Privacy

Table of contents
1. objective and responsible body
2. basic information on data processing
3. processing of personal data
4. collection of access data
5. cookies & range measurement
6. Google Analytics
7. Facebook Social Plugins
8. Jetpack (WordPress Stats)
9. Newsletter
10. integration of services and contents of third parties
11. Using PayPal as payment method
12. Use directEbanking with Klarna / Sofortüberweisung as payment method
13. registration function
14. contact oppurtunity
15. rights of users and deletion
16. Changes to the Privacy Policy

1. objective and responsible body

This data protection declaration explains the type, scope and purpose of the processing (including collection, processing and use as well as obtaining consent) of personal data within our online offer and the linked websites, functions and contents (hereinafter collectively referred to as “online offer” or “website”). The data protection declaration is valid regardless of the domains, systems, platforms and devices (e. g. desktop or mobile) on which the online offer is executed.

The provider of the online offer and the party responsible for data protection is[Nerbel Satu, Mario Böhm GbR, Lindenweg 20, 92265 Edelsfeld, Germany] (hereinafter referred to as “provider”,”we” or “us”). For the contact possibilities we refer to our imprint

The term “user” covers all customers and visitors of our online offer. The terms used, such as “user” are to be understood as gender-neutral.

2. basic information on data processing

We process personal data of users only in compliance with the relevant data protection regulations in accordance with the requirements of data economy and data avoidance. This means that the user’s data will only be processed if there is a legal permission, in particular if the data is required for the provision of our contractual services and online services, or if it is required by law, or if the user’s consent is given.

We take organisational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are complied with and to protect the data processed by us against accidental or deliberate manipulation, loss, destruction or access by unauthorized persons.

If, within the scope of this data protection declaration, content, tools or other means are used by other providers (hereinafter collectively referred to as “third party providers”) and their stated registered office is abroad, it can be assumed that a data transfer to the countries in which the third party providers have their registered office takes place. The transfer of data to third countries is carried out either on the basis of a legal permission, user consent or specific contractual clauses that guarantee the data’s security as required by law.

3. processing of personal data

In addition to the use expressly stated in this data protection declaration, personal data will be processed for the following purposes on the basis of legal permissions or consents of the users:
Provision, execution, maintenance, optimization and safeguarding of our services, services and users;
Ensure effective customer service and technical support.

We will only transfer the user’s data to third parties if this is necessary for billing purposes (e. g. to a payment service provider) or for other purposes if this is necessary to fulfil our contractual obligations towards the users (e. g. address notification to suppliers).

When contacting us (via contact form or email), the user’s details are stored for the purpose of processing the enquiry and in the event that follow-up questions arise.
Personal data will be deleted, provided that they have fulfilled their intended purpose and do not conflict with the deletion of any storage obligations.

4. collection of access data

We collect data about each access to the server on which this service is located (so-called server logfiles). Access data include the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.

We use the log data without allocation to the person of the user or other profiling according to the legal regulations only for statistical evaluations for the purpose of operation, security and optimization of our online offer. However, we reserve the right to check the protocol data at a later date if there is a justified suspicion of illegal use based on concrete indications.

5. cookies & range measurement

Cookies are information transmitted by our web server or third party web servers to the users’ web browsers and stored there for later retrieval. The use of cookies within the scope of anonymous range measurement is communicated to users within the scope of this data protection declaration.

The viewing of this online offer is also possible with the exclusion of cookies. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies can be deleted in the browser’s system settings. The exclusion of cookies can lead to functional limitations of this online offer.

It is possible to manage many companies’ online ad cookies via the US site http://www.aboutads.info/choices or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/

6. Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the users is usually transmitted to a Google server in the USA and stored there.

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services related to the use of this online offer and internet use. The processed data can be used to create pseudonymous user profiles of the users.

We only use Google Analytics with activated IP anonymization. This means that Google will reduce the IP address of users within Member States of the European Union or in other contracting states of the European Economic Area Agreement. Only in exceptional cases the full IP address is transferred to a Google server in the USA and shortened there.

The IP address transmitted by the user’s browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; in addition, users can prevent Google from collecting the data generated by the cookie and relating to their use of the online offer, as well as preventing Google from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

For more information on Google’s use of data for advertising purposes, settings and objections, please visit Google’s websites: https://www.google.com/intl/de/policies/privacy/partners (“Google’s use of data when you use websites or apps from our partners”), http://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”), http://www.google.de/settings/ads (“Manage information that Google uses to show you advertising”) and http://www.google.com/ads/preferences (“Determine which advertising Google shows you”).

7. Facebook Social Plugins

Our online offer uses social plugins (“Plugins”) of the social network facebook. com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins are identifiable by one of the Facebook logos (white “f” on blue or black tile, the words “Like”,”Like” or a “Thumb up” sign) or are labeled with the addition “Facebook Social Plugin”. The list and the appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

When a user accesses a feature of this online service that contains such a plugin, his device establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted by Facebook directly to the user’s device and is integrated into the online offer by the user. User profiles can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and therefore informs the users according to our knowledge.

By integrating the plugins, Facebook receives the information that a user has called up the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, for example by clicking the Like button or by making a comment, the corresponding information is sent directly from your device to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook can find out his IP address and save it. According to Facebook, only one anonymous IP address is stored in Germany.

The purpose and scope of data collection and the further processing and use of the data by Facebook, as well as the rights and options for privacy protection, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect information about him or her through this online offer and associate it with his or her Facebook membership information, he or she must log out of Facebook and delete his or her cookies before using our online offer. Further settings and inconsistencies regarding the use of data for advertising purposes can be made within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US-American site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i. e. they are applied to all devices, such as desktop computers or mobile devices.

8. Jetpack (WordPress Stats)

We use the plugin Jetpack (here the sub-function “WordPress Stats”), which integrates a tool for the statistical evaluation of visitor accesses and which is supported by Automattic, Inc. 132 Hawthorne Street San Francisco, CA 94107, USA. Jetpack uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.

The information generated by the cookie about your use of this online offer is stored on a server in the USA. User profiles can be created from the processed data, whereby these are only used for analysis and not for advertising purposes. For more information, please refer to Automattic’s privacy policy: https://automattic.com/privacy/ and Jetpack cookie notices: https://jetpack.com/support/cookies/.

9. Newsletter

With the following information we would like to inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures and your rights of objection. By subscribing to our newsletter, you agree to receive and follow the procedures described above.

Contents of the newsletter: We send out newsletters, e-mails and other electronic notifications with advertising information (hereinafter referred to as “newsletters”) only with the consent of the recipients or a legal permission. Insofar as the contents of a newsletter registration are specifically described in detail, they are authoritative for the user’s consent. In addition, our newsletters contain the following information:[INITIAL REPRESENTATION OF THE CONTENT OF THE NEWSLETTER, e. g.”Our products, offers, promotions and our company”].

Double-Opt-In and logging: The registration for our newsletter is done in a so-called Double-Opt-In-Procedure. I. e. After registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with foreign e-mail addresses. The subscriptions to the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the logon and confirmation time as well as the IP address. The changes to your data stored with the shipping service provider are also logged.

Mailing service provider: The newsletter is sent by “Mailchimp” (hereinafter referred to as “Mailing Service Provider”). You can view the data protection regulations of the shipping company here: https://mailchimp.com/legal/privacy/

The e-mail addresses of our newsletter recipients, as well as their further data described in the context of this information, are stored on the servers of the shipping service provider. The shipping service provider uses this information to send and evaluate the newsletters on our behalf. Furthermore, the shipping service provider can use this data to optimize or improve its own services, e. g. for technical optimization of the dispatch and presentation of newsletters or for economic purposes to determine from which countries the recipients come. However, the service provider does not use the data of our newsletter recipients to write to us or pass them on to third parties.

Registration data: To subscribe to the newsletter, simply enter your e-mail address.

Statistical survey and analysis – The newsletters contain a so-called “web-beacon”, i. e. a pixel-sized file, which is called up by the server of the shipping service provider when the newsletter is opened. In the course of this retrieval, technical information such as browser and system information, as well as your IP address and time of retrieval are collected. This information is used to improve the technical performance of the services based on the technical data or target groups and their reading behaviour, on the basis of the retrieval locations (which can be determined by means of the IP address) or access times. Statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor that of the shipping company to monitor individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.

Cancellation/Revocation – You can cancel the receipt of our newsletter at any time, i. e. revoke your consent. At the same time, your consents to its dispatch by the shipping service provider and the statistical analyses will expire. A separate revocation of the shipment by the shipping service provider or the statistical evaluation is unfortunately not possible. A link to unsubscribe from the newsletter can be found at the end of each newsletter.

10. Integration of third-party services and content

It is possible that contents or services of third party providers, such as city maps or fonts from other websites, may be included within our online offer. The inclusion of third party content always requires that the third party providers perceive the IP address of the users, as they would not be able to send the content to the users’ browser without the IP address. The IP address is therefore required for the presentation of this content. Furthermore, the providers of third-party content can set their own cookies and process the user’s data for their own purposes. User profiles can be created from the processed data. We will use this content as sparingly and in a manner that avoids data loss as possible and select reliable third party providers for data security.

The following presentation provides an overview of third-party providers as well as their contents, together with links to their data protection declarations, which contain further information on the processing of data and, in some cases, on the processing of personal data. already mentioned here, contain possibilities for objection (so-called opt-out):

External fonts from Google, Inc., https://www.google.com/fonts (“Google Fonts”). Google fonts are integrated by a Google server call (usually in the USA). Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

Maps of the service “Google Maps” of the third party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, provided. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

Videos from the “YouTube” platform of third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

11. Using PayPal as payment method

If you decide to pay with PayPal as part of your order process, your contact details will be transferred to PayPal as part of the order process. PayPal is an offer from PayPal (Europe) S. à. r. l. & Cie. S. C. A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal acts as an online payment service provider and a trustee, offering buyer protection services.

The personal data transmitted to PayPal is usually first name, surname, address, telephone number, IP address, e-mail address, or other data necessary for the processing of an order, as well as data related to the order, such as the number of items, article number, invoice amount and taxes as a percentage, billing information, etc.

This transfer is necessary for the processing of your order with the payment method chosen by you, in particular to confirm your identity, for the administration of your payment and the customer relationship.

Please note, however, that PayPal may also disclose personally identifiable information to service providers, subcontractors or other affiliated companies as long as this is necessary to fulfill the contractual obligations arising from your order or if the personal information is to be processed on behalf of PayPal.

Depending on the payment method selected via PayPal, e. g. invoice or direct debit, the personal data transmitted to PayPal will be transmitted by PayPal to credit agencies. This transmission serves to verify the identity and creditworthiness of your order. Please refer to PayPal’s privacy statement at https://www.paypal.com/de/webapps/mpp/ua/privacy-full for information on which credit agencies are involved and which data is generally collected, processed, stored and passed on by PayPal.

12. Use of DIRECTebanking as payment method

If you choose to pay with the online payment service Sofortüberweisung as part of your order process, your contact details will be transferred to Sofortüberweisung as part of the order process. Sofortüberweisung is an offer of SOFORT GmbH, Theresienhöhe 12,80339 Munich, Germany. Sofortüberweisung assumes the function of an online payment service provider that enables cashless payment of products and services on the Internet.

The personal data transmitted to Sofortüberweisung is usually first name, surname, address, telephone number, IP address, e-mail address, or other data necessary for the processing of an order, as well as data related to the order, such as the number of items, article number, invoice amount and taxes in percent, invoice information, etc.

This transfer is necessary for the processing of your order with the payment method chosen by you, in particular to confirm your identity, for the administration of your payment and the customer relationship.

Please note, however, that personal data may also be passed on to service providers, subcontractors or other associated companies by means of an immediate transfer, insofar as this is necessary for the fulfilment of the contractual obligations arising from your order or if the personal data are to be processed on behalf of you.

Under certain circumstances, the personal data transmitted to DIRECTebanking may be transferred from DIRECTebanking to credit agencies. This transmission serves to verify the identity and creditworthiness of your order.

You can find out which data protection principles Sofortüberweisung is based on when processing your data in the data protection instructions that are displayed to you during the payment process of Sofortüberweisung.

If you have any further questions about the use of your personal data, you can contact us by e-mail (datenschutz@sofort.com) or in writing (SOFORT GmbH, Datenschutz, Theresienhöhe 12,80339 München).

13. Registration function

We offer you the opportunity to register on our website. The data entered in the course of this registration, which can be seen from the input screen of the registration form [E-Mail Adress]
are collected and stored exclusively for the use of our offer. When you register on our site, we will also store your IP address and the date and time of your registration. This serves in the case that a third party misuses your data and registers with this data on our site without your knowledge, as a security measure on our part. The data will not be passed on to third parties. A comparison of the data collected in this way with data that may possibly be collected by other components of our site does not take place either.

14. contact opportunity

We offer you the possibility to contact us via e-mail and/or a contact form on our website. In this case, the information provided by the user will be stored for the purpose of processing his contact. The data will not be passed on to third parties. A comparison of the data collected in this way with data that may possibly be collected by other components of our site does not take place either.

15. rights of users and deletion of data

Users have the right to request free information on the personal data that we have stored about them.
In addition, users have the right to correct incorrect data, to revoke consent, to block or delete their personal data and to lodge a complaint with the competent supervisory authority in the event of the acceptance of unlawful data processing.

The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations.

16. Changes to the Privacy Policy

We reserve the right to amend the data protection declaration in order to adapt it to changed legal situations, or in the event of changes to the service and data processing. This only applies, however, with regard to declarations on data processing. Insofar as user consents are required or if the data protection declaration contains provisions of the contractual relationship with the users, the changes shall only be made with the user’s consent.
Users are asked to inform themselves regularly about the content of the data protection declaration.

Last update: 24.11.2017