Privacy policy
Data protection
as well as information on any consent you may have given us
As responsible person in the sense of the data protection regulations we inform you below about the processing of your personal data by us.
I. The concept of personal data and other important terms
Personal data, in simple terms, is all information that relates to you personally as the data subject. Provisions on what the term "personal data" means and what other terms mean for the following data protection information are contained in Article 4 GDPR (General Data Protection Regulation).
II. Name and contact details of the person responsible; Contact details of the data protection officer
In a simplified sense, the person responsible is the one who, alone or in conjunction with others, decides on the purposes and means of processing personal data. The name and contact details of the person responsible (and as far as a data protection officer has been appointed, the contact details of the data protection officer) can be found in our seller information / our imprint.
III. Purposes of processing your personal data; legal basis for processing
We process your personal data within the scope of our activities for the purposes listed below in accordance with the respective legal bases.
1. In order to safeguard our legitimate interest in maintaining the proper operation of our Internet presence, in providing functions that are as user-friendly as possible and in analysing the use of our Internet presence, your personal data will be processed on the basis of Article 6 para. 1 letter f) DS-GVO.
2. In order to carry out pre-contractual measures based on an enquiry from you, your personal data will be processed on the basis of Article 6 para. 1 letter b) DS-GVO.
3. In order to safeguard our legitimate interest in responding to enquiries and in taking other measures in response to an enquiry from you, your personal data will be processed on the basis of Article 6 (1) (f) DS-GVO.
4. For the fulfilment of a contract to which you are a party, your personal data will be processed on the basis of Article 6 (1) (b) DS-GVO.
5. For the purpose of implementing advertising measures, your personal data will be processed either on the basis of your consent pursuant to Article 6 (1) (a) DS Block Exemption Regulation or on the basis of Article 6 (1) (f) DS Block Exemption Regulation.
6. In order to fulfil the legal obligations to which we are subject, your personal data will be processed on the basis of Article 6 (1) (c) DS-GVO.
7. In order to safeguard our legitimate interest in the enforcement of our rights and in the defence against claims directed against us, your personal data will be processed on the basis of Article 6 (1) (f) DS-GVO.
Our systems are protected by state-of-the-art technical and organisational measures to protect your personal data against access, alteration or distribution by unauthorised persons and against loss and destruction.
Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information in the context of this data protection declaration.
IV. Transmission of your personal data to third parties; Categories of recipients of your personal data
If this is necessary to achieve the purpose of processing your personal data, we will transfer your personal data to third parties to the extent required by law. Detailed information on the transmission of your personal data to third parties for the individual processing purposes can be found in the relevant further information in the context of this privacy policy. In cases of transmission of your personal data to third parties, the amount of data transmitted is limited to the minimum required.
V. Scope of processing of your personal data for each processing purpose
Below we will inform you in detail about the processing of your personal data for the various processing purposes.
Your personal data will be deleted when it is no longer required for processing for the purpose for which it was collected, unless we may continue to process the data for a different purpose within the scope of the statutory provisions and in accordance with the information contained in this data protection declaration.
1. Use of our internet presence for information purposes
If you visit our website without providing us with any information, we only process the personal data of you that your browser sends to our server. This involves the following data, which is technically necessary to display our Internet presence and to guarantee stability and security:
- the page you have called up
- date and time of the request
- transferred data volume
- source or reference from where you came to the page
- browser used by you
- operating system you are using
- your IP address
Your personal data will be processed on the basis of Article 6 (1) (f) DS-GVO in order to safeguard our legitimate interest in maintaining the proper operation of our website, in providing functions that are as user-friendly as possible and in analysing the use of our website.
Your personal data will be deleted after 6 months, unless they are further required for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case the deletion takes place immediately after completion of the appropriate procedure.
You are not obliged to provide your personal data. However, the non-availability of your personal data would mean that you would not be able to view our website.
2. Processing of inquiries
If you contact us with an inquiry or request, we will process the personal data and information/documents you provide. Regardless of the way in which you submit your inquiry or concerns to us, these may be:
- date and time of contact
- name
- contact details
- data on inquiry/request
- transmitted information/documents
Depending on the content of your enquiry or request, your personal data and the information/documents transmitted will be processed on the basis of Article 6 (1) (b) of the DS Block Exemption Regulation in order to carry out pre-contractual measures or on the basis of Article 6 (1) (b) of the DS Block Exemption Regulation in order to fulfil a contract to which you are a party or on the basis of Article 6 (1) (f) of the DS Block Exemption Regulation in order to safeguard our legitimate interest in responding to enquiries/concerns and in carrying out other measures in connection with the processing of enquiries/concerns.
Insofar as this is necessary for the processing of your enquiry/concern, we will transfer your personal data to third parties within the framework of the statutory provisions. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the necessary minimum.
Your personal data will be deleted when your enquiry/concern has been clarified, at the earliest however after the expiry of the tax and commercial retention periods of 6 or 10 years, respectively, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.
You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we would not be able to process your inquiry or request.
3. Fulfillment of contracts
If you transmit personal data to us for the purpose of concluding a contract or in connection with a contract, we process the data transmitted by you for the execution of the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. information on the products covered by the contract as well as payment and delivery information).
The processing of your personal data takes place on the basis of Article 6(1)(b) of the GDPR for the performance of a contract of which you are a party.
Insofar as this is necessary for the fulfilment of the contract with you, we will transfer your personal data to third parties within the framework of the statutory provisions. This transfer is made to the service providers involved in the contract. These are the providers of the processing tools used by us, the companies commissioned with transport and the payment service providers commissioned with payment matters.
If you use the payment service provider PayPal for processing payment transactions, we expressly point out that the PayPal privacy policy applies to all PayPal transactions: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
In cases of transmission of your personal data to third parties, the amount of data transmitted is limited to the minimum required.
Your personal data will be deleted after expiry of the tax and commercial retention periods of 6 or 10 years, unless we continue to process the data for another purpose in the context of legal requirements and in accordance with the information in this privacy policy.
For the conclusion of a contract with us the provision of your personal data is necessary. You are not obliged to provide your personal data. However, not providing your personal information would mean that we would not be able to enter into a contract with you.
4. Advertising by newsletter
When you subscribe to our newsletter, we process the email address you provide us with - and any other personal data you provide - to send you information about our products and services by email. In this respect, only the indication of your email address is obligatory. If you voluntarily provide further personal data, we may process this data to address you personally in the newsletter.
If you register for our newsletter, you give your consent with the following content: "I agree to be informed by e-mail about interesting offers and therefore consent to the processing of my e-mail address and other personal data provided by me for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation".
The registration for our newsletter takes place in the so-called double opt-in procedure. This means: After the registration you receive first an email with a message about the registration to the newsletter connected with a request for confirmation of the registration. Your confirmation of registration is required in order to document the required consent to the sending of the newsletter and to be able to recognize registrations to external e-mail addresses. In connection with the registrations to the newsletter and the confirmations the IP address as well as date and time are logged, in order to be able to prove the granting of the consent according to the legal defaults if necessary.
Your personal data will be processed on the basis of your consent in accordance with Article 6(1)(a) GDPR.
You can revoke your consent at any time and without giving reasons with effect for the future. For this purpose, it is sufficient to inform the responsible person accordingly, whose contact details can be found in the information on the responsible person. The legality of the processing carried out until the revocation remains unaffected in the event of revocation.
If you revoke your consent or unsubscribe from our newsletter, your email address and any other data transmitted will be deleted immediately, unless we are permitted to continue processing the data for another processing purpose within the scope of the statutory provisions and in accordance with the information in this data protection declaration.
In order to receive our newsletter, it is at least necessary to provide your email address. You are not obliged to provide your email address. If you do not provide your email address, however, you will not be able to subscribe to our newsletter.
5. Advertising by letter post
We process the personal data transmitted by you to first and last name and address if necessary for the transmission of information to our offers by letter post.
In this respect, your personal data will be processed on the basis of Article 6 para. 1 letter f) DS-GVO in order to safeguard our legitimate interest in the implementation of advertising measures by letter post.
You may object at any time to the processing of your personal data for the purpose of advertising measures by letter post. For this purpose, it is sufficient to inform the responsible person accordingly, whose contact details you can find in the information on the responsible person.
If you object to the processing of your personal data for the purpose of carrying out advertising measures by letter post, the personal data you have provided on first name, surname and address will be deleted immediately, unless we may continue to process the data for another processing purpose within the framework of the statutory provisions and in accordance with the information in this data protection declaration.
You are not obliged to provide your personal data for the execution of advertising measures by letter post. The non-availability of your personal data would, however, have the consequence that we would not be able to send you any advertising by letter post.
6. Fulfillment of legal obligations to which we are subjected
We process your personal data within the scope of the corresponding specifications in order to fulfil legal obligations to which we are subject.
In order to fulfil the legal obligations to which we are subject, your personal data will be processed on the basis of Article 6 (1) (c) DS-GVO.
Insofar as this is necessary to fulfil the legal obligations to which we are subject, we transfer your personal data to third parties within the framework of the statutory provisions. In cases where your personal data is transferred to third parties, the amount of data transferred is limited to the minimum required.
Your personal data will be deleted when it is no longer needed to fulfil the legal obligations to which we are subject, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.
7. Use of cookies and other technologies
We use cookies and other technologies (e.g. tags, trackers and analysis tools) on our website so that you can use the functions offered by us, in order to analyse the use of the functions offered by us and, if necessary, to be able to present advertising that meets your needs as far as possible. Below we inform you about the cookies and other technologies used by us.
Cookies are small files that are stored on your device and through which certain information is transmitted to us. The use of cookies serves to enable you to use certain functions and to make our offer more user-friendly.
7.1 Technically Required Cookies and Technologies:
In some cases, the use of cookies and technologies on our website is technically necessary in order to provide you with the functions of our service you have requested and to document the consent you have given. For this reason, you cannot deselect the use of the corresponding cookies and technologies (opt-out). You can prevent the storage of cookies by setting your browser software accordingly. You can delete saved cookies via the corresponding settings. If necessary, please refer to the program help for the browser you are using to find out how the corresponding settings can be made. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.
7.1.1 Consent-Tool
We use a so-called Consent-Tool on our website, which we use in accordance with our data protection obligations under Art. 5 Para. 2 DS-GVO in conjunction with Art. 5 Para. 2 DS-GVO. Art. 6 para. 1 letter c) DS-GVO about the cookies used by us and with which we document whether and to what extent you have decided against the processing of your data.
Responsible:
The processing of your personal data is carried out by us as the responsible party. You can find the name and contact details of the person responsible (and, if a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / imprint.
Processing and legal basis:
Compliance with data protection obligations to inform about cookies used and storage/documentation of consents granted pursuant to Art. 5 para. 2 DS-GVO i.V.m. Art. 6 Para. 1 Letter c) DS-GVO
Provider of the used Consent-Tool:
plentysystems AG, Mayor Brunner-Straße 15, 34117 Kassel, Germany
Privacy information of the provider of the Consent-Tool used by us can be found here:
https://www.plentymarkets.eu/unternehmen/datenschutz/
Name/name of the cookie: Consent
Cookie runtime: during the session
Name/name of the cookie: Session
Cookie runtime: during the session
Name/name of the cookie: CSRF
Cookie runtime: during the session
Name/name of the cookie: Google Maps
Cookie runtime: 6 months
7.1.2 Technically required cookies:
Technically required cookies are cookies that are required so that you can use the functions of our service you have requested (to carry out an order). This concerns, for example, the storage of entries in connection with the use of the shopping cart function or the storage of entries after registration in connection with the creation of a customer account.
Responsible person:
The processing of your personal data is carried out by us as the responsible party. The name and contact details of the person responsible (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / imprint. Information on whether the cookies are set by us (first party cookies) or by a partner company (third party cookies) can be found in the information on the individual cookies.
Processing purposes and legal basis:
In this respect, the processing of your personal data takes place on the basis of Article 6 para. 1 letter b) DS-GVO for the implementation of pre-contractual measures, which take place at your request as a person concerned or on the basis of Article 6 para. 1 letter b) DS-GVO for the fulfilment of a contract to which you are a party.
Name/Designation: Consent
Supplier: plentysystems AG; https://www.plentymarkets.eu/unternehmen/datenschutz/
Description: The Consent-Cookie stores the user's consent status for cookies on our site.
Runtime: Session
Name/Description: Session
Supplier: plentysystems AG; https://www.plentymarkets.eu/unternehmen/datenschutz/
Description: The session cookie maintains the state of the user for all page requests.
Runtime: Session
Name/Designation: CSRF
Supplier: plentysystems AG; https://www.plentymarkets.eu/unternehmen/datenschutz/
Description: The CSRF cookie is used to prevent cross-site request forgery attacks.
Runtime: Session
7.2 Other cookies and technologies; right to revoke consents granted
In some cases, the use of cookies and technologies on our website is technically not absolutely necessary in order to provide you with the functions of our service you have requested. The use of these other cookies and technologies on our website only takes place with your consent (opt-in). In order to enable you to make an informed decision in this respect, we will inform you below about the corresponding cookies and technologies.
You can give your consent to the use of the corresponding cookies and technologies via the consent tool used by us.
You can revoke your consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation.
Responsible:
The processing of your personal data is carried out by us as the responsible party. You can find the name and contact details of the person responsible (and, if a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / imprint. Information on whether the cookies are set by us (first party cookies) or by a partner company (third party cookies) can be found in the information on the individual cookies.
Processing purposes and legal basis:
If we use other cookies and technologies in our Internet presence, they are used to optimise the use of our Internet presence (preference cookies), to analyse the use of our Internet presence (statistics cookies) and to arrange advertising that meets our needs as far as possible (marketing cookies). In this respect, the processing of your personal data takes place on the basis of the consents given by you in accordance with Article 6 paragraph 1 letter a) DS-GVO.
7.2.1 Marketing Cookies
Name/Designation:Google Maps
Supplier: Google; https://policies.google.com/privacy
Description: The Google Maps cookie is used to unlock Google Maps content.
Runtime: 6 months
8. Enforcement of our rights and defense against claims directed against us
If necessary, we process your personal data to protect our legitimate interest in the enforcement of our rights and in the defense against claims directed against us.
In this case, the processing of your personal data takes place on the basis of Article 6(1)(f) of the GDPR.
As far as this is necessary to protect our legitimate interests, we will transfer your personal data to third parties within the scope of the legal requirements. This transfer is made to the debt collection service providers involved or our lawyers.
In cases of transmission of your personal data to third parties, the amount of data transmitted is limited to the minimum required.
Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the tax and commercial retention periods of 6 or 10 years, unless we may use the data for another processing purpose in accordance with legal requirements and in accordance with the information in this privacy policy continue to process.
Use of an external merchandise management system
We use a merchandise management system for contract processing within the framework of order processing.
Your personal data collected within the framework of the order will be transmitted to
plentymarkets GmbH
Mayor Brunner Street 15
34117 Kassel
Germany
for this purpose.
VI. Duration for which your personal data is stored or criteria for determining this duration
Your personal data will be deleted if it is no longer needed for processing for the respective processing purpose, unless we may continue to process the data for another processing purpose in accordance with the legal requirements and according to the information contained in this privacy policy. For information on the length of time your personal information is stored or the criteria for determining that duration, see the information on how your personal data is processed for each processing purpose in this privacy statement.
VII. Your rights
1. Overview
In order to ensure a fair and transparent processing of personal data, you as the data subject have the following rights according to the data protection regulations:
the right to information under Article 15 of the GDPR;
the right of correction under Article 16 of the GDPR,
the right to cancellation under Article 17 of the GDPR,
the right to restriction of processing under Article 18 of the GDPR;
the right to data portability under Article 20 of the GDPR
the right to revoke a given consent at any time according to Article 7(3) of the GDPR,
the right to object to the processing according to Article 21 of the GDPR, about which we will inform you separately below
and the right to complain to the supervisory authority under Article 77 GDPR, about which we will inform you separately below.
2. Your right to object to the processing
THE PROCESSING OF PERSONAL DATA IS PERMITTED IF THE PROCESSING IS NECESSARY TO SAFEGUARD THE LEGITIMATE INTERESTS OF THE CONTROLLER OR OF A THIRD PARTY, UNLESS THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA SUBJECT, WHICH REQUIRE THE PROTECTION OF PERSONAL DATA, PREVAIL, IN PARTICULAR IF THE DATA SUBJECT IS A CHILD, ART. 6 PARA. 1 LETTER F) DS-GVO.
AS A DATA SUBJECT, YOU HAVE THE RIGHT, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU ON THE BASIS OF ARTICLE 6(1)(F) OF THE DS BLOCK EXEMPTION REGULATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE COMPELLING REASONS FOR THE PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS AS A DATA SUBJECT, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT ADVERTISING, YOU AS THE DATA SUBJECT HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF, AS A DATA SUBJECT, YOU OBJECT TO THE PROCESSING FOR DIRECT MARKETING PURPOSES, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THOSE PURPOSES.
3. Your right of appeal to the supervisory authority
As affected person, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your whereabouts, place of work or place of alleged infringement, if you believe that the processing of your personal data concerning you violates the requirements of the GDPR.
VIII. Information about the basis for the provision of your personal data and the possible consequences of not providing it
To the extent necessary to ensure fair and transparent processing, you will find information on the basis for providing your personal data and on the possible consequences of not providing the information for processing your personal data for the individual processing purposes.
