Germany Time 09:30

VDWS International

Data privacy statement

General remarks

Compliance with data protection laws is not only a legal obligation for the Verband Deutscher Wassersport Schulen e.V. and VDWS-Service GmbH for windsurfing school equipment and consultancy, but also an important factor of confidence. With the following data protection provisions, we would therefore like to inform you transparently about the type, scope and purpose of the personal data collected from you and processed within this website, as well as about your respective rights.

Responsibility for data processing

The Verband Deutscher Wassersport Schulen e.V. (Association of German Watersport Schools) and VDWS-Service GmbH für Windsurfingschulausrüstung und -beratung (VDWS-Service GmbH for windsurfing school equipment and consultancy), Am Achalaich 24, DE-82362 Weilheim (hereinafter: "We"), as operators of the website www.vdws.de, are the responsible parties according to the German law. Art. 4 No. 7 of the EU General Data Protection Regulation (GDPR). If you have any questions, please contact info@--no-spam--vdws.de.

Data subject rights

Your rights as data subject

As data subject, you have the following rights regarding your personal data:

  • A right to information on, among other things, the categories of data processed, the processing purposes, the storage period and any recipients, in accordance with Art. 15 GDPR and § 34 BDSG (German privacy law).
  • A right to correction or deletion of incorrect or incomplete data, in accordance with Art. 16 and 17 GDPR and § 35 BDSG.
  • Under the conditions of Article 18 of the GDPR or § 35 (1) sentence 2 of the BDSG, a right to restriction of processing.
  • A right to object to the processing pursuant to Art. 21, section 1 GDPR, insofar as the data processing was carried out on the basis of a legitimate interest.
  • A right to withdraw a given consent with effect for the future pursuant to Art. 7, section 3 GDPR.
  • A right to data portability in a common format in accordance with Art. 20 GDPR.
  • In accordance with Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you. This also includes profiling within the meaning of Art. 4 No. 4 GDPR.
  • You also have the right to lodge a complaint about the processing of your personal data by us with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, in accordance with Article 77 of the GDPR.

Proceedings

If you claim your rights under the GDPR and the BDSG against us, we will process the data you provide to us in the process in order to fulfil your claim.

Subsequently, we store the data transmitted to us by you and the data transmitted by us to you in return for the purpose of documentation until the expiry of the statutory limitation period (3 years).

The legal basis for the processing and storage of the data is Art. 6, section 1, sentence 1, letter f) GDPR (Legitimate Interest in data Processing). The legitimate interest arises from our obligation to comply with your request and the need to be able to exonerate ourselves in possible fine proceedings by proving that we have properly complied with your request.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details provided in the imprint. However, we would like to point out that the processing of your data to prove compliance with the data subject rights is mandatory within the meaning of Article 21, section 1 of the GDPR, as no other means of proof do exist or are not equally suitable.

Data protection measures

We secure our website and other systems - and thus also your data - by technical and organisational measures against loss, destruction, access, modification or distribution by unauthorised persons. In particular, your personal data is transmitted encrypted through the internet. For this we use the TLS (Transport Layer Security) coding system.

However, the transmission of information over the Internet is never completely secure, and we cannot therefore guarantee a 100% security of any data transmitted from our website.

Data processing modalities

Sources and categories of personal data

We process your personal data insofar it is necessary for the establishment, content or amendment of a contractual relationship between us and you (inventory data). Inventory data can be in particular: Name, title, contact details (postal address, telephone, e-mail address), date of birth, etc.

Furthermore, we process your usage data. Usage data is data that is generated by your behaviour when using our web offer and our services, in particular your IP address, the beginning and end of your visit to our website and information about what content you have accessed on our website

We collect the aforementioned data either directly from you (e.g. by visiting the website) or, to the extent permitted by data protection laws, from third parties or from publicly accessible sources (e.g. trade and association registers, press, media, Internet).

Data transfer to third countries outside the EU

All information we receive from you or about you is generally processed on servers within the European Union. Your data will only be transferred to or processed in third countries without your express consent if this is provided for or permitted by law, an appropriate level of data protection is ensured in the third country or contractual obligations exist through so-called standard data protection clauses of the EU.

Please note that the USA is a so-called unsafe third country. There is a risk when personal data is transferred to the USA that US security authorities can access this data under the "Cloud Act". EU citizens have no effective legal recourse against these measures in the US or the EU.

Transfer of data, order processing

We never disclose your personal data to third parties without authorisation. However, we may disclose your data to third parties in particular if you have consented to the disclosure of data, if the disclosure is necessary to comply with our legal obligations or if we are entitled or obliged to disclose data due to legal provisions or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, the prevention of danger or the enforcement of intellectual property rights.

We may pass on the personal data collected from you to third parties, in particular as part of the contract processing, for example to the transport company commissioned with the delivery or the service used for payment, insofar as this is necessary for the fulfilment of the contract. The individual service providers and further information can be found below in the section "Third-party services".

We may also transfer your data to external service providers who process data on our behalf and according to our instructions (processors) in order to simplify or relieve our own data processing. Each processor shall be bound by a contract in accordance with Article 28 GDPR. This means in particular that the processor must provide sufficient guarantees that appropriate technical and organisational measures are implemented by them in such a way that the processing is carried out in accordance with the requirements of the GDPR and the protection of your rights as a data subject is ensured. Despite the commissioning of processors, we remain the responsible party for the processing of your personal data within the meaning of the data protection laws.

Purpose of the data processing

We only use the data for the purpose for which the data was collected from you. We may further process the data for another purpose, unless this other purpose is incompatible with the original purpose (Art. 5, section 1, c) GDPR).

Storage period

Unless otherwise specified in detail, we only store data collected from you for as long as is necessary for the respective purpose, unless there are legal retention obligations that prevent deletion, e.g. from commercial law or tax law.

Individual processing activities

In the following, we would like to show you as transparently as possible which data we process from you on which occasion, on which basis and for which purpose.

Server log files

Every time a website is called up and every time data is retrieved from a server, general information is automatically transmitted to the server providing the data. This data transmission is automatic and is a fundamental part of communication between devices on the internet.

The data transmitted by default includes, but is not limited to, the following information: Your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referer), date and time of the request (so-called timestamp). In addition, the http status and the amount of data transferred are recorded as part of this request.

This information is logged by the server, stored in a table and saved there for a short time (so-called server log files). By analysing these log files, we are able to detect and subsequently eliminate website errors, determine the website's load at certain times and make adjustments or improvements based on this, as well as ensure the server's security by being able to track from which IP address attacks were carried out on our server.

Your IP address is only stored for the time of your use of the website and is then immediately deleted or made partially unrecognisable by shortening. The remaining data is stored for a limited period of time (usually 7 days).

The legal basis for the use of the data is Art. 6, section 1, sentence 1, letter f) GDPR (Legitimate Interest in Data Processing). Legitimate interest arises from the need for the operation and maintenance of our website, as we have explained above. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details provided in the imprint. However, we would like to point out in advance that the processing of your data in server log files is mandatory in the sense of Art. 21, section 1 GDPR, as otherwise the website cannot be operated at all.

Cookies and web storage

We use so-called "cookies" or the "web storage" of your browser to improve the user-friendliness of our website.

Cookies

About cookies

In very simplified terms, a cookie is a small text file that stores data concerning visited websites. Cookies can be used in many different ways. For example, you can store a kind of "user profile", i.e. things like your preferred language and other page settings that are required by our website to provide you with certain services. The cookie file is stored on your end device and can also help to recognise you when you return to our website.

Cookies may also allow us to obtain information about your preferred activities on our website and thus tailor our website to your individual interests or even increase the speed of navigation on our website.

How to avoid cookies

You can delete the cookies manually at any time in the security settings of your browser.

You can also prevent the storage of cookies from the outset by setting your browser accordingly. Please note, however, that you may then not be able to use all the functions of our website in full or that there may be errors in the presentation and use of the website.

Third-party cookies

It is possible that third-party providers with the help of which we design and operate our site, in particular through so-called plugins (see below in the section "Third-party services"), independently store their own cookies on your end device. If you only wish to accept our own cookies, but no cookies from these third parties, you can prevent the storage of these cookies by selecting the appropriate browser setting "Block third-party cookies".

Which cookies are used

In detail, our website sets the following cookies:

Name Explanation Origin (domain) Validity/
Storage period
Third-party access
_fbp Used by Facebook to display a range of advertising products, for example real-time bids from third-party advertisers. www.vdws.de 3 months Yes, Meta Platforms Inc.
omCookieConsent This cookie identifies whether you have already been shown the consent notice and whether you have accepted or rejected it in full, or which specific settings you have selected. www.vdws.de 1 Jahr No
cc_consent_youtube This cookie saves your consent to displaying YouTube videos. www.vdws.de 3 months No
fe_typo_user This cookie is used to retain a user's session settings when they return. For this purpose, the server creates a cookie with a unique ID and transmits this to the user's terminal device. The end device then sends the cookie and the ID back to the server in the event of repeated requests, so that the user finds his settings in the state in which they left them. The cookie can also be used to secure the website against so-called bots. The cookie loses its validity at the end of the browser session. Third-parties have no access to the information stored in this cookie. www.vdws.de until end of session No
cc_consent_jivochat Saves the activation of the JivoChat messenger. www.vdws.de 3 months No
1P_JAR, AEC, APISID, CONSENT, DV, HSID, NID, OTZ, SAPISID, SEARCH_SAMESITE, SID, SIDCC, SOCS, SSID, __Secure-1PAPISID, __Secure-1PSID, __Secure-3PAPISID, __Secure-3PSID, __Secure-3PSIDCC

These cookies are used by the YouTube video player that is embedded on the VDWS website in form of iFrames. They will only be used if you are logged in with your Google Account at the time the video is played in the browser.

 

 

www.youtube-nocookie.com / www.google.com Maximum 2 years Yes, Google Ireland Limited, Google LLC

 

Legal basis

The legal basis for the use of cookies absolutely necessary for the function of the website (e.g. shopping cart cookie, session cookie) is Art. 6, section 1, sentence 1, letter f) GDPR (legitimate interest in data processing). Legitimate interest arises from our need to be able to offer you a functioning website. Cookies are necessary to this end because they are an integral part of current internet technology and without cookies many functions of current websites would not be available. We therefore need cookies to provide you with the website in response to your request.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details provided in the imprint.

We would like to point out, however, that the processing of your data in certain cookies is mandatory within the meaning of Art. 21, section 1 GDPR, since otherwise the website cannot be operated at all and we do not have the technical possibility to prevent the setting of cookies on certain individual end devices. However, you may be able to do this yourself in your browser. For more information, please consult your browser instructions.

The legal basis for the use of cookies not absolutely necessary for the function of the website is Art. 6, section 1, sentence 1, letter a) GDPR (consent of the person concerned). When you first access the website, we ask you for your consent to the use of non-essential cookies via a pop-up message. You can withdraw your consent at any time with effect for the future by viewing the cookie banner again and changing the settings you have made.

Web storage

About Web storage

Web storage is a technique for web applications to store data in a web browser. In simple words, web storage can be described as a further development of cookies, but it differs from them in some respects.

Unlike cookies, which can be accessed by both server and client, web storage is completely controlled by the client. This means that data is not transferred to the server every time the website is viewed. Access is exclusively local via scripts on the website. In concrete terms, this means that third-party access to the information stored on the website is excluded. Only you and we can access the locally stored data.

Legal basis

The legal basis for the use of web storage, which is necessary for the function of the website is Art. 6, section 1, sentence 1, letter f) GDPR (legitimate interest in data processing). Legitimate interest arises from our need to be able to offer you a functioning website. Web storage is necessary to this end because it is an integral part of current internet technology and without cookies many functions of current websites would not be available. We therefore need the web storage to be able to provide you with the website in response to your request.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details provided in the imprint.

We would like to point out, however, that the processing of your data in the web storage is mandatory within the meaning of Art. 21, section 1 GDPR, since otherwise the website cannot be operated at all and we do not have the technical possibility to prevent the use on certain individual end devices. However, you may be able to do this yourself in your browser. For more information, please consult your browser instructions.

The legal basis for the use of the web storage not absolutely necessary for the function of the website is Art. 6, section 1, sentence 1, letter a) GDPR (consent of the person concerned). When you first access the website, we ask you for your consent to the use via a pop-up message. You can withdraw your consent at any time with effect for the future by deleting all cookies in your browser. More information about how this works in your browser is available in the browser instructions.

Membership

Our website offers possibilities to become a member of our association via a contact form.

The legal basis for the collection of those data (name, date of birth, address, registration data) necessary for the processing of the registration is Art. 6, section 1, sentence 1, letter b) GDPR (data processing for the fulfilling of a contract). The provision and transmission of your data is required, otherwise your registration cannot be made.

The legal basis for the data you voluntarily provide in the application process is Art. 6, section 1, sentence 1, letter a) GDPR (consent of the data subject). You can withdraw your consent at any time with effect for the future. Please use the contact details provided in the imprint.

Further information on membership can be found in our statutes.

We process the data you send us exclusively until the purpose of your contact has been achieved, unless there are legal storage periods to the contrary.

Registration for specific events

Our website offers opportunities to register directly online for courses and seminars. For the conclusion of the contract and the processing of your registration, it is mandatory that you provide certain data. This information, which is essential for processing, is marked specifically, all other information can be provided voluntarily. We process the data you provide during the registration process only for the purpose of processing your application. Failure to provide the required data will result in your application not being processed.

Furthermore, it may be necessary to pass on your data to third parties in order to process the application, e.g. banks/payment service providers and the respective organisers of the trainings, courses or seminars. For more information, please see "Data Sharing" above and the "Third-party services" section below.

With regard to the communication of particularly sensitive personal data within the meaning of Art. 9 of the GDPR (e.g. nationality), we would like to point out that there are risks associated with the transmission of such data via the Internet, in particular through the interception/spying on of the data. If you are unsure about this, we advise you to contact us by post or telephone.

The legal basis for the use of the data you provide by contacting us is Art. 6, section 1, sentence 1, letter b) GDPR (data processing for the fulfilling of a contract). The provision and transmission of your data is required, otherwise your registration cannot be processed.

The legal basis for the data you voluntarily provide in the application process is Art. 6, section 1, sentence 1, letter a) GDPR (consent of the data subject). You can withdraw your consent at any time with effect for the future. Please use the contact details provided in the imprint.

We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict the processing after two years, i.e. your data will only be used to comply with legal obligations.

To prevent unauthorised access by third-parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.

The legal basis for the use of your contact data is Art. 6, section 1, sentence 1, letter f) GDPR (Legitimate Interest in Data Processing). The legitimate interest results from our need to send you interesting information about our offer and our company (direct advertising).

You can object to the processing of your data on the basis of our legitimate interest in direct advertising at any time under the conditions of Art. 21 GDPR. Please use the contact details provided in the imprint.

Use of our web shop

If you want to order at our web shop, it is mandatory that you provide certain data for the conclusion of the contract and the processing of your order. This information, which is essential for processing, is marked specifically, all other information can be provided voluntarily. We process the data you provide during the order process only for the purpose of processing your order. Failure to provide the required data will result in your order not being processed.

Furthermore, it may be necessary to pass on your data to third parties in order to process your order, e.g. banks/payment service providers, logistics companies, etc. You can find more information above under "Passing on data" and below in the section "Third-party services".

The legal basis for the use of the data you provide for the processing of your order is Art. 6, section 1, sentence 1, letter b) GDPR (data processing for the fulfilling of a contract). The legal basis for the data you voluntarily provide for the order processing is Art. 6, section 1, sentence 1, letter a) GDPR (consent of the data subject). You can withdraw your consent at any time with effect for the future. Please use the contact details provided in the imprint.

We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict the processing after two years, i.e. your data will only be used to comply with legal obligations.

To prevent unauthorised access by third-parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.

The legal basis for the use of your contact data is Art. 6, section 1, sentence 1, letter f) GDPR (Legitimate Interest in Data Processing). The legitimate interest results from our need to send you interesting information about our offer and our company (direct advertising).

You can object to the processing of your data on the basis of our legitimate interest in direct advertising at any time under the conditions of Art. 21 GDPR. Please use the contact details provided in the imprint.

Third-party services

We use services/resources from third parties, for example plug-ins, external content, software or other external service providers (services), in order to simplify our data processing and to expand the functional scope of our website. In doing so, personal data may also be transmitted to the service provider. In order to protect your data, we have, if necessary, contractually obliged the service providers in accordance with art. 28 GDPR to only process your data in accordance with our instructions.

We expressly point out that we are only responsible for the data collection and transmission by the service within the meaning of the GDPR, but not for any subsequent processing by the respective service provider.

In detail, we use the following services:

JivoChat

Our website uses the live chat service "JivoChat" of the company Lucas Loureiro Carvalho Suporte Tecnico ME, the Rua Neves Armond, 140, Sala 301, Praia Do Suá. Vitória, ES/Brazil. By using the service, data are transmitted to and processed by it. This is done on the basis of an order processing contract, that we have concluded with the company.

The purpose of the live chat function is to provide an immediate response to user requests. The chat can also be used without providing an e-mail address and name. No registration is required. The specification of an e-mail address is only required if the user makes contact outside of the available chat hours and expressly wishes to receive a response from us. By accessing the website and actively agreeing to start the live chat service, the chat widget is loaded in the form of a JavaScript file by Lucas Loureiro Carvalho Suporte Tecnico ME.

Your data will only be transferred to Lucas Loureiro Carvalho Suporte Tecnico ME if you expressly consent to the processing. You thereby consent to the data transfer in accordance with Art. 49, section 1, letter a, GDPR in full knowledge of the risks described under "Data transfer to third countries outside the EU".

Google services

Our website uses the following services of Google Ireland Limited ("Google EU"), Gordon House, Barrow Street, Dublin 4, Ireland. This company represents the company Google LLC ("Google US"), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, in the EU.

By using the services, data is transmitted to Google EU and, under certain circumstances, from Google EU to Google US. The Google Group may process the transmitted data to create anonymised user profiles for statistical purposes. If you also have a Google account and are logged in to it, Google can assign the transmitted data to your account - even across devices. In principle, we have no influence on this data processing. The responsibility for this data processing lies therefore with Google EU.

Your data will only be transmitted to Google if you expressly consent to the processing. You thereby consent to the data transfer to the USA in accordance with Art. 49, section 1, letter a, GDPR in the knowledge of the risks described under "Data transfer to third countries outside the EU".

More information on the processing of user data can be found in the Google privacy policy: https://policies.google.com/privacy.
The details of the concluded standard contractual clauses (guarantee of the level of data protection in third countries) can be found here: https://support.google.com/adspolicy/answer/10042247?hl=de 
You can manage your Google advertising settings on the following website: https://adssettings.google.com/?hl=de (This setting will be deleted when you delete your cookies).

We use:

YouTube

Our website uses the video service "YouTube" from Google. YouTube is used to embed videos in our website at various points. By viewing videos, the following information is usually transmitted to a Google server in the USA and stored there for several months: Your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referer), date and time of the request and  possibly your internet service provider. YouTube uses this data, among other, to collect statistics and to improve the service.

The service stores and evaluates cookies (see above under "Cookies") on your terminal device.

This service uses the web storage of your browser. You can find more information on this in the section "Web Storage" above.

The legal basis for the use of Youtube is Art. 6, section 1, sentence 1, letter a) GDPR (consent of the person concerned). When you first access the website, we ask you for your consent to the use of the service via a pop-up message. You can withdraw your consent at any time with effect for the future by viewing the cookie banner again and changing the settings you have made.

Advertising services

We use services on our website that help us to promote the sales and popularity of our offer. These services may, for example:

  • record the surfing behaviour of our website visitors and provide appropriate advertisements based on this information
  • collect statistical data about interaction with advertisements on our website, which we can use to optimise our advertising efforts; or
  • display an average of other customers' opinions about our company (so-called ratings/testimonials).

The services may collect the following data in particular: Origin (country and city), language, operating system, end device (PC, tablet PC or smartphone), browser and any add-ons used, referrer (source where the user came from), clicks on advertising banners, viewing duration, actions after clicking on advertising banners. This data or parts thereof may also be transmitted to the respective service provider to enable the use of the service.

The data collected is automatically processed, among other things, in order to display suitable advertising to you based on your supposed preferences, for the purposes of market research or for the needs-based design of our website. This constitutes automated decision-making or profiling pursuant to Art. 4 No. 4; Art. 22 GDPR. This automated processing is permissible pursuant to Art. 22, section 2, No. 2 GDPR on the basis of § 15, section 3, German TMG.  You have the right to object to this type of data processing at any time. Please use the contact details provided in the imprint.

The legal basis for the use of advertising services is Art. 6, section 1, sentence 1, letter a) GDPR (consent of the person concerned). When you first access the website, we ask you for your consent to the use of the service via a pop-up message. You can withdraw your consent at any time with effect for the future by viewing the cookie banner again and changing the settings you have made.

We use:

Facebook Pixel, Facebook Custom Audiences and Facebook-Conversion

The so-called "Facebook Pixel" is used within our online offer. Facebook is a social network of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. You can find more information about Facebook under "Social media fan pages".

Facebook-Pixel allows Facebook, on the one hand, to determine you as a visitor to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use Facebook-Pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of Facebook-Pixel, we also want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of Facebook-Pixel, we can further track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

Your data will only be transmitted to Meta Platforms if you expressly consent to the processing. You thereby consent to the data transfer to the USA in accordance with Art. 49, section 1, letter a, GDPR in the knowledge of the risks described under "Data transfer to third countries outside the EU".

We are jointly responsible for the collection of data that Facebook collects on our online offer by means of Facebook pixels and similar technology. We have concluded the following agreement with Facebook in this regard: https://www.facebook.com/legal/controller_addendum

Insofar as anonymised reports and analyses are provided to us by Facebook, this is done on the basis of an order processing agreement: https://www.facebook.com/legal/terms/dataprocessing

Processing in the USA takes place on the basis of standard contractual clauses: https://de-de.facebook.com/legal/technology_terms

For more information on Facebook's data protection, please visit: https://www.facebook.com/about/privacy/.

Service providers for processing your order

We may communicate the personal data collected from you to third parties as part of the contract processing, for example to the transport company commissioned with the delivery or the service used for payment, insofar as this is necessary for the fulfilment of the contract.

The legal basis for the transfer of the data necessary for the processing of your order is Art. 6, section 1, sentence 1, letter b) GDPR (data processing for the fulfilling of a contract). The provision and transmission of your data is required, otherwise your order cannot be processed.

The legal basis for the data transmission you chose for the order processing (e.g. regarding the status of shipment) is Art. 6, section 1, sentence 1, letter a) GDPR (consent of the data subject). You can withdraw your consent at any time with effect for the future. Please use the contact details provided in the imprint.

PayPal

We use the "PayPal Plus" service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. ("PayPal"), 22-24 Boulevard Royal, L-2449 Luxembourg to process payments. This service enables us to provide you with various payment methods in our web shop. During the use of this service, our website data transmits data to PayPal, especially your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referer), date and time of the request and possibly your internet service provider. In addition, the status and the amount of data transferred are recorded as part of this request.

Details about the data collected and information about how PayPal processes the data collected are available in the PayPal privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE  

We have a legitimate interest in the use of PayPal within the meaning of Art. 6, section 1, sentence 1, letter f) GDPR, which consists of offering a plurality of payment methods as simply as possible via a service provider and not having to commission a separate service provider for each payment method. At the same time, this also reduces the number of recipients of your data.

When paying via "PayPal via PayPal Plus", "Direct Debit via PayPal Plus", "Credit Card via PayPal Plus" or "PayPal Plus Invoice", we also pass on your payment and order data to PayPal as part of the payment processing. PayPal reserves the right to conduct a credit check for credit card and direct debit payment methods. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. Address data, among other things, are included in the calculation of the score values.

For further information on data protection law, including information on the credit agencies used, please also refer to the PayPal privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

Social media fan pages

In addition to our website, we keep online presences on social platforms in order to be able to communicate with the respective customers, interested parties and users and to inform them about our services.

When you visit our presence on a social platform, your data is usually processed for our market research and advertising purposes by the respective provider of the platform. The provider may also process the data for their own purposes. Usage profiles can be created from your usage behaviour and your resulting interests. These usage profiles may in turn be used, for example, to serve advertisements within and outside the platforms that presumably correspond to your interests. For these purposes, cookies (see above) are usually stored on your terminal device. These cookies contain information about your usage behaviour and interests. Especially if you are a member of the respective platforms and are logged in to them, additional data may be stored independently in the usage profiles. For a detailed description of the respective data processing and the possibilities for objection, we refer to the following linked information of the providers, as only they know the exact procedures of their data processing.

We would like to point out that your data may also be processed outside the European Union. This may give rise to risks because, for example, it could be more difficult to enforce your rights.

The legal basis for the use of the online presences and the corresponding data processing is Art. 6, section 1, sentence 1, letter f) GDPR (Legitimate Interest in Data Processing). The legitimate interest arises from our need to present ourselves to visitors and users of the social networks and to contribute statements of all kinds to the media and opinion market. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details provided in the imprint.

The use of statistical data of all visitors to our social media websites, which are collected, processed and made available to us by the respective site operators, is based on Art. 6, section 1, sentence 1, letter f) GDPR (legitimate interest in data processing). This legitimate interest results from our need for an anonymous evaluation of the visiting and usage behaviour on our web presences for the usage-oriented improvement of the design of our online offer and the optimisation of our communication with interested parties. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details provided in the imprint. If the respective providers ask for your consent to data processing, the legal basis for the processing is Art. 6, section 1, sentence 1, letter a) GDPR (consent of the data subject). You can withdraw this consent at any time with effect for the future. To do this, please contact the provider who asked for your consent.

In the event that you wish to claim your above mentioned rights, we would point out that, despite any joint responsibility, these can most effectively be claimed from the providers. As a rule, only the providers have direct access to your data and can take appropriate measures and provide information directly. Should you still need help, then you can contact us and we will support you at any time within the scope of our possibilities.

We are on:

Facebook

Facebook is a social network of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook Ireland Ltd. is the European subsidiary of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.

For more information on Facebook privacy, please visit: https://www.facebook.com/about/privacy/. This statement contains information about our own data processing.

We have concluded a supplementary agreement with Facebook as part of our user contract, which regulates the responsibility for data processing with regard to the Page Insights function in accordance with Art. 26 GDPR. The details of the agreement can be found here: https://www.facebook.com/legal/terms/page_controller_addendum. In this document, Facebook has undertaken, among other things, to inform you about the data processing within the framework of the Page Insights function. This information is available here: https://www.facebook.com/legal/terms/information_about_page_insights_data.

YouTube

YouTube is a social video platform of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, represented by Google Ireland Ltd ("Google EU"), Gordon House, Barrow Street, Dublin 4, Ireland. This company represents the company Google LLC ("Google US"), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, in the EU.

For more information on YouTube data protection, please visit: https://policies.google.com/privacy.

Instagram

Instagram is a social network of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta Platforms Ireland Ltd. is the European subsidiary of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.

For more information on Instagram data protection, please visit: http://instagram.com/about/legal/privacy/.
For more information on Facebook's data protection, please visit: https://www.facebook.com/about/privacy/.

 

State of this data privacy statement 7th July 2022
Source: Süddeutsche Datenschutzgesellschaft mbH