Data protection declaration

The following data protection declaration

applies to the use of our website www.mistercurtain.com (in the successors "called "website") Data protection and the protection of your privacy are very important to us. For this reason you will find below Information about the collection and use of your personal data when using our website and your choices regarding the use of this information. These data are collected and processed under Observance of current data protection standards - in particular the basic data protection regulation (in the successors "GDPR").

I. Name and address of person responsible

The person responsible within the meaning of the Basic Data Protection Regulation and other national data protection laws of the member states and other data protection regulations:

  • Mister Curtain GmbH
  • Geschäftsführer:Robert Krebes, Ronny Reblitz
  • Schönhauser Allee 27-27a
  • 10435 Berlin
  • Telefon: 030 / 896 54 966
  • E-Mail: info@mistercurtain.com
  • Website: www.mistercurtain.com

II. Name and address of data protection officer

The data protection officer of the person responsible is:

  • Ronny Reblitz
  • Schönhauser Allee 27 -27a
  • 10435 Berlin
  • Mail: datenschutz@mistercurtain.com
  • Phone: 030 / 896 54 966
  • Website: www.mistercurtain.com

III. General information on data collection and data processing

1. Scope of processing of personal data

We only process personal data of our users if this is necessary to provide a functional website as well as our contents and services. The processing of personal data of our users takes place regularly only after consent of the user. An exception applies in those cases where prior consent cannot be obtained for real reasons and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art.6 Para.1 lit.a EU Data Protection Ordinance (GDPR) serves as the legal basis. In the processing of personal data required for the performance of a contract to which the data subject is a party, Art.6 para.1 lit.b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation, to which our company is subject, Art.6 Para.1 lit.c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art.6 para.1 lit.d GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art.6 para.1 lit.f GDPR serves as the legal basis for processing.

3. Data erasure and storage time

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected:

  • (1) Information about the browser type and version used
  • (2) The user's operating system
  • (3) The Internet service provider of the user
  • (4) The user's IP address
  • (5) Date and time of access
  • (6) Sites from which the user's system accesses our website
  • (7) Sites accessed by the user's system through our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR also lies in these purposes.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

5. Possibility of objection and elimination

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic character string that enables a unique identification of the browser when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

  • (1) Language settings
  • (2) Items in a shopping cart
  • (3) Log-in information

We also use cookies on our website which enable an analysis of the user's surfing behaviour.

In this way, the following data can be transmitted:

  • (1) Search terms entered
  • (2) Frequency of page views
  • (3) Use of website functions

When accessing our website, the user is informed about the use of cookies for analytical purposes and his or her consent to the processing of personal data used in this context is obtained. In this context, reference is also made to this data protection declaration.

2. Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 letter f GDPR.

The legal basis for processing personal data using cookies for analytical purposes is if the user has given his or her consent to this in accordance with Art. 6 para. 1 lit. a GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to improve the use of websites for users. simplify. Some functions of our website cannot be offered without the use of cookies. For these it is requires that the browser be recognized even after a page change.

We need cookies for the following applications:

    (1) Shopping Cart (2) Accepting language settings (3) Remembering search terms

The user data collected by technically necessary cookies are not used to create user profiles.

We use the analysis cookies for the purpose of improving the quality of our website and its content improve. Through the analysis cookies we learn how the website is used and can thus continuously improve our offer. optimize.

For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 Paragraph 1 letter f GDPR.

4. Duration of storage, objection and elimination option

Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

VI. Newsletter

1. Description and scope of data processing

The newsletter is sent based on the user's registration on the website:

You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask is transmitted to us.

In addition, the following data is collected during registration:

  • (1) E-mail address
  • (2) First name Surname
  • (3) Date and time of registration

In the course of the registration process, your consent will be obtained for the processing of the data and your data will be transferred to Privacy Policy.

If you purchase goods or services from our website, including your email address in the system, this can be used by us for the dispatch of a newsletter. In such a case for its own similar goods or services via the newsletter.

No data will be passed on in connection with data processing for the dispatch of newsletters in Third. The data will be used exclusively for sending the newsletter.

2. Legal basis for data processing

The legal basis for the processing of the data after registration for the newsletter by the user is, if available consent of the user Art. 6 para. 1 lit. a GDPR.

Legal basis for the dispatch of the newsletter due to the sale of goods or services is § 7 Par. 3 UWG.

3. Purpose of data processing

The collection of the user's e-mail address serves to deliver the newsletter.

The collection of other personal data as part of the registration process serves to prevent misuse of the personal data. duties or the e-mail address used.

4. Storage time

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. The The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active.

The other personal data collected in the registration process is generally collected after a time of seven days.

5. Possibility of objection and elimination

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose finds a corresponding link in each newsletter.

This also revokes the consent to the storage of data collected during the registration process. personal data.

VII. Registration

1. Description and scope of data processing

We offer users the opportunity to register on our website by providing personal information. The data is entered into an input mask and transmitted to us and saved. The data will not be passed on to third parties. The following data is collected during the registration process: At the time of registration the following data is also stored:

At this point, the data must be listed accordingly. Examples can be:

    (1) First name (2) Name (3) Address & house number (4) Postcode and city (5) E-mail address (6) Country (7) Date and time of registration

      As part of the registration process, the user's consent to the processing of this data is required. caught up with him.

      2. Legal basis for data processing

      The legal basis for the processing of the data in the case of the user's consent is Art. 6 para. 1 lit. a GDPR.

      If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.

      3. Purpose of data processing

      The user must register in order to fulfil a contract with the user or to carry out pre-contractual measures.

      4. Storage time

      The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection.

      This is required for the purposes of contract fulfillment or execution during the registration process. of pre-contractual measures is the case if the data for the execution of the contract is no longer required. requisite are. Even after the conclusion of the contract, a necessity to collect personal data of the contractual partner can still exist. closed exist in order to fulfil contractual or legal obligations.

      5. Possibility of objection and elimination

      As a user you have the possibility to cancel the registration at any time. The data stored about you be capable of You can be changed at any time.

      The deletion or modification of the data can be done by sending an email to info@mistercurtain.com

      If the data is required to fulfill a contract or to carry out pre-contractual measures, then one premature deletion of the data only possible, unless contractual or legal obligations of a erasure to be in the way.

      VIII. Contact form and e-mail contact

      1. Description and scope of data processing

      There is a contact form on our website which can be used to contact us electronically. utilised can be. If a user takes advantage of this possibility, the data entered in the input mask will be sent to us. and stored. This data is:

      At the time the message is sent, the following data is also saved:

      • (1) First name
      • (2) email address
      • (3) Order number (if available)
      • (4) Subject
      • (5) email text

      We will ask for your consent to the processing of your data and refer you to this privacy policy.

      Alternatively, you can contact us via the e-mail address provided. In this case, the too of the user's personal data transmitted by e-mail.

      In this context, the data will not be passed on to third parties. The data is used exclusively for the processing of the conversation.

      2. Legal basis for data processing

      The legal basis for the processing of the data in the case of the user's consent is Art. 6 para. 1 lit. a GDPR.

      The legal basis for the processing of data transmitted in the course of sending an e-mail, is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, then additional Legal basis for processing Art. 6 para. 1 lit. b GDPR.

      3. Purpose of data processing

      The processing of personal data from the input mask is used solely for processing the Establishing contact. In the event of contact by e-mail, this shall also constitute the necessary authorized concern in the processing of the data.

      The other personal data processed during the sending process are used to prevent misuse of the data. contact form and to ensure the security of our information technology systems.

      4. Storage time

      The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input mask of the contact form and those sent by e-mail this is the case when the conversation with the user is finished. Finished is the conversation if it can be inferred from the circumstances that the facts in question are conclusive. elucidated is.

      The additional personal data collected during the sending process will be deleted at the latest after a period of time. by deleted seven days ago.

      Possibility of opposition and elimination

      The user has the possibility at any time to withdraw his consent to the processing of personal data. revoked. If the user contacts us by e-mail, he or she may refuse to store his or her personal data. data at any time. In such a case, the conversation cannot be continued.

      A description follows of how the revocation of consent and the objection of storage is made possible.

      All personal data stored during contact will be deleted in this case.

      IX. Services and Tools

      Privacy policy on the use of Google Analytics (with anonymization function)1.

      The controller has installed on this website the component Google Analytics (with anonymization function). Google Analytics is a web analytics service. Web analysis is the survey, Collection and evaluation of data on the behaviour of visitors to Internet sites. A web analytics service collects, among other things, data on the website from which a data subject accesses a website (so-called referrer), which subpages of the website have been accessed or how often and for which purposes. which the length of time an underside was viewed. A web analysis is mainly used to optimize a web page and for cost-benefit analysis of Internet advertising.

      The operator of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

      The controller uses the addition "_gat._anonymizeIp". Using this addition, the IP address of the Internet connection of the affected person by Google is shortened and made anonymous if access to our Internet pages from a member state of the European Union or any other State party to the Agreement on the European Economic Area.

      The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google utilises The data and information obtained will be used, among other things, to evaluate the use of our website in order to each other to compile online reports that show the activities on our Internet pages, and to provide further information. too to provide services related to the use of our website.

      Google Analytics places a cookie on the information technology system of the person concerned. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyse the use of our website. Each time you access one of the individual pages of this website, which is operated by the data controller and on which a Google Analytics component has been integrated, the following is displayed the Internet browser on the person's information technology system is automatically activated by the Google Analytics component to transmit data to Google for the purpose of online analysis. In As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the affected person, who serves Google among other things to trace the origin of visitors and clicks and in the following to enable commission settlements.

      By means of the cookie, personal information, such as access time, the location from which one access and the frequency of visits to our website by the person concerned. For personal data, including the IP address of the Web site linked to our Web site, will not be passed on to third parties. that Internet connection used by the affected person to Google in the United States of America. This personal data is stored by Google in the United States of America. Google gives this personal data collected through the technical process may be passed on to third parties.

      The person concerned can prevent the setting of cookies by our website at any time, as already described above, by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics may be deleted at any time via the Internet browser or other software programs. to be.

      Furthermore, it is possible for the person concerned to record the data generated by Google Analytics, at the use of this website as well as the processing of these data by Google to disagree and to prevent such a thing from happening. To do this, the person concerned must create a browser add-on under the link Download and install https://tools.google.com/dlpage/gaoptout This browser add-on shares Google Analytics about JavaScript with that no data and information about the visits of Internet pages to Google Analytics may be transmitted. The installation of the browser add-on is viewed by Google as a contradiction in terms. evaluated. If the person's information technology system is deleted at a later point in time, formatted or newly installed, the person affected must reinstall the browser add-on, around Google Analytics. If the browser add-on is provided by the person affected or another person, which belongs to its sphere of influence, is uninstalled or deactivated, there is the possibility of reinstallation or reactivation of the browser add-on.

      For more information and Google's current privacy policy, please visit https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html called off to be. Google Analytics will be published under this link https://www.google.com/intl/de_en/analytics/ more precisely explained.

      End data capture Google Analytics
      2. Privacy policy regarding use of Google Remarketing

      The controller has integrated Google Remarketing services into this website. Google Remarketing is a feature of Google AdWords that enables companies to Display advertising to Internet users who have previously visited the company's website to have. The integration of Google Remarketing therefore allows a company to create user-related advertising. and therefore display advertisements relevant to the interests of the Internet user.

      Google Remarketing services are operated by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, APPROX. 94043-1351, USA.

      The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing enables that We may use the Google Advertising Network to display advertisements or have them displayed on other websites, which are tailored to the individual needs and interests of Internet users.

      Google Remarketing places a cookie on the person's information technology system. What cookies has already been explained above. By setting the cookie, Google will recognize the visitor. of our website, if the latter subsequently calls up websites which are also members of the Google advertising network. Each time you visit a website on which the Google Remarketing the person's Internet browser automatically identifies itself to Google. In skids of this technical procedure, Google becomes aware of personal data, such as the IP address or the the user's surfing behavior, which Google uses, among other things, to display interest-relevant advertising. is used.

      The cookie is used to collect personal information, such as the information provided by the person concerned. visited Internet pages, are stored. Every time you visit our website, personal data, including the IP address of the Internet connection used by the person concerned, to Google in the to the United States of America. This personal data is collected by Google in the United States. of the United States of America. Google will not disclose personal data collected through the technical process to third parties. particulars may be passed on to third parties.

      The person concerned may have cookies set by our website, as described above, at any time by means of an appropriate setting of the Internet browser used and thus the settlement of cookies permanently. Such a setting of the used internet browser would also be prevent, Google places a cookie on the information technology system of the person concerned. In addition, a by Google Analytics already set cookie at any time via the Internet browser or other software programs canceled to be.

      Furthermore, the person concerned has the possibility of receiving interest-based advertising from Google. to the contrary. To do this, the person concerned must be removed from each of the Internet browsers they use by clicking on the link www.google.de/settings/ads and make the desired settings there.

      For more information and Google's current privacy policy, please visit https://www.google.de/intl/de/policies/privacy/ can be called up.

      The cookie is used to collect personal information, such as the information provided by the person concerned. visited Internet pages, are stored. Every time you visit our website, personal data, including the IP address of the Internet connection used by the person concerned, to Google in the to the United States of America. This personal data is collected by Google in the United States. of the United States of America. Google will not disclose personal data collected through the technical process to third parties. particulars may be passed on to third parties.

      The person concerned may have cookies set by our website, as described above, at any time by means of an appropriate setting of the Internet browser used and thus the settlement of cookies permanently. Such a setting of the used internet browser would also be prevent, Google places a cookie on the information technology system of the person concerned. In addition, a by Google Analytics already set cookie at any time via the Internet browser or other software programs canceled to be.

      Furthermore, the person concerned has the possibility of receiving interest-based advertising from Google. to the contrary. To do this, the person concerned must be removed from each of the Internet browsers they use by clicking on the link www.google.de/settings/ads and make the desired settings there.

      For more information and Google's current privacy policy, please visit https://www.google.de/intl/de/policies/privacy/ can be called up.

3. Privacy policy regarding the use of Google AdWords

The controller has integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to place ads in both Google's search engine results and the Google Advertising Network. Google AdWords allows an advertiser to pre-define certain keywords to display an ad in Google's search engine results only when the user uses the search engine to retrieve a keyword-relevant search result. On the Google Network, ads are distributed to thematically relevant websites using an automatic algorithm and using the previously defined keywords.

The operator of Google AdWords services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertisements on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertisements on our website.

If a person concerned visits our website via a Google ad, Google places a so-called conversion cookie on the person's information technology system. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the person concerned. The conversion cookie is used, provided that the cookie is still has not expired, you can see whether certain subpages, such as the shopping cart, have been deleted from a Online shop system, accessed on our website. The conversion cookie enables us to once Google will also track whether a person affected by an AdWords ad on our website generated sales, i.e. completed or cancelled a purchase of goods.

The data and information collected through the use of the conversion cookie is used by Google to to compile visit statistics for our website. These visit statistics are in turn provided by us to determine the total number of users who were referred to us via AdWords ads, at to determine the success or failure of the respective AdWords ad and to use our AdWords ads for the to optimize the future. Neither our company nor other Google AdWords advertisers receive information by Google, by means of which the affected person could be identified.

The conversion cookie is used to collect personal information, such as the information collected by the affected character visited websites, are saved. Each time you visit our website, personal data will be saved. data, including the IP address of the Internet connection used by the person concerned, to Google in this to the United States of America. This personal data is collected by Google in the United States. of the United States of America. Google will not disclose personal data collected through the technical process to third parties. particulars may be passed on to third parties.

The person concerned can prevent the setting of cookies by our website at any time, as already described above, by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

Furthermore, the person concerned has the possibility to object to interest-based advertising by Google. To do this, the person concerned must be removed from each of the Internet browsers they use by clicking on the link www.google.de/settings/ads and make the desired settings there.

Further information and Google's current privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ can be called off.

4. Payment method: Data protection regulations for Klarna as payment method
>

The controller has integrated components from Klarna on this website. Klarna is an online payment service provider that allows purchase on account or flexible payment by instalments. Klarna also provides other services, such as buyer protection or identity and security services. credit assessment, offered.

Klarna is operated by Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

Select the person concerned during the order process in our online shop as payment option either purchase on account" or "hire purchase", the data of the person concerned are automatically sent to Klarna is transmitted. By selecting one of these payment options, the person concerned consents to these, to the Processing of the invoice or instalment purchase or transmission required for identity and creditworthiness checks of personal data.

The personal data transmitted to Klarna is usually first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other Data that is necessary to process an invoice or installment purchase. For the execution of the contract of sale also such personal data are necessary, which are in connection with the respective order. In particular, it can be used for the reciprocal exchange of payment information, such as bank details, card number, Validity date and CVC code, number of articles, article number, data on goods and services, prices and information on previous purchasing behaviour or other information on the financial situation of the company. the person affected.

The transmission of the data is intended in particular for identity verification, payment administration and the Fraud prevention. The controller will disclose personal data to Klarna in particular in the following cases if there is a legitimate interest in the transmission. The one between Klarna and the The personal data exchanged during the processing will be processed by Klarna. credit agencies. The purpose of this transmission is to verify identity and creditworthiness.

Klarna also discloses personal data to affiliated companies (Klarna Group) and service providers or subcontractor, insofar as this is necessary to fulfil the contractual obligations, or the data is to be processed in the order.

For decision on the establishment, execution or termination of a contractual relationship, collects and uses Klarna Data and information on the payment history of the person concerned and Probability values for their behavior in the future (so-called scoring). Calculation of scoring is carried out on the basis of scientifically recognised mathematical-statistical methods.

The data subject has the option to withdraw his/her consent to the handling of personal data at any time. from Klarna. A revocation does not affect personal data, which must be used for the purpose of (contractual) payment processing must be processed, used or transmitted.

Klarna's current privacy policy can be found at https://cdn.klarna.com/1.0/shared/content/policy/data/de_en/data_protection.pdf.

5. Payment method: privacy policy for PayPal as payment method

The controller has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, the virtual Private or business accounts. In addition, PayPal offers the possibility to make virtual payments via Process credit cards if a user does not have a PayPal account. A PayPal account is managed via a e-mail address, which is why there is no classic account number. PayPal allows you to make online payments to to trigger third parties or to receive payments. PayPal also acts as a trustee and offers buyer protection services.

PayPal's European operator is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

Select "PayPal" as payment option for the person concerned during the order process in our online shop the data of the person concerned are automatically transmitted to PayPal. By selecting these payment option, the person concerned consents to the transfer required for payment processing of personal data.

The personal information you provide to PayPal is usually your first name, last name, address, email address, IP address, telephone number, mobile phone number or other data used for the payment processing are necessary. For the completion of the sales contract also such personal data are necessary Data in connection with the respective order.

The purpose of data transmission is to process payments and prevent fraud. The value used for processing The person responsible will provide PayPal with personal data, in particular if an authorized interest in the transmission is given. The information exchanged between PayPal and the data controller personal data exchanged may be transferred by PayPal to credit agencies. The purpose of this transmission is to verify identity and creditworthiness.

PayPal may share personal information with affiliates and service providers, or subcontractor, insofar as this is necessary for the fulfilment of the contractual obligations or the data is to be processed in the order.

The data subject has the option to withdraw his/her consent to the handling of personal data at any time. to PayPal. A revocation does not affect personal data, which must be used for the purpose of (contractual) payment processing must be processed, used or transmitted.

PayPal's current privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full can be called up.

6. Payment method: Data protection regulations for Sofortüberweisung as payment method

The controller has posted on this website components of Sofortüberweisung integrated. Sofortüberweisung is a payment service that allows cashless payment of products and services. services on the Internet. Sofortüberweisung represents a technical procedure by which the online merchant immediately receives a confirmation of payment. This puts a dealer in a position to deliver goods, services or downloads to the customer immediately after the order.

The operator of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany.

Select the person concerned as a payment option in our online shop during the order process "If you select "Sofortüberweisung", the data of the person concerned are automatically transferred to Sofortüberweisung. With of a selection of this payment option, the person concerned consents to a payment option required for payment processing. transmission of personal data.

In the purchase transaction via Sofortüberweisung the buyer transmits the PIN and the TAN to Sofort GmbH. After a technical check of the account balance and retrieval of further data, immediate bank transfer then leads to the Check the account cover by making a bank transfer to the online merchant. The execution of the financial transaction will to the online retailer automatically.

The personal data exchanged by Sofortüberweisung are first name, last name, address, email address, IP address, telephone number, mobile phone number or other data used for the payment processing are necessary. The transmission of the data is intended for the processing of payments and the Fraud prevention. The controller will immediately transfer other personal data even if there is a legitimate interest in the transmission. The one between Immediate remittance and the personal data exchanged with the controller shall be of Sofortüberweisung may be transmitted to credit agencies. The purpose of this transmission is to Identity and credit check.

Immediate bank transfer gives the personal data to affiliated companies and service provider or subcontractor, insofar as this is necessary for the fulfilment of the contractual obligations. is required or the data is to be processed in the order.

The data subject has the option to withdraw his/her consent to the handling of personal data at any time. to Sofortüberweisung. A revocation does not affect personal data which must be processed, used or transmitted for (contractual) payment processing.

The current data protection provisions of Sofortüberweisung can be found at https://www.sofort.com/ger-DE/datenschutzerklaerung-sofort-gmbh/ can be called up.

7. Rating reminder by Trusted Shops

If you have given us your express consent to this during or after your order by have activated a corresponding checkbox or clicked a button ("Rate later") provided for this purpose, we will send your e-mail address for reminders to evaluate your order to the trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can contact you by e-mail at the contingency to give a review. This consent can be obtained at any time by sending a message to the following described contact possibility or directly opposite Trusted Shops be revoked.

8. Integration of the Trusted Shop Trustbadge

To display our Trusted Shops seal of approval and the evaluations we may have collected, as well as the offer that Trusted Shops products for buyers after an order is on this website the Trusted Shops Trustbadge integrated.

This serves to safeguard our legitimate interests, which outweigh the interests of our shareholders in a optimal marketing of our offer. The Trustbadge and the services advertised with it are an offer of the trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the trust badge is called, the web server automatically saves a so-called server log file that contains, for example, your IP address, date and time of access, amount of data transmitted and the requesting provider (access data) and documents the call. These access data are not evaluated and are stored for seven days at the latest. in the aftermath of End of your page visit automatically overwritten.

Further personal data will only be transferred to Trusted Shops if you have logged in after conclusion of the contract. one Order for the use of Trusted Shops products decide or already registered for the use to have. In this case the contractual agreement between you and Trusted Shops applies.

X. Rights of the persons concerned

If personal data is processed by you, you are affected within the meaning of the GDPR and you have the following options the following rights towards the person responsible:

1. Right to information

You can ask the person responsible to confirm whether any personal data that you have entered concerning, can be processed by us. If such processing is available, you can obtain the following information from the person responsible demand:

  • (1) the purposes for which the personal data are processed;
  • (2) the categories of personal data being processed;
  • (3) the recipients or categories of recipients to whom the personal information about you relates particulars have been or will be disclosed;
  • (4) the planned duration of the storage of personal data concerning you or, if specific disclosures criteria for determining the storage duration;
  • (5) the existence of a right to have your personal data corrected or deleted, one Right to limitation of the processing by the controller or a right of opposition against this Processing;
  • (6) the existence of a right of appeal to a supervisory authority;
  • (7) any available information about the origin of the data if the personal data is not held by that be collected from the person concerned;
  • (8) the existence of automated decision making including profiling in accordance with Art.22 para.1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the consequence and the intended effects of such processing on the data subject.

You have the right to request information as to whether the personal data concerning you has been transferred to a third country or to an international organisation. In this context, you can demand, to be informed of the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.

2. Right to correction

You have a right to correction and/or completion vis-à-vis the person responsible, provided that the processed personal data that concern you is incorrect or incomplete. The person responsible has to make the correction without delay.

3. Right to limitation of processing
Under the following prerequisites, you can restrict the processing of the data that concerns you personal data:

  • (1) if you dispute the accuracy of the personal data that concerns you for a period of time that would be inconsistent with the This enables those responsible to check the accuracy of personal data;
  • (2) the processing is unlawful and you refuse to delete the personal data; and instead the restriction of the use of personal data;
  • (3) the controller no longer needs the personal data for the purposes of the processing, you they are necessary for asserting, exercising or defending legal claims, or
  • (4) if you have filed an objection against the processing pursuant to Art.21 para.1 GDPR and not yet it is determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or in order to assert, exercise or defend rights or to protect the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.

If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is removed.

4. Right of deletion

a)Duty to delete

You may require the data controller to delete the personal data relating to you immediately and the data controller is obliged to delete such data immediately if one of the following reasons applies:

  • (1) The personal information about you is required for the purposes for which it was collected or otherwise disclosed. wise women are no longer necessary.
  • (2) You revoke your consent to the processing pursuant to Art.6 para.1 lit.a or Art.9 para.2 lit.a GDPR and there is no other legal basis for processing.
  • (3) You file an objection against the processing pursuant to Art.21 para.1 GDPR and there are no overriding objections. justified reasons for the processing, or you file an objection pursuant to Art.21 para.2 GDPR against the processing.
  • (4) Your personal information has been processed unlawfully.
  • (5) The deletion of personal data concerning you is necessary for the fulfilment of a legal obligation. duty in the aftermath of Union law or the law of the Member States to which the person responsible is subject.
  • (6) The personal information about you has been collected in relation to the services offered by information society according to Art.8 Par.1 GDPR.

b)Information to third parties

If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to Art.17 para.1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.

c)Exceptions

The right to cancellation does not exist if the processing is necessary

  • (1) to exercise freedom of expression and information;
  • (2) to fulfil a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject, or to perform a task in the public interest or in the exercise of official authority conferred on the controller;
  • (3) for reasons of public interest in the field of public health in accordance with Art.9 para.2 lit.h and i and Art.9 para.3 GDPR;
  • (4) for archiving purposes of public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the law referred to under a) is likely to render impossible or seriously impair the attainment of the objectives of such processing, or
  • (5) for the assertion, exercise or defense of legal claims.
5. Right to information

If you have exercised your right of rectification, cancellation or limitation of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of such rectification or cancellation of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right vis-à-vis the person responsible to be informed about these recipients.

6. Right to data transferability

You have the right to receive the personal information about you that you have provided to the owner in a structured, common and machine-readable format. In addition, you have the right to transmit this data to another person in charge without obstruction by the person in charge to whom the personal data was provided, provided

  • (1) processing is based on consent pursuant to Art.6 para.1 lit.a GDPR or Art.9 para.2 lit.a GDPR or on a contract pursuant to Art.6 para.1 lit.b GDPR and
  • (2) processing is carried out using automated methods.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data transfer shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.

7. Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f) of the DSBER, including profiling based on these provisions.

The controller no longer processes the personal data concerning you unless he can prove compelling grounds for processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

If personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising, including profiling, in so far as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the option of exercising your right of opposition in connection with the use of Information Society services through automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.

8. Right to revoke the data protection declaration of consent

You have the right to revoke your data protection consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until revocation.

Automated decision in individual cases including profiling

You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly affects you in a similar manner. This does not apply if the decision

  • (1) is necessary for the conclusion or performance of a contract between you and the person responsible,
  • (2) by virtue of Union or Member State legislation to which the person responsible is subject to, and that this legislation takes appropriate measures to safeguard your rights and freedoms as well as yours legitimate interests, or
  • (3) with your express consent.

Nevertheless, these decisions may not be based on special categories of personal data according to Art.9 para.1 GDPR, unless Art.9 para.2 lit.a or g GDPR applies and appropriate measures for the protection of rights are taken. and and your legitimate interests.

With respect to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to protect the rights of the parties. and to protect your freedoms and legitimate interests, at least by granting you the right to intervene of a person on the part of the responsible person, on presentation of the own position and on challenge of the ruling heard.

10. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to Complaints to a supervisory authority, in particular in the Member State where they are staying, their workstation or the location of the alleged infringement, if you believe that the processing of the information you have submitted the relevant personal data violates the GDPR.

The supervisory authority to which the complaint has been lodged informs the complainant of the state of play and the results of the appeal, including the possibility of a judicial remedy under Article 78 GDPR.