0. DATA PROTECTION AND SECURITY
The protection of your personal data and your privacy is incredibly important to us. The purpose of this policy is to fully inform you on how we handle your personal data.
1. RESPONSIBLE FOR THE PROCESSING OF YOUR DATA
GOY GbR, Heidestrasse 46-52, 10557 Berlin, Germany, e-mail: firstname.lastname@example.org (hereinafter "we" or "us") is responsible for processing your data.
2. DEFINITION OF PERSONAL DATA
Personal data means any information relating to an identified or at least identifiable natural person. These can be, for example, name, date of birth, contact data, gender, level of education, occupation, but also the type of use of our services. You can be identified as a person if your identity can be identified directly or indirectly, e.g. by assigning certain data such as your name, contact data, location data, profile data, usage data etc. to you.
3. PERSONAL DATA THAT WE PROCESS
We process: (1) User-generated data which you as a user enter directly on our (e.g. registration data, enquiries or contributions and comments), (2) General data which we automatically collect via our system (e.g. IP address, access point, Internet service provider, device used, browser type and version, the sub-pages from which a person accesses our website, i.e. the so-called "referrer" and similar data required or useful for the traceability of accesses for statistical purposes or for security reasons) and (3) behavioural data about the user behaviour on our website or in connection with our newsletter (e.g., the user's IP address, the user's browser type and version, the user's IP address, the user's browser type and version, the user's browser type and version, the sub-pages from which a person accesses our website, i.e. the so-called "referrer" and similar data required or useful for the traceability of accesses for statistical purposes or for security reasons) and (3) behavioural data about the user behaviour on our website or in connection with our newsletter (e.g. time and duration of access, interaction with the Website; opening newsletters and articles) that we use to suggest content, for statistical purposes, and to place and display advertisements tailored to you.
4. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
If we process your data exclusively on the basis of a consent given by you, you can prevent this by exercising your right to revoke this consent informally at any time. If the data processing takes place on the basis of consent, we will inform you about this below or in the respective individual case. However, the processing of your personal data until the revocation remains legal in this case. The revocation of your consent does not prevent us from processing your personal data on another legal basis.
5. DO WE OBTAIN AND PROCESS PERSONAL DATA FROM THIRD PARTIES?
In principle, we collect data directly from you. However, for the purposes of contract processing or marketing, we may also obtain data from credit agencies or address dealers.
6. CUSTOMER ACCOUNT
When you open a customer account, we collect your personal data to the extent shown in the registration form. Data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing takes place with your consent (Art. 6 para. 1 lit. a GDPR).
7. NEWSLETTER, TRACKING OF NEWSLETTERS AND EMAILS
You are entitled to revoke your consent to receive newsletters at any time. After your revocation we will delete the data concerning the newsletter dispatch.
8. PASSING ON PERSONAL DATA TO THIRD PARTIES
We transmit personal data to third parties only if this is necessary in the context of contract processing, for example to the companies entrusted with the delivery of the goods or the credit institution entrusted with payment processing. A further transmission of the data will not take place or only if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.
The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
9. HOW LONG DO WE STORE DATA?
We will delete personal data as soon as this is no longer necessary to enable us to fulfil pre-contractual, contractual or statutory obligations or enforceable official orders, in particular obligations towards tax authorities and supervisory authorities, to carry out advertising measures legitimised by data protection regulations or - in particular with regard to a possible or alleged infringement of third-party rights - to assert, enforce or defend legal claims in connection with the use of our website or our services. We reserve the right to completely delete personal data only after expiry of the relevant limitation periods.
Prior to this, and in the cases referred to in Section 13 below where you may request a limitation of processing instead of deletion of data, we will restrict the processing of such data so that it cannot be viewed by us during ongoing operations or by third parties or processed for operational purposes.
However, we hereby assume no obligation to store your personal data for a specific period of time.
10. INFORMATION ABOUT PERSONAL DATA STORED BY US
You have the right at any time to receive from us free information about the personal data stored about you and a copy of this information. You may also request information about which categories of personal data are processed and for what purposes, which recipients your personal data have been disclosed or will be disclosed to, for how long your personal data are expected to be stored, whether there is a right of appeal to a supervisory authority, and in the case of personal data that is not collected from you, where we obtained this data. If we transfer personal data to a country outside the EU or the EEA, you also have a right to information about which suitable guarantees apply for the protection of your data during the transfer. If you would like to receive any of the above information, please contact us at email@example.com.
11. RIGHT TO CONFIRMATION
You have the right to request confirmation from us as to whether personal data concerning you will be processed. If you wish to exercise this right, please contact us.
12. CORRECTION OF PERSONAL DATA
You have the right to demand from us the immediate correction of the incorrect personal data concerning you. Furthermore, you may request the completion of incomplete personal data - also by means of a supplementary declaration - taking into account the purposes of the processing. If you wish to exercise this right, please contact us at firstname.lastname@example.org.
13. RESTRICTION OF THE PROCESSING OR DELETION OF PERSONAL DATA
You have the right to demand the immediate deletion of the personal data concerning you, insofar as their processing is not necessary and your personal data have been processed for purposes for which they are no longer necessary; you have revoked your consent to data processing and we are also not entitled to processing on any other legal basis; you object to the processing and there are no compelling and therefore overriding reasons for the processing; or you have objected to the processing for the purpose of direct marketing; or we process your personal data unlawfully; or we are otherwise legally obliged to delete or delete at the request of the respective data subject, i.e. the person whose data are processed.
You have the right to ask us to limit the processing of your personal data if you dispute the accuracy of the personal data collected about you for a period of time that allows us to verify the accuracy of the personal data; the processing is unlawful; you refuse to delete the personal data and instead ask us to limit the use of the personal data; or although we no longer need the personal data, but you need it to assert, exercise or defend legal claims; you have objected to the processing and it is not yet clear whether we are entitled to process the personal data for predominant compelling reasons.
If you wish to request the deletion or restriction of personal data stored by us, please contact us at email@example.com so that we can take the necessary action.
14. RIGHT TO DATA TRANSFERABILITY
You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done as far as it is technically feasible. If you wish to exercise this right, please contact us at firstname.lastname@example.org.
15. REVOCATION OF CONSENT UNDER DATA PROTECTION LAW
You can informally revoke your consent to the processing of your personal data at any time. If you wish to exercise this right, please contact us at email@example.com.
16. OPPOSITION TO THE USE OF PERSONAL DATA FOR CERTAIN PURPOSES
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data which we carry out on the basis of Art. 6 para. 1 lit. e or f GDPR (performance of a task in the public interest or processing on the basis of a legitimate interest).
We will then no longer process your personal data unless we can prove that we can rely on compelling reasons for processing worthy of protection, which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
If we use personal data for direct advertising, you may object to the processing of your personal data for these purposes at any time. After receipt of your objection, we will no longer process your personal data for these purposes.
If you wish to exercise this right, please contact us.
17. RIGHT OF APPEAL TO THE COMPETENT SUPERVISORY AUTHORITY
In the event of breaches of data protection law, the data subject shall have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the State Data Protection Commissioner in Berlin. However, you can also contact the data protection officer responsible at your place of residence.
Cookies are small information files that we use to store information about you on the device that you use to access our website.
We use session cookies, which are deleted after the web browser window is closed, but no later than 48 hours after visiting our website.
We also use permanent cookies. These help us, for example, to understand how our website is used, how often you access our website, the respective subpages and services and are necessary to enable certain technical functionalities such as a permanent login.
The information stored in the cookies does not contain any personal data and does not enable us to identify you. They are also not used to record your use, together with other data, in a form that can be assigned to you. If individual cookies implemented by us also process personal data, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either to implement the contract or in accordance with Art. 6 Para. 1 lit. f GDPR in safeguarding our legitimate interest in the best possible function of our website and a customer-friendly and effective design of the use of our website.
Accepting cookies is not a prerequisite for visiting our website. However, if you do not accept the storage of cookies, the functionality of the website may be restricted.
You can at any time independently prevent the acceptance of cookie files by adjusting the settings of your Internet browser so that cookies are blocked, i.e. not accepted and stored. Detailed information about the possibilities and ways of handling cookies is available in the software settings (web browser). You can also delete cookies at any time in the settings of your browser program.
This also applies to the cookies of third parties that are set when you visit our website, such as the services of Google.
19. GOOGLE ANALYTICS (WITH ANONYMISATION FUNCTION)
The information obtained through the cookie about the use of our website and services is usually transferred to Google servers in the USA and stored there. However, we use the addition "_gat._anonymizeIp" for the analysis using Google Analytics. This addition shortens and anonymizes Google's IP address of the Internet connection through which you access our website and services if the access is from a member state of the European Union or from another state party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
You can prevent the storage of cookies by making the appropriate settings in your browser. You can also prevent the transmission to Google of the information collected by the Google cookie and data relating to the use of our website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.