Data protection

Below we will inform you about how we process your personal data. Personal data within the meaning of Art. 4 GDPR is all information that relates to an identified or identifiable natural person (such as name, address, telephone number, email, invoices, bank details, etc. as well as your user behavior).

Contents

1. Contact details

2. Lawfulness of processing personal data

3. Collection and storage of personal data as well as the nature and purpose of it

use

4. Storage period and data deletion

5. Disclosure of data to third parties

6. Hosting

7. Cookies

8. Payment service providers

9. Credit reports

10. Analytics Services

11. Social Media Services

12. Other Online Services

13. Rights of those affected

14. Right to object

15. Data Security

16. Currentness and changes to this data protection declaration

1. Contact details

This data protection information applies to data processing by the following persons responsible:

Responsible: Hanna Bösselmann

Address: Riedingerstrasse 26 e, 86153 Augsburg

Email: info@sanuka.de

Telephone: 015123644965

2. Lawfulness of processing personal data

As a general rule, we only collect and use personal data from our users to the extent that this is necessary to provide a functional website and our content and services. The collection and use of our users’ personal data regularly only takes place with the user’s consent. An exception applies in cases where it is not possible to obtain prior consent for actual reasons or where the processing of the data is permitted by legal regulations.

According to Article 6 of the General Data Protection Regulation (GDPR), processing of personal data is lawful if one or more of the following points are met:

- you have given your express consent to the processing in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR,

- the processing is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR for the processing of contractual relationships with you or for the implementation of pre-contractual measures that are carried out at your request,

- there is a legal obligation on our part for processing in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR,

- the processing is necessary to protect your vital interests or those of another natural person, Art. 6 Paragraph 1 Sentence 1 Letter d GDPR,

- the processing is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter e of the GDPR for the performance of a task that is in the public interest or in the exercise of official authority vested in us,

- the processing is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR to protect our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data outweigh them.

3. Collection and storage of personal data as well as the type and purpose of their use

As part of the use of our website, we may process personal data from users of our website (these can be customers, interested parties and visitors to our website), such as contact details, usage data and communication data.

This is done, among other things, for the purpose of providing a functioning online offering, communicating with the users of our website, processing contact inquiries or customer inquiries and for the purpose of fulfilling the contract. Furthermore, data may be collected and processed for marketing purposes.

Below we will explain to you which data from you and for what purpose it can be collected and processed.

When visiting the website

When you access our website, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information can be collected without your intervention and stored until it is automatically deleted:

- IP address of the requesting computer

- Date and time of access

- Content of the request (specific page)

- Name and URL of the retrieved file

- Access status/HTTP status code

- amount of data transferred in each case

- Website from which access is made (referrer URL)

- Browser used and, if applicable, the operating system of your computer as well as the name of your access provider

- Language and version of the browser software

The data mentioned will be processed by us - if collected - for the following purposes:

- Ensuring a smooth connection to the website,

- Ensuring comfortable use of our website,

- Evaluation of system security and stability as well

- for further administrative purposes.

The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

In addition, we may use cookies and online services when you visit our website. You can find further explanations in this data protection declaration.

Contract initiation/contract fulfillment

We process personal data that we receive as part of pre-contractual inquiries and as part of our business relationship. For example, the following personal data can be collected and processed by us: title, first name and last name, address, telephone number, email address, IBAN / credit card number and check digit (in each case only if this is necessary to process payments).

Furthermore, data may be passed on to third parties (see point 5 “Transfer of data to third parties” in this data protection declaration).

The processing and storage of your transmitted data is based on Article 6 Paragraph 1 Sentence 1 Letter b GDPR for the purpose of fulfilling a contract or carrying out pre-contractual measures. In all other cases, we process and store your data based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR and based on our legitimate interest in processing the request sent to us in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR.

When using our contact form

If you have any questions, we offer you the opportunity to contact us using a form provided on the website. It is necessary to provide a first and last name as well as a valid email address so that we know who the request came from and in order to be able to answer it. If necessary, the telephone number can be provided voluntarily.

The processing and storage of your transmitted data is based on Art. 6 Paragraph 1 Sentence 1 Letter b GDPR for the purpose of processing your request. Furthermore, we process your data based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR and based on our legitimate interest in processing the request sent to us in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR.

When creating a customer account

You have the option of registering with us and setting up a customer account. The data required for this (such as name, address and email) is marked accordingly and can be found in the input mask. Your personal data is stored in the customer account so that you do not have to enter this data again when you later visit our website and place further orders, thereby simplifying the ordering process. The customer account is access protected by your chosen password.

You can delete your customer account at any time and revoke your consent, with the result that we irrevocably delete the data stored in the customer account, provided that there are no legal retention periods to the contrary. All you need to do is send a message to the contact details provided in the legal notice (also possible by email).

The processing and storage of your transmitted data takes place on the basis of Art Fulfillment of contract.

4. Storage period and data deletion

We generally only store personal data until the purpose for which you entrusted us with the data has been fulfilled. The data will then be permanently deleted. However, if there are statutory retention periods for storing personal data, we will store it for as long as we are legally obliged to do so. Such obligations regularly result from legal proof and retention obligations, which are regulated, among other things, in the Commercial Code and the Tax Code, for example ten years for tax purposes. After the statutory retention period has expired, the data will be permanently deleted.

Consent given to the processing and storage of your personal data in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR can be revoked at any time with the result that the data will be permanently deleted - provided there are no statutory retention periods to the contrary.

Further rights through which we can be prohibited from processing your personal data arise from Article 21 Paragraph 1 and Paragraph 2 GDPR.

Information on the resulting right to object can be found in this data protection declaration under section 14 “Right to object”.

5. Disclosure of data to third parties

We will only share your personal information with third parties if:

- you have given your express consent to this in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR,

- the transfer is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR to protect our legitimate interests or those of a third party, such as for the exercise, defense or assertion of legal claims, unless your interests or fundamental rights and freedoms are infringed upon require the protection of personal data, outweigh

- in the event that there is a legal obligation for the transfer in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR,

- in accordance with Art and to be able to offer secure payment processes, as well

- this is legally permissible and is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR for the processing of contractual relationships with you, such as passing on the address data to a transport company. Data may also be passed on to a dropshipper who will then send the goods to you on our behalf. If you order goods that are to be sent to an address other than yours, this is based on our legitimate interests in the proper processing of the contractual relationship in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.

If necessary, an order processing contract has been concluded with the service provider used in accordance with Article 28 Paragraph 3 Sentence 1 GDPR.

In the event that the customer's personal data is processed in a third country (outside the EU), this will take place within the scope of the customer's previously given consent, as part of the fulfillment of the contract or due to existing legal obligations. The possible transfer takes place in compliance with the legal requirements. The regulations of Art. 44 to Art. 49 GDPR apply in particular here.

6. Hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on the host's servers, possibly in the USA. This can include IP addresses, contact requests, communication data, contract data, contact details, website access and other data generated via a website.

Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data. An order processing contract in accordance with Article 28 Paragraph 3 Sentence 1 GDPR was concluded with the hoster.

The host is used for the purpose of fulfilling the contract with our potential and existing customers in accordance with Art. 6 Para lit. f GDPR.

Host:

Shopify

We host our website with the following service provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). Data may also be sent to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. as part of further processing . be transmitted.

For more information about Shopify's privacy policy, please visit:

https://www.shopify.de/legal/datenschutz

7. Cookies

We use cookies on our website. These are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. The cookie stores information that arises in connection with the specific end device used.

To use the website, absolutely necessary cookies are used, which ensure that the website functions smoothly and do not require consent. The use of these cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies. This creates a session ID that assigns the session to the user and is temporarily saved. This means that several windows on our website can be opened and assigned to the same user, meaning that log-in data or the contents of the shopping cart are retained. When you close the browser, session cookies are deleted.

We can also use functional cookies. These cookies store the settings made when you last visited the website, such as language selection or internal bookmarks, so that they do not have to be selected again. This can make future visits to our website more pleasant.

Furthermore, so-called performance cookies can be used. These contain information about how our website is used. For example, we can see how often and for how long our website is visited and which sub-pages are visited. This allows us to see which areas of our website are particularly interesting for the user. Performance cookies enable the analysis of your surfing behavior for the purpose of optimizing our online offering. It is not possible to draw conclusions about you as a user.

Third-party marketing cookies may be placed on your device. The purpose of online marketing is to analyze user behavior across multiple websites over a longer period of time in order to place appropriately personalized advertising.

You can configure your browser settings according to your wishes and refuse to accept cookies. We would like to point out that you may then not be able to use all of the functions of this website.

Cookies are used either based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR or within the scope of our legitimate interests in a functional website in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR.

8. Payment service providers

The processing of personal data by a payment service provider is based on Article 6 Paragraph 1 Sentence 1 Letter b GDPR for the purpose of contract processing and only to the extent necessary and within the scope of our legitimate interests in accordance with Article 6 Paragraph 1 Sentence. 1 lit. f GDPR to be able to offer you reliable and secure payment processes. The responsibility for handling data collected and processed by the payment provider in accordance with data protection regulations lies with the respective payment provider.

PayPal

When paying using a payment method provided by PayPal (direct debit, credit card, installment payment or purchase on account), payment is processed via the payment service provider PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (short “PayPal”).

If you choose a PayPal payment method, you will be redirected to the PayPal website. To use this service, PayPal collects, processes and stores transaction data, such as the amount paid, technical usage data and location data. PayPal reserves the right to carry out a credit check for the payment methods mentioned above. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR based on PayPal's legitimate interest in determining your ability to pay.

For further data protection information, please see PayPal's data protection declaration:

https://www.profihost.com/datenschutz/

Google Pay

If you choose the “Google Pay” payment method, payment will be processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). To do this, you need a Google Pay-capable device on which Google Pay is set up. Payment is made using a payment card (credit card) stored with Google Pay or via a payment system such as PayPal.

The data collected as part of payment processing is forwarded to Google. The payment is then verified using a token (virtual number) that is only valid for this payment transaction. The payment information is sent to the merchant in encrypted form. To use this service, Google collects, processes and stores transaction data, such as the amount paid, technical usage data and location data.

The Google Pay terms of use can be found at:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=buyertos&ldr=DE

Data protection information for Google Payments can be found here:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

Google’s privacy policy and usage instructions are available at:

https://policies.google.com/privacy

Klarna instant transfer

If you choose the Klarna Sofortüberweisung payment option, payment will be processed via Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany. Sofort GmbH is a subsidiary of Klarna Bank AB (publ), a company under Swedish law with its headquarters at Sveavägen 46, 111 34 Stockholm, Sweden.

When making an instant transfer, you will be redirected to Sofort GmbH's secure payment page after making the appropriate selection. As a technical service provider, this forwards the data you entered into the secure payment form to your bank in encrypted form. For this purpose, Sofort GmbH collects, processes and stores your name, IBAN, subject, amount and date. After the transfer is completed, we receive a real-time transaction confirmation.

Sofort GmbH’s data protection declaration is available at:

https://www.sofort.de/datenschutz.html

Klarna’s privacy policy is available at:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

Klarna purchase on account

If you choose the Klarna purchase on account payment option, the payment will be processed by Klarna Bank AB (publ), a company under Swedish law with its headquarters at Sveavägen 46, 111 34 Stockholm, Sweden.

If you choose the Klarna purchase on account payment method, you will be redirected to the Klarna website. Here, Klarna collects, processes and stores, among other things, contact and identification information such as name, billing address and email address, payment information such as debit or credit card number and account number, and device-related information such as IP address and browser settings.

When purchasing on account, Klarna can pass on your personal data, such as name, address, date of birth and telephone number, to credit reporting agencies as part of the credit check in accordance with Art .

Klarna’s privacy policy is available at:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

Credit card

When paying by credit card, payment is processed via a payment service provider. If you choose the credit card payment option, you will be redirected to the payment service provider's website. This collects and processes the necessary personal data to process the payment, such as your name, credit card number, the validity period of the credit card and the check digit.

Payment service providers are:

Credit card

When paying by credit card, we collect and process the necessary personal data to process the payment, such as your name, credit card number, the validity period of the credit card and the check digit, and pass this on to your credit card company for billing.

Shopify Payments

When paying using a payment option from Shopify Payments (“Shopify Payments”, 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2), payment is processed via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

For this purpose, Stripe Payments Europe Ltd. processes and stores. the relevant transaction data, such as the payment method (e.g. payment by credit card), the amount and the date of payment. Depending on the payment method used, your name, email address, billing or shipping address may also be used by Stripe Payments Europe Ltd. processed and stored.

The privacy policy of Stripe Payments Europe Ltd. is available at:

https://stripe.com/de/privacy#translation

The Shopify Payments privacy policy is available at:

https://www.shopify.com/legal/privacy

9. Credit reports

In the case of the “invoice” payment method, when concluding contracts on the basis of Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, we may retrieve creditworthiness information from specialized financial service companies (credit agencies) for the purpose of credit checks and creditworthiness monitoring. This interest is to be viewed as legitimate within the meaning of the aforementioned provision.

The data stored by the respective credit agency is processed for legitimate reasons of creditor and credit protection, which regularly outweigh your interests, rights and freedoms, or serves to assert, exercise or defend legal claims.

10. Analytics Services

The tracking measures listed below and used by us are based on your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR or based on our legitimate interests in accordance with Art. f GDPR carried out. With the tracking measures we use, we want to ensure a needs-based design and the ongoing optimization of our website. On the other hand, we use tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you. If necessary, an order processing contract has been concluded with the service provider used in accordance with Article 28 Paragraph 3 Sentence 1 GDPR. The responsibility for data protection-compliant operation must be ensured by the respective provider.

You can prevent the storage of cookies by setting the browser software accordingly. However, we would like to point out that in this case not all functions of this website may be fully usable. Unless otherwise stated regarding the storage period, the data will be stored for a period of two years and then deleted.

Use of the remarketing or “similar target groups” function of Google Inc.

We use the functions of “Google Analytics Remarketing”. The company responsible for the European area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The function enables us to present users with targeted, personalized and interest-based advertisements based on their surfing behavior shown on our website when they visit websites belonging to the Google advertising network. For this purpose, Google stores so-called “cookies” in the user’s browser (see Section 7 “Cookies”). The information generated by the cookies about the use of this website is transmitted directly to Google servers, possibly in the USA, and stored there. Cookies make it possible to recognize the user when he visits websites belonging to the Google advertising network. These cookies are not used to identify a person, but only to identify the web browser.

We use the cross-device function. The advertising target groups created by Google Analytics Remarketing are linked to the cross-device functions of Google Ads and DoubleClick. If a user has given their consent, Google links the web and browser history with the user's Google account for this purpose. This means that the corresponding advertisements can also be displayed on a user's other devices, such as smartphones and tablets. The lifespan of the cookie is a maximum of 18 months.

You can also prevent Google from collecting the data generated by the cookie and relating to the use of the website (including the IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de

If you do not agree to the display of advertising, you can deactivate it: https://www.google.com/settings/ads/onweb

Further information about Google's data protection declaration and usage instructions is available at: https://policies.google.com/privacy

Google Ads Conversion Tracking

Our website uses the “Google Ads” advertising system from Google LLC. The company responsible for the European area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

As part of Google Ads we use conversion tracking. Google Ads sets a so-called “cookie” (see section 7 “Cookies”) on your computer if you came to our website via a Google ad. The information generated by the cookies about the use of this website is transmitted directly to Google servers, possibly in the USA, and stored there. These cookies expire after 30 days and are not used for personal identification. If you visit certain pages of ours and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page.

Each Ads customer receives a different cookie. Cookies cannot therefore be tracked via the websites of Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Ads customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users.

If you do not agree to the display of advertising, you can deactivate it: https://www.google.com/settings/ads/onweb

Further information about Google's data protection declaration and usage instructions is available at: https://policies.google.com/privacy

Facebook Pixel, Custom Audiences and Facebook Conversion

On our websites we use the so-called Facebook pixel, an analysis tool from the social network Facebook, which is provided by Meta Platforms Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or - if you are based in the EU - , Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

The Facebook pixel tracks user behavior on our website using so-called events. A pixel event is additional information that adds details to the information sent to Facebook. Events allow Facebook to inform you about what action (e.g. purchase, registration, lead, search, etc.) was carried out on our site. The pixel is used on our site in standard mode (first party cookie).

Details on how the Facebook Pixel works can be found in the Facebook help section at:

https://www.facebook.com/business/help/651294705016616

If consent has been previously given, we can transmit information from our customers to Facebook as part of the so-called “Custom Audiences”, so that, based on the information received, Facebook is able to assign visitors to our online offering to a specific target group and then provide them with appropriately tailored advertising (so-called Facebook ads”). This means that advertising - even across devices - is only shown to users who have shown interest in our products. We can also see whether customers were redirected to our site from a Facebook advertising page and completed certain actions (so-called conversions), such as purchasing a specific product. This allows us to evaluate the effectiveness of the advertisements for statistical purposes based on the conversions.

As part of the extended data comparison, the user's personal data is collected and forwarded to Facebook servers, possibly in the USA. Facebook can link the data to the user's Facebook account if the user is registered with Facebook. Even without registering with Facebook, it is possible for Facebook to process and store data (including your IP address).

You can object to the collection by Facebook Pixel and the use of your data to display Facebook ads. You can also determine your advertising preferences, i.e. which specific types of advertisements should be shown to you within Facebook: https://www.facebook.com/settings?tab=ads

For more information about Facebook's data policy, please visit:

https://www.facebook.com/about/privacy/

11. Social Media Services

We use social media plugins on our website based on our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR in order to make our website better known. The responsibility for data protection-compliant operation must be ensured by the respective provider.

When you access a page on our website that contains a social media plugin, your browser establishes a direct connection to the servers of the respective provider, possibly in the USA. The content of the plugin (including your IP address) is transmitted directly to your browser by the respective provider and integrated into the page. Through this integration, the provider receives the information that your browser has accessed the corresponding page on our website, even if you do not have a customer profile or are not currently logged in to the respective provider.

If you are logged in to a provider, they can directly assign your visit to our website to your user account. If you interact with the plugins, for example by pressing a button, this information is also transmitted directly to a server of the respective provider and stored there. The information is also published on your user account and displayed there to your contacts. The respective provider can use this information for the purposes of advertising, market research and the needs-based design of its pages.

If you do not want the provider to directly assign the data collected via our website to your user account, you must log out of the respective provider before visiting our website.

We would like to point out that, as operators of the pages, we have no knowledge of the content of the transmitted data or their use by the respective provider.

Social networks:

<font size="1">Facebook</font>

We use social media plugins from the social network Facebook, which is provided by Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”), or - if you are based in the EU - Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a.

Further information about Facebook's privacy policy can be found at:

https://www.facebook.com/about/privacy/

Instagram

We use social media plugins from the social network Instagram. The Instagram services are an offer from Facebook product provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland and operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

Further information about Instagram’s privacy policy can be found at:

https://help.instagram.com/155833707900388

12. Other Online Services

We use our website on the basis of your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR or as part of our legitimate interest in optimal marketing of our offering in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR applies to online services and advertising tools of the companies listed below. If necessary, an order processing contract has been concluded with the service provider used in accordance with Article 28 Paragraph 3 Sentence 1 GDPR. The responsibility for data protection-compliant operation must be ensured by the respective provider.

You can prevent the storage of cookies by setting the browser software accordingly; However, we would like to point out that in this case not all functions of this website may be fully usable.

Analysis and tracking tool Google Tag Manager:

We use the web analysis and tracking tool Google Tag Manager, a service provided by GoogleIreland Limited, Gordon House, Barrow Street, Dublin4, Ireland.

Using the Tag Manager, we can control and organize so-called tags (scripts) from third-party providers that analyze and track your user behavior. Cookies are transferred and set for this purpose. Personal data such as the IP address can also be collected and transferred to servers in third countries, including the USA, over which we have no influence.

We have activated IP anonymization on this website so that the IP address is previously shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate the use of the websites, to compile reports on website activities and to provide other services related to website activity and internet usage to the website operator.

If you do not agree to the display of advertising, you can deactivate it: https://www.google.com/settings/ads/onweb

We base the use of the TAG Manager on our legitimate interest, Article 6 Paragraph 1 Letter f GDPR and only use the Tag Manager after your consent, Article 6 Paragraph 1 Letter a GDPR. The data collected is only stored by Google until the service has been fulfilled.

We have concluded an AVV contract with Google.

For more information about Google's terms and conditions, please visit:

https://policies.google.com/terms?hl=de

You can find further information about Google’s data protection at

https://policies.google.com/privacy?hl=de

Assessment tool

You have the opportunity to leave a review about our service and the products purchased from us. This allows you to evaluate the transaction and, if necessary, comment on it after the contract has been concluded. For this we work with a third party provider. This may involve the transmission of personal data, such as name, email address, invoice number and the rating. The IP address, for example, may also be passed on. The use of a rating system is done for the purpose of optimizing our service and gaining customer trust.

To inform you of this possibility, you may be contacted by us or by the provider in the interest of a serious evaluation as part of the purchase process - provided you have given your prior consent.

The storage period is the responsibility of the respective provider.

Provider:

Verified web shop

We use the evaluation tool from Tisko Consulting GmbH, Hertzstr. 15, 53881 Euskirchen, Germany.

Further information about data protection at Tisko Consulting GmbH can be found at:

https://www.gepruefter-webshop.de/datenschutz/

Seal of quality: certified web shop

The “Verified Webshop” seal is integrated into our website. The seal and the services advertised with it are an offer from Tisko Consulting GmbH, Hertzstr.15, 53881 Euskirchen. When the seal is accessed, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data) and documents the retrieval. This access data is not evaluated and is automatically deleted no later than 30 days after the end of your site visit.

Further information about data protection at Tisko Consulting GmbH can be found at:

https://www.gepruefter-webshop.de/datenschutz/

13. Rights of those affected

You have the right:

- in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a Right to complain, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information about its details;

- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or complete personal data stored by us;

- in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is carried out to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is necessary;

- in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse its deletion and we no longer need the data but you use it to assert your rights, need to exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;

- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;

- in accordance with Art. 7 Para. 3 GDPR, to revoke your consent to us at any time. This means that we are no longer allowed to continue the data processing based on this consent in the future

- in accordance with Art. 77 GDPR, to complain to a supervisory authority if you believe that the processing of your personal data was carried out unlawfully. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our headquarters.

14. Right to object

IF YOUR PERSONAL DATA IS PROVIDED ON THE BASIS OF OUR LEGITIMATE INTERESTS IN ACCORDANCE WITH ART. 6 ABS. 1 p. 1 LIT. F GDPR, YOU HAVE THE RIGHT IN ACCORDANCE WITH ARTICLE. 21 ABS. 1 GDPR TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA IF THERE ARE REASONS FOR THIS THAT ARISE FROM YOUR PARTICULAR SITUATION. AS A RESULT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROOF COMPLEX REASONS FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOM OR THE PROCESSING IS FOR THE ASSERTMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

YOU CAN ALSO OBJECTION ACCORDING TO. ART. 21 ABS. 2 GDPR AGAINST THE PROCESSING OF PERSONAL DATA BY US IN ACCORDANCE WITH ART. 6 ABS. 1 p. 1 LIT. F GDPR WILL BE PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, WITH THE CONSEQUENCES THAT WE WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR THE PURPOSES OF DIRECT ADVERTISING.

IF YOU WOULD LIKE TO USE YOUR RIGHT OF CANCELLATION OR OBJECTION, SEND AN EMAIL TO THE EMAIL ADDRESS STATED IN THE IMPRINT.

15. Data Security

When visiting our website, we use the common SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. This is usually 256 bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the bottom status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

16. Currentness and changes to this data protection declaration

This data protection declaration is currently valid.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration on this website at any time.

This data protection declaration was created by the contract lawyers at TISKO Consulting GmbH (www.Gepruefter-Webshop.de) and is subject to copyright protection. Any use other than that specified in the contract or copying and unauthorized use of the texts is not permitted and constitutes a copyright infringement that will be punished legally.

Country/region

Language

Data protection