Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are under no obligation to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is given in the processing operations described below.

"Personal data" means any information relating to an identified or identifiable natural person.

Server log files

You can visit our website without providing any information about yourself.
Each time our website is accessed, usage data is transmitted by your internet browser to us or to our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision of the EU Commission exists for Canada. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's Standard Contractual Clauses.

Contact

Controller

Contact us if you wish. The controller responsible for data processing is: Mirjam Spinnenhirn, Am Dennenberg 1, 88279 Amtzell Germany, 01522 1788084, m.spinnenhirn@corridge.de

Customer-initiated contact by email

If you contact us on your own initiative by email for business purposes, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to handle and respond to your contact request.
If the contact serves to carry out pre-contractual measures (e.g. advice in the event of interest in a purchase, preparation of a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of making contact.
If the contact serves to carry out pre-contractual measures (e.g. advice in the event of interest in a purchase, preparation of a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.

If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer account Orders

Customer account

When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the time of withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data in connection with orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data is disclosed in this context, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with the statutory requirements. The scope of the data transfer is limited to a minimum.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision of the EU Commission exists for Canada. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's Standard Contractual Clauses.

Advertising

Use of your email address for sending newsletters

We use your email address to send you information and offers by newsletter, provided you have expressly consented to this. The data processing serves exclusively the purpose of direct marketing. For this purpose, we process your email address and, where applicable, other data that you have voluntarily provided when subscribing to our newsletter.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the time of withdrawal.

To do so, you can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist in order to prevent you from receiving newsletter emails from us in the future. This storage is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our and your legitimate interest in preventing your email address from being used again to send our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Inventory management

Use of an external inventory management system

We use an inventory management system for contract processing within the framework of data processing on our behalf. For this purpose, your personal data collected in the course of the order is transmitted to
Uniconta Deutschland GmbH, Wilhelmi-Straße 1, 22605 Hamburg
.

The processing of your personal data serves the purpose of performing the contract concluded with you and is carried out on the basis of Art. 6(1)(b) GDPR.

Payment service providers Credit check

Use of PayPal Express

On our website we use the payment service PayPal Express provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L- 2449, Luxembourg; "PayPal"). The data processing serves the purpose of enabling us to offer you payment via the payment service PayPal Express. To integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable your browser to be recognised.

The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in offering a customer-oriented range of different payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you. When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the payment service PayPal Express can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Check-Out

On our website we use the payment service PayPal Check-Out provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of enabling us to offer you payment via the payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.

In this context, cookies may be stored that enable your browser to be recognised. The resulting data processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in offering a customer-oriented range of different payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For certain payment methods such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain, where applicable, a credit report based on mathematical-statistical methods using credit reference agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical methods and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in protection against payment default where PayPal makes advance payment.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide it means that the contract cannot be concluded with the payment method you have selected.

Third-party providers
When paying via a third-party provider's payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6(1)(b) GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Local third-party providers may include, for example:

Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland) Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Purchase on invoice via PayPal
When paying via the purchase on invoice payment method, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the

basis of Art. 6(1)(b) GDPR. Ratepay may carry out a credit check based on mathematical-statistical methods (probability or score values) using credit reference agencies, following the procedure already described above. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in protection against payment default where Ratepay makes advance payment. Further information on data protection and on which credit reference agencies Ratpay uses can be found at https://www.ratepay.com/legal- payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna payment options

On our website we use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna"). When you select and use payment via Klarna, the data required for payment processing is transmitted to Klarna in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.

In this context, cookies may be stored that enable your browser to be recognised. The resulting data processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in offering a customer-oriented range of different payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

"Pay Later" (invoice), "Pay Now" (payment by direct debit, credit card, Sofortüberweisung), "Financing" (instalment purchase)
For certain payment methods such as "Pay Later" (invoice), "Pay Now" (payment by direct debit, credit card, Sofortüberweisung), "Financing" (instalment purchase), Klarna reserves the right to obtain, where applicable, a credit report based on mathematical-statistical methods using credit reference agencies.
For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address and data relating to the order, to a credit reference agency for the purpose of identity and credit checks, and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical- statistical methods and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in protection against payment default where Klarna makes advance payment. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide it means that the contract cannot be concluded with the payment method you have selected.
Further information, in particular on the credit reference agencies to which Klarna passes on your personal data, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.

General information about Klarna is available at: https://www.klarna.com/de/. Your personal information is handled by Klarna in accordance with the applicable data protection regulations and as set out in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy .

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set, decide individually whether to accept them, and prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all the functions of this website to their full extent.

The following links provide information on how to manage (and, among other things, deactivate) cookies in the most important browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9- 2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated below in this privacy policy, we use only these technically necessary cookies for the purpose of making our services more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

The use of cookies or comparable technologies is based on § 25(2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Use of GDPR Legal Cookie

On our website we use the consent management tool GDPR Legal Cookie provided by iubenda s.r.l (Via San Raffaele 1, 20121 Milan, Italy; "iubenda").

The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given.
The data processing serves the purpose of obtaining and documenting the necessary consents to data processing and thus complying with legal obligations. Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to iubenda: anonymised IP address, date and time of consent, URL from which consent was sent, anonymous, random, encrypted key, consent status. This data is not passed on to any other third parties.

The data processing is carried out to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR.
Further information on the terms of use and data protection at iubenda can be found at: https://www.iubenda.com/nutzungsbedingungen/31059378 and at https://gdpr-legal-cookie.com/pages/datenschutzerklarung.

Analytics

Use of Google Analytics 4

On our website we use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
The data processing serves the purpose of analysing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website use and internet use.

Among other things, the following information may be collected: IP address, date and time of the page view, click path, information about the browser you use and the device you use, pages visited, referrer URL (the website via which you accessed our website), location data, purchase activity. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google holds about you.

Your IP address is first shortened by us on our own servers. Google therefore receives only pseudonymised data.

Google uses technologies such as cookies, browser web storage and tracking pixels that enable an analysis of your use of the website. The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR.

The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the time of withdrawal.

The information generated in this way about your use of this website is usually transmitted to a Google server in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed itself to complying with European data protection principles. Both Google and US government authorities have access to your data.

Further information on the terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.

Plug-ins and other services

Use of Google Tag Manager

On our website we use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
This application manages JavaScript tags and HTML tags that are used in particular to implement tracking and analysis tools. The data processing serves the purpose of designing our website to meet requirements and optimising it. Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the triggering of further tags that may collect and process personal data.
Further information on the terms of use and data protection can be found here.

Use of social plug-ins

On our website we use plug-ins of social networks. The integration of social plug-ins and the associated data processing serve the purpose of optimising the advertising for our products.
When social plug-ins are integrated, a connection is established between your computer and the servers of the social network provider, and the plug-in is displayed on the page by means of a communication to your browser, provided you have expressly consented to this. In this process, both your IP address and the information as to which of our pages you have visited are transmitted to the provider's servers. This applies regardless of whether you are registered with or logged in to the social network. A transmission also takes place for users who are not registered or not logged in. If you are simultaneously connected to one or more of your social network accounts, the information collected may also be assigned to your corresponding profiles. When you use the plug-in functions (e.g. by clicking the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.

The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the time of withdrawal.

The social networks named below are integrated into our website by means of social plug-ins. Further information on the scope and purpose of the collection and use of the data, as well as on your rights in this regard and options for protecting your privacy, can be found in the linked privacy notices of the providers.

Facebook, provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Meta Platforms Ireland and we are joint controllers for the collection of your data that takes place when the service is integrated and for the transmission of this data to Facebook. This is based on an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are set out. The agreement can be accessed at

https://www.facebook.com/legal/controller_addendum . According to this agreement, we are responsible in particular for fulfilling the information obligations pursuant to Art. 13 and 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33 and 34 GDPR, insofar as a personal data breach concerns our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling the data subject rights pursuant to Art. 15 - 20 GDPR
, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for the obligations under Art. 33 and 34 GDPR, insofar as a personal data breach concerns the obligations of Meta Platforms Ireland under the joint processing agreement.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and has thus committed itself to complying with European data protection principles.
Further information on the collection and use of data by Facebook, and on your rights in this regard and options for protecting your privacy, can be found in Facebook's privacy notice at https://www.facebook.com/about/privacy/.

Instagram, provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):

https://help.instagram.com/155833707900388

Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and has thus committed itself to complying with European data protection principles.

LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland )

https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). LinkedIn has certified itself under the TADPF and has thus committed itself to complying with European data protection principles.

Use of Google reCAPTCHA

On our website we use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The query serves the purpose of distinguishing whether input is made by a human or by automated, machine processing. For this purpose, your input is transmitted to Google and used further there. In addition, the IP address and, where applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed itself to complying with European data protection principles.

The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the time of withdrawal.

Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

Use of Google invisible reCAPTCHA

On our website we use the invisible reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
This serves the purpose of distinguishing whether input is made by a human or by automated, machine processing. In the background, Google collects and analyses usage data that Invisible reCaptcha uses to distinguish regular users from bots. For this purpose, your input is transmitted to Google and used further there. In addition, the IP address and, where applicable, other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.

This data is processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed itself to complying with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the time of withdrawal.
Further information on Google reCAPTCHA and the associated privacy policy can be found
at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy

Eye-Able® Assist is software from Web Inclusion GmbH that gives everyone low-barrier access to information on the internet. The files required for this, such as JavaScript, stylesheets and images, are loaded from an external server. When functions are activated, Eye-Able® Assist uses the browser's local storage to save the settings. All settings are stored only locally and are not transmitted further. To ward off attacks and provide our service in near real time, Eye-Able® Assist uses the content delivery network (CDN) of BunnyWay d.o.o. (Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia). It is used for the purpose of performing contracts with our customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). All transmitted data and servers remain within the EU at all times in order to enable GDPR-compliant processing. Web Inclusion GmbH does not at any time record or analyse personal user behaviour or any other personal data. To ensure processing that complies with data protection law, Web Inclusion GmbH has concluded data processing agreements with our host BunnyWay. Further information can be found in the privacy policies: https://eye-able.com/datenschutz-eye-able/ https://bunny.net/privacy

 

Integration of the logo of the “FairCommerce” initiative

The logo of the “FairCommerce” initiative (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated into our website. When you visit our website, the browser used on your device automatically sends information to the server of Händlerbund e.V. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without any action on your part and stored until it is automatically deleted:

IP address of the requesting computer,
date and time of access,
name and URL of the file retrieved,
website from which access is made (referrer URL),
browser used and, where applicable, the operating system of your computer, as well as the name of your access provider.

The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this purpose, the IP address must remain stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves to optimise the website and to ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for the data processing is Art. 6(1) sentence 1(f) GDPR.

Data subject rights and storage period

Storage period

After complete processing of the contract, the data is initially stored for the duration of the warranty period, thereafter taking into account statutory retention periods, in particular those under tax and commercial law, and then deleted after the period has expired, unless you have consented to further processing and use.

Rights of the data subject

Where the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, to rectification, to erasure, to restriction of processing, and to data portability.
In addition, under Art. 21(1) GDPR you have a right to object to processing based on Art. 6(1)(f) GDPR and to processing for the purposes of direct marketing.

Right to lodge a complaint with the supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is not lawful.

You may lodge a complaint, among others, with the supervisory authority responsible for us, which can be reached at the following contact details:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg) Königstrasse 10 a
70173 Stuttgart
Tel.: +49 711 6155410

Fax: +49 711 61554115 Email: poststelle@lfdi.bwl.de

Right to object

Where the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time, with effect for the future, on grounds relating to your particular situation.
Once you have objected, the processing of the data concerned will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Last updated: 22.10.2024