Privacy Policy
These legal texts are provided as an English translation of the original German legal texts.
In the event of any discrepancies or inconsistencies, the German version shall prevail.
German law shall apply, excluding the UN Convention on Contracts for the International Sale of Goods (CISG).
For orders placed by consumers resident outside Germany, mandatory statutory provisions and/or judicially established consumer protection rules of the consumer’s country of residence shall remain unaffected and shall apply accordingly.
Below we inform you about how we process your personal data. Personal data within the meaning of Art. 4 GDPR are all information relating to an identified or identifiable natural person (e.g. name, address, telephone number, email address, invoices, bank details,
etc., as well as your user behaviour).
Contents
1. Contact details
2. Lawfulness of the processing of personal data
3. Collection and storage of personal data as well as the nature and purpose of their
use
4. Storage period and data deletion
5. Disclosure of data to third parties
6. Hosting
7. Cookies
8. Zahlungsdienstleister
9. Credit checks
10. Analytics services
11. Social media services
12. Other online services
13. Data subject rights
14. Right to object
15. Data security
16. Currency and amendment of this Privacy Policy
1. Contact details
This privacy information applies to data processing by the following controller:
Controller: PPprint GmbH
Adress: Gottlieb-Keim-Straße 60, 95448 Bayreuth
Email: office@ppprint.de
Phone: +49 160 2385339
2. Lawfulness of the processing of personal data
As a matter of principle, we collect and use our users’ personal data only to the extent
necessary to provide a functional website as well as our content and services. The
collection and use of our users’ personal data generally takes place only with the user’s
consent. An exception applies in cases where obtaining prior consent is not possible for
factual reasons or where the processing of data is permitted by law.
Pursuant to Article 6 GDPR, the processing of personal data is lawful if one or more of the
following applies:
– You have given your explicit consent to the processing pursuant to Art. 6(1)(a)
GDPR,
– the processing is necessary pursuant to Art. 6(1)(b) GDPR for the performance of a
contract with you or in order to take steps at your request prior to entering into a
contract,
– we are subject to a legal obligation to process the data pursuant to Art. 6(1)(c)
GDPR,
– the processing is necessary to protect your vital interests or those of another
natural person pursuant to Art. 6(1)(d) GDPR,
– the processing is necessary pursuant to Art. 6(1)(f) GDPR; for the performance of a
task carried out in the public interest or in the exercise of official authority vested in
us,
– the processing is necessary pursuant to Art. 6(1)(f) GDPR for the purposes of our
legitimate interests or those of a third party, unless your interests or fundamental
rights and freedoms requiring the protection of personal data prevail.
3. Collection and storage of personal data as well as the nature
and purpose of their use
When you use our website, we may process personal data of the website users (which
may include customers, prospective customers and visitors), such as contact data, usage
data and communication data.
This is carried out, among other purposes, to provide a functioning online offering, to
communicate with users, to process contact enquiries and customer enquiries, and to
fulfil contracts. In addition, cookies are set when you visit our website (see section
“Cookies” of this Privacy Policy). We may also use third-party online services, for example
– subject to your consent – to collect and process data for marketing purposes. Further
details are provided below.
In the following, we explain which data may be collected and processed from you and for
what purpose.
When visiting the website
When you access our website, information is automatically sent by the browser used on
your device to our website server. This information is temporarily stored in a so-called log
file. The following information may be collected without any action on your part and –
unless otherwise stated – stored until automated deletion after no more than 30 days:
– IP address of the requesting computer
-date and time of access
– content of the request (specific page)
– name and URL of the retrieved file
– content of the request (specific page)
– amount of data transferred in each case
– website from which access is made (referrer URL)
-browser used and, if applicable, the operating system of your computer and the
name of your access provider
– language and version of the browser software
Where collected, we process the above data for the following purposes:
– ensuring a smooth connection set-up of the website,
– ensuring convenient use of our website,
– evaluation of system security and stability, and
– further administrative purposes.
The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows
from the purposes for data collection listed above. Under no circumstances do we use
the collected data to draw conclusions about your person.
In addition, we may use cookies and online services when you visit our website. Further
explanations can be found in this Privacy Policy.
Initiation of a contract / performance of a contract
We process such personal data that we receive in the context of pre-contractual enquiries
and within the scope of our business relationship. For example, the following personal
data may be collected and processed by us: salutation, first and last name, address,
telephone number, email address, IBAN/credit card number including check digits (each
only insofar as necessary to process payments).
Data may also be disclosed to third parties (see section 5 “Disclosure of data to third
parties” of this Privacy Policy).
The processing and storage of your transmitted data is carried out on the basis of Art.
6(1)(b) GDPR for the purpose of fulfilling a contract or carrying out pre-contractual
measures. In other cases, we process and store your data on the basis of your consent
pursuant to Art. 6(1)(a) GDPR and/or on the basis of our legitimate interest in processing
enquiries addressed to us pursuant to Art. 6(1)(f) GDPR.
Unless statutory retention periods conflict, the data collected and stored will be deleted
as soon as the purpose for storage ceases to apply and storage is no longer necessary
(e.g. your request has been processed or the business relationship has ended).
When using our contact form
For questions of any kind, we offer you the opportunity to contact us via a form provided
on the website. Providing a first and last name as well as a valid email address is required
so that we know who the enquiry is from and can respond to it. A telephone number may
be provided voluntarily.
The processing and storage of your transmitted data is carried out on the basis of Art.
6(1)(b) GDPR for the purpose of processing your enquiry. Furthermore, we process your
data on the basis of your consent pursuant to Art. 6(1)(a) GDPR and on the basis of our
legitimate interest in processing enquiries addressed to us pursuant to Art. 6(1)(f) GDPR.
Unless statutory retention periods conflict, the data collected and stored will be deleted
as soon as the purpose for storage ceases to apply and storage is no longer necessary
(e.g. your enquiry submitted via the contact form has been processed).
When creating a customer account
You have the option to register with us and create a customer account. The data required
for this (e.g. name, address and email address) are marked accordingly and can be found
in the input screen. In the customer account, your personal data are stored so that you do
not need to enter them again on a later visit to our website and when placing further
orders, which simplifies the ordering process. The customer account is protected by a
password chosen by you.
You may delete your customer account at any time and withdraw your consent, with the
consequence that we will irrevocably delete the data stored in the customer account,
unless statutory retention periods apply. For this purpose, it is sufficient to send a
message to the contact details provided in the legal notice (email is also possible).
The processing and storage of your transmitted data is carried out on the basis of Art.
6(1)(a) GDPR on the basis of the consent you have previously given and on the basis of
Art. 6(1)(b) GDPR in the course of contract performance.
4. Storage period and data deletion
As a matter of principle, we store personal data only for as long as the purpose for which
you entrusted us with the data is fulfilled. After that, the data are permanently deleted.
However, if statutory retention obligations exist, we store personal data for as long as we
are legally obliged to do so. Such obligations regularly arise from legal evidence and
retention obligations, which are regulated, among others, in the German Commercial
Code (HGB) and the German Fiscal Code (AO), e.g. for tax purposes generally ten years.
After the statutory retention period expires, the data are permanently deleted.
Consent given for the processing and storage of your personal data pursuant to Art. 6(1)(f) GDPR; (a) GDPR may be withdrawn at any time, with the consequence that the data will be
permanently deleted – unless statutory retention periods conflict.
Further rights by which the processing of your personal data may be prohibited arise from
Art. 21(1) and (2) GDPR.
Information about the resulting right to object can be found in
this Privacy Policy under “Right to object”.
5. Disclosure of data to third parties
We disclose your personal data to third parties only if:
– you have given your explicit consent pursuant to Art. 6(1)(a) GDPR,
– disclosure is necessary pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate
interests or those of a third party, e.g. for the exercise, defence or assertion of legal
claims, unless your interests or fundamental rights and freedoms requiring the
protection of personal data prevail,
– there is a legal obligation to disclose data pursuant
– gem. 1 S. 1 lit. b DSGVO zum Zwecke der Zahlungsabwicklung an den mit der Zahlungsabwicklung beauftragten Zahlungsdienstleister und gem. Art. 6(1)(f) GDPR; 1 S. 1 lit. f DSGVO im Rahmen unserer berechtigten Interessen, verlässliche und sichere Zahlungsprozesse anbieten zu können, sowie
– this is legally permissible and necessary pursuant to Art. 6(1)(b) GDPR for the
performance of contractual relationships with you, e.g. disclosure of address data
to a transport company. Data may also be passed on to a dropshipper who then
ships the goods to you on our behalf. If you order goods that are to be shipped to
an address other than your own, this is carried out on the basis of our legitimate
interest pursuant to Art. 6(1)(f) GDPR in the proper performance of the contractual
relationship.
Where required, a data processing agreement pursuant to Art. 28(3) GDPR has been
concluded with the service provider used.
If personal data of the customer are processed in a third country (outside the EU), this is
done on the basis of the customer’s previously given consent, in the course of contract
performance or due to legal obligations. Any transfer takes place in compliance with
statutory requirements, in particular the provisions of Art. 44 to Art. 49 GDPR.
A transfer is generally based on an adequacy decision of the EU Commission. If the third
country does not have an adequacy decision, data transfers are supported, among other
instruments, by the Standard Contractual Clauses of the European Commission as
appropriate safeguards for the protection of personal data, which can be accessed via
the link below:
https://commission.europa.eu/publications/standard-contractual-clauses-internationaltransfers_
de
https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_de
On 10 July 2023, the European Commission adopted the adequacy decision for the EUU.
S. Data Privacy Framework (“DPF”), the successor to the “Privacy Shield”. The DPF
now serves as a basis for data transfers to certified organisations in the USA without
additional transfer instruments or supplementary measures being required. Within this
Privacy Policy, references are provided where an organisation is certified under the DPF.
6. Hosting
This website is hosted by an external service provider. Personal data collected on this
website are stored on the host’s servers, possibly in the USA. This may include in
particular IP addresses, contact enquiries, communication data, contract data, contact
data, website access data and other data generated via a website.
Our host will process your data only to the extent necessary to fulfil its service obligations
and will follow our instructions with regard to these data. A data processing agreement
pursuant to Art. 28(3) GDPR has been concluded with the host.
The use of the host is for the purpose of contract performance vis-à-vis our potential and
existing customers pursuant to Art. 6(1)(b) GDPR and in the interest of a secure, fast and
efficient provision of our online offering pursuant to Art. 6(1)(f) GDPR.
Host:
STRATO AG
We host our website with the following service provider: STRATO AG, Pascalstraße 10,
10587 Berlin, Germany.
According to STRATO, IP addresses are stored for a maximum of 7 days to detect and
ward off attacks. According to STRATO, data are not transferred to third-party servers.
Further information on data protection at STRATO AG can be found at:
https://www.strato.de/datenschutz/
https://www.strato.de/datenschutz/
7. Cookies
We use cookies on our website. These are small files that your browser automatically
creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you
visit our website. Cookies do not cause any damage to your device and do not contain
viruses, trojans or other malware. Cookies store information that relates to the specific
device used in each case.
Strictly necessary cookies are used for the operation of the website to ensure smooth functionality and do not require consent. The use of these cookies serves to make our offering more user-friendly. We use so-called session cookies. A session ID is generated that assigns the session to the user and is stored temporarily. This allows multiple
windows of our website to be opened and assigned to the same user; login data or the contents of the shopping basket are thus retained. Session cookies are deleted when the
browser is closed.
We may also use functional cookies. These cookies store the settings selected during your last visit to the website, such as language selection or internal bookmarks, so that they do not need to be selected again. This can make future visits to our website more convenient.
Performance cookies may also be used. These contain information about how our website is used. For example, we can recognise how often and how long our website is visited and which subpages are visited. This allows us to see which parts of our website are particularly interesting to users. Performance cookies enable analysis of your browsing behaviour for the purpose of optimising our online offering. It is not possible to draw conclusions about you as a user.
Es können Marketing Cookies von Drittanbietern auf Ihrem Endgerät gesetzt werden. Zweck ist im Rahmen des Onlinemarketings die Analyse des Nutzerverhaltens über mehrere Webseiten über einen längeren Zeitraum hinweg, um entsprechend personalisierte Werbung zu platzieren.
You can configure your browser settings according to your wishes and refuse the acceptance of cookies. Please note that in this case you may not be able to use all functions of this website.
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Cookies are used either on the basis of your consent pursuant to Art. 6(1)(a) GDPR or
within the scope of our legitimate interests in a functional website pursuant to Art. 6(1)(f)
GDPR.
8. Zahlungsdienstleister
Personal data are processed by a payment service provider on the basis of Art. 6(1)(b) GDPR for the purpose of contract processing and only to the extent necessary, and within the scope of our legitimate interests pursuant to Art. 6(1)(f) GDPR; in order to offer you reliable and secure payment processes. The responsibility for data protection compliance with respect to the data collected and processed by the payment provider lies with the
respective payment provider. You may withdraw your consent to the processing of the data at any time directly vis-à-vis the respective payment service provider.
PayPal
If you pay using a payment method provided by PayPal (direct debit, credit card, instalment payment or purchase on account), payment processing is carried out via the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal,
L-2449 Luxembourg (“PayPal”).
If you choose a PayPal payment method, you will be redirected to the PayPal website. For the use of this service, PayPal collects, processes and stores transaction data such as registration/contact data, identification/signature data, payment information, the amount paid, technical usage data and location data.
PayPal reserves the right, within the scope of what is legally permissible, to carry out a credit check for the payment methods mentioned above. For this purpose, your payment data may be disclosed to credit agencies pursuant to Art. 6(1)(f) GDPR on the basis of PayPal’s legitimate interest in assessing your creditworthiness.
Further information on data protection can be found in PayPal’s privacy policy:
https://www.paypal.com/myaccount/privacy/privacyhub
https://www.paypal.com/myaccount/privacy/privacyhub
9. Credit checks
No credit checks are carried out.
10. Analytics services
The tracking measures listed below and used by us are carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR. With the tracking measures used, we aim to ensure a needs-based design and continuous optimisation of our website. We also use tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offering for you.
Where required, a data processing agreement pursuant to Art. 28(3) GDPR has been concluded with the service provider used.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, please note that in this case not all functions of this website may be fully usable. Unless otherwise stated, the data are stored for a period of two years and then deleted.
General information on interest-based online advertising can be found at:
https://www.youronlinechoices.com/de/.
Google Analytics
We use Google Analytics 4 on our website, a web analytics service provided by Google LLC. The controller is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
We use Google “Consent Mode” in a basic implementation. If you have not granted your consent pursuant Art. 6(1)(f) GDPR; the loading of Google tags is blocked and no data are sent to Google (including no consent status).
If you have granted your consent, Google Tags are loaded for analysis and marketing purposes in order to track user behaviour on our website. With this analytics tool, cookies, scripts and pixels are evaluated algorithmically with the help of artificial
intelligence, thereby measuring the respective user behaviour. This may include the processing and storage of the following data: time spent on and pages visited on our website, the browser used, date and time of page access, language settings, and e.g.
scrolling to the end of a page or clicks on external links.
On behalf of the operator of this website, Google will use this information to analyse the use of the website, to compile reports on website activity and to provide other services related to website and internet usage for the website operator. The stored data are
deleted after no later than 14 months.
located in the EU are collected via domains and servers in the EU. Data may also be forwarded in encrypted form to Analytics processing servers in the USA. According to Google, IP addresses collected from users in the EU are deleted before they are recorded via EU domains and servers. IP anonymisation takes place automatically; according to Google, IP addresses are neither logged nor stored.
Google is certified under the EU-U.S. Data Privacy Framework. The legal framework for Google data transfers and the Standard Contractual Clauses of the European Commission can be accessed at:
https://policies.google.com/privacy/frameworks
https://policies.google.com/privacy/frameworks
Weitere Informationen zur Datenschutzerklärung und zu Nutzungshinweisen von Google sind abrufbar unter: https://policies.google.com/privacy
You can also prevent the collection of data generated by the cookie and related to your
use of the website (including your IP address) by Google and the processing of this data
by Google by downloading and installing the browser plug-in available at the following
link:
http://tools.google.com/dlpage/gaoptout?hl=de
You can adjust your settings for personalised advertising by Google at any time:
https://www.google.com/settings/ads/onweb
11. Social media services
On the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR; we use social media
plugins to increase the visibility of our website.
If you access a page of our website that contains a social media plugin, a connection is established to the selected network. In this process, a so-called “cookie” (see section “Cookies” of this Privacy Policy) is placed on your device. The information generated by the cookies about the use of this website, such as IP address, device and location data, is transmitted directly to servers of the provider, possibly in the USA, and stored there. Through this integration, the provider receives the information that your browser has accessed the relevant page of our website, even if you do not have a user profile or are not currently logged in to the provider. The provider may use the information obtained for advertising, market research and demand-oriented design of its pages.
If you are logged in to a provider, the provider can directly assign your visit to our website to your user account. If you interact with the plugins, for example by clicking a button, this information is also transmitted directly to a server of the respective provider and stored there. The information is also published on your user account and shown to your
contacts. The provider may use this information for advertising, market research and demand-oriented design of its pages.
If you do not want the provider to assign the data collected via our website directly to your user account, you must log out of the respective provider before visiting our website.
Please note that, as the website operator, we have no knowledge of the content of the transmitted data or its use by the respective provider.
You may object to processing by the provider at any time.
Social networks
We use social media plugins from the Instagram social network. Instagram services are a product of Meta Platforms Inc., 1 Meta Road, Menlo Park, CA 94025, USA. If you are located in the EU, the controller is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Meta retains information for as long as necessary to provide products, comply with legal obligations, or protect its own interests or the interests of others. Meta stores event data for a maximum of two years. .
Meta is certified under the EU-U.S. Data Privacy Framework
Weitere InfAFurther information on Instagram’s privacy policy can be found at: https://help.instagram.com/155833707900388ormationen zur Datenschutzerklärung von Instagram erhalten Sie unter:
https://help.instagram.com/155833707900388
We use social media plugins of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The controller for the European area is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
LinkedIn stores data for as long as necessary to fulfil the purposes described in its privacy policies.
Further information can be found at:
https://www.linkedin.com/legal/privacy-policy
https://www.linkedin.com/legal/privacy-policy
12. Other online services
or within the scope of our legitimate interest in optimal marketing of our offering pursuant to Art. 6(1)(f) GDPR; we use the online services and advertising tools of the companies listed below. Where required, a data processing agreement pursuant to Art. 6(1)(f) GDPR; has been concluded with the service provider used.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that in this case not all functions of this website may be fully usable.
Google Tag Manager (analysis and tracking tool)
Our website uses Google Tag Manager. The controller for the European area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Tag Manager is a tag management system that enables updating of tracking codes and associated code fragments (“tags”), such as HTML or JavaScript, on the website or mobile app without intervention in the source code. It controls when and which tags are executed on the website. This centralises and simplifies the implementation of tracking and analytics tools. Google Tag Manager itself does not set cookies and does not store data, but forwards data to the respective analytics or marketing tool, such as time spent on pages, scrolling behaviour, browser used, operating system, or user actions on the pages. Cookies are set by the respective analytics tools that are integrated via Google Tag Manager. IP addresses may also be forwarded (in anonymised form). The information is transmitted directly to Google servers, possibly in the USA, and stored there. Google is certified under the EU-U.S. Data Privacy Framework.
We have activated IP anonymisation on this website so that the IP address is shortened by Google within EU Member States or in other states party to the Agreement on the European Economic Area before being transmitted.
Google Tag Manager is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
For the improvement, further development and protection of the service, Google collects information about which tags have been implemented and how. Without your consent, the data are not made accessible for use with other Google products. A data processing agreement pursuant to Art. 28(3) GDPR has been concluded with Google.
You can also prevent the collection of data generated by the cookie and related to your
use of the website (including your IP address) and the processing of this data by Google
by downloading and installing the browser plug-in available at:
https://tools.google.com/dlpage/gaoptout?hl=de
Google stores data collected for different periods depending on the type of data, how Google uses it and how user settings are configured. Advertising data in server logs are anonymised by Google
deleting part of the IP address after 9 months and cookie information after 18 months.
Further information on data protection at Google can be found at:
https://policies.google.com/privacy
Further information on Google’s data protection frameworks can be found at:
https://policies.google.com/privacy/frameworks?hl=de
https://policies.google.com/privacy/frameworks?hl=de
Further information on Google’s data retention can be found at:
https://policies.google.com/technologies/retention?hl=de
YouTube
We embed online content (typically videos) from the platform “YouTube”. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are located in the EU, the controller is Google Ireland Limited, Gordon House, Barrow Street,
Dublin 4, Ireland (“Google”). The operator of the platform is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
We have activated YouTube’s “enhanced privacy mode” so that the setting of YouTube
cookies is blocked. When you access a page on which a YouTube video is embedded, no
connection to YouTube servers is established yet. Only after you have given your consent
pursuant to Art. 6(1)(a) GDPR We have activated YouTube’s “enhanced privacy mode” so that the setting of YouTube cookies is blocked. When you access a page on which a YouTube video is embedded, no connection to YouTube servers is established yet. Only after you have given your consent pursuant to Art. 6(1)(a) GDPR
In this context, Google may store cookies on your device, in particular the cookies YSC (session identifier for creating video statistics), VISITOR_INFO1_LIVE (storage of user settings, duration up to 6 months), VISITOR_PRIVACY_METADATA (storage of session and privacy settings) and __Secure-ROLLOUT_TOKEN (unique identifier for statistical evaluation of video views, duration up to 180 days).
Data (including your IP address) are transmitted directly to Google servers, possibly in the USA, and stored there. Google may store cookies (see section 7 “Cookies”) to evaluate your user behaviour on your device and assign these data to your user account if you are logged in to a Google service. Even if you do not have a user profile or are not currently logged in, Google may process the data received. If you do not want Google/YouTube to assign the data collected via our website to your user account, you must log out of Google services before visiting our pages.
Google/YouTube may use this information, among other purposes, to compile video
statistics and to improve user-friendliness. Please note that we have no knowledge of the
content of the transmitted data or their use by Google/YouTube. You may object to processing by the provider at any time. ou may object to processing by the provider at any time. You can change your privacy settings in YouTube
at any time via your Google account. Guidance can be found at: https://support.google.com/youtube/answer/9315727?hl=de
Google LLC is certified under the EU-U.S. Data Privacy Framework.
Google stores data collected for different periods depending on the type of data, how Google uses it and how user settings are configured. Advertising data in server logs are anonymised by Google
deleting part of the IP address after 9 months and cookie information after 18 months.
Further information on data protection at Google can be found at:
https://policies.google.com/privacy
https://policies.google.com/technologies/retention?hl=de
https://policies.google.com/privacy
https://policies.google.com/technologies/retention?hl=de
Review tool
You have the option to submit a review of our service and the products purchased from us. After completion of the contract, you can rate the transaction and, if applicable, leave a comment. We work with a third-party provider for this purpose. This may involve the transfer of personal data such as name, email address, invoice number and the review.
The IP address may also be transferred. The use of a review system serves the purpose of improving our service and building customer trust.
In order to inform you of this option, you may be contacted by us or by the provider – subject to your prior consent – during the purchase process, in the interest of a trustworthy review.
Data that the provider has received in our name as part of a review invitation will be automatically deleted after no later than 90 days.
Provider:
Geprüfter Webshop
We use the review tool of Tisko Consulting GmbH, Hertzstr. 15, 53881 Euskirchen, Germany.
Weiteren Informationen über den Datenschutz bei der Tisko Consulting GmbH erhalten Sie unter:
https://www.gepruefter-webshop.de/datenschutz/
“Geprüfter Webshop” quality seal
The “Geprüfter Webshop” seal is integrated on our website. The seal and the services promoted by it are an offer of Tisko Consulting GmbH, Hertzstr. 15, 53881 Euskirchen, Germany. When the seal is accessed, the web server automatically stores a so-called server log file which may include your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data) and documents the access. These access data are not analysed and are automatically deleted after no later than 30 days following the end of your visit to the website.
Further information on data protection at Tisko Consulting GmbH can be found at:
https://www.gepruefter-webshop.de/datenschutz/
https://www.gepruefter-webshop.de/datenschutz/
Cookie Consent Management Tool
We use a cookie consent management tool on our website to lawfully obtain, document and manage consents for the use of personal data for analytics and marketing purposes. By using a cookie consent management tool, technically non-essential cookies are set only after you have given your active consent. Accordingly, personal data may be processed for analytics and advertising purposes only after consent has been granted. Consent may be refused and, if granted, may be withdrawn at any time.
The storage of a consent, refusal or withdrawal may be up to two years. Please refer to the provider’s privacy policy for details.
If the provider transfers data to servers in third countries, the transfer is generally based on an adequacy decision of the EU Commission. If the third country does not have an adequacy decision, such as the USA, data transfers are supported, among other
instruments, by the Standard Contractual Clauses of the European Commission as appropriate safeguards for the protection of personal data:
https://commission.europa.eu/publications/standard-contractual-clauses-internationaltransfers_
de
https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_de
A data processing agreement pursuant to Art. 28(3) GDPR has been concluded with the
provider. The use of a cookie consent management tool and the associated data
processing are carried out in fulfilment of a legal obligation pursuant to Art. 6(1)(f) GDPR; GDPR;
Provider:
Geprüfter Webshop
We use the cookie consent management tool of Tisko Consulting GmbH, Hertzstr. 15, 53881 Euskirchen, Germany.
Weiteren Informationen über den Datenschutz bei der Tisko Consulting GmbH erhalten Sie unter:
https://www.gepruefter-webshop.de/datenschutz/
13. Data subject rights
You have the right:
– pursuant to Art. 15 GDPR to request information about your personal data
processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned retention period, the
existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data (if not collected by us), as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the details thereof;
– pursuant to Art. 16 GDPR to request without undue delay the rectification of inaccurate personal data or completion of your personal data stored by us;
– pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
– if you contest the accuracy of the data, the processing is unlawful but you oppose erasure, we no longer need the data but you require them for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
– pursuant to Art. 20 GDPR to receive your personal data that you have provided to us, in a structured, commonly used and machine-readable format, or to request transmission to another controller;
– pursuant to Art. 7(3) GDPR to withdraw your consent given once at any time. This
means that we may no longer continue the data processing that was based on this consent for the future; and
– pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful. As a rule, you may contact the supervisory authority of your habitual residence, place of work or our registered office.
14. Right to object
IF YOUR PERSONAL DATA ARE PROCESSED ON THE BASIS OF OUR LEGITIMATE INTERESTS PURSUANT TO ART. 6(1)(f) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA PURSUANT TO ART. 21(1) GDPR, PROVIDED THAT THERE ARE GROUNDS FOR DOING SO ARISING FROM YOUR PARTICULAR SITUATION. IN SUCH CASE, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
YOU MAY ALSO OBJECT PURSUANT TO ART. 21(2) GDPR TO THE PROCESSING OF PERSONAL DATA BY US THAT IS CARRIED OUT ON THE BASIS OF ART. 6(1)(f) GDPR FOR THE PURPOSE OF DIRECT MARKETING, WITH THE CONSEQUENCE THAT WE
WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING.
IF YOU WISH TO EXERCISE YOUR RIGHT OF WITHDRAWAL OR OBJECTION, IT IS SUFFICIENT TO SEND AN EMAIL TO THE EMAIL ADDRESS STATED IN THE LEGAL NOTICE.
15. Data security
We use the widespread SSL method (Secure Socket Layer) during the website visit in conjunction with the highest encryption level supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit
v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key/lock symbol in the status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
16. Currency and amendment of this Privacy Policy
This Privacy Policy is currently valid.
Due to the further development of our website and our offerings or due to changes in legal or regulatory requirements, it may be necessary to amend this Privacy Policy. The current Privacy Policy can be accessed and printed at any time on this website.
This Privacy Policy was prepared by the contract lawyers of TISKO Consulting GmbH www.Gepruefter-Webshop.de ) and is protected by copyright.