Privacy policy


Data protection
as well as information on any consent you may have given us

As responsible person in the sense of the data protection regulations we inform you below about the processing of your personal data by us.


I. The concept of personal data and other important terms

Personal data, in simple terms, is all information that relates to you personally as the data subject. Provisions on what the term "personal data" means and what other terms mean for the following data protection information are contained in Article 4 GDPR (General Data Protection Regulation).


II. Name and contact details of the person responsible; Contact details of the data protection officer

In a simplified sense, the person responsible is the one who, alone or in conjunction with others, decides on the purposes and means of processing personal data. The name and contact details of the person responsible (and as far as a data protection officer has been appointed, the contact details of the data protection officer) can be found in our seller information / our imprint.


III. Purposes of processing your personal data; legal basis for processing

We process your personal data within the scope of our activities for the purposes listed below in accordance with the respective legal bases.

1. In order to safeguard our legitimate interest in maintaining the proper operation of our Internet presence, in providing functions that are as user-friendly as possible and in analysing the use of our Internet presence, your personal data will be processed on the basis of Article 6 para. 1 letter f) DS-GVO.

2. In order to carry out pre-contractual measures based on an enquiry from you, your personal data will be processed on the basis of Article 6 para. 1 letter b) DS-GVO.

3. In order to safeguard our legitimate interest in responding to enquiries and in taking other measures in response to an enquiry from you, your personal data will be processed on the basis of Article 6 (1) (f) DS-GVO.

4. For the fulfilment of a contract to which you are a party, your personal data will be processed on the basis of Article 6 (1) (b) DS-GVO.

5. For the purpose of implementing advertising measures, your personal data will be processed either on the basis of your consent pursuant to Article 6 (1) (a) DS Block Exemption Regulation or on the basis of Article 6 (1) (f) DS Block Exemption Regulation.

6. In order to fulfil the legal obligations to which we are subject, your personal data will be processed on the basis of Article 6 (1) (c) DS-GVO.

7. In order to safeguard our legitimate interest in the enforcement of our rights and in the defence against claims directed against us, your personal data will be processed on the basis of Article 6 (1) (f) DS-GVO.

Our systems are protected by state-of-the-art technical and organisational measures to protect your personal data against access, alteration or distribution by unauthorised persons and against loss and destruction.

Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information in the context of this data protection declaration.


IV. Transmission of your personal data to third parties; Categories of recipients of your personal data

If this is necessary to achieve the purpose of processing your personal data, we will transfer your personal data to third parties to the extent required by law. Detailed information on the transmission of your personal data to third parties for the individual processing purposes can be found in the relevant further information in the context of this privacy policy. In cases of transmission of your personal data to third parties, the amount of data transmitted is limited to the minimum required.


V. Scope of processing of your personal data for each processing purpose

Below we will inform you in detail about the processing of your personal data for the various processing purposes.

Your personal data will be deleted when it is no longer required for processing for the purpose for which it was collected, unless we may continue to process the data for a different purpose within the scope of the statutory provisions and in accordance with the information contained in this data protection declaration.


1. Use of our internet presence for information purposes

If you visit our website without providing us with any information, we only process the personal data of you that your browser sends to our server. This involves the following data, which is technically necessary to display our Internet presence and to guarantee stability and security:

  • the page you have called up
  • date and time of the request
  • transferred data volume
  • source or reference from where you came to the page
  • browser used by you
  • operating system you are using
  • your IP address

Your personal data will be processed on the basis of Article 6 (1) (f) DS-GVO in order to safeguard our legitimate interest in maintaining the proper operation of our website, in providing functions that are as user-friendly as possible and in analysing the use of our website.

Your personal data will be deleted after 6 months, unless they are further required for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case the deletion takes place immediately after completion of the appropriate procedure.

You are not obliged to provide your personal data. However, the non-availability of your personal data would mean that you would not be able to view our website.


2. Processing of inquiries

If you contact us with an inquiry or request, we will process the personal data and information/documents you provide. Regardless of the way in which you submit your inquiry or concerns to us, these may be:

  • date and time of contact
  • name
  • contact details
  • data on inquiry/request
  • transmitted information/documents


Depending on the content of your enquiry or request, your personal data and the information/documents transmitted will be processed on the basis of Article 6 (1) (b) of the DS Block Exemption Regulation in order to carry out pre-contractual measures or on the basis of Article 6 (1) (b) of the DS Block Exemption Regulation in order to fulfil a contract to which you are a party or on the basis of Article 6 (1) (f) of the DS Block Exemption Regulation in order to safeguard our legitimate interest in responding to enquiries/concerns and in carrying out other measures in connection with the processing of enquiries/concerns.

Insofar as this is necessary for the processing of your enquiry/concern, we will transfer your personal data to third parties within the framework of the statutory provisions. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the necessary minimum.

Your personal data will be deleted when your enquiry/concern has been clarified, at the earliest however after the expiry of the tax and commercial retention periods of 6 or 10 years, respectively, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we would not be able to process your inquiry or request.


3. Fulfillment of contracts

If you transmit personal data to us for the purpose of concluding a contract or in connection with a contract, we process the data transmitted by you for the execution of the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. information on the products covered by the contract as well as payment and delivery information).

The processing of your personal data takes place on the basis of Article 6(1)(b) of the GDPR for the performance of a contract of which you are a party.

Insofar as this is necessary for the fulfilment of the contract with you, we will transfer your personal data to third parties within the framework of the statutory provisions. This transfer is made to the service providers involved in the contract. These are the providers of the processing tools used by us, the companies commissioned with transport and the payment service providers commissioned with payment matters.

If you use the payment service provider PayPal for processing payment transactions, we expressly point out that the PayPal privacy policy applies to all PayPal transactions: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

In cases of transmission of your personal data to third parties, the amount of data transmitted is limited to the minimum required.

Your personal data will be deleted after expiry of the tax and commercial retention periods of 6 or 10 years, unless we continue to process the data for another purpose in the context of legal requirements and in accordance with the information in this privacy policy.

For the conclusion of a contract with us the provision of your personal data is necessary. You are not obliged to provide your personal data. However, not providing your personal information would mean that we would not be able to enter into a contract with you.


4. Advertising by newsletter

When you subscribe to our newsletter, we process the email address you provide us with - and any other personal data you provide - to send you information about our products and services by email. In this respect, only the indication of your email address is obligatory. If you voluntarily provide further personal data, we may process this data to address you personally in the newsletter.

If you register for our newsletter, you give your consent with the following content: "I agree to be informed by e-mail about interesting offers and therefore consent to the processing of my e-mail address and other personal data provided by me for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation".

The registration for our newsletter takes place in the so-called double opt-in procedure. This means: After the registration you receive first an email with a message about the registration to the newsletter connected with a request for confirmation of the registration. Your confirmation of registration is required in order to document the required consent to the sending of the newsletter and to be able to recognize registrations to external e-mail addresses. In connection with the registrations to the newsletter and the confirmations the IP address as well as date and time are logged, in order to be able to prove the granting of the consent according to the legal defaults if necessary.

Your personal data will be processed on the basis of your consent in accordance with Article 6(1)(a) GDPR.

You can revoke your consent at any time and without giving reasons with effect for the future. For this purpose, it is sufficient to inform the responsible person accordingly, whose contact details can be found in the information on the responsible person. The legality of the processing carried out until the revocation remains unaffected in the event of revocation.

If you revoke your consent or unsubscribe from our newsletter, your email address and any other data transmitted will be deleted immediately, unless we are permitted to continue processing the data for another processing purpose within the scope of the statutory provisions and in accordance with the information in this data protection declaration.

In order to receive our newsletter, it is at least necessary to provide your email address. You are not obliged to provide your email address. If you do not provide your email address, however, you will not be able to subscribe to our newsletter.
 

5. Advertising by letter post

We process the personal data transmitted by you to first and last name and address if necessary for the transmission of information to our offers by letter post.

In this respect, your personal data will be processed on the basis of Article 6 para. 1 letter f) DS-GVO in order to safeguard our legitimate interest in the implementation of advertising measures by letter post.

You may object at any time to the processing of your personal data for the purpose of advertising measures by letter post. For this purpose, it is sufficient to inform the responsible person accordingly, whose contact details you can find in the information on the responsible person.

If you object to the processing of your personal data for the purpose of carrying out advertising measures by letter post, the personal data you have provided on first name, surname and address will be deleted immediately, unless we may continue to process the data for another processing purpose within the framework of the statutory provisions and in accordance with the information in this data protection declaration.

You are not obliged to provide your personal data for the execution of advertising measures by letter post. The non-availability of your personal data would, however, have the consequence that we would not be able to send you any advertising by letter post.



6. Fulfillment of legal obligations to which we are subjected

We process your personal data within the scope of the corresponding specifications in order to fulfil legal obligations to which we are subject.

In order to fulfil the legal obligations to which we are subject, your personal data will be processed on the basis of Article 6 (1) (c) DS-GVO.

Insofar as this is necessary to fulfil the legal obligations to which we are subject, we transfer your personal data to third parties within the framework of the statutory provisions. In cases where your personal data is transferred to third parties, the amount of data transferred is limited to the minimum required.

Your personal data will be deleted when it is no longer needed to fulfil the legal obligations to which we are subject, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.


7. Use of cookies

We use so-called cookies in our Internet presence. These are small files which are stored on your device and through which certain information is transmitted to us. The use of cookies serves to enable you to use certain functions and to make our website more user-friendly.

Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device even after the end of the browser session, i.e. after closing your browser, and enable us or our partner companies (cookies from third parties) to recognize you the next time you visit our website (so-called persistent cookies).

Some of the cookies we use are technically necessary to enable you to use certain functions. This is the case, for example, with regard to the storage of entries in connection with the use of the shopping cart function. In this respect, your personal data will be processed on the basis of Article 6(1)(b) GDPR for the purpose of implementing pre-contractual measures which are taken at your request as the person concerned or on the basis of Article 6(1)(b) GDPR for the fulfilment of a contract to which you are a party or on the basis of Article 6(1)(f)  GDPR for the purpose of safeguarding our legitimate interest in providing functions which are as user-friendly as possible. If we or our partner companies use cookies for the purpose of range measurement or for marketing purposes, you may find detailed information on this in the corresponding further information within the scope of this data protection declaration.

You can prevent the storage of cookies by setting your browser software accordingly. You can delete saved cookies using the corresponding settings. If necessary, please refer to the program help for the browser you are using to find out how the corresponding settings can be made. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. As an example, we refer you to the information on the following common browsers:


Translated with www.DeepL.com/Translator

Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en

Firefox: https://support.mozilla.org/en-US/kb/exp/enable-and-disable-cookies-website-preferences

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

You can declare a general objection to the use of cookies for marketing purposes for a large number of the services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com.

 

8. Enforcement of our rights and defense against claims directed against us

If necessary, we process your personal data to protect our legitimate interest in the enforcement of our rights and in the defense against claims directed against us.

In this case, the processing of your personal data takes place on the basis of Article 6(1)(f) of the GDPR.

As far as this is necessary to protect our legitimate interests, we will transfer your personal data to third parties within the scope of the legal requirements. This transfer is made to the debt collection service providers involved or our lawyers.

In cases of transmission of your personal data to third parties, the amount of data transmitted is limited to the minimum required.

Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the tax and commercial retention periods of 6 or 10 years, unless we may use the data for another processing purpose in accordance with legal requirements and in accordance with the information in this privacy policy continue to process.
 

Use of an external merchandise management system
We use a merchandise management system for contract processing within the framework of order processing.
Your personal data collected within the framework of the order will be transmitted to

plentymarkets GmbH
Mayor Brunner Street 15
34117 Kassel
Germany

for this purpose.


VI. Duration for which your personal data is stored or criteria for determining this duration

Your personal data will be deleted if it is no longer needed for processing for the respective processing purpose, unless we may continue to process the data for another processing purpose in accordance with the legal requirements and according to the information contained in this privacy policy. For information on the length of time your personal information is stored or the criteria for determining that duration, see the information on how your personal data is processed for each processing purpose in this privacy statement.


VII. Your rights

1. Overview

In order to ensure a fair and transparent processing of personal data, you as the data subject have the following rights according to the data protection regulations:

the right to information under Article 15 of the GDPR;

the right of correction under Article 16 of the GDPR,

the right to cancellation under Article 17 of the GDPR,

the right to restriction of processing under Article 18 of the GDPR;

the right to data portability under Article 20 of the GDPR

the right to revoke a given consent at any time according to Article 7(3) of the GDPR,

the right to object to the processing according to Article 21 of the GDPR, about which we will inform you separately below

and the right to complain to the supervisory authority under Article 77 GDPR, about which we will inform you separately below.


2. Your right to object to the processing

THE PROCESSING OF PERSONAL DATA IS PERMITTED IF THE PROCESSING IS NECESSARY TO SAFEGUARD THE LEGITIMATE INTERESTS OF THE CONTROLLER OR OF A THIRD PARTY, UNLESS THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA SUBJECT, WHICH REQUIRE THE PROTECTION OF PERSONAL DATA, PREVAIL, IN PARTICULAR IF THE DATA SUBJECT IS A CHILD, ART. 6 PARA. 1 LETTER F) DS-GVO.

AS A DATA SUBJECT, YOU HAVE THE RIGHT, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU ON THE BASIS OF ARTICLE 6(1)(F) OF THE DS BLOCK EXEMPTION REGULATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE COMPELLING REASONS FOR THE PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS AS A DATA SUBJECT, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT ADVERTISING, YOU AS THE DATA SUBJECT HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF, AS A DATA SUBJECT, YOU OBJECT TO THE PROCESSING FOR DIRECT MARKETING PURPOSES, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THOSE PURPOSES.


3. Your right of appeal to the supervisory authority

As affected person, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your whereabouts, place of work or place of alleged infringement, if you believe that the processing of your personal data concerning you violates the requirements of the GDPR.


VIII. Information about the basis for the provision of your personal data and the possible consequences of not providing it

To the extent necessary to ensure fair and transparent processing, you will find information on the basis for providing your personal data and on the possible consequences of not providing the information for processing your personal data for the individual processing purposes.