1. Access Data and Hosting
Our web pages can be accessed without providing your personal data. Each time a page is accessed, the server automatically saves only the so-called server logs, e.g. the name of the requested file, your IP address, date and time of the request, the amount of data transferred and the requesting Internet service provider (access data), and documents the page access.
This data shall only be analysed in order to ensure the proper functioning of the website and to improve our offer. This serves - as part of an interest assessment - to safeguard our legitimate interest consisting in the correct presentation of our offer. All access data shall be deleted within seven days from the end of your visit to our website.
Hosting services provided by an external service provider
As part of the entrusting of data processing, we commission an external service provider to perform website hosting and presentation services for us. All data which has been collected - in the manner described herein - as part of the use of our website or in the forms provided for this purpose in the online shop is stored on the servers of this service provider. Processing on other servers shall take place only to the extent specified herein. This service provider is seated in a country being part of the European Union or the European Economic Area.
2. Collection and Processing of Data for the Purposes of Performance of the Agreement and Creating a Customer Account
We shall only collect personal data if you provide it to us voluntarily by placing an order, by contacting us (e.g. via the contact form or by email) or by creating a customer account. Mandatory fields are marked as such because the data contained therein is necessary for us to perform the agreement or to handle the matter on which you have contacted us, or to create a customer account. Without providing this data, you cannot complete your order or create a customer account, or contact us. What data is collected is apparent from the forms into which the data is entered. We use the data you provide for the purposes of performing the agreement and responding to your inquiries. Once the agreement has been performed or your customer account has been deleted, the processing of your data shall be restricted and, after the expiry of the retention periods stipulated in the tax regulations and the Accounting Act, your data shall be erased, unless you expressly consent to the continued use of this data for other purposes. You may have your customer account deleted at any time. To this end, please send a message to our contact address indicated in the “Our Contact Details and Your Rights” section or use the corresponding function in your customer account.
3. Data Transfer
If you subscribe to our newsletter, we will use your email address to send you our newsletter electronically on a regular basis based on your consent.
You can unsubscribe from the newsletter at any time by sending us a message to this effect or by using the relevant link available in the newsletter. Upon receipt of such a message, we shall erase your email address unless you expressly consent to the continued use of your data for other purposes. The newsletter is sent on our behalf, as part of the entrusting of data processing, by the service provider to which we transfer your email address for this purpose. This service provider is seated in a country being part of the European Union or the European Economic Area.
5. Trusted Shops Trustbadge Integration
We have integrated the Trusted Shops Trustbadge into our website in order to display our Trusted Shops Trustmark as well as the customer reviews collected and the Trusted Shops product range available to buyers after placing an order.
This serves to protect our legitimate interest consisting in the optimal presentation of our offer in the market. Trustbadge and the services so advertised constitute an offer by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When Trustbadge is used, the server automatically saves the so-called server logs which include for example your IP address, date and time of the request, the amount of data transferred and the requesting Internet service provider (access data), and documents the Trustbadge request. The access data referred to above is not analysed and is automatically overwritten within seven days from the end of your visit to our website.
Other personal data shall only be transferred to Trusted Shops if you decide to use Trusted Shops products after placing an order with our shop, or have already registered to use them. In such cases, the agreement concluded between you and Trusted Shops shall apply.
6. Cookies and Web Analytics
If you do not accept cookies, the functionality of our website may be limited.
Use of Google (Universal) Analytics for Web Analytics Purposes
Our website uses Google (Universal) Analytics, a web analytics tool provided by Google Inc. (www.google.com). This serves to protect our legitimate interest consisting in the optimal presentation of our offer. Google (Universal) Analytics uses methods that make it possible to analyse your use of our website - such as cookies. The automatically collected information on your use of this website is generally transmitted to a Google server in the US and stored there. Due to the IP anonymisation activated on this website, your IP address is truncated before being forwarded within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases is the whole IP address first transferred to a Google server in the US and truncated there. The anonymised IP address provided by your browser as part of Google Analytics is generally not combined with other Google data.
Google LLC has its headquarters in the US and is EU-US-Privacy Shield certified. The current certificate is available at this link. Under the agreement between the US and the European Commission, the latter has found an adequate level of data protection for companies with Privacy Shield certification.
You can prevent Google’s recording and processing of the data on your use of our website (including your IP address) collected by cookies if you download and install the browser plug-in available at the link: https://tools.google.com/dlpage/gaoptout?hl=pl
Use of Matomo for Web Analytics Purposes
For the purposes of analysis of the use of our website - with the Matomo technology (https://matomo.org) provided by the service provider InnoCraft Ltd. - data is automatically collected and saved during your visit to our website and serves to create user profiles using pseudonyms. This serves to protect our legitimate interest consisting in the optimal presentation of our offer. Cookies may be used for this purpose. The pseudonymised user profiles shall not be merged with the personal data of the pseudonymised person without your separate explicit consent.
Data processing in connection with the above web analytics takes place on our servers. You can object to the collection and storage of data at any time in the future using the option referred to below.
7. Our Contact Details and Your Rights
You have the following rights:
· right to obtain information about the processing of your data to the extent set forth in Article 15 of the GDPR;
· pursuant to Article 16 of the GDPR - right to rectification of inaccurate or incomplete personal data concerning you;
· pursuant to Article 17 of the GDPR - right to erasure (“right to be forgotten”) of your personal data stored with us, provided that its further processing is not necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest;
- for the establishment, exercise or defence of legal claims;
· pursuant to Article 18 of the GDPR - right to restriction of the processing of your personal data, provided that:
- you contest the accuracy of your personal data;
- the processing is unlawful and you oppose the erasure of your data;
- we no longer need your personal data but it is required by you for the establishment, exercise or defence of legal claims;
- you have objected to processing pursuant to Article 21;
· pursuant to Article 20 of the GDPR - right to receive your personal data provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller (“right to data portability”);
· pursuant to Article 77 of the GDPR - right to lodge a complaint with the supervisory authority. As a rule, you can turn in this regard to the supervisory authority of your habitual residence, place of work or place of our company’s seat.
Right to object
Once you have exercised your right to object, we shall not continue to process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or where the processing is for the establishment, exercise or defence of legal claims.
The above shall not apply when the processing takes place for direct marketing purposes. In this case, we shall not continue to process your personal data for the above purposes.