Privacy Notice

DATA PRIVACY POLICY

Sect. 1   General

We will process your personal data (e.g. title, name,address, e-mail address, phone number, bank details, credit card number) solelyin accordance with the provisions of the German data protection law and thedata protection law of the European Union (EU). The following provisions willinform you, besides the information about the processing purposes, recipients,legal bases and storage periods, also about your rights and the controller foryour data processing. This privacy policy applies only to our websites. If youare directed to other sites via links on our pages, please pay attention and besure to review their privacy practices. 

Sect. 2   Data processing for theperformance of contracts

(1) Purpose of data processing

Your personal data you provide us during the orderingprocess are necessary for the conclusion of a contract with us. You are notobliged to provide your personal data. However, we would not be able to sendyou the goods without your address. For some payment methods we ask for thenecessary payment data in order to pass them on to a payment service providercommissioned by us. Hence, the processing of your data collected during theordering process is soley for the purpose of contract performance.

If you send us a request by e-mail or by using the contactform, etc. before concluding the contract, we process the obtained data tocarry out pre-contractual measures and answer your questions about e.g. ourproducts.

In case of opening a customer account, your data (inparticular name, address, payment method, e-mail and password) will beprocessed for registration and creation of a customer login. With the storeddata, you are able to shop faster and view your previous orders at any time. Bysending us a notice or via a delete function you can delete the account again.

(2) Legal basis

The legal basis for such processing is set out in Article 6(1) (b) of the GDPR.

(3) Recipient categories

Payment service provider, shipping service provider, hostingprovider, if necessary merchandise management system, suppliers if necessary(drop-shipping).

(4) Duration of storage

We store the data required for contract execution until thestatutory warranty and, if applicable, contractual warranty periods expire.

We store the data required under commercial and tax law forthe statutory periods, generally ten years (cf. § 257 German Commercial Code(HGB), § 147 Regulation of Taxation (AO)).

The data processed for the execution of pre-contractualmeasures will be deleted as soon as the measures have been carried out and thecontract cannot be concluded.

Sect. 3   PayPal-transactions

Please note that all PayPal transactions are subject to thePayPal Privacy Policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Sect. 4   Web analysis with GoogleAnalytics

(1) Purpose of data processing

This website uses Google Analytics 4, a web analyticsservice provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin4, Ireland ("Google"). Google Analytics 4 uses "cookies",which are text files placed on your computer, to help the website analyze howusers use the site. According to Google, Google Analytics 4 does not log orstore individual IP addresses. No precise location data is provided inAnalytics. Instead, the following metadata is derived from IP addresses:"city" (and the derived latitude and longitude of the city),"continent", "country", "region","subcontinent" (and the ID-based equivalents). For accessesoriginating from the EU, IP addresses are only used to derive location data andare immediately deleted afterwards. They are not logged, are not accessible,and are not used for any other use cases. When collecting measurement data inAnalytics, all IP searches take place on EU-based servers before the traffic isforwarded to Analytics servers for processing. These servers are also locatedoutside the EU.

On behalf of the operator of this website, Google will usethis information for the purpose of evaluating your use of the website,compiling reports on website activity and providing other services relating towebsite activity and internet usage to the website operator.

(2) Legal basis

The legal basis for such processing is set out in Article 6(1) (a) of the GDPR.

(3) Recipient categories

Google and its partners.

(4) Transfer to a third country

Google Ireland Limited is an affiliate of Google LLC. GoogleLLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).The basis for the transfer of personal data from the EU to the US is theEU-U.S. Data Privacy Framework.

(5) Duration of Storage

14 months

(6) Right of revocation

You can revoke your consent at any time with effect forthe future via our cookie banner or via our website.

You can prevent the installation of the cookies in yourbrowser settings. If you choose to change your settings you may not be able touse the full functionality of this website.

You can also prevent Google from collecting the datagenerated by the cookie and relating to your use of the website and fromprocessing this data by Google by downloading and installing the browserplug-in available under the following link: optout

Sect. 5   Information about cookies

(1) Purpose of data processing

This website uses technically necessary cookies. These aresmall text files that are stored in or by your Internet browser on yourcomputer system. These cookies enable, for example, the inserting of severalproducts in a shopping basket.

(2) Legal basis

The legal basis for such processing is set out in Article 6(1) (f) of the GDPR.

(3) Legitimate interest

Our legitimate interest is the functionality of our website.The user data collected by technically necessary cookies are not used to createuser profiles. This preserves your interest in data protection.

(4) Duration of storage

The technically necessary cookies are usually deleted whenthe browser is closed. Persistent cookies have different validity period from afew minutes to several years.

(5) Right of objection

If you do not wish these cookies to be stored, pleasedeactivate the use of cookies in your Internet browser. However, this may causea functional limitation of our website. You can also delete persistent cookiesat any time by changing your browser settings.

Sect. 6   Newsletter

(1) Purpose of data processing

When registering for the newsletter, your e-mail addresswill be used for advertising purposes, i.e. the newsletter will inform you inparticular about products from our product range. For statistical purposes wemay evaluate which links are viewed in the newsletter. However, it is notrecognizable for us, which concrete person has accessed the links. You haveexpressly given the following consent separately or, as the case may be, in thecourse of the ordering process: Subscribe to the newsletter.

(2) Legal basis

The legal basis for such processing is set out in Article 6(1) (a) of the GDPR.

(3) Recipient categories

if necessary: newsletter provider

(4) Duration of Storage

Your e-mail address will only be stored for the respectiveduration of your registration.

(5) Right of revocation

You may revoke your consent at any time with effect for thefuture. If you no longer wish to receive the newsletter, you may unsubscribe asfollows: By a log-out link in the newsletter

Sect. 7   Your rights as a data subject

If your personal data is being processed, you are the ‘datasubject’ in terms of GDPR and you have the following rights towards us, thecontroller:

1. Right to information

You may request us to provide information about yourpersonal data processed by us under Article 15 of the GDPR.

2. Right to rectification

If your personal data provided to us is not up to date ornot accurate you have the right to ask for modifications to your personal dataunder Article 16 of the GDPR. You also have the right to request us to completean incomplete data.

3. Right to erasure

You have the right to have your personal data erased and askfor deletion of your data under Article 17 of the GDPR.

4. Right to restriction of processing

You have the right to restrict the processing your personaldata under Article 18 of the GDPR.

5. Right to data portability

You have the right referred to in Article 20 of the GDPR toreceive your personal data provided to us, in a structured, commonly used andmachine-readable format and have the right to transmit those data to anothercontroller.

6. Right to revoke the consent given under dataprotection law

You have the right referred to in paragraph 3 of Article 7to withdraw your given consent based on the data protection provisions at anytime. This does not affect the lawfulness of the processing based on consentbefore its withdrawal.

7. Right to lodge a complaint with a supervisoryauthority

If you consider that the processing of personal datarelating to you infringes the GDPR, you have the right referring to in Article77 of the GDPR to complain to the supervisory authority against the processingof your personal data (in particular in the Member State of your habitualresidence, place of work or place of the alleged infringement ).

Please also note your right of objection under Article 21GDPR:

a) In general: reasoned objection required

If the processing of personal data concerning you takesplace in order

- to perform our overriding legitimate interest (legalbasis: Article 6 (1f) GDPR)

or

- to safeguard the public interest (legal basis: Article6 (1e) GDPR),

you are entitled to object to the processing at any timefor reasons arising from your particular situation; this also applies toprofiling based on the provisions of the GDPR.

In the event of objection, we will no longer process thepersonal data concerning you unless we can prove compelling grounds forprocessing which override your interests, rights and freedoms, or theprocessing is necessary for the establishment, exercise or defence of legalclaims;

b) Special case of direct marketing: simple objection issufficient

If the personal data concerning you are processed for thepurpose of direct marketing, you have the right to object at any time to theprocessing and without stating reasons; this includes profiling to the extentthat it is related to such direct marketing.

If you object to the processing for direct marketingpurposes, the personal data concerning you will no longer be processed forthese purposes.

Responsible for dataprocessing:
Bensussen Deutsch & Associates GmbH
Bahnhofsallee 8
86438 Kissing
Phone: 08233/7920-0
datenschutz@bdainc.com

Contact details of ourdata protection officer:
sicdata | Unternehmensberatung

Heiligenstock 34c
42697 Solingen
datenschutz@bdainc.com