1. Data protection at a glance
General Notes
The following notes give a simple Overview of what happens with your personal data when you visit this Website. Personal data are all data with which you can be personally identified. Detailed information on data protection please refer to our below listed privacy statement.
Data recording on this Website
Who is responsible for the data collection on this Website?
The data processing on this Website is carried out by the website operator. Its contact details can be found in the section "note to the responsible body" in this privacy policy.
How do we collect your data?
Your data will be collected for a fact that you inform us of this. This can be, for example, data that you enter in a contact form.
Other data can be automatically or after your consent when you visit the Website through our IT systems. The mainly technical data (e.g. Internet browser, operating system or time of the page call) are. The collection of this data is automatic as soon as you enter this site.
What do we use your data?
Ein Teil der Daten wird erhoben, um eine fehlerfreie Bereitstellung der Website zu gewährleisten. Andere Daten können zur Analyse Ihres Nutzerverhaltens verwendet werden. Sofern über die Website Verträge geschlossen oder angebahnt werden können, werden die übermittelten Daten auch für Vertragsangebote, Bestellungen oder sonstige Auftragsanfragen verarbeitet.
What rights do you have regarding your data?
You always have the right to receive free information about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to the processing of data, you can revoke this consent at any time with effect for the future. In addition, you have the right to request, in certain circumstances, the restriction of the processing of your personal data. Furthermore, there is a complaint you have the right to the competent Supervisory authority.
For this purpose, as well as other questions relating to privacy, you can contact us at any time.
Analysis Tools and Tools of third-party
When you visit this Website, your surfing can be evaluated statistically. This happens especially with so-called analysis programs.
Detailed information about these analysis programmes please refer to the following privacy policy.
2. Hosting
We host the content on our Website with the following provider:
Raidboxes
Anbieter ist die Raidboxes GmbH, Hafenstr. 32, 48153 Münster (nachfolgend Raidboxes) Wenn Sie unsere Website besuchen, erfasst Raidboxes verschiedene Logfiles inklusive Ihrer IP-Adressen.
Details entnehmen Sie der Datenschutzerklärung von Raidboxes: https://raidboxes.io/legal/privacy/.
Die Verwendung von Raidboxes erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Wir haben ein berechtigtes Interesse an einer möglichst zuverlässigen Darstellung unserer Website. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers (z. B. für Device-Fingerprinting) im Sinne des TDDDG umfasst. Die Einwilligung ist jederzeit widerrufbar.
Order processing
We have concluded a contract for order processing (AVV) to use the above-mentioned service. This is a data protection law, prescribed by the contract, ensure that these processes the personal data of our website visitors according to our instructions and in compliance with the DSGVO.
3. General notes and mandatory information
Privacy Policy
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection Declaration.
If you are using this web site, are collected for a variety of personal data. Personal data are data with which you can be personally identified. The present data protection Declaration explains which data we collect and what we use them for. It also explains how and for what purpose this happens.
We point out that data transmission on the Internet (e.g. communication by E-Mail) security gaps. A complete protection of data against access by third parties is not possible.
Note to the responsible body
The responsible body for data processing on this Website is:
HeartSolution
René Lettnin
Spechthausen 45
16225 Eberswalde
Phone: +49 174 2028057
E-Mail: info@heartsolution.com
The responsible body is the natural or legal Person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, E-Mail addresses, Etc.) decides.
Storage duration
To the extent that within this privacy policy was no more specific storage duration, will remain your personal data with us, until the purpose for data processing is omitted. If you are looking for a legitimate Extinguishing claim or consent to data processing revoked periods delete your data, unless we have no other lawful grounds for the storage of your personal data (e.g. tax or commercial law retention); in the latter case, the deletion is done after these reasons.
General information on the legal bases of the data processing on this Website
Sofern Sie in die Datenverarbeitung eingewilligt haben, verarbeiten wir Ihre personenbezogenen Daten auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO bzw. Art. 9 Abs. 2 lit. a DSGVO, sofern besondere Datenkategorien nach Art. 9 Abs. 1 DSGVO verarbeitet werden. Im Falle einer ausdrücklichen Einwilligung in die Übertragung personenbezogener Daten in Drittstaaten erfolgt die Datenverarbeitung außerdem auf Grundlage von Art. 49 Abs. 1 lit. a DSGVO. Sofern Sie in die Speicherung von Cookies oder in den Zugriff auf Informationen in Ihr Endgerät (z. B. via Device-Fingerprinting) eingewilligt haben, erfolgt die Datenverarbeitung zusätzlich auf Grundlage von § 25 Abs. 1 TDDDG. Die Einwilligung ist jederzeit widerrufbar. Sind Ihre Daten zur Vertragserfüllung oder zur Durchführung vorvertraglicher Maßnahmen erforderlich, verarbeiten wir Ihre Daten auf Grundlage des Art. 6 Abs. 1 lit. b DSGVO. Des Weiteren verarbeiten wir Ihre Daten, sofern diese zur Erfüllung einer rechtlichen Verpflichtung erforderlich sind auf Grundlage von Art. 6 Abs. 1 lit. c DSGVO. Die Datenverarbeitung kann ferner auf Grundlage unseres berechtigten Interesses nach Art. 6 Abs. 1 lit. f DSGVO erfolgen. Über die jeweils im Einzelfall einschlägigen Rechtsgrundlagen wird in den folgenden Absätzen dieser Datenschutzerklärung informiert.
Empfänger von personenbezogenen Daten
Im Rahmen unserer Geschäftstätigkeit arbeiten wir mit verschiedenen externen Stellen zusammen. Dabei ist teilweise auch eine Übermittlung von personenbezogenen Daten an diese externen Stellen erforderlich. Wir geben personenbezogene Daten nur dann an externe Stellen weiter, wenn dies im Rahmen einer Vertragserfüllung erforderlich ist, wenn wir gesetzlich hierzu verpflichtet sind (z. B. Weitergabe von Daten an Steuerbehörden), wenn wir ein berechtigtes Interesse nach Art. 6 Abs. 1 lit. f DSGVO an der Weitergabe haben oder wenn eine sonstige Rechtsgrundlage die Datenweitergabe erlaubt. Beim Einsatz von Auftragsverarbeitern geben wir personenbezogene Daten unserer Kunden nur auf Grundlage eines gültigen Vertrags über Auftragsverarbeitung weiter. Im Falle einer gemeinsamen Verarbeitung wird ein Vertrag über gemeinsame Verarbeitung geschlossen.
Revocation of your consent to data processing
Many data processing operations are only possible with your Express consent is possible. You can revoke an already given consent at any time. The legality of the revocation occurred, data processing remains unaffected by the withdrawal.
Right of objection against data collection in special cases and against direct advertising (art. 21 DSGVO)
IF THE DATA PROCESSING ON THE BASIS OF ART. 6 para. 1 LIT. E OR F DSGVO, YOU WILL HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM THEIR PARTICULAR SITUATION, AGAINST THE PROCESSING OF YOUR PERSONAL DATA TO SUBMIT AN OBJECTION; THIS ALSO APPLIES TO A RULES-BASED PROFILING. THE RESPECTIVE LEGAL BASIS ON WHICH A PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY STATEMENT. IF YOU FILE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE ABLE TO COMPELLING PROTECTION WORTHY TO PROVE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 ABS. 1 DSGVO).
YOUR PERSONAL DATA ARE PROCESSED TO OPERATE DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOU OF PERSONAL DATA CONCERNING HIM FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT RELATES TO SUCH DIRECT ADVERTISING. IF YOU DISAGREE, WILL NO LONGER USE YOUR PERSONAL DATA FOR THE PURPOSES OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ART. 21 ABS. 2 DSGVO).
Right to complain to the competent Supervisory authority
In the case of infringements of the DSGVO to Lodge a complaint to the Concerned law with a Supervisory authority, in particular in the member state of your habitual residence, your workplace or the place of the alleged infringement. The complaint consists of right and without prejudice to any other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process on the basis of your consent or in fulfillment of a contract automatically, to let or to a third party in a commonly used, machine-readable Format to hand. If you require the direct Transfer of data to another person responsible, this will only be done to the extent technically feasible.
Information, correction and deletion
You have. in the framework of the applicable statutory provisions the right at any time to free information about your stored personal data, their origin and recipient and the purpose of the data processing and, if necessary, a right to rectification or deletion of this data For further questions and questions concerning person-related data, you can contact us at any time.
Right to restriction of processing
You have the right to demand the restriction of the processing of your personal data. To do this, you can contact us at any time. The right to restriction of processing in the following cases:
- If you contest the accuracy of your personal data stored with us best, we usually need time to verify this. For the duration of the audit you have the right to demand the restriction of the processing of your personal data.
- If the processing of your personal data is injustice moderate/, you can require the deletion of the restriction of the processing of data.
- When we no longer need your personal information, however, you need to exercise, defend or claim legal entitlements, you have the right to require the deletion of the restriction of the processing of your personal data.
- If you have an objection according to article 21 Para. 1 DSGVO is inserted, must be a balance between your and our interests. As long as it is not yet clear whose interests predominate, you have the right to demand the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, except for these data from their storage – with your consent or for the establishment, exercise or defense of legal claims or for the protection of rights of another natural or legal Person or for reasons of important public interest of the European Union or of a member state to be processed.
SSL or TLS encryption
This site uses, for security reasons and to protect the Transmission of confidential content, such as orders or requests that you send to us as the site operator, an SSL or a TLS encryption. An encrypted connection is indicated by the fact that the address line of the browser from "http://" will change to "https://" and the lock Symbol in your browser line.
If the SSL or TLS encryption is activated, can be used to read the data you transmit to us, not by a third party.
Encrypted payment transactions on this Website
A commitment to send us your payment information (e.g. account number for direct debit authorization), after the conclusion of a fee-based contract this data for payment processing are needed.
Payment transactions via the common means of payment (Visa/MasterCard, direct debit) takes place exclusively via an encrypted SSL or TLS connection. An encrypted connection is indicated by the fact that the address line of the browser from "http://" will change to "https://" and the lock Symbol in your browser line.
In the case of encrypted communication, your payment data that you provide to us may also be read, not by a third party.
Contradiction against advertising E-Mails
The use of the framework of the imprint obligation published contact details for the Sending of not expressly requested advertising and information materials is hereby rejected. The operators of the pages expressly legal steps in case of unsolicited sending of advertising information, for example through Spam E-Mails.
4. Data recording on this Website
Cookies
Our Internet pages use so-called "Cookies". Cookies are small packets of data and damage to your device no damage. They are either stored temporarily for the duration of a session (Session Cookies) or permanently (permanent Cookies) on your device. Session Cookies are deleted automatically after your visit. Persistent Cookies remain on your device memory until you delete them manually or automatic deletion of your web browser.
Cookies may be set by us (First Party Cookies) or by third-party companies (so-called Third-Party Cookies). Third-Party Cookies to allow the inclusion of certain services from a third party company within sites (e.g. Cookies for the processing of payment services).
Cookies have various functions. Many Cookies are technically necessary, as some Website would not function without these (e.g. the shopping cart function or the display of Videos). Other Cookies may be used in the analysis of user behaviour or promotional purposes.
Cookies, die zur Durchführung des elektronischen Kommunikationsvorgangs, zur Bereitstellung bestimmter, von Ihnen erwünschter Funktionen (z. B. für die Warenkorbfunktion) oder zur Optimierung der Website (z. B. Cookies zur Messung des Webpublikums) erforderlich sind (notwendige Cookies), werden auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO gespeichert, sofern keine andere Rechtsgrundlage angegeben wird. Der Websitebetreiber hat ein berechtigtes Interesse an der Speicherung von notwendigen Cookies zur technisch fehlerfreien und optimierten Bereitstellung seiner Dienste. Sofern eine Einwilligung zur Speicherung von Cookies und vergleichbaren Wiedererkennungstechnologien abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage dieser Einwilligung (Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG); die Einwilligung ist jederzeit widerrufbar.
You can set your Browser so that you are informed about the Setting of Cookies and Cookies only in individual cases allow, the acceptance of Cookies for certain cases or generally exclude them as well as the automatic Deletion of Cookies when Closing the browser to enable. In case of deactivation of Cookies, the functionality of this Website may be restricted.
Which Cookies and services are used on this web site, you can refer to this data protection Declaration.
Your consent with Borlabs Cookie
Our Website is using the Consent technology is Borlabs Cookie, to your consent to the storage of certain Cookies in your Browser, or use certain technologies to collect and document these in a privacy compliant way. Providers of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (Borlabs) is.
When you enter our Website, a Borlabs Cookie on your Browser, the consent granted by you or the withdrawal of this consent will be stored. This data will not be disclosed to the provider of the Borlabs Cookie on.
The collected data will be stored until you ask us to delete or Borlabs-Cookie itself deletion or the purpose for the data storage lapses. Mandatory statutory retention periods remain unaffected. For Details on the data processing of Borlabs Cookie, see https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Use the Borlabs Cookie Consent technology to the legally required consent to the use of Cookies to obtain. The legal basis for this is article 6, Para. 1 lit. c DSGVO.
Pixelmate
Our Website uses Pixelmate, to your consent to the storage of certain Cookies on your device, or use certain technologies to collect and document these in a privacy compliant way.
Pixelmate is installed locally on our servers, so there is no connection to the servers of the provider of Pixelmate is made. Pixelmate stores a Cookie in your Browser to provide you with the consent or withdrawal in the map. The collected data will be stored until you ask us to delete, the Pixelmate-the Cookie or delete the purpose for data storage is omitted. Mandatory statutory retention obligations remain unaffected.
The use of Pixelmate is the legally required consent to the use of Cookies to obtain. The legal basis for this is article 6, Para. 1 lit. c DSGVO.
Server-Log-Files
The Provider of the pages automatically collects and stores information in so-called Server Log files, which your Browser automatically transmits to us. These are:
- Browser type and browser version
- operating system
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
A merge of this data with other data sources is not made.
The collection of this data is carried out on the basis of article 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error free depiction and the optimization of his Website – for this purpose, the Server Log Files must be recorded.
Contact form
If you leave us via the contact form requests, the information will be stored in your details from the inquiry form, including the stated contact data, for the purpose of processing the request and in case of follow-up questions with us. This data will not be shared without your consent.
The processing of these data takes place on the basis of article 6 Para. 1 lit. b DSGVO, provided that your request relates to the performance of a contract or for carrying out precontractual measures is required. In all other cases the processing is based on our legitimate interest in the effective processing of the requests (article 6, Para. 1 lit. f DSGVO) or on your consent (art. 6, Para. 1 lit. a DSGVO) if this has been requested; the consent is revocable at any time.
In the contact form data entered will remain with us until you ask us to delete, your consent to storage is revoked or the purpose for the data storage lapses (e.g. after completion of the processing of your request). Mandatory statutory provisions – in particular retention periods – remain unaffected.
Request by E-Mail, telephone or Fax
If you contact us via E-Mail, telephone or Fax will be stored to your request, including all resulting personal data (Name, request) for the purpose of processing your request and processed by us. This data will not be shared without your consent.
The processing of these data takes place on the basis of article 6 Para. 1 lit. b DSGVO, provided that your request relates to the performance of a contract or for carrying out precontractual measures is required. In all other cases the processing is based on our legitimate interest in the effective processing of the requests (article 6, Para. 1 lit. f DSGVO) or on your consent (art. 6, Para. 1 lit. a DSGVO) if this has been requested; the consent is revocable at any time.
By you to us via contact requests sent data will remain with us until you ask us to delete, your consent to storage is revoked or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
Kommunikation via Telegram
Für die Kommunikation mit Kunden und sonstigen Dritten verwenden wir unter anderem den Instant-Messaging-Dienst Telegram. Anbieter ist die Telegram Messenger LLP, 71-75 Shelton Street, Covent Garden, London, Vereinigtes Königreich.
Wenn Sie über Telegram kommunizieren, erfolgt dies über eine Verschlüsselung zwischen Endgerät und Server. Dadurch wird verhindert, dass Telegram oder sonstige Dritte Zugriff auf die Kommunikationsinhalte erlangen können.
Zusätzlich ist eine Ende-zu-Ende-Verschlüsselung möglich, die jedoch nur bei geheimen Chats zum Einsatz kommt. Bei normalen Chats findet also grundsätzlich keine Ende-zu-Ende-Verschlüsselung statt.
Wenn Sie Telegram nutzen, erhält Telegram Zugriff auf Metadaten, die bei der Nutzung und im Rahmen des Kommunikationsvorgangs entstehen (z. B. Absender, Empfänger, Zeitpunkt der Nachrichten, verwendetes Endgerät, Betriebssystem, IP-Adresse, Nutzernamen etc.).
Der Einsatz von Telegram erfolgt auf Grundlage unseres berechtigten Interesses an einer möglichst schnellen und effektiven Kommunikation mit Kunden, Interessenten und sonstigen Dritten (Art. 6 Abs. 1 lit. f DSGVO).
Weitere Details zur Datenverarbeitung finden Sie in der Datenschutzerklärung von Telegram unter: https://telegram.org/privacy/de.
5. Newsletter
Newsletter data
If you wish to receive the Newsletter offered on the Website, we need your E-Mail address and information that allow us to verify that you are the owner of the specified E-Mail address and the receipt of the newsletter. Further data are not or only on a voluntary Basis. For the resolution of the Newsletter we use the newsletter service providers, which are described below.
Brevo
Diese Website nutzt Brevo für den Versand von Newslettern. Anbieter ist die Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Deutschland.
Brevo ist ein Dienst, mit dem u.a. der Versand von Newslettern organisiert und analysiert werden kann. Die von Ihnen zum Zwecke des Newsletterbezugs eingegeben Daten werden auf den Servern der Sendinblue GmbH in Deutschland gespeichert.
Datenanalyse durch Brevo
Mit Hilfe von Brevo ist es uns möglich, unsere Newsletter-Kampagnen zu analysieren. So können wir z. B. sehen, ob eine Newsletter-Nachricht geöffnet und welche Links ggf. angeklickt wurden. Auf diese Weise können wir u.a. feststellen, welche Links besonders oft angeklickt wurden.
In addition, we can detect whether the Open/ Click on certain pre-defined actions have been carried out (Conversion Rate). We can recognize, for example, whether you have made in accordance with the Clicking of the newsletter, make a purchase.
Brevo ermöglicht es uns auch, die Newsletter-Empfänger anhand verschiedener Kategorien zu unterteilen („clustern“). Dabei lassen sich die Newsletterempfänger z. B. nach Alter, Geschlecht oder Wohnort unterteilen. Auf diese Weise lassen sich die Newsletter besser an die jeweiligen Zielgruppen anpassen.
Wenn Sie keine Analyse durch Brevo wollen, müssen Sie den Newsletter abbestellen. Hierfür stellen wir in jeder Newsletternachricht einen entsprechenden Link zur Verfügung.
Ausführliche Informationen zum zu den Funktionen von Brevo entnehmen Sie folgendem Link: https://www.brevo.com/de/newsletter-software/.
Legal basis
The data processing is carried out on the basis of your consent (art. 6, Para. 1 lit. a DSGVO). You may revoke this consent at any time. The legality of the already completed data processing operations remains unaffected by the withdrawal.
Storage duration
The purpose of the Newsletter subscription information provided to us, will be stored by us until their discharge from the Newsletter or the newsletter service provider and after the cancellation of the newsletter from the newsletter distribution list is deleted. Data stored for other purposes with us remain unaffected.
After their removal from the newsletter distribution list, your E-Mail address is stored by us or the newsletter service provider in a Blacklist to prevent future Mailings required. The data from the Blacklist is used only for this purpose and not with any other data held together. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of article 6 Para. 1 lit. f DSGVO). The storage in the Blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
Näheres entnehmen Sie den Datenschutzbestimmungen von Brevo unter: https://www.brevo.com/de/datenschutz-uebersicht/ sowie https://www.brevo.com/de/legal/privacypolicy/.
Order processing
We have concluded a contract for order processing (AVV) to use the above-mentioned service. This is a data protection law, prescribed by the contract, ensure that these processes the personal data of our website visitors according to our instructions and in compliance with the DSGVO.
Newsletterversand an Bestandskunden
Wenn Sie Waren oder Dienstleistungen bei uns bestellen und hierbei Ihre E-Mail-Adresse hinterlegen, kann diese E-Mail-Adresse in der Folge durch uns für den Versand von Newslettern verwendet werden, sofern wir Sie vorab hierüber informieren. In einem solchen Fall wird über den Newsletter nur Direktwerbung für eigene ähnliche Waren oder Dienstleistungen versendet. Die Zusendung dieses Newsletters kann von Ihnen jederzeit gekündigt werden. Zu diesem Zweck findet sich in jedem Newsletter ein entsprechender Link. Rechtsgrundlage für den Versand des Newsletters ist in diesem Fall Art. 6 Abs. 1 lit. f DSGVO in Verbindung mit § 7 Abs. 3 UWG.
Nach Ihrer Austragung aus der Newsletterverteilerliste wird Ihre E-Mail-Adresse bei uns ggf. in einer Blacklist gespeichert, um künftige Mailings an Sie zu verhindern. Die Daten aus der Blacklist werden nur für diesen Zweck verwendet und nicht mit anderen Daten zusammengeführt. Dies dient sowohl Ihrem Interesse als auch unserem Interesse an der Einhaltung der gesetzlichen Vorgaben beim Versand von Newslettern (berechtigtes Interesse im Sinne des Art. 6 Abs. 1 lit. f DSGVO). Die Speicherung in der Blacklist ist zeitlich nicht befristet. Sie können der Speicherung widersprechen, sofern Ihre Interessen unser berechtigtes Interesse überwiegen.
6. Plugins und Tools
Google Fonts (local Hosting)
This site uses the uniform representation of fonts, so-called Google Fonts provided by Google. The Google Fonts are installed locally. A connection to Google servers does not take place.
For more information on Google Fonts can be found https://developers.google.com/fonts/faq and in the data protection Declaration of Google: https://policies.google.com/privacy?hl=de.
Ninja Firewall
Wir haben Ninja Firewall auf dieser Website eingebunden. Anbieter ist die NinTechNet Limited, Unit 1603, 16th Floor, The L. Plaza 367 – 375 Queen‘s Road Central Sheung Wan, Hong Kong (nachfolgend Ninja Firewall).
Ninja Firewall dient dem Schutz unserer Website vor unerwünschten Zugriffen oder bösartigen Cyberattacken. Zu diesem Zweck erfasst Ninja Firewall IP-Adresse, Request, Referrer und Zeitpunkt des Seitenzugriffs. Ninja Firewall ist auf unseren eigenen Servern eingebunden und übermittelt keine personenbezogenen Daten an den Anbieter des Tools oder sonstige Dritte.
Wir haben die IP-Anonymisierung bei Ninja Firewall aktiviert, sodass das Tool die IP-Adresse nur in gekürzter Form erfasst.
Die Verwendung von Ninja Firewall erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an einem möglichst effektiven Schutz seiner Website vor Cyberattacken.
7. eCommerce und Zahlungsanbieter
Process of customer and contract data
We collect, process and use personal customer and contract data for the establishment, content-related design and changes to our contractual relations. Personal data about the use of this Website (usage data) we collect, process and use only to the extent necessary to provide the user with the use of the service or settle. The legal basis for this is article 6, Para. 1 lit. b DSGVO.
The collected customer data shall be deleted after completion of the order or termination of the business relationship and the expiry of any existing statutory retention. Statutory retention periods remain unaffected.
Data transmission at the conclusion of a contract for Online Shops, dealers, and shipment of goods
If you order Goods from us, we may share your personal data to the delivery of assigned transport company and the payment processing with the payment service provider. It is only such data are published by the respective service providers for the performance of its task. The legal basis for this is article 6, Para. 1 lit. b DSGVO, which permits the processing of data to fulfill a contract or pre-contractual measures. If you consent according to art. 6, Para. 1 lit. a DSGVO have given, we will pass on your E-Mail address to the delivery of assigned transport company, so that this can inform you via E-Mail of the shipping status of your order; you may revoke your consent at any time.
Data transmission at the conclusion of a contract for services and digital content
We transmit personal data to third parties only if this is in the framework of contract processing is necessary, for example to the credit institution responsible for payment.
A further Transmission of the data takes place only if you have expressly consented to it. A passing on of your data to third parties without Express consent, for instance for advertising purposes, does not occur.
The basis for data processing is art. 6, Para. 1 lit. b DSGVO, which permits the processing of data to fulfill a contract or pre-contractual measures.
Payment services
We integrate payment services of third-party companies on our Website. If you make a purchase from us, will be processed your payment data (e.g., Name, payment amount, Bank account details, credit card number) from a payment service provider, for the purpose of payment processing. For these transactions, the relevant contract and the data protection provisions of the relevant provider shall apply. The use of the payment service providers is carried out on the basis of article 6 Para. 1 lit. b DSGVO (contract processing), as well as in the interest of a smooth, comfortable and safe payment procedure (art. 6, Para. 1 lit. f DSGVO). To the extent that certain actions your permission is requested, it is art. 6, Para. 1 lit. a DSGVO, the legal basis of the data processing; the consent at any time for the future revocable.
The following payment services and payment service providers we use in the context of this Website:
PayPal
Provider of this payment service is PayPal (Europe) S. à.r.l. et Cie, S. C. A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").
The data transmission in the United States is based on the standard contractual clauses of the EU Commission. You can find Details here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.
Details can be found in the privacy policy of PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Apple Pay
Provider of this payment service Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. The privacy policy of Apple, go to: https://www.apple.com/legal/privacy/de-ww/.
Google Pay
Anbieter ist Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Die Datenschutzerklärung von Google finden Sie hier: https://policies.google.com/privacy.
Stripe
Provider for customers within the EU, the Stripe Payments Europe,Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter: the "Stripe").
The data transmission in the United States is based on the standard contractual clauses of the EU Commission. You can find Details here: https://stripe.com/de/privacy and https://stripe.com/de/guides/general-data-protection-regulation.
Details can be found in the privacy policy of Stripe under the following Link: https://stripe.com/de/privacy.
Paydirekt
Provider of this payment service is Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany (hereinafter "Paydirekt") is. When you run the payment via Paydirekt, Paydirekt collects various transaction data and forwards it to the Bank, at the you with Paydirekt are registered. In addition to the data necessary for payment Paydirekt collects in the context of the transaction, if applicable, further data such as the address or individual items in the shopping basket delivery. Paydirekt authenticates the transaction, then with the help of the Bank deposited authentication procedure. Then, the number of amount from your account will be transferred to our Bank account. Neither we nor any third parties have access to your account information. Details for payment with Paydirekt, check out the terms and conditions and the privacy policy of Paydirekt: https://www.paydirekt.de/agb/index.html.
Instant transfer
Anbieter dieses Zahlungsdienstes ist die Sofort GmbH, Theresienhöhe 12, 80339 München (im Folgenden „Sofort GmbH“). Mit Hilfe des Verfahrens „Sofortüberweisung“ erhalten wir in Echtzeit eine Zahlungsbestätigung von der Sofort GmbH und können unverzüglich mit der Erfüllung unserer Verbindlichkeiten beginnen. Wenn Sie sich für die Zahlungsart „Sofortüberweisung“ entschieden haben, übermitteln Sie die PIN und eine gültige TAN an die Sofort GmbH, mit der diese sich in Ihr Online-Banking-Konto einloggen kann. Sofort GmbH überprüft nach dem Einloggen automatisch Ihren Kontostand und führt die Überweisung an uns mit Hilfe der von Ihnen übermittelten TAN durch. Anschließend übermittelt sie uns unverzüglich eine Transaktionsbestätigung. Nach dem Einloggen werden außerdem Ihre Umsätze, der Kreditrahmen des Dispokredits und das Vorhandensein anderer Konten sowie deren Bestände automatisiert geprüft. Neben der PIN und der TAN werden auch die von Ihnen eingegebenen Zahlungsdaten sowie Daten zu Ihrer Person an die Sofort GmbH übermittelt. Bei den Daten zu Ihrer Person handelt es sich um Vor- und Nachnamen, Adresse, Telefonnummer(n), E-Mail-Adresse, IP-Adresse und ggf. weitere zur Zahlungsabwicklung erforderliche Daten. Die Übermittlung dieser Daten ist notwendig, um Ihre Identität zweifelsfrei zu festzustellen und Betrugsversuchen vorzubeugen. Details zur Zahlung mit Sofortüberweisung entnehmen Sie folgendem Link: https://www.klarna.com/sofort/.
Amazon Pay
Provider of this payment service, the Amazon Payments Europe S. C. A., 38 avenue J. F. Kennedy, L-1855 Luxembourg.
Details on how your data is handled can be found in the data protection Declaration of Amazon Pay under the following Link: https://pay.amazon.de/help/201212490?ld=APDELPADirect.
giropay
Provider of this payment service is paydirekt GmbH, Stephan straße 14 – 16, 60313 Frankfurt am Main (hereinafter "PayPal") is.
Details can be found in the privacy policy of PayPal: https://www.paydirekt.de/agb/index.html.
Mastercard
Provider of this payment service, Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter, the "Mastercard").
Mastercard can transmit data to its parent company in the USA. The data transmission in the United States is based on the Binding Corporate Rules by Mastercard. You can find Details here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.
VISA
Provider of this payment service, the Visa Europe Services Inc., London branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter the "VISA").
Britain's data protection law safe third country. This means that the UK has a data protection level corresponding to the level of data protection in the European Union.
VISA can transmit data to its parent company in the USA. The data transmission in the United States is based on the standard contractual clauses of the EU Commission. You can find Details here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.
For more information, please refer to the privacy policy of VISA: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.
Use of special service providers for order processing, clearing and settlement,
The shipping and distribution of the order is carried out via the YouFlake GmbH, Siegfried road 52 in 10365 Berlin.
If personal data is being processed, the processing in accordance with art. 6, Para. 1 lit. f DSGVO based on our legitimate interest in an efficient Organisation and documentation of our business operations. Details of the data protection Xentral are available under the following Link:
https://youflake.com/datenschutzerklaerung/
The following Software is use for the purpose of order processing:
Xentral
The order processing takes place via Xentral, a service of the Xentral ERP Software GmbH Fuggerstraße 11, 86150 Augsburg ("Xentral"). The Name, address and, where applicable, other personal data will be pursuant to article 6. 1 lit. b DSGVO for the purpose of processing the Online order in Xentral passed. The passing on of your data takes place here only, as far as this is necessary for the execution of the order is actually required. Xentral, and is used for accounting. So Xentral processed incoming and outgoing invoices, as well as, if necessary, also the Bank movements of our company, in order to capture invoices automatically to match the transactions to and to provide this in a partially-automated process, the financial accounting.
If personal data is being processed, the processing in accordance with art. 6, Para. 1 lit. f DSGVO based on our legitimate interest in an efficient Organisation and documentation of our business operations. Details of the data protection Xentral are available under the following Link: https://xentral.com/de/datenschutz/
Disclosure of personal data to shipping service providers
DHL
The delivery of the goods takes place by the transport service provider DHL (DHL paket GmbH Sträßchensweg 10, 53113 Bonn), we disclose your E-Mail address in accordance with art. 6, Para. 1 lit. a DSGVO prior to delivery of the goods for the purpose of appointment or delivery to the notice Delivery to DHL, provided that you have given in the ordering process with your explicit consent. Otherwise, we will give for the purpose of delivery in accordance with art. 6, Para. 1 lit. b DSGVO only the name of the recipient and the delivery address to DHL. The transfer takes place only insofar as this is necessary for the delivery of goods is required. In this case, prior agreement of the delivery date with DHL and the delivery notice is not possible.
The consent at any time with effect for the future compared with the above-mentioned controller or with the transport service provider DHL revoked.
DPD
The delivery of the goods takes place by the transport service provider DPD (DPD Deutschland GmbH, wailandt street 1, 63741 Aschaffenburg), we disclose your E-Mail address, and telephone number prior to the delivery of the ordered goods according to art. 6, Para. 1 lit. a DSGVO for the purpose of voting a delivery date or the notice of Delivery to DPD, if you have given for this purpose in the ordering process with your explicit consent. Otherwise, we will give for the purpose of delivery in accordance with art. 6, Para. 1 lit. b DSGVO only the name of the recipient and the delivery address to DPD. The transfer takes place only insofar as this is necessary for the delivery of goods is required. In this case, prior agreement of the delivery date with DPD or non-delivery notice.
The consent at any time with effect for the future compared with the above-mentioned controller or with the transport service provider DPD revoked.
UPS
The delivery of the goods takes place by the transport service UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we disclose your E-Mail address before the delivery of the ordered goods according to art. 6, Para. 1 lit. a DSGVO for the purpose of voting a delivery date or the notice Delivery to UPS, if you have given for this purpose in the ordering process with your explicit consent. Otherwise, we will give for the purpose of delivery in accordance with art. 6, Para. 1 lit. b DSGVO only the name of the recipient and the delivery address to UPS. The transfer takes place only insofar as this is necessary for the delivery of goods is required. In this case, prior agreement of the delivery date with UPS or Transmission of status information for shipment delivery is not possible.
The consent at any time with effect for the future compared with the above-mentioned controller or with the transport service provider UPS revoked.