We take the protection of your personal data very seriously. Data will be "processed" by us in accordance with the applicable legal data protection regulations, from 25.05.2018 in particular according to the European General Data Protection Regulation (hereinafter: GDPR) and the country-specific data protection regulations. “Processing” is any process or series of processes carried out with or without the help of automated processes in connection with personal data such as the collection, collection, organization, organization, storage, adaptation or modification, reading, querying, etc. Use, disclosure through transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction;
Below we inform you about the processing of your data, in particular about the type, scope and purposes of the collection and use of your personal data when you visit our website and use our offers and services as well as the corresponding legal basis of the individual processing operations. In addition, we explain to you in the context of our data protection declaration which rights you have with regard to data processing.
"Personal data" is all information that relates to an identified or identifiable natural person; An identifiable person is a natural person who can be identified directly or indirectly, in particular by assigning an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics, the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
2. Responsible body for data processing
As the provider of our Internet services, we are the responsible body for data processing. You can reach us at the following contact details: A & B Vertriebsgesellschaft mbH, Trajanstr. 15, 50678 Cologne, Germany, Tel: +49 (0) 221 99 96 873 0, Fax: +49 (0) 221 99 96 873 9, Email: firstname.lastname@example.org.
3. Processing of your data
The type, scope and purposes of processing your data differ depending on whether you only visit our website or use the services and / or services we offer:
a) Visiting our websites
When you visit our website, the server stores data in so-called server log files, which your internet browser automatically transmits to the server, in particular:
- Date and time of access to one of our websites
- Your browser type and the respective version of the browser
- the operating system used
- the last page you visited (so-called referrer URL)
- the amount of data transferred and the access status (file transferred, file not found etc.) and
- Your IP address and the requesting provider.
This data is processed in order to enable the use of the websites you have accessed, for statistical purposes, to improve our website and to protect against illegal cyberattacks as well as to exercise, assert or defend against legal claims. Your IP address is only stored for as long as is necessary to exercise, assert or defend against legal claims, and to defend possible cyber attacks and to provide law enforcement authorities with the information necessary for law enforcement.
The data specified above is processed separately from all personal data that you provide to us when you visit our website and / or make use of a service or service, and are in no way combined.
From 25.05.2018, this data processing described above has its legal basis in Article 6 paragraph 1 letter b) GDPR for the implementation of the necessary pre-contractual measures to enable you to use the websites you have accessed. Insofar as the above data is processed for statistical purposes, to improve our website, to protect against unlawful cyber attacks, or to exercise, assert or ward off legal claims, this will take place from May 25, 2018 on the legal basis of Article 6 paragraph 1 letter f) the GDPR. Our legitimate interest in this data processing lies in evaluating the data to improve our website, in order to exercise, assert or defend against legal claims, and to protect our systems against illegal cyber attacks and, if necessary, to enable law enforcement authorities to prosecute.
b) Processing of personal data when using the services and / or services we offer:
We only process personal data if this is permitted by law or if you consent to the processing of your personal data.
If you want to make use of the services and services we offer on our website, such as ordering goods, rendering services, ordering vouchers or newsletters, it is necessary for you to provide further personal data. We process your personal data for the above purposes from 25.05.2018 on the legal basis of Article 6 paragraph 1 letter b) GDPR in order to fulfill a contract with you or to carry out necessary pre-contractual measures, which are carried out on your request. The purpose of processing your personal data is therefore, for example, to process inquiries, to deliver goods ordered to you, to provide the desired service, to process a voucher order or to send you the newsletter you have requested or to enable you to use our blog and comment functions. Without the provision of personal data, we cannot conclude the contract with you and cannot provide the services offered.
In addition, we process your data for the purpose of exercising, asserting or warding off legal claims from the contractual relationship and, if necessary, enabling law enforcement authorities to prosecute. The above data processing takes place from 25.05.2018 on the legal basis of Art. 6 Paragraph 1 Letter f) GDPR or partly on Article 6 Paragraph 1 Letter c) GDPR in order to comply with a legal obligation to which we are subject. Our legitimate interest in this data processing is to be able to exercise, assert or ward off legal claims arising from the contractual relationship and, if necessary, to enable the law enforcement authorities to prosecute.
We also process your personal data for the purpose of fulfilling our statutory retention requirements. The legal basis for the fulfillment of our statutory retention requirements is standardized from May 25, 2018 in Article 6 paragraph 1 letter c) GDPR.
Your data will be passed on to us, if necessary, service providers supporting us in order to fulfill the contract or to carry out the necessary pre-contractual measures, which of course we have carefully selected. This can be a technical service provider or a service provider that supports us in shipping, payment processing or accounting. Your personal data will be passed on to service providers supporting us from 25.05.2018 either on the legal basis of Article 6 paragraph 1 b) GDPR to fulfill a contract to which the data subject is a party, or to carry out pre-contractual measures or on a proper contract for the processing on behalf that meets the requirements of Article 28 GDPR.
We also reserve the right to integrate external content from third parties (e.g. you-tube videos, external map services, external graphics, etc.) on our website.
If you access and use this third-party content on our website, your IP address (also from May 25, 2018 on the legal basis of Article 6 paragraph 1 letter b) GDPR) will be forwarded to the third-party provider, so that the content you have accessed will be passed on by the third-party provider can be sent to your browser. The transmission of your IP address to these third-party providers is therefore absolutely necessary in order to send the retrieved content to the browser of your end device. The processing of your data by the provider of the third-party content is subject to their data protection regulations. Without your express consent, we do not use third-party tools that use so-called "tracking mechanisms". “Tracking mechanisms” are technologies that make the behavior of data subjects understandable on the Internet and enable the creation of user profiles.
Your personal data will only be passed on to other third parties if we are legally obliged to do so (e.g. to authorities to investigate cyber attacks and any crimes committed or to tax offices to comply with tax obligations or to courts in the event of legal disputes) from May 25, 2018 the legal basis of Article 6 paragraph 1 letter c) GDPR and, if applicable, to lawyers and tax advisors on the legal basis of Article 6 paragraph 1 letter c) GDPR or Article 6 paragraph 1 letter f) GDPR. Our legitimate interest in passing on your data to lawyers is to exercise, assert or ward off legal claims. Our legitimate interest in passing on your data to external tax consultants is to be able to properly meet our tax obligations.
The data we absolutely need can be seen from the input mask as part of the registration or ordering process. You can voluntarily provide further information that is not absolutely necessary for the above purposes; They are marked by us when the data is collected as part of the registration or order process.
In addition, we will not pass on your personal data to third parties without your express consent.
The data we absolutely need can be seen from the input mask as part of the registration or ordering process. You can voluntarily provide further information that is not absolutely necessary for the purposes described above; They are marked by us when the data is collected as part of the registration or order process.
We also reserve the right to use so-called "permanent cookies" so that you can use our website more effectively. Persistent cookies enable us to recognize your device when you visit our website again and to save information about your last visit (e.g. your preferred language or other settings). We only use permanent cookies, which are automatically deleted after 12 months at the latest.
The cookies mentioned above may also be used by third-party providers of tools that we use on our website, in particular for statistical and analytical purposes. We will only use third-party tools with privacy-friendly settings. Without your prior express consent, we will therefore not use any so-called "targeting cookies" on our website, which make the behavior of data subjects understandable on the Internet and enable the creation of user profiles. If we use tools from third-party providers, we will inform you about their use, functionality and further details of the respective tools under point 15 of this data protection declaration.
The cookies described above will be used from 25.05.2018 on the legal basis of Article 6 paragraph 1 letter f) GDPR. Our legitimate interest in the use of these cookies is to enable our customers and users of our website to use our services more effectively and to analyze and improve our website.
You can determine yourself whether cookies can be set and accessed using the settings in your browser. You can, for example, deactivate the storage of cookies in your browser, restrict it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for permission to do so. You can also set your browser so that cookies are automatically deleted when the browser is closed. Finally, you can activate a do-not-track function ("DNT") in your browser so that you are not automatically recorded by any web analysis tool that may be used. You can find information on the configuration of your browser settings in the help function of your respective Internet browser.
5. Storage and deletion periods for personal data
If the processing purpose for your required personal data no longer applies, your personal data processed by us will be routinely deleted or blocked unless you have consented to the permanent storage of your personal data.
If individual data have to be kept due to legal retention periods after the processing purposes ceased to exist (e.g. tax and commercial law retention regulations), the data will be blocked instead of deleted. The data to be stored may then be processed on the legal basis of Article 6 paragraph 1 letter c) GDPR exclusively for the aforementioned purposes.
6. Your rights as a data subject
You always have the rights described below:
- Right to confirmation and information about the personal data processed by us in accordance with Article 15 GDPR
- Right to correct your personal data in accordance with Article 16 GDPR
- Right to have your personal data deleted ("right to be forgotten") in accordance with Article 17 GDPR
- Right to restrict the processing of your personal data in accordance with Article 18 GDPR
- Right to data portability of your personal data in accordance with Article 20 GDPR
- According to Article 22 GDPR, you have the right not to be subjected to a decision based solely on automated processing - including profiling - that has legal effect on you or similarly significantly affects it.
Please send us your request to the contact details given in section 2 of this data protection declaration.
8. Right of withdrawal for consent
You can revoke your explicit data protection consent at any time with future effect. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.
9. Complaint about data protection violations to the supervisory authorities
If you believe that your data protection rights are being violated, you can contact the supervisory authority of your state or the state of our company headquarters. If a complaint concerns a company that is based in another federal state, the supervisory authority forwards the complaint to the supervisory authority responsible there.
10. Notification obligation in connection with the correction or deletion of personal data or the restriction of processing
We inform all recipients to whom personal data has been disclosed of any correction or deletion of the personal data or a restriction of processing in accordance with Article 16, Article 17 paragraph 1 and Article 18 GDPR, unless this proves to be impossible or is impossible with one disproportionate effort. We will also inform you about these recipients if you so request.
11. Statutory or contractual regulations for the provision of personal data as well as information about the necessity for the conclusion of the contract as well as about the obligation of the data subject to provide the personal data and possible consequences of the non-provision:
As already described above, we collect and process your personal data in particular for the fulfillment of a contract to which the data subject is a party or for the implementation of pre-contractual measures that are carried out at the request of the data subject. The provision of personal data is therefore contractually required for this purpose. In some cases, the provision of personal data when concluding contracts (e.g. for invoices) is also required by law due to tax and / or commercial law regulations. If you do not provide us with any personal data, this means that we cannot conclude a contract with you and / or cannot answer your inquiries.
Insofar as we process your personal data on the basis of a legitimate interest in accordance with Art. 6 Paragraph 1 Letter f) of the GDPR, the provision of your data for these purposes is neither contractually nor legally required. The details of data processing based on a legitimate interest can be found in the information above at the relevant points. If you do not provide us with personal data for these purposes, this may result in you not being able to use our website or not being able to use it to its full extent.
12. Automated decisions in individual cases including profiling
If you have selected the open invoice, direct debit or installment payment as payment method during the ordering process on our website, we will send your contact details (name, address, date of birth, email address if applicable) to Arvato Payment Solutions GmbH, Gütersloher Str. 123, 33415 Verl ) as well as information about the items you have ordered (e.g. order value, product group, value of goods, possibly request channel and delivery method) so that we can decide whether we can grant you this payment method (passive payment method control).
For this purpose, Arvato Payment Solutions GmbH, via informa solutions GmbH, Rheinstraße 99, 76532, as your order data processor, transmits your name, address and possibly your date of birth for the credit check to infoscore Consumer Data GmbH, Rheinstr. 99, 76532 Baden-Baden ("ICD"). The ICD creates Including address data and payment experiences from the past on the basis of mathematical-statistical processes (in particular processes of logistic regression and comparisons with groups of people who have had a similar payment behavior in the past), a forecast especially about payment probabilities (score) and provides Arvato Payment Solutions GmbH this score. Taking into account the above-mentioned information on the ordered items, the score provided by ICD, your contact details (name, address and, if applicable, date of birth) and the previous payment history data / historical information available from Arvato Payment Solutions GmbH, a balanced decision will be made, whether Arvato Payment Solutions GmbH can grant you the selected payment option.
The legal bases for these transfers are Article 6 paragraph 1 letter b and Article 6 paragraph 1 letter f of the GDPR. The legitimate interest of Arvato Payment Solutions GmbH is to be able to assess as best as possible whether you will meet the payment obligations before you are granted one of these payment methods, which all involve a credit risk. Our legitimate interest is to be able to offer you risky payment methods such as open invoice or direct debit.
In addition, address data provided by you to avoid incorrect deliveries and bad debts will be verified by ICD as part of an address check based on Article 6 paragraph 1 letter f of the GDPR and transmitted to the ICD for this purpose. The data required for credit and address checks and for payment method control is transmitted via a secure interface. Matters worthy of protection of your person are of course taken into account in accordance with the statutory provisions
According to Article 21 Paragraph 1 GDPR, you have the right to object to the processing of your data for the above purposes with future effect at any time for reasons that arise from your particular situation; this also applies to profiling carried out within the scope of the above purposes. Please note, however, that Arvato Payment Solutions GmbH in In this case, you can no longer offer your risky payment methods as part of your order process on our website.
Detailed information about the ICD i.S.d. Art. 14 European General Data Protection Regulation ("EU GDPR"), i.e. Information on the business purpose, purposes of data storage, data recipients, the right to self-disclosure, the right to deletion or correction, etc. can be found under the following link: https://finance.arvato.com/icdinfoblatt.
Detailed information about Arvato Payment Solution GmbH i.S.d. Art. 14 GDPR; i.e. Information on the business purpose, purposes of data storage, data recipients, the right to self-disclosure, the right to deletion or correction etc. can be found in the attachment or at the following link: https://documents.myafterpay.com/privacy-statement/de_de/
Furthermore, we do not use automated decision-making - including profiling in accordance with Article 22 paragraphs 1 and 4 of the GDPR.
13. Data security
We use technical and organizational security measures to protect the processing of personal data, in particular against accidental or intentional manipulation, loss, destruction or against attacks by unauthorized persons. Our security measures are continuously improved in line with technological developments.
14. Questions / comments
If you have any questions or comments about this data protection declaration or about data protection in general, please contact our contact details, which can be found in Section 2 of this data protection declaration.
15. Use of third party tools and content
If we use tools (programs) and third-party content on our website that use persistent cookies for statistical or analytical purposes and / or process your IP address and / or other personal data, you will find information about these tools and content below about how it works:
Notes on Google Analytics:
It is important to us to make our website as optimal as possible and thus make it attractive for our visitors. For this it is necessary that we know which parts of our website reach our visitors.
For this purpose, we use the web analytics service Google Analytics on our website, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We use Google Analytics on this website with activation of IP anonymization, i.e. Your IP address will be provided by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area previously shortened. The full IP address will only be transmitted to a Google server in the USA and abbreviated there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly. You can find information on the configuration of your browser settings in the help function of your respective Internet browser. However, please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent the collection of data by a browser plug-in. This plugin sets an opt-out cookie and thus prevents the future collection and processing of your data by Google Analytics. You can download and install a browser plug-in under the link http://tools.google.com/dlpage/gaoptout?hl=de.
You can also prevent Google Analytics from collecting data by clicking on the following link to "Deactivate Google Analytics". An opt-out cookie is set that prevents the future collection of your data when you visit this website: Deactivate Google Analytics.
Status of the data protection declaration: 06.05.2018