested parties and visitors to our website), such as contact details, usage data and communication data.

This is done, among other things, for the purpose of providing a functioning online offering, communicating with the users of our website, processing contact inquiries or customer inquiries and for the purpose of fulfilling the contract. Furthermore, data may be collected and processed for marketing purposes.

 

Below we will explain to you which data from you and for what purpose it can be collected and processed.

 

When visiting the website

When you access our website, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information can be collected without your intervention and stored until it is automatically deleted:

 

- IP address of the requesting computer

- Date and time of access

- Content of the request (specific page)

- Name and URL of the retrieved file

- Access status/HTTP status code

- amount of data transferred in each case

- Website from which access is made (referrer URL)

- Browser used and, if applicable, the operating system of your computer as well as the name of your access provider

- Language and version of the browser software

 

The data mentioned will be processed by us - if collected - for the following purposes:

- Ensuring a smooth connection to the website,

- Ensuring comfortable use of our website,

- Evaluation of system security and stability as well

- for further administrative purposes.

 

The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

In addition, we may use cookies and online services when you visit our website. You can find further explanations in this data protection declaration.

 

Contract initiation/contract fulfillment

 

We process personal data that we receive as part of pre-contractual inquiries and as part of our business relationship. For example, the following personal data can be collected and processed by us: title, first name and last name, address, telephone number, email address, IBAN / credit card number and check digit (in each case only if this is necessary to process payments).

Furthermore, data may be passed on to third parties (see point 5 “Transfer of data to third parties” in this data protection declaration).

 

The processing and storage of your transmitted data is based on Article 6 Paragraph 1 Sentence 1 Letter b GDPR for the purpose of fulfilling a contract or carrying out pre-contractual measures. In all other cases, we process and store your data based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR and based on our legitimate interest in processing the request sent to us in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR.

 

 

When registering for our newsletter

 

You have the option of registering for our newsletter. For this we need your email address and, if necessary, your name as a voluntary information for the purpose of being addressed in the newsletter.

We work with the so-called double opt-in procedure. After you have registered, you will receive an email from us asking you to confirm your registration. By clicking on the activation link contained in the email, you confirm that you are the owner of the email address and that you want to receive the newsletter. If you have given your express consent, we will use your email address based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR to send you our newsletter at regular intervals with information about our offers.

If you do not confirm the activation link within three weeks, we will delete the email address entered for the newsletter.

The data collected is only used to send the newsletter and to document your consent. When you register for the newsletter, we save your IP address and the date of registration. This storage serves solely as proof in the event that a third party misuses an email address and registers to receive the newsletter without the knowledge of the authorized person.

We work with a shipping service provider to send our newsletters. The data is usually transferred directly to the shipping service provider's servers, possibly in the USA, and stored there. The shipping service provider uses this data to send and statistically evaluate the newsletter on our behalf.

 

As part of measuring success, our newsletters contain so-called “web beacons” (small invisible graphics) to collect information. These are pixel-sized files that are retrieved from the shipping service provider's servers when the emails are opened. For example, you can see whether the email has been opened. Technical data such as IP address, browser type or the time of access are also recorded. This data is evaluated exclusively to evaluate the reader behavior of our newsletter recipients, so that the content can be adapted to the interests of the newsletter recipients. A separate revocation of the success measurement is not possible. If you do not want success measurement, please unsubscribe from the entire newsletter subscription.

 

The use of a shipping service provider to send newsletters and the measurement of success are based on our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR in an efficient, user-friendly and secure newsletter system. An order processing contract was concluded in accordance with Article 28 Paragraph 3 Sentence 1 GDPR.

 

You can unsubscribe from the newsletter at any time and revoke your consent, with the result that the data stored for receiving the newsletter will be deleted by us and you will no longer receive a newsletter from us. Data stored by us for other purposes remains unaffected. You can declare your revocation by clicking on the unsubscribe link provided in every newsletter email or by sending a message to the contact details provided in the legal notice.

 

Shipping service provider:

 

Shopify

We send our newsletter via Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, DO4 XN32, Ireland

Further information about Shopify's data protection can be found at: https://www.shopify.de/legal/datenschutz

 

When using our contact form

 

If you have any questions, we offer you the opportunity to contact us using a form provided on the website. It is necessary to provide a first and last name as well as a valid email address so that we know who the request came from and in order to be able to answer it. If necessary, the telephone number can be provided voluntarily.

The processing and storage of your transmitted data is based on Art. 6 Paragraph 1 Sentence 1 Letter b GDPR for the purpose of processing your request. Furthermore, we process your data based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR and on the basis of ours

 

When creating a customer account

You have the option of registering with us and setting up a customer account. The data required for this (such as name, address and email) is marked accordingly and can be found in the input mask. Your personal data is stored in the customer account so that you do not have to enter this data again when you later visit our website and place further orders, thereby simplifying the ordering process. The customer account is access protected by your chosen password.
You can delete your customer account at any time and revoke your consent, with the result that we irrevocably delete the data stored in the customer account, provided that there are no legal retention periods to the contrary. All you need to do is send a message to the contact details provided in the legal notice (also possible by email).
The processing and storage of your transmitted data is based on Art. 6 Para. 1 Sentence 1 Letter a GDPR within the scope of your previously given consent and on the basis of Art Fulfillment of contract.


4. Storage period and data deletion

We generally only store personal data until the purpose for which you entrusted us with the data has been fulfilled. The data will then be permanently deleted. However, if there are statutory retention periods for storing personal data, we will store it for as long as we are legally obliged to do so. Such obligations regularly result from legal proof and retention obligations, which are regulated, among other things, in the Commercial Code and the Tax Code, for tax purposes, for example ten years. After the statutory retention period has expired, the data will be permanently deleted.
Consent given to the processing and storage of your personal data in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR can be revoked at any time with the result that the data will be permanently deleted - provided there are no statutory retention periods to the contrary.
Further rights through which we can be prohibited from processing your personal data arise from Article 21 Paragraph 1 and Paragraph 2 GDPR. Information on the resulting right to object can be found in this data protection declaration under section 14 “Right to object”.

5. Disclosure of data to third parties

We will only share your personal information with third parties if:

- you have given your express consent to this in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR,
- the disclosure in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR is necessary to protect our legitimate interests or those of a third party, such as for the exercise, defense or assertion of legal claims, unless your interests or fundamental rights and freedoms that do so require the protection of personal data, outweigh
- in the event that there is a legal obligation for the transfer in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR,
- in accordance with Art and to be able to offer secure payment processes, as well
- this is legally permissible and is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR for the processing of contractual relationships with you, such as passing on address data to a transport company. Data may also be passed on to a dropshipper who will then send the goods to you on our behalf. If you order goods that are to be sent to an address other than yours, this is based on our legitimate interests in the proper processing of the contractual relationship in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.

If necessary, an order processing contract has been concluded with the service provider used in accordance with Article 28 Paragraph 3 Sentence 1 GDPR.
In the event that the customer's personal data is processed in a third country (outside the EU), this will take place within the scope of the customer's previously given consent, as part of the fulfillment of the contract or due to existing legal obligations. The possible transfer takes place in compliance with the legal requirements. The regulations of Art. 44 to Art. 49 GDPR apply in particular here.


6. Hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on the host's servers, possibly in the USA. This can be v. a. These include IP addresses, contact requests, communication data, contract data, contact details, website access and other data generated via a website.
Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data. An order processing contract in accordance with Article 28 Paragraph 3 Sentence 1 GDPR was concluded with the hoster.
The host is used for the purpose of fulfilling the contract with our potential and existing customers in accordance with Art. 6 Para lit. f GDPR.

Host:
Shopify
We host our website with the following service provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). Data may also be sent to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. as part of further processing . be transmitted.
For more information about Shopify's privacy policy, please visit:
https://www.shopify.de/legal/datenschutz


7. Cookies

We use cookies on our website. These are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. The cookie stores information that arises in connection with the specific end device used.

To use the website, absolutely necessary cookies are used, which ensure that the website functions smoothly and do not require consent. The use of these cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies. This creates a session ID that assigns the session to the user and is temporarily saved. This means that several windows on our website can be opened and assigned to the same user, meaning that log-in data or the contents of the shopping cart are retained. When you close the browser, session cookies are deleted.

We can also use functional cookies. These cookies store the settings made when you last visited the website, such as language selection or internal bookmarks, so that they do not have to be selected again. This can make future visits to our website more pleasant.

Furthermore, so-called performance cookies can be used. These contain information about how our website is used. For example, we can see how often and for how long our website is visited and which sub-pages are visited. This allows us to see which areas of our website are particularly interesting for the user. Performance cookies enable the analysis of your surfing behavior for the purpose of optimizing our online offering. It is not possible to draw conclusions about you as a user.

Third-party marketing cookies may be placed on your device. The purpose of online marketing is to analyze user behavior across multiple websites over a longer period of time in order to place appropriately personalized advertising.

You can configure your browser settings according to your wishes and refuse to accept cookies. We would like to point out that you may then not be able to use all of the functions of this website.

Cookies are used either based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR or within the scope of our legitimate interests in a functional website in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR.

8. Payment service providers

The processing of personal data by a payment service provider is based on Article 6 Paragraph 1 Sentence 1 Letter b GDPR for the purpose of contract processing and only to the extent necessary and within the scope of our legitimate interests in accordance with Article 6 Paragraph 1 Sentence. 1 lit. f GDPR to be able to offer you reliable and secure payment processes. The responsibility for handling data collected and processed by the payment provider in accordance with data protection regulations lies with the respective payment provider.

PayPal
When paying using a payment method provided by PayPal (direct debit, credit card, installment payment or purchase on account), payment is processed via the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal” for short).
If you choose a PayPal payment method, you will be redirected to the PayPal website. To use this service, PayPal collects, processes and stores transaction data, such as the amount paid, technical usage data and location data. PayPal reserves the right to carry out a credit check for the above payment methods