This data protection information will inform you about the kind, extent, and purpose of data processing of personal data (hereinafter abbreviated as “data“) within our online offer and all websites, features, and contents as well as external online presences such as, for example, our social media profile (hereinafter summed up as “online offer“) connected to it. Regarding the terms in use, such as “personal data“ or their “processing“, we refer to the definitions given under Art. 4 of the General Data Protection Regulation (GDPR).
We process data of the data categories inventory data (e.g. names, addresses), contact data (e.g. e-mail, phone numbers), content data obtained from communicating with users (e.g. text input, photographies), contract data (e.g. subject matters of the contract such as purchased products and/or services, contract terms), payment data (e.g. PayPal payment addresses, Amazon payment information etc., payment histories), usage data (e.g. accessing of our data and the times), as well as communication data (such as devices/client information, IP addresses).
Generally no special categories of data are processed, unless these are brought into processing by the users, e.g. by filling in online forms.
Customers, interested persons, suppliers, and in general visitors and users of our online offer are affected persons. Hereinafter we will summarizingly refer to affected persons also as “users“.
Providing the online offer, its contents and features, performing contractual services, service and customer care, answering contact requests and communicating with our users, marketing and advertising our products and services, as well as security measures.
In accordance with Art. 13 GDPR, we notify you about the legal bases of our data processing. Should the legal basis not be stated in the data protection information, the following applies: Legal basis for obtaining consents is Art. 6 para. 1 lit. a and Art. 7 GDPR, legal basis for processing in order to perform our services and for performing contractual measures as well as for answering requests is Art. 6 para. 1 lit. b GDPR, legal basis for processing in order to meet our legal obligations is Art. 6 para. 1 lit. c GDPR, and legal basis for processing in order to uphold our justified interests is Art. 6 para. 1 lit. f GDPR. In the event that vital interests of the affected person or of another natural person call for personal data to be processed, Art. 6 para. 1 lit. d GDPR serves as legal basis.
We kindly ask you to inform yourself about the content of our data protection declaration on a regular basis. We will adjust the data protection information as soon as changes to the data processing performed by us makes it necessary. We will inform you as soon as a cooperation is required from your part (e.g. giving consent) or any other individual notification becomes necessary due to the changes.
3.1. In accordance with Art. 32 GDPR, bearing in mind the state of the art, implementation costs, and kind, scope, circumstances, and purposes of processing as well as the different probabilities of occurrence and severity of risk to the rights and freedoms of natural persons, we take apt technical and organizational measures to provide a level of security appropriate to the risk; Among these measures are in particular securing the confidentiality, integrity, and availability of data by monitoring the physical access to the data as well as their retrieval, input, transfer, security of accessibility and disconnection. Furthermore, we put procedures in place to secure the holding up of rights of affected persons, deletion of data, and reaction to hazard for the data. Additionally, we take the protection of personal data into account already during the development stage, resp. when choosing the hardware, software, and procedures, following the principle of data protection by technology engineering and by data protection friendly preadjustments (Art. 25 GDPR).
3.2. Most notable part of the security measures is the encrypted data transfer between your browser and our server.