This information explains the processing of personal data when visiting our shop, when placing orders and when contacting us.
1. Responsible and contact
Unser Datenschutzbeauftragter ist die heyData GmbH, Bertolt-Brecht-Platz 3, 10117 Berlin, www.heydata.eu, datenschutz@heydata.eu.
2. Provision and security of the website
When the website is accessed, technically necessary connection data are processed, in particular IP address, time, requested address, transmitted data volume, browser information and, if applicable, the previously visited page. This serves the delivery, error analysis and protection of our offer. The legal basis is our legitimate interest in a secure and functional service in accordance with Art. 6 para 1 lit. f GDPR. Technical service providers may only process data for us within the scope of their respective tasks.
3. Shopping cart, order and customer account
For orders, we process your contact, invoice and delivery data as well as information on items, payment and order history. A customer account stores the data you provided for this purpose. Legal bases are the implementation of the contract or pre-contractual measures according to Art. 6 para 1 lit. b GDPR and the fulfilment of legal obligations according to Art. 6 para 1 lit. c GDPR.
The data required for shipping and payment are transmitted to the shipping and payment service providers used in the ordering process. Only the data required for the respective purpose will be passed on. You can see which payment methods and delivery conditions are offered before completing your order.
4. Cookies and browser storage
We use necessary cookies and browser storage for the shopping cart, login, session security and your cookie settings. Insofar as these functions are necessary for the expressly desired service, access takes place in accordance with § 25 para 2 no. 2 TDDDG. The subsequent processing of personal data is governed by the abovementioned legal bases.
Your cookie selection will be in the cookie for 180 days after your decision. compass_consent stored. It does not contain an advertising ID. Details about the shop cookies and their duration are in the cookie settings. You can reopen the saved selection at any time or delete cookies via your browser.
Analytics and advertising services are not currently activated in this shop. Fonts and images are delivered locally. External content such as videos is not automatically embedded. Links to social networks and Tree-Nation only open the respective external website when you click on it.
If you activate „Remember shop settings“ in the cookie settings, we save your type filter and the selection „Offers only“ for 30 days in the local browser storage under compass_shop_preferences. Search terms and personal data are not stored therein. The storage is only done with your consent; you can revoke it at any time in the cookie settings. Upon revocation, the stored filters are deleted. After expiration, they are no longer used and removed at the next page call.
5. Contact and revocation
If you send us a message or revoke a contract online, we will process the submitted information for the processing and documentation of your request. The basis for contractual questions is Art. 6 para 1 lit. b GDPR, for legal obligations Art. 6 para 1 lit. c GDPR and otherwise our legitimate interest in answering according to Art. 6 para 1 lit. f GDPR. A cancellation declaration will be stored at the time of receipt and confirmed by e-mail.
6. Memory duration
We store personal data for as long as it is needed for the stated purpose. They are then deleted or anonymized, unless there are any legal storage obligations or the necessary safeguarding of legal claims. For tax-relevant documents, the relevant statutory deadlines apply. Contact requests that are no longer required will be deleted after completion of the processing, as far as no further storage is necessary.
7. Your rights
According to the legal requirements, you have the right to access, rectification, deletion, restriction of processing and data portability. You can revoke a given consent at any time with effect for the future. You can object to processing on the basis of legitimate interests for reasons of your particular situation; you can object at any time against direct marketing.
You also have the right to complain to a data protection supervisory authority, in particular at the place of your habitual residence, workplace or suspected breach. For North Rhine-Westphalia, the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia Responsible.
