Privacy Statement

Your access to and use of this site is subject to the following privacy statement and all applicable laws.

Content

A. Preamble

B. General information
I. Important contact details
II. Definition of terms
III. Scope of processing of personal data
IV. Legal basis
V. Your rights as the Data Subject

C. Information on individual data processing operations
I. Data processing when accessing our website
II. Cookies
III. Web analysis services
IV. Registration / Setting-up a user account
V. Newsletter and advertising
VI. Contact form and e-mail contact
VII. Social media plug-ins
VIII. Contracts independent from our online offers

A. Preamble

We, the 2B DIGITAL GmbH & Co. KG, hereinafter also referred to as 2B DIGITAL, are responsible for the processing of personal data within the scope of the offer contained on our websites as well as other online and offline offers. We therefore inform you how we process your personal data when making use of our aforementioned offers and how we ensure your privacy is protected.

We process personal data only to the extent permitted by law. Should our data protection declaration not be understandable to you or not contain sufficient information, please contact us using the contact details given in section B.I.1.

This data protection declaration is the current valid version as of September 2018. Due to the further development of our website and offers contained in it or due to amended legal or official regulations, it may be necessary to amend this data protection declaration. You can access and print out the latest data protection statement at any time on our website at http://www.2b.digital/privacy/.

 

B. General Information

The information listed in this section B applies to all processing of personal data carried out by us.

I. Important contact details
Here we provide our contact details as the responsible body (Controller), the contact details of our company Data Protection Officer and the regulatory authority responsible for us.

1. Responsible body for data processing; Controller
2B DIGITAL GmbH & Co. KG
Factory Campus
Erkrather Str. 401
40231 Düsseldorf
Germany

E-Mail: info@2b.digital

2. Regulatory authorities
The following link provides a list of all regulatory authorities for data protection:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The processing of personal data carried out for us as the responsible party is supervised by the following regulatory authority:

LDI Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Deutschland

Tel.: +49 211 38424-0
Fax: +49211 38424-10
E-Mail: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de

 

II. Definition of terms
Insofar as we use specific data protection terms in this data protection statement, we refer to the definitions and definitions of Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data, the free movement and portability of such data, and on the abolition of Directive 95/46/EC (the so-called “General Data Protection Regulation”, hereinafter abbreviated as “GDPR“). The specific definitions can be found in Art. 4 and Art. 9 GDPR.

 

III. Scope of the Processing of Personal Data

1. Legal Basis
We limit the collection and further processing of personal data of our contractual partners and the users of our website only to the data required for the provision of our services and for the provision of our online services (including mobile apps, if applicable) and to the purposes set out below.

Any deviation from these purposes will only take place when the data subject has provided explicit consent to do this, as in accordance with Art. 6 para. 1 lit. a GDPR or in order to safeguard legitimate interests, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail (Art. 6 para. 1 lit. f GDPR) or in such cases in which prior consent cannot be obtained for substantive reasons or the processing of the data is permitted by statutory provisions.

2. Duration of storage and Erasure of Data Periods
As a rule, we only store personal data as long as this serves a legitimate purpose. If the purpose of the processing no longer applies, we have taken pro-active technical and organizational measures to ensure the erasure of personal data or restriction of processing.

We will only continue to store data after the processing purpose has ended when this is provided for within European or national legislation in EU regulations, laws or other regulations to which our company is subject. Such cases are, for example, the existence of legitimate interests in storage, for example during the course of limitation periods for the purpose of legal defence against any claims or, for example, the fulfilment of legal storage obligations. If the further-storage described above is no longer covered within the aforementioned provisions, we shall immediately erase the data or restrict its processing, unless the further-storage of the data is necessary for the conclusion of a contract or for other necessary purposes.

3. Disclosure of personal data
We do not pass on personal data to third parties. As a rule, this only occurs if the data subject has provided explicit consent to allow this, when we use so-called “contract processors” (Art. 4 No. 8 GDPR) or other third parties (our own controller for data processing, Art. 4 No. 10 GDPR), whose involvement is necessary in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of contractual relationships with you and/or if there is a legal obligation to do so. The contract processors are external service providers who act on our behalf, and in accordance with instructions within the scope of the provision of services (Art. 4 No. 8 GDPR).

We guarantee data protection in the instance of contract processing by providing our contract processors with sufficient guarantees that appropriate technical and organisational measures are in place and that processing operations are carried out in such a way that they comply with the requirements of the directives and guarantee the protection of the rights of the Data Subject (cf. Art. 28 GDPR).

In all other cases, we only pass on data to third parties when the transfer is necessary in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR for the assertion, exercise or defence of legal claims; and there is no reason to assume that you have an overriding legitimate interest in not passing on your data; and in the event that there is a legal obligation to pass on your data in accordance with Art. 6 Para. 1 S. 1 lit. c GDPR. Only in exceptional cases will personal data be transferred to third parties and/or recipients outside the scope of order processing. This is done exclusively in accordance with the provisions of the GDPR, and only when there is a corresponding legal basis (e.g. Art. 6 para. 4 GDPR).

4. Processing of data in so-called third countries
We – or during the order processing of our service providers – only process personal data in countries within the EU or the European Economic Area that are subject to the scope of the GDPR.

A transfer of personal data to so-called “third countries” is possible in exceptional cases when using contract processors or other service providers, e.g. in the context of web analysis services (such as “Google Analytics”, see our comments below under Section B.III.1). “Third countries” are countries outside the European Union and/or outside the Agreement on the European Economic Area from which an adequate level of data protection in accordance with EU standards cannot be automatically assumed.

Before such a transfer, we ensure that an appropriate level of data protection is guaranteed in the respective third country or with the respective recipient in the third country in accordance with Art. 44 ff. of the German Data Protection Ordinance, GDPR, for example through the existence of a so-called “adequacy decision” of the European Commission or through the use of so-called “EU standard contractual clauses”. If a recipient of personal data is located in the USA, the principles of the so-called “EU-US Privacy Shield” can also ensure an adequate level of data protection.

For more information on the appropriate and reasonable safeguards to ensure an adequate level of data protection, please contact us via the contact details at the top of this privacy notice. Information on participants in the EU-US Privacy Shield can also be found at: www.privacyshield.gov/list.

You can block Google Analytics from collecting your information by clicking on the following link. An opt-out cookie will be set to prevent the collection of your data on future visits to this website:

Click on the button below to stop tracking Google Analytics.
Opt-out

Opt-out of Google Analytics successfull.

5. The Rights of Data Subjects
As a person affected by the processing of personal data, you are granted certain rights (so-called “Data Subject Rights”, e.g. Art. 12 to Art. 22 GDPR). The individual rights of data subjects are explained in more detail in Section V. If you wish to exercise one or more of these rights, you can contact us at any time. For this purpose, please use the contact options listed under item I.

 

IV. Legal basis

1. Explicit consent
Art. 6 para. 1 lit. a GDPR forms the legal basis for the processing of personal data on the basis of the prior explicit consent of the Data Subject.

If it is necessary to obtain the explicit consent of the data subject in accordance with Art. 6 Para. 1 lit a GDPR, we obtain the consent electronically and record the content and the granting of consent. In this case, consent is given by means of an “opt-in” procedure (confirming action by ticking the appropriate box) or, if this is necessary to identify the data subject, by means of a “double opt-in” procedure (additional confirmation of identity by receiving an e-mail with a “confirmation link” that must be clicked on by the Data Subject). After giving your consent, you have the right to withdraw it. For more information on your right of withdrawal, please refer to Section V.2 of this Section.

2. Contract Fulfilment
The legal basis for the processing of personal data for the fulfilment of a contract to which the person concerned is a party, or for the implementation of pre-contractual provisions, is Art. 6 para. 1 lit. b GDPR. This applies, for example, to your contact data, which is essential to process the contract (e.g. delivery of our goods or services).

3. Fulfilment of a legal obligation
If we process data to fulfil a legal obligation, Art. 6 para. 1 lit. c GDPR is the legal basis.

4. Vital interests
If vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 para. 1 lit. d GDPR is the legal basis.

5. Safeguarding legitimate interests
Pursuant to Art. 6 para. 1 lit. f GDPR, we process personal data to enable us to protect our legitimate interests or those of a third party and these interests outweigh the interests, fundamental rights and fundamental freedoms of the Data Subject.

 

V. Your rights as a Data Subject
In the following section we inform you extensively of your rights as Data Subject of the data processing procedures. Accordingly, you have the following Data Subject Rights:

1. Right of objection (Art. 21 GDPR)
Where personal data are processed in order to perform tasks in the public interest (Art. 6 para. 1 lit. e GDPR) or to safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR), you may object to the processing of your personal data at any time for reasons arising from your particular situation. If you file an objection, your Data shall no longer be processed unless,

  • we can demonstrate compelling legitimate reasons for the processing outweighing your interests, rights and freedoms of the Data Subject, or
  • the processing serves the assertion, exercise or defence of legal claims.

Where personal data is processed for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, you have the right to object to the processing of personal data concerning you for reasons arising from your particular situation, unless such processing is necessary for the performance of a task in the public interest.

2. Right of withdrawal of consent (Art. 7 para. 3 GDPR)
You can withdraw your consent at any time with effect for the future – in full or in part – without incurring any cost. You can address the withdrawal directly to our Data Protection Officer or to us as the controller via any communication channel of your choice. The respective contact details are listed above under point B.I of this data protection declaration. The lawfulness of the processing of the data covered by the consent remains unaffected by the withdrawal.

3. Right of Access by the data subject (Art. 15 GDPR)
You have the right to request information on your personal data processed by us. This right to access includes:

  • the purposes of the processing;
  • the categories of personal data processed by us;
  • the categories of recipients to whom your data has been or will be disclosed;
  • if personal data are transferred to so-called “third countries” (cf. Section III 4) outside the scope of the GDPR, whether and how we ensure an adequate level of protection by means of suitable guarantees (Art. 45, 46 GDPR) for the data recipient in the third country;
  • the planned storage period, as far as we can assess this; if an assessment and indication of the storage period are not yet conclusively possible, we will at least provide information on the criteria for determining the storage period (e.g. limitation periods, legal storage periods, cf. also Section III 2);
  • Your right to correction, deletion, limitation of processing and objection to the processing of your personal data (details below);
  • the existence of a right of appeal to a regulatory authority;
  • the origin of the data, unless it has been collected from us; and
  • the existence of an automated decision in an individual case within the meaning of Art. 22 GDPR including profiling, which also includes details of the decision criteria (i.e. the logic used) of the automated decision and the consequences and scope for you as the Data Subject.

You have the right to request a copy of your personal data processed by us. You will not incur any costs for the first data copy; we will charge a reasonable fee for further data copies. Where you exercise this right, we will generally make the data copy available in electronic form unless you indicate otherwise. The provision is made subject to the rights and freedoms of other persons who may be disadvantaged by the transmission of the data copy.

4. Right to Rectification (Art. 16 GDPR)
You have the right to request us to immediately rectify an of your data which is incorrect. You can also ask us to complete your incomplete personal data with additional declarations or communications provided by you.

5. Right to Erasure (Art. 17 GDPR)
You have the right to request from us the immediate erasure of your personal data stored by us, provided that

  • you have withdrawn your consent (cf. Section V 2) to data processing, unless there is another legal basis for data processing;
  •  

    the storage or other processing of your personal data is no longer necessary for the purposes for which it was collected and processed;

  •  

    you have objected to data processing pursuant to Art. 21 GDPR and there are no overriding legitimate reasons for further processing; in the case of direct marketing pursuant to Art. 21 para. 2 GDPR, deletion shall take place unconditionally on the basis of objection;

  •  

    your personal data has been unlawfully processed;

  •  

    it concerns data of a child which have been collected in relation to services of the information society services pursuant to Art. 8 para. 1 GDPR.

Where we have made personal data public, we will inform other persons responsible within the framework of what is technically possible and reasonable of your request for deletion, including the deletion of links, copies and/or replications.

The aforementioned rights to the deletion of your personal data do not exist insofar as the processing of your personal data is required

  • to exercise the right to freedom of expression and information;
  •  

    to fulfil a legal obligation which the processing requires under the law of the Union or of the Member States to which we are subject, or to perform a task which is in the public interest or in the exercise of official authority entrusted to us;

  •  

    for reasons of public interest in the field of the provision of health or social care or treatment or the management of health or social care systems and services pursuant to Art. 9 para. 2 lit. h and i GDPR and Art. 9 para. 3 GDPR;

  •  

    for archive purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as your right of cancellation presumably makes it impossible or seriously impairs the realisation of the objectives of such processing; or

  •  

    for the assertion, exercise or defence of legal claims.

6. Right to restriction of processing (Art. 18 GDPR)
You have the right to request that we restrict the processing of your personal data (i.e. limit the processing to mere storage) if one of the following cases applies:

  • you have disputed the accuracy of your personal data. For the duration of our verification of accuracy, you may request that your data not be used for other purposes and be restricted in this respect.
  •  

    the processing is unlawful and you reject the deletion of the personal data Art. 17 para. 1 lit. d GDPR and instead demand the restriction of the use of the personal data Art. 18 GDPR.

  •  

    we no longer need the personal data for processing purposes, but you need them for asserting, exercising or defending legal claims. In this case, you may request that the processing be restricted to the aforementioned purposes.

  •  

    You have lodged an objection against the processing pursuant to Article 21 (1) GDPR. As long as it has not been determined whether our legitimate interests or reasons in the processing outweigh yours, you can demand from us that we process your data only for the examination of the aforementioned consideration.

Where we have restricted the processing of your personal data at your request, we may and will only process such data – apart from its storage – with your further consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal entity or for reasons of an important public interest of the Union or a Member State.

Where a processing restriction is lifted, you will be informed in advance of any intended processing.

7. Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer such data to another controller without interference from us as current controller, provided that

  • the processing is based on a consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
  •  

    processing is carried out using automated processes.

As far as it is technically feasible, you can also request us to transfer your personal data directly to another controller.

The exercise of the right to data transfer does not affect the right to data deletion (Art. 17 GDPR). However, the right to data transfer does not apply to processing which is necessary for the performance of a service which is in the public interest or which is carried out in the exercise of the official authority assigned to us.

You may not exercise the right to data transfer if this would undermine the rights and freedoms of others.

8. Automated decisions in individual cases including profiling (Art. 22 GDPR)
Automated decisions (i.e. without any human intervention) may not be used exclusively in the processing of personal data, including profiling, where this has a legal effect on you or significantly affects you in a comparable manner; therefore, no such automated decisions are made by us.

9. Right to lodge a complaint with a regulatory authority (Art. 77 GDPR)
We always process personal data in accordance with the applicable laws. Should you nevertheless have reason to believe that we have violated applicable data protection laws, you can contact the relevant regulatory authority of the Union or the member states at any time and lodge a complaint. The regulatory authority is the regulatory authority of your usual place of residence, workplace or within the jurisdiction of the alleged infringement. See Section I.2 for contact details of the applicable regulatory authorities.

 

C. Information on individual data processing operations

In the following, we describe in detail, and in addition to the generally applicable information (cf. section B above), which personal data we process in individual cases, what purpose we pursue with the data processing and what the consequences result from this.

I. Data processing upon accessing our website
When you visit our website, the browser you use on your terminal device automatically sends information to our website server. This information is temporarily stored in a so-called “log file”.

1. Data collected
The following information is automatically collected when you visit our website and stored until it is automatically deleted:

  • The IP address of the accessing computer,
  •  

    Information on the browser type and the version used as well as the operating system of your computer, if applicable,

  •  

    Date and time of access to our website,

  •  

    Website from which the user accesses our website (so-called “referrer URL”),

  •  

    Websites that the user’s system accesses via our website,

  •  

    Movements of the user and length of stay on our website.

Under no circumstances do we use the collected data for the purpose of drawing conclusions on your person. We also use cookies and analytic services when you visit our website, which we describe in more detail in sections II and III respectively.

2. Purpose and legal basis
With the collection and processing of “log data” we pursue the following objectives on the following legal basis:

  • Provision of the contents of our website to the user; to enable the user to communicate with our website we are required to temporary store the IP address. The legal basis for this data processing – i.e. for the duration of your website visit – is Art. 6 Para. 1 lit. b GDPR as well as § 96 Telecommunications Act and § 15 Para. 1 of Telemedia Act. In addition, data processing is based on Art. 6 Para. 1 lit. f GDPR (cf. Section B.IV.5), whereby our legitimate interest follows from the fact that we are able to make the provision of content possible in the first place.
  • To ensure a smooth connection and user-friendly use of our website, to evaluate system security and stability and for other administrative purposes. This is achieved by processing and storing the IP address in the log files beyond the communication process. This is also based on Art. 6 Para. 1 lit. f GDPR (cf. Section B.IV.5) and our above-mentioned legitimate interest as well as in compliance with § 109 of the Telecommunications Act (TKG).

3. Duration of storage and erasure periods
The data is erased when the purpose for which it was collected no longer exists. Within the framework of the provision of the contents of our website, the data is erased as a basic rule when you leave our website and the session is thus terminated.

As far as the purposes of system security and stability are concerned, log data will be stored for a maximum of seven days after the end of the session. Beyond these seven days, storage or other processing may only take place in such a way that the IP addresses of the users are erased or altered (e.g. by anonymisation or pseudonymisation) after the expiry of the aforementioned storage period of seven days. this is done in such a way that it is neither possible to assign the log data to an IP address and nor to the user.

4. Right to objection and removal
As the data processing described above is absolutely necessary for the operation of our website, you can only assert a right of objection when your particular situation gives rise to reasons which do not permit processing to the extent described above (cf. Section B.IV.5). In general, however, we can justify the aforementioned compelling necessity to process the data.

5. Data security
We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when visiting our website. As a rule, this is a 256-bit encryption. In the event your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can determine whether an individual page of our Internet presence is transmitted in encrypted form by the closed representation of the key or padlock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against; accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 

II. Cookies
We use cookies on our site. These are small text files that your browser automatically creates and stores on your device (PC, laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not contain viruses, trojans or other malware, but information that uniquely identifies the browser when you return to a website. Setting cookies does not give us any immediate knowledge of your identity; however, depending on the type of cookie placed and the possibility of assigning a cookie to an IP address, it is always possible to establish a personal reference to the user. However, we categorically do not use this possibility to identify you as a user. The following types of cookies can be applied by us during your visit:

  • Session cookies: Session cookies, also known as transient cookies, store a so-called session ID with which various requests from your browser can be assigned to the shared session.
  • Persistent cookies: Persistent cookies, also known as tracking cookies, store information regarding the settings and preferences that you specify when you visit our website. Examples include language settings.

We do not process any information from so-called third-party cookies. These are cookies that are not provided by our web servers, but by third parties.

1. Purpose and legal basis
The use of cookies serves to enable the provision of our website, and the comprehensive use of our services, and to make them more agreeable for you. This includes optimising user-friendliness, since, for example, information entered once need not be re-entered as soon as you call up another website or even another page of our website. Useful features such as language settings, a shopping cart etc. would not be possible without the use of cookies.

Statistical collection
We use cookies in order to statistically determine how our website is used, and to evaluate the usage for the purpose of optimising our services for you. These cookies enable us to automatically recognize that you have already visited our site when you return to our site. These cookies are automatically deleted after a defined period of time.

Analysis of surf behaviour
We also use the session cookies to analyse the surfing behaviour of users on our website, among other things. Analysis cookies are used for the purpose of improving the quality of our website and its content. The analysis cookies tell us how the website is used and enable us to continually optimise our services. This enables us to adapt our offer and our advertising to your exact wishes, for example through market research, and to design the website to meet your needs. The user data collected in this way is pseudonymised by technical provisions, which ensures it is then no longer possible to assign any data to a user.

The legal basis for the use of our cookies with regard to the provision of our website and the complete use of our services is Art. 6 Para. 1 lit. b GDPR, where the use is necessary in the context of fulfilling a contract or implementing pre-contractual measures. Insofar as we use cookies for analysis and statistical recording, and you have given your consent, we rely on Art. 6 Para. 1 lit. a GDPR and otherwise on Art. 6 Para. 1 lit. f GDPR (see Section B.IV.5), as the use of cookies is also to safeguard our legitimate interests for the purpose of providing our online services.

2. Duration of storage and erasure periods
The session cookies are stored by your browser only for the duration of your browser session, and are deleted when you close your browser. Persistent cookies remain stored for a period of one month on the device you are using.

3. Rights to object and erasure
When you accessed our website, you will be informed by an information banner of the use of cookies, and referred to this data protection declaration. Where applicable, at that moment you have also given your consent to the processing of the personal data used in the explained context.

As a user, you can decide for yourself whether and how cookies are to be used or stored by your browser. You can configure your browser to ensure no cookies are stored on your computer or that a message always appears before a new cookie is created. You can delete cookies that have already been created or have them automatically deleted by your browser. The complete deactivation of cookies can, however, result in you not being able to take advantage of all the functions within our website.

You can object to the use of cookies used to create pseudonymous usage profiles (see above under Analysis Cookies) at any time which will take effect for the future; you can exercise your right to object either via the info banner or via the above-mentioned setting options of your browser.

 

III. Google Analytics
We use Google Analytics for so-called “web analysis” in order to ensure the needs-based design and continuous optimisation of our website and to adapt it to the technical circumstances on the side of our users. Google Analytics collects information such as the user behaviour of our websites, and technical details such as the extent to which new technologies are used.

For the purpose of analysing, designing and continuously optimising our websites and their utilisation we use the “Google Analytics” web analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). Google Analytics uses cookies (see Section II), which enable an analysis of the utilisation of the website by creating pseudonymous utilisation profiles of our customers/users.

The information generated by the cookie (such as browser type, operating system, IP address, etc.) on your usage of the website will be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be abbreviated and anonymised by Google within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area prior to transmission (so-called “IP masking”). Only in exceptional circumstances will your entire IP address be transmitted to, and abbreviated by, a Google server in the US.Google uses the above-mentioned information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage for the purposes of market research and tailoring such websites to meet your specific needs. Where necessary, this information will be transferred to third parties, where this is legally required or in the event third parties process this data on behalf of other third parties. Please note, under no circumstances will your IP address be merged with other data from Google, which ensures that a connection to your person is not never possible.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to take advantage of the full functionality of our website. To prevent Google Analytics from collecting data, you can either download and install a browser add-on from the following Internet address or by setting an opt-out cookie: http://tools.google.com/dlpage/gaoptout?hl=en. Setting an opt-out cookie prevents Google Analytics from collecting your data in the future when you visit our website. However, if you delete your cookies in the future, the opt-out cookie will also be deleted and you may be required to re-activate it.

 

IV. E-Mail contact
We offer you the opportunity to contact us via the e-mail address provided on our website. We store your e-mail address as well as any other data that you (voluntarily) provide us with. Your data will only be passed on to third parties if this is necessary to process any request from you.

1. Purpose and legal basis
We process the aforementioned data to enable the processing of your request. Any other data will only be processed for technical or security reasons (e.g. prevention of misuse and safeguarding our system security). The legal basis is Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. b GDPR (fulfilment of a contract or pre-contractual measures) as well as Art. 6 Para. 1 lit. f GDPR with regard to the latter purpose, as we have a legitimate interest in the integrity of our website.

2. Duration of storage and erasure periods
All aforementioned data will be erased as soon as we have processed your request, and further clarification is not necessary. The erasure of the aforementioned data takes place under the proviso that we reserve any obligations and rights pursuant to Section B III 2.

3. Rights to object and erasure (the right to be forgotten)
After you have accepted out terms, you have the right to withdraw your consent at any time and object to any further processing of your data. You may also have the right to object in accordance with Art. 21 GDPR (see Section B.IV.5 on the legitimate interest and Section B.V.1 on the right to object).

 

V. Contracts not related to our online offerings
Where you are our contractual partner and the contract was not concluded via our online offer, we have also provided the essential information regarding our data processing of your personal data as the responsible party in our general terms and conditions. Please note that in this context we also use our General Information under Section B as a basis for data processing of contracts other than our online offers. The following information is therefore only provided in addition to our General Terms and Conditions and to our General Information under Section B. Should you have any further questions, please contact us using the contact details given in Section B.I.

1. Purpose and legal Basis
By collecting the personal data obtained in the course of concluding and executing the contract, we pursue the purpose of being able to fulfil our obligations under the contract. For example, we need your contact data in order to make our services available to you. Data will only be passed on to third parties under the conditions of Clauses B.III.3 and B.III.4. Categories of third parties in our contracts include payment service providers, and logistics service providers. Failure on your part to provide the data may mean that the contract cannot be concluded.

Furthermore, we use the data to support you as a customer as well as for statistical market and poll research purposes. This is necessary in order to constantly improve our products and services and to adapt them to the needs of our customers. We only use direct advertising when you have consented to us doing so. or where there is another legal basis for it as in accordance with the Union law of the member states.

The legal basis for the aforementioned data processing is Art. 6 Para. 1 lit. a GDPR in the case of a given consent, insofar as this is necessary for the fulfilment of the contract and the implementation of pre-contractual measures Art. 6 Para. 1 lit. b GDPR, in all other aforementioned cases Art. 6 Para. 1 lit. f GDPR (protection of legitimate interests), whereby our legitimate interest lies in the marketing and continuous improvement of our products and services as well as in their customisation to the needs of our customers.2. Duration of storage and erasure periods

2. Duration of storage and erasure periods
As a matter of principle, we only store personal data as long as this serves a legitimate purpose. If the purpose of the processing no longer applies, we have taken pro-active technical and organisational measures to ensure that personal data is deleted or that it is made unrecognisable or restricted.

We will only store data after the processing purpose has ended when this is provided for by European or national legislation in EU regulations, laws or other regulations to which our company is subject. Such cases are, for example, the existence of legitimate interests in storage, for example during the course of limitation periods for the purpose of legal defence against any claims or, for example, the fulfilment of legal storage obligations. If the further storage described above is no longer covered by the aforementioned standards, we shall immediately delete the data or restrict its processing, unless the further storage of the data is necessary for the conclusion of a contract or for other purposes.

3. Right to object to use of personal data, and removal
In particular, you have the right to revoke your consent to the collection and further processing of data on the basis of your consent (cf. Section B.V.2). The data processing required for the fulfilment of contractual obligations or the implementation of pre-contractual measures is not subject to any right of objection; you may, however, object to the data processing out of a justified interest under the conditions stated in Section B.V.1.

With regard to our direct advertising, we refer to your right of withdrawal (in the event explicit consent has been provided) pursuant to Section B.V.2 and to your right of objection pursuant to Section B.V.1.

In all other respects, you are entitled to the rights as a Data Subject specified under Section B.V.