data protection

Data protection

Introduction

CCON GmbH (hereinafter: "We"), as the operator of the online offer, is the responsible body for processing the personal data of the users of the online offer. Our contact details can be found in the imprint of the online offer, the contact persons for questions regarding the processing of personal data are named directly in this data protection declaration.

We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this data protection declaration and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and national data protection regulations.

With this data protection declaration, we would like to inform you to what extent and for what purpose personal data is processed in connection with the use of the online offer.

Personal Data

Personal data is information about an identified or identifiable natural person. This includes all information about your identity, such as your name, your e-mail address or your postal address. Information that cannot be linked to your identity (e.g. statistical information, such as the number of users of the online offer) is not considered personal information.

In principle, you can use our online offer without disclosing your identity and without providing personal data. We will then only collect general information about the visit to our online offer. For some of the services offered, however, personal data will be collected from you. This data will then only be processed by us for the purpose of using this online offer, in particular to provide the desired information. When collecting personal data, only the data that is absolutely necessary must be given. In addition, further information may be possible, which is then voluntary information. We indicate in each case whether the fields are mandatory or voluntary. We will then inform you about the specific details in the corresponding section of this data protection declaration.

Automated decision-making based on your personal data does not take place in connection with the use of our online offer.

Processing of Personal Information

Your information will be stored by us on specially protected servers within the European Union. These are protected by technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. Access to your data is only possible for a few authorized persons. They are responsible for the technical, commercial or editorial support of the servers. Despite regular checks, complete protection against all hazards is not possible.

Your personal data will be transmitted in encrypted form over the Internet. We use SSL encryption (Secure Socket Layer) for data transmission.

Disclosure of personal data to third parties

In principle, we only use your personal information to provide the services you have requested. Insofar as external service providers are used by us to provide the service, their access to the data is also exclusively for the purpose of providing the service. We use technical and organizational measures to ensure compliance with data protection regulations and also oblige our external service providers to do the same.

In addition, we do not pass on the data to third parties without your express consent, especially not for advertising purposes. Your personal data will only be passed on if you have consented to the data being passed on yourself or if we are entitled or obliged to do so on the basis of legal provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.

Legal bases of data processing

Insofar as we obtain consent for the processing of your personal data, Art. 6 Paragraph 1 lit. a) GDPR serves as the legal basis for data processing.

Insofar as we process your personal data because this is necessary to fulfill a contract or as part of a contractual relationship with you, Article 6 Paragraph 1 Letter b) GDPR serves as the legal basis for data processing.

Insofar as we process your personal data to fulfill a legal obligation, Article 6 (1) (c) GDPR serves as the legal basis for data processing.

Article 6 (1) (f) GDPR can also be considered as the legal basis for data processing if the processing of your personal data is necessary to protect a legitimate interest of our company or a third party and your interests, fundamental rights and fundamental freedoms are not protected of personal data require.

Within the scope of this data protection declaration, we always point out the legal basis on which we base the processing of your personal data.

Data Erasure and Storage Duration

We always delete or block your personal data when the purpose of storage no longer applies. However, storage can also take place if this is provided for by legal requirements to which we are subject, for example with regard to statutory storage and documentation obligations. In such a case, we will delete or block your personal data after the end of the relevant requirements.

Use of our online offer

information about your computer

Every time you access our online offer, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser used and the operating system of the computer. We also record the website from which the online offer was accessed. The IP address of your computer will only be saved for the time you are using the online offer and will then be deleted or made anonymous by shortening it. The remaining data is stored for a limited period of time.

We use this data for the operation of the online offer, in particular to identify and eliminate errors, to determine the utilization of the online offer and to make adjustments or improvements. Our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR also lies in these purposes.

Use of cookies

As on many websites, cookies are used for our online offer. Cookies are small text files that are stored on your computer and that store certain settings and data for exchange with our online offering via your browser. A cookie usually contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier.

Cookies enable us to recognize your computer and make any default settings available immediately. Cookies help us to improve the online offer and to be able to offer you a better service that is even more tailored to your needs. This also includes our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR.

The cookies we use are so-called session cookies, which are automatically deleted after the end of the browser session. Occasionally, cookies with a longer storage period can also be used so that your presettings and preferences can still be taken into account the next time you visit our online offer.

Most browsers are set to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent. It is also possible to manually delete cookies that have already been saved via the browser settings. Please note that you may only be able to use our online offer to a limited extent or not at all if you refuse the storage of cookies or delete necessary cookies.

Google Analytics

We use Google Analytics for statistical evaluations. Google Analytics is a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94034, USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install http://tools.google.com/dlpage/gaoptout?hl=de.

You can find more information about this at http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and data protection). We would like to point out that on our website Google Analytics has been extended by the code "anonymizeIp();" has been extended to anonymize IP addresses, deleting the last octet.

We are of the opinion that due to the protective measures taken (anonymisation and the possibility of objection), data processing to optimize our online offer is to be regarded as a legitimate interest in data processing in accordance with Article 6 Paragraph 1 Letter f) GDPR.

Registration

You can register to use our online offer. To do this, you must provide the data requested during registration, e.g. name, address and e-mail address. We also record the date and time of registration and the IP address. As part of the registration process, we obtain your consent for the use of the data. You have the advantage of not having to re-enter this data each time you use or place an order.

The legal basis for processing the data for registration is Article 6 (1) (a) GDPR if consent has been given. If you register with us to fulfill or initiate a contract, the legal basis for processing the data is also Art. 6 (1) (b) GDPR.

The information requested as part of the registration as a mandatory field is required to fulfill or initiate a contract with us for certain services. However, you are not obliged to register, you can also order as a guest. In this case, however, you must enter all the data required to process the contract with each order.

When you register, a customer account will be created for you. The data in the customer account will be stored with us for as long as there is an active customer relationship. If there is no more activity over a period of three years, the status of the customer relationship is set to inactive. You can request the deletion of your customer account at any time.

order processing

We use your personal information for orders only within our company and affiliated companies as well as with the company commissioned to process orders.

Storage and data transfer for orders

For order processing, we work together with various companies that are responsible for payment processing and logistics. We ensure that our partners also comply with data protection regulations. We pass on your address data (name and address) to the respective transport company that delivers the ordered products to you. The legal basis for this is Art. 6 (1) (b) GDPR. The processing of your personal data is necessary to fulfill the contract with you.

The data will be stored with us for as long as it is necessary to fulfill the contract. In addition, we store this data for the fulfillment of post-contractual obligations and due to commercial and tax retention periods for the period prescribed by law. This retention period is usually 10 years to the end of the respective calendar year.

Payment processing for orders, PayPal, Amazon Pay

Depending on the selected payment method, payment processing for orders may be carried out by involving a service provider.

When paying via PayPal, you will be redirected to the PayPal website via a link. Your personal data will be processed in the process. This is your name, your address, your e-mail address, telephone number if applicable and account or credit card data. Please note the general terms and conditions, terms of use and data protection principles of PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg on the website www.paypal.com .

When paying via amazon pay, we pass on your payment data to Amazon Payments Europe sca and to Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three located at 5, Rue Plaetis L 2338 Luxembourg (hereinafter : Amazon Payments), further. For more information on data protection law, please refer to the Amazon Payments data protection declaration: https://pay.amazon.com/de/help/201751600 .

The legal basis for payment processing is Art. 6 (1) (b) GDPR. The processing of your personal data is necessary to fulfill the contract with you, whereby you can freely choose the payment method.

credit check

Depending on the chosen payment method, it may be necessary to check your creditworthiness. In this case, if you have given your consent to the credit check, we use external service providers to whom we transmit your data (name, address, date of birth, order value). We transmit the data to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden.

The legal basis for the credit check is Article 6 Paragraph 1 Letter a) GDPR. If you do not want to give your consent to the credit check, you may have to select another means of payment.

As part of the credit check, an estimate is obtained as to how high the probability of default is with regard to our claim from the order. We only receive a probability value (score value) from our service provider, but no further details. Based on this value, we then assess whether the desired payment method can be offered. After completion of the check, the score value will be deleted by us and will not be saved as part of the order data. It is therefore also not possible for us to subsequently evaluate why, for example, a certain payment method was not possible.

WeTransfer

You can provide files to us via the WeTransfer service. Clicking on the "Data transfer" link opens the page of the WeTransfer service, for which this data protection declaration does not apply. For details on the provisions applicable there, please refer to the WeTransfer data protection declaration: https://queence.wetransfer.com/legal/privacy . The use of WeTransfer is voluntary; You can also send us your files in other ways, for example by e-mail.

The files you upload and any other information you provide are backed up on WeTransfer servers and can be viewed by us and downloaded to our systems.

The legal basis for the processing of the data by us is basically a consent Art. 6 Para. 1 lit. a) DSGVO. If you transmit data to fulfill or initiate a contract, the legal basis for processing the data is also Art. 6 (1) (b) GDPR.

communication with us

You can contact us in various ways, including via the contact form on our website. You are also welcome to receive regular information via e-mail with our newsletter.

contact form

If you want to use the contact form in our online offer, we collect the personal data that you provide in the contact form, in particular your name and e-mail address. We also store the IP address and the date and time of the request. We process the data transmitted via the contact form exclusively for the purpose of being able to answer your inquiry or request.

You can decide for yourself what information you send us via the contact form. The legal basis for the processing of your data is your consent in accordance with Article 6 (1) (a) GDPR.

After we have processed the matter, the data will initially be stored in case of any queries. Deletion of the data can be requested at any time, otherwise the deletion will take place after the matter has been completely settled; statutory retention requirements remain unaffected.

When you register for our newsletter, your e-mail address will be used for our own advertising purposes until you unsubscribe. You will receive regular information by e-mail on current topics as well as e-mails for special reasons, for example special campaigns. The e-mails can be personalized and individualized based on our information about you.

Unless you have given us your consent in writing, we use the so-called double opt-in procedure to register for our newsletter, ie we will only send you a newsletter by e-mail if you have expressly confirmed this to us beforehand that we should activate the newsletter dispatch. We will then send you a notification email and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in this email.

The legal basis for the processing of your data is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR if you have expressly registered for the newsletter. Within the framework of the legal requirements, it may also be possible for you to receive our newsletter without your express consent because you have ordered goods or services from us, we have received your e-mail address in this context and you have the right to receive information have not objected by email. In this case, the legal basis is our legitimate interest in the transmission of direct advertising in accordance with Article 6 (1) (f) GDPR.

If you no longer wish to receive any newsletters from us, you can revoke your consent at any time with effect for the future or object to further receipt of the newsletter without incurring any costs other than the transmission costs according to the basic tariffs. Simply use the unsubscribe link contained in every newsletter or send a message to us or our data protection officer.

social media

In our online offer you will find links to the social networks Facebook, Pinterest and Instagram, the blogging platform Tumblr and the short message service Twitter. You can recognize the links by the respective logo of the provider.

Clicking on the links will open the relevant social media pages for which this privacy policy does not apply. For details on the provisions applicable there, please refer to the relevant data protection declarations of the individual providers; You can find these at:

Facebook: http://www.facebook.com/policy.php

Pinterest: https://policy.pinterest.com/de/privacy-policy

Instagram: https://help.instagram.com/155833707900388

Tumblr: https://www.tumblr.com/privacy/de

Twitter: https://twitter.com/privacy?lang=en

Before calling up the corresponding links, no personal information is transmitted to the respective provider. Your access to the linked page is also the basis for data processing by the respective provider.

Your rights and contact

We attach great importance to explaining the processing of your personal data as transparently as possible and also to informing you about the rights to which you are entitled. If you would like more information or want to exercise your rights, you can contact us at any time so that we can take care of your request.

data subject rights

You have extensive rights with regard to the processing of your personal data. First of all, you have an extensive right to information and, if necessary, you can request the correction and/or deletion or blocking of your personal data. You can also request a restriction of processing and have a right of objection. With regard to the personal data you have transmitted to us, you also have the right to data portability.

If you wish to exercise any of your rights and/or receive more information about them, please contact our customer service. Alternatively, you can also contact our data protection officer.

Withdrawal of consent and objection

Once you have given your consent, you can revoke it at any time with effect for the future. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation. Contacts for this are also our customer service and our data protection officer.

If the processing of your personal data is not based on consent but on another legal basis, you can object to this data processing. Your objection leads to a review and, if necessary, termination of the data processing. You will be informed of the result of the check and - if the data processing is to be continued - you will receive more detailed information from us as to why the data processing is permissible.

Data protection officer and contact

We have appointed an external data protection officer who supports us in data protection issues and who you can also contact directly. Our data protection officer and his team will be happy to answer any questions you may have about our handling of personal data or further information on data protection issues:

Aaron Burdack

If you would like to contact our data protection officer personally by email, you can also reach him at datenschutz@queence.de.

complaints

If you believe that we are not processing your personal data in accordance with this data protection declaration or the applicable data protection regulations, you have the right to lodge a complaint with a supervisory authority. You can complain to our data protection officer. The data protection officer will then examine the matter and inform you of the result of the examination.

More information and changes

Links to Other Sites

Our online offer may contain links to other websites. These links are usually marked as such. We have no influence on the extent to which the applicable data protection regulations are observed on the linked websites. We therefore recommend that you also inform yourself about the respective data protection declarations on other websites.

Changes to this Privacy Policy

The status of this data protection declaration is indicated by the date (below). We reserve the right to change this data protection declaration at any time with effect for the future. A change occurs in particular in the case of technical adjustments to the online offer or changes in the data protection regulations. The current version of the data protection declaration can always be called up directly via the online offer. We recommend that you inform yourself regularly about changes to this data protection declaration.

Status of this data protection declaration: May 2018