Below we present a few important definitions of data protection. For further definitions, please refer to Article 4 of the GDPR.
a) Responsible body...
... is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
b) Personal data...
... means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, a location, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
... Any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction, shall be regarded as personal data.
2. name and contact details of the controller
Dyer Street 150
Local court Düsseldorf
Registration number: HRA 26176
VAT ID No: DE335504690
T. +49 211 86 84 23 00
F. +49 211 86 84 23 11
3 General information on data processing
a) What types of data do we collect?
- Inventory data such as name and address
- Contact details such as email addresses or telephone number
- Content data we text entries in the contact form
- Usage data such as access times (when visiting the website)
- Meta/communication data (when visiting the website)
- Payment information
b) For what purposes is the processing carried out?
- For the provision of our online offer, its functions and contents
- To respond to contact requests and communicate with you
- For security measures
- For reach measurement and marketing
- For contract processing when buying in our shop
c) On what legal basis do we process data?
In accordance with Art. 13 DSGVO, we inform you of the legal basis for our data processing. Art. 6 I lit. a DSGVO serves as the legal basis for processing operations in which we obtain consent for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Article 6 I lit. b DSGVO.
The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in the case of enquiries about our services.
If our company is subject to a legal obligation by which the processing of personal data becomes necessary, such as for the fulfilment of tax obligations, the processing is based on Art. 6 I lit. c DSGVO.
Ultimately, processing operations could be based on Art. 6 I lit. f DSGVO. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary for the protection of a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, sentence 2 of the GDPR).
If the processing of personal data is based on Article 6 I lit. f DSGVO, our legitimate interest is the performance of our business activities for the benefit of the well-being of all our employees and associates.
d) Order processing and transfer of data to third parties
If, in the course of our processing, we disclose data to other persons and companies (order processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as to payment service providers, is necessary for the performance of the contract pursuant to Art. 6 (1) lit. b DSGVO), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called "order processing agreement", this is done on the basis of Art. 28 DSGVO.
e) Transfer of data to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using third-party services or disclosing or transferring data to third parties, this is only done if it is done in order to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or allow the processing of data in a third country if the special requirements of Art. 44 ff. DSGVO are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").
f) Duration of the data storage
The data processed by us will be deleted or restricted in its processing in accordance with Articles 17 and 18 DSGVO. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
According to legal requirements in Germany, storage is in particular for 6 years in accordance with § 257 para. 1 HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.) as well as for 10 years in accordance with § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).
g) Rights of the data subjects
As a data subject, you have numerous rights, which are set out in particular in Art. 15ff. GDPR. These are in detail:
- The right to obtain confirmation as to whether data in question are being processed and to be informed of such data and to obtain further information and a copy of the data (Art. 15 GDPR).
- The right to request that data concerning you be completed or that inaccurate data concerning you be corrected (art. 16 GDPR).
- The right to request that data concerned be deleted without delay or, alternatively, to request restriction of the processing of the data (Art. 17 and 18 GDPR).
- The right to obtain the data concerning you that you have provided to us and to request that it be transferred to other data controllers (Art. 20 GDPR).
- The right to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) (Article 21 of the GDPR).
- The right, if the processing is based on Art. 6(1)(a) or Art. 9(2)(a), to withdraw consent to the processing of personal data at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
- The right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR).
h) Is the provision of personal data required by law or contract or necessary for the conclusion of a contract? Am I obliged to provide personal data and what are the possible consequences of not providing it?
If you enter data yourself on our website (such as your name, contact details, etc.), there is no legal obligation to do so. However, it is necessary to provide such data if, for example, you wish to contact us via our contact form, subscribe to our newsletter or purchase something via our website. Failure to provide the personal data would then result in us not being able to contact you, send you our newsletter or accept orders from you.
The data collected when our site is accessed, for example via cookies (see below), is used for the purposes of range measurement and marketing. There is no legal obligation to collect or pass on this data. You can take precautions to prevent this data from being collected (see below). This may result in functional restrictions of our online offer.
i) Is there automated decision making?
As a responsible company, we do not use automatic decision-making or profiling.
The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating this online offer.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 (1) lit. f DSGVO in conjunction with Art. 28 DSGVO (conclusion of a contract processing agreement). Art. 28 DSGVO (conclusion of order processing contract). We, or rather our hosting provider, collect data on every access to this online offer on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f. DSGVO, we, or our hosting provider, collect data about each access to the server on which this service is located (so-called server log files). The access data includes:
- Name of the accessed website, file
- Date and time of the retrieval
- data volume transferred
- Message about successful retrieval
- Browser type and version
- the operating system of the user
- Referrer URL (the previously visited page)
- IP address and the requesting provider.
Log file information is stored for security reasons (e.g. to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.
6. registration on our website
You have the option to register on our website. The personal data that is transmitted to the data controller in the process is specified in the input mask used for registration. The personal data you enter will be collected and stored exclusively for internal use by and for our own purposes. We may arrange for it to be passed on to one or more processors, for example a parcel service provider, who will also use the personal data exclusively for an internal use attributable to the controller.
When you register on our website, the IP address assigned by your internet service provider (ISP), the date and the time of registration are also stored. This data is stored because it is the only way to prevent misuse of our services and, if necessary, to enable us to investigate criminal offences that have been committed. In this respect, the storage of this data is necessary for our protection. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.
Registration under voluntary provision of personal data also serves to simplify the processing of a purchase via our website for you, as data once provided does not have to be re-entered for each purchase. Registered persons are free to change the personal data provided during registration at any time or to have it completely deleted from our database.
7. registration for our newsletter
If you have expressly consented in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, we will use your email address to send you our newsletter on a regular basis. You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time by e-mail to firstname.lastname@example.org.
8. use of our contact form
For questions of any kind, we offer you the possibility to contact us via a form provided on the website. In doing so, it is necessary to provide a valid email address and your name so that we know who the enquiry is from and can answer it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is based on your voluntarily given consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO. The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.
9. google analytics
For the purpose of demand-oriented design and continuous optimisation of our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymised usage profiles are created and cookies (see under point 4) are used. The information generated by the cookie about your use of this website, such as
- Browser type/version,
- Operating system used,
- Referrer URL (the previously visited page),
- Host name of the accessing computer (IP address),
- Time of the server request,
will be transmitted to and stored by Google on servers in the United States. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the internet for the purposes of market research and demand-oriented design of these internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be combined with other data from
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).
10. social media plug-ins
We use social plug-ins from the social networks Facebook, Twitter, Instagram, Google+, LinkedIn, XING and YouTube on our website on the basis of Art. 6 (1) sentence 1 lit. f DSGVO in order to raise awareness of our company. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation is to be ensured by their respective providers.
Social media plugins from Facebook are used on our website to make their use more personal. This is an offer from Facebook.
When you call up a page of our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which then integrates it into the website.
By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends. Facebook may use this information for the purposes of advertising, market research and needs-based design of the Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.
Our website also uses so-called social plugins ("plugins") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.
This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there.
Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
11. google maps
We use Google Maps on our website to display interactive maps and to create directions. Google Maps is a mapping service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA If you call up a web page of our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser, which then integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. According to our knowledge, this is at least the following data:
- Date and time of the visit to the website in question,
- Internet address or URL of the accessed website,
- IP address,
- (Start) address entered during route planning.
12. google fonts
Any other questions?
If you have any further questions regarding data protection, please feel free to contact us at any time.