§ 1 General
Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases, storage periods, the following regulations also inform you about your rights and the person responsible for your data processing. This data protection declaration refers only to our web pages. If you are forwarded to other pages via links on our pages, please inform yourself there about the respective handling of your data.
§ 2 Data processing for contract fulfillment
(1) Processing purpose
Your personal data, which you provide to us in the ordering process, are required for a contract conclusion with us. You are not obliged to provide your personal data. However, we cannot send you the goods without notification of your address. For some payment procedures, we require the necessary payment data to be passed on to a payment service provider commissioned by us. The processing of your data entered in the ordering process is therefore for the purpose of fulfilling the contract.
If you send us an inquiry by e-mail, via a contact form, etc. prior to the conclusion of a contract, we process the data received in this way to carry out pre-contractual measures and, for example, answer your questions about our products.
In case of opening a customer account, your data (in particular name, address, payment method, e-mail and password) will be processed for registration and creation of a customer login. With the stored data, you can shop faster with us and view your orders at any time. By a message to us or via a delete function you can remove the account again.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 b) DSGVO.
(3) Recipient categories
Payment service provider, shipping service provider, hosting provider, if applicable merchandise management system, if applicable suppliers (dropshipping).
(4) Storage period
We store the data required for processing the contract until the expiry of the statutory warranty and, if applicable, contractual warranty periods.
We retain the data required by commercial and tax law for the periods specified by law, regularly ten years (cf. Section 257 HGB, Section 147 AO).
The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and there is no recognizable conclusion of a contract.
§ 3 Further information
Your contact information will be transmitted to a shipping service provider. For tracking by the customer, contact details of the customer will be communicated with the shipping service provider.
§ 4 PayPal transactions
§ 5 Information about cookies
(1) Processing purpose
Technically necessary cookies are used on this website. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable, for example, the insertion of several products into a shopping cart.
(2) Legal basis
The legal basis for this processing is Art. 6 para.1 f) DSGVO.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected through technically necessary cookies are not used to create user profiles. This protects your interest in data protection.
(4) Storage period
The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a varying lifespan from a few minutes to several years.
(5) RIGHT OF OBJECTION
If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may result in a functional restriction of our website. You can also delete permanently stored cookies at any time via your browser.
§ 6 Your rights as a data subject
If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights against us as the controller:
1. right to information
You can request information about your personal data processed by us within the scope of Art. 15 DSGVO.
2. right to rectification
If the information concerning you is not (or no longer) accurate, you can request a correction in accordance with Art. 16 DSGVO. If your data is incomplete, you can request that it be completed.
3. right to deletion
You can request the deletion of your personal data under the conditions of Art. 17 DSGVO.
4. right to restriction of processing
Within the framework of the requirements of Art. 18 DSGVO, you have the right to request a restriction of the processing of the data concerning you.
5. right to data portability
In accordance with Art. 20 DSGVO, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
6. right to revoke the declaration of consent under data protection law
In accordance with Art. 7 (3) DSGVO, you have the right to revoke your declaration of consent under data protection law at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by this.
7. right to complain to a supervisory authority
If you believe that the processing of personal data concerning you is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your residence, workplace or the place of the alleged infringement) in accordance with Article 77 GDPR.
Please also note your right to object according to Art. 21 DSGVO:
a) General: reasoned objection required
If the processing of personal data concerning you takes place
- for the protection of our overriding legitimate interest (legal basis according to Art. 6 (1) f) DSGVO) or
- in the public interest (legal basis according to Art. 6 para. 1 e) DSGVO),
you have the right to object to processing at any time on grounds relating to your particular situation; this also applies to profiling based on the provisions of the GDPR.
In the event of an objection, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
b) Special case of direct advertising: simple objection is sufficient
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object to such processing at any time and without giving reasons; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
Person responsible for data processing:
fabric7 UG (limited liability).
Dobler Str. 10