Privacy policy

1. Information on the Collection of Personal Data and Contact Details of the Controller:

​

1.1 I am delighted that you are visiting my website and thank you for your interest! In the following, I provide information on how your personal data is handled when using this website. Personal data in this context refers to all data with which you could be personally identified.

 

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

 

Rudelwohl

Marleen Marquardt, Str. zum Bahnhof 9, 16775 Löwenberger Land, Germany

Email: rudelwohl@yahoo.com

 

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser address bar.

​

2. Data Collection When Visiting This Website

 

When using our website for purely informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect such data that your browser transmits to the page server (so-called "server log files"). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our website visited

• Date and time at the time of access

• Amount of data sent in bytes

• Source/reference from which you reached the page

• Browser used

• Operating system used

• IP address used (if applicable: in anonymized form)

 

Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

 

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser address bar.

​

3. Cookies

 

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your end device. Some of these cookies are automatically deleted again after closing the browser (so-called "session cookies"), some of these cookies remain longer on your end device and enable the saving of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.

 

Insofar as personal data are also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

 

You can set your browser so that you are informed about the setting of cookies and can decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general.

 

Please note that if cookies are not accepted, the functionality of our website may be limited.

 

4. Contacting Us

 

In the context of contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of handling and answering your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact aims at a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

 

4.1 Data Protection Notice on the Statutory Online Withdrawal Function ("Withdrawal Button")

 

In the context of the legally prescribed electronic withdrawal function pursuant to § 356a BGB (German Civil Code), I process personal data that you enter into the input mask. This includes, in particular, name, address, email address, order data (e.g., order number), as well as details regarding the withdrawn contract.

 

Purpose of processing: The processing serves to record, verify, and reverse your declared withdrawal, as well as to automatically send an electronic acknowledgment of receipt (e.g., via email) to you.

 

Legal basis: The legal basis for this processing is the fulfillment of a legal obligation pursuant to Art. 6 Para. 1 lit. c GDPR in conjunction with § 356a BGB, as well as the execution and reversal of the contractual relationship pursuant to Art. 6 Para. 1 lit. b GDPR.

 

Storage period: The data collected via the withdrawal function will be blocked for further use after the complete processing of the withdrawal and will be deleted after the expiry of the tax and commercial law retention periods (usually 6 or 10 years), unless you have consented to further use beyond this.

​

5. Data Processing When Opening a Customer Account and for Contract Execution

 

In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed if you communicate it to me for the execution of a contract or when opening a customer account. Which data are collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. I store and use the data communicated by you for contract execution. After complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further data use has been reserved on my part, about which I inform you accordingly below.

​

6. Data Processing for Order Execution

 

6.1 To process your order, I work together with the following service provider(s), who support me wholly or partially in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

​

-DPD 

DPD is a transport service provider, we use the following provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

 

We pass on your email address and/or telephone number in accordance with Art. 6 Para. 1 lit. a GDPR to the provider prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent for this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer takes place only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery notification is not possible.

 

The consent can be revoked at any time with effect for the future towards the controller named above or towards the provider.

 

- Deutsche Post

Deutsche Post is a transport service provider, we use the following provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

 

We pass on your email address and/or telephone number in accordance with Art. 6 Para. 1 lit. a GDPR to the provider prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent for this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer takes place only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery notification is not possible.

 

The consent can be revoked at any time with effect for the future towards the controller named above or towards the provider.

 

- DHL

DHL is a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

 

We pass on your email address and/or telephone number in accordance with Art. 6 Para. 1 lit. a GDPR to the provider prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent for this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer takes place only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery notification is not possible.

 

The consent can be revoked at any time with effect for the future towards the controller named above or towards the provider.

​

- Post CH

Post CH is a transport service provider, we use the following provider: Post CH (Swiss Post Ltd, Switzerland, Wankdorfallee 4, 3030 Bern)

 

We pass on your email address and/or telephone number to the provider prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent for this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery. The transfer takes place only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery notification is not possible.

 

The consent can be revoked at any time with effect for the future towards the controller named above or towards the provider.

 

In the event of a data transfer to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

​

- UPS

UPS is a transport service provider, we use the following provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany

 

We pass on your email address and/or telephone number in accordance with Art. 6 Para. 1 lit. a GDPR to the provider prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent for this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer takes place only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery notification is not possible.

 

The consent can be revoked at any time with effect for the future towards the controller named above or towards the provider.

 

If you independently commission a parcel forwarding or mail forwarding service (such as LogoiX) for the delivery of your order, the address data required for delivery, along with your personal customer number at the service provider, will be transmitted to the transport company at the German place of handover. The legal basis for passing on the data is Art. 6 Para. 1 lit. b GDPR.

 

The personal data collected by me will be passed on to the transport company commissioned with the delivery within the scope of contract execution, insofar as this is necessary for the delivery of the goods. Within the scope of payment processing, I pass on your payment data to the commissioned credit institution, provided this is necessary for payment processing. If payment service providers are used, I provide explicit information about this below. The legal basis for passing on the data is Art. 6 Para. 1 lit. b GDPR.

 

6.2 Use of Payment Service Providers (Payment Service Providers)

 

- Apple Pay

If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing takes place via the "Apple Pay" function of your end device operated with iOS, watchOS or macOS by charging a payment card stored with "Apple Pay". Apple Pay uses security features built into your device's hardware and software to protect your transactions. For the release of a payment, the entry of a code previously defined by you as well as verification by means of the "Face ID" or "Touch ID" function of your end device is therefore required.

 

For the purpose of payment processing, your information provided during the ordering process, along with information about your order, is passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number as well as a transaction-specific, dynamic security code to the originating website to confirm the success of the payment.

 

Insofar as personal data are processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

 

Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. The anonymization completely excludes a personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.When you use Apple Pay on the iPhone or the Apple Watch to complete a purchase that you made via Safari on the Mac, the Mac and the authorization device communicate via an encrypted channel on the Apple servers. Apple does not process or store any of this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and deactivate "Allow Payments on Mac".

 

Further information on data protection with Apple Pay can be found at the following internet address: https://support.apple.com/de-de/HT203027

 

- Giropay

One or more online payment methods of the following provider are available on this website: paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany

 

When selecting a payment method of the provider where you make an advance payment (such as credit card payment), your payment data communicated during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

 

- Google Pay

If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment processing takes place via the "Google Pay" application of your mobile end device operated with at least Android 4.4 ("KitKat") and equipped with an NFC function, by charging a payment card stored with Google Pay or a payment system verified there (e.g., PayPal). For the release of a payment via Google Pay in an amount of more than €25.00, the prior unlocking of your mobile end device by means of the respectively configured verification measure (such as facial recognition, password, fingerprint, or pattern) is required.

 

For the purpose of payment processing, your information provided during the ordering process, along with the information about your order, is passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a one-time transaction number to the originating website, with which a completed payment is verified. This transaction number does not contain any information regarding the real payment data of your payment methods stored with Google Pay, but is created and transmitted as a one-time valid numerical token. For all transactions via Google Pay, Google acts solely as an intermediary for processing the payment process. The execution of the transaction takes place exclusively in the relationship between the user and the originating website by charging the payment method stored with Google Pay.

 

Insofar as personal data are processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

 

Google reserves the right to collect, store, and evaluate certain transaction-specific information for every transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction.

 

According to Google, this processing is carried out exclusively in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, the verification of transaction data, and the optimization and maintenance of functionality of the Google Pay service. Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when using other Google services.

 

The terms of use of Google Pay can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?Ido=0&ldt=googlepaytos&ldl=de

Further information on data protection with Google Pay can be found at the following internet address:

https://payments.google.com/payments/apis-secure/get_legal_document?Ido=0&ldt=privacynotice&ldl=de

​

- Klarna

One or more online payment methods of the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

 

When selecting a payment method of the provider where you make an advance payment (such as credit card payment), your payment data communicated during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

 

When selecting a payment method where the provider makes an advance payment (such as purchase on account, installment purchase, or direct debit), you will also be requested during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, data on an alternative method of payment).

 

In order to safeguard our legitimate interest in determining the creditworthiness of our customers, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. Based on the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment option selected by you can be granted with regard to payment and/or default risks.

 

For the decision within the scope of the application review, identity and credit information from the following credit reporting agencies may be included in addition to the provider's internal criteria in accordance with Art. 6 Para. 1 lit. f GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

 

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, are included in the calculation of the score values.

 

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may, if applicable, still be entitled to process your personal data if this is necessary for contractual payment processing.

​

- Paymorrow

One or more online payment methods of the following provider are available on this website: InterCard AG, Alstertor 9, 20095 Hamburg, Germany

 

When selecting a payment method of the provider where you make an advance payment (such as credit card payment), your payment data communicated during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

 

When selecting a payment method where the provider makes an advance payment (such as purchase on account, installment purchase, or direct debit), you will also be requested during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, data on an alternative method of payment).

 

In order to safeguard our legitimate interest in determining the creditworthiness of our customers, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. Based on the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment option selected by you can be granted with regard to payment and/or default risks.

 

For the decision within the scope of the application review, identity and credit information from the following credit reporting agencies may be included in addition to the provider's internal criteria in accordance with Art. 6 Para. 1 lit. f GDPR:

CRIF GmbH, Leopoldstraße 244, 80807 Munich, Germany

Tel.: +49 (0) 40 - 89 80 3 - 0, Fax: -777

Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, Germany

Tel.: +49 (0)2131-109501, Fax: -557

infoscore Consumer Data GmbH, Abteilung Datenschutz, Rheinstraße 99, D-76532 Baden-Baden, Germany

Fax: +49 (7221) 5040-3201

"Real" Inform GmbH, Normannenweg 32, 20537 Hamburg, Germany

Fax: +49 40 23 88 14-59

 

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, are included in the calculation of the score values.

 

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may, if applicable, still be entitled to process your personal data if this is necessary for contractual payment processing.

 

- PayPal

One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

 

When selecting a payment method of the provider where you make an advance payment, your payment data communicated during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

 

When selecting a payment method where we make an advance payment, you will also be requested during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, data on an alternative method of payment).

 

In order to safeguard our legitimate interest in determining your creditworthiness in such cases, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. Based on the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment option selected by you can be granted with regard to payment and/or default risks.

 

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, are included in the calculation of the score values.

 

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may, if applicable, still be entitled to process your personal data if this is necessary for contractual payment processing.

 

- PayPal Checkout

 

This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.

 

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "Pay Later" via PayPal, we pass on your payment data within the scope of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent necessary for payment processing.

 

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – "Pay Later" via PayPal. For this purpose, your payment data may be passed on to credit reporting agencies in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, are included in the calculation of the score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may, if applicable, still be entitled to process your personal data if this is necessary for contractual payment processing.

 

If the PayPal payment method "Purchase on Account" is available and selected, your payment data will first be transmitted to PayPal to prepare the payment, whereupon PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to carry out the payment. The legal basis is in each case Art. 6 Para. 1 lit. b GDPR. In this case, Ratepay carries out an identity and credit check in its own name to determine creditworthiness in accordance with the principle already mentioned above and passes on your payment data to credit reporting agencies in accordance with Art. 6 Para. 1 lit. f GDPR due to the legitimate interest in determining creditworthiness. A list of the credit reporting agencies that Ratepay can fall back on can be found here: https://www.ratepay.com/legal-payment-creditagencies/

 

When using the payment method of a local third-party provider, your payment data will first be passed on to PayPal in accordance with Art. 6 Para. 1 lit. b GDPR to prepare the payment. Depending on your selection of an available local payment method, PayPal then transmits your payment data to the corresponding provider in accordance with Art. 6 Para. 1 lit. b GDPR to carry out the payment:

 

-Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)

- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)

- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)

- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)

- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)

- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)

- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

Further information under data protection law can be found in PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full

 

- Wix Payments

Online payment methods of the provider Wix Payments are available on this website. The operator of these services for users within the European Economic Area is Wix.com Luxembourg S.à r.l., 5, rue Guillaume Kroll, L-1882 Luxembourg (hereinafter "Wix Payments").

 

When selecting a payment method offered via Wix Payments, your payment data communicated during the ordering process (including name, address, bank and payment card information, currency, transaction number, and information about the content of your order) will be passed on to this provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transmission takes place exclusively for the purpose of payment processing and only to the extent that it is absolutely necessary for this. Further information on data protection with Wix Payments can be found in the privacy policy of Wix at: wix.com

 

- Klarna (Sofortüberweisung)

When selecting the payment method Sofortüberweisung, payment processing takes place via the service provider Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden (hereinafter "Klarna").

 

In order to be able to use this payment method, you transmit your payment data to Klarna within the scope of the ordering process. Your data is passed on in accordance with Art. 6 Para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary for carrying out the Sofortüberweisung via your online banking account. Klarna processes your data under its own responsibility under data protection law. Further information on data processing can be found in Klarna's privacy policy at: klarna.com

 

- SumUp

One or more online payment methods of the following provider are available on this website: SumUp Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin 2, Ireland D02 K580

 

When selecting a payment method of the provider where you make an advance payment (such as credit card payment), your payment data communicated during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

 

7. Rights of the Data Subject

 

7.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which I inform you below:

 

- Right of access pursuant to Art. 15 GDPR: In particular, you have a right of access to your personal data processed by me, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if they were not collected from you by me, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing affecting you, as well as your right to be informed of the guarantees exist pursuant to Art. 46 GDPR when your data is forwarded to third countries;

 

- Right to rectification pursuant to Art. 16 GDPR: You have a right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by me;

 

- Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not exist, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

 

- Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data contested by you is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data for the establishment, exercise, or defense of legal claims after I no longer need this data after the purpose has been achieved, or if you have objected for reasons of your particular situation, as long as it is not yet certain whether my legitimate grounds override yours;

 

- Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to all recipients to whom the personal data concerning you have been disclosed, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

 

- Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data, which you have provided to me, in a structured, commonly used, and machine-readable format or to request its transmission to another controller, insofar as this is technically feasible;

 

- Right to withdraw consent granted pursuant to Art. 7 Para. 3 GDPR: You have the right to withdraw consent once given for the processing of data at any time with effect for the future. In the event of withdrawal, I will erase the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent up to the withdrawal;

 

- Right to lodge a complaint pursuant to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

 

7.2 Right to Object

 

If we process your personal data within the scope of a balancing of interests on the basis of our overriding legitimate interest, you have the right at any time, for reasons arising from your particular situation, to object to this processing with effect for the future. If you exercise your right to object, we will terminate the processing of the data concerned. However, we reserve the right to further processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

 

If your personal data are processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data relating to you for the purpose of such marketing. You can exercise the objection as described above.

 

If you exercise your right to object, we will terminate the processing of the data concerned for direct marketing purposes.

 

8. Duration of Storage of Personal Data

 

The duration of the storage of personal data is determined based on the respective statutory retention period (e.g., commercial and tax law retention periods). After the expiry of the period, the corresponding data are routinely deleted, provided they are no longer required for contract fulfillment or contract initiation and/or there is no longer a legitimate interest on our part in further storage.

 

Information on Data Processing in Connection with Google Analytics

​

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").

 

Google Analytics uses technologies such as cookies or device IDs that enable an analysis of your use of the website. The IP address transmitted by your browser within the scope of Google Analytics is truncated by Google by default and automatically within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Direct personal reference is thereby excluded. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted within the scope of Google Analytics is not combined with other data from Google.

 

On behalf of the website operator, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services associated with website use and internet use to the website operator. The legal basis for this data processing is your express consent pursuant to Art. 6 Para. 1 lit. a GDPR, which you can grant when calling up the website via the cookie consent banner.

 

In the event that personal data are transferred to the USA, the parent company Google LLC holds a certification under the EU-US Data Privacy Framework. This guarantees an adequate level of data protection for the processing. The data will be deleted automatically after the purpose of processing has been fulfilled; the maximum storage period for event data is limited in the system settings to the shortest possible duration.

 

You can withdraw your consent at any time with effect for the future by adjusting the cookie settings via the banner on this website. In addition, the collection and storage of data can be prevented by a browser plugin, which can be downloaded and installed under the following link: google.com.

 

Further information on data use by Google as well as setting and objection options can be found in Google's privacy policy at google.com.

​

reCAPTCHA

 

To protect your inquiries via internet forms, we use the reCAPTCHA service of the company Google LLC (Google). The query serves to distinguish whether the input is made by a human being or abusively by automated, mechanical processing. The query includes the sending of the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and further used there. However, your IP address is truncated by Google beforehand within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser within the scope of reCAPTCHA will not be combined with other data from Google. The deviating data protection regulations of the company Google apply to this data. Further information on Google's privacy policies can be found at: https://policies.google.com/privacy?hl=de