1. general

1.1 What are personal data

Personal data is information that discloses or may disclose the identity of the user. We adhere to the principle of data avoidance. As far as possible, personal data is not collected.

1.2 Handling of personal data

Personal data is used exclusively for the purpose of establishing the contract, defining its content, implementing or processing the contractual relationship (Art. 6 I p. 1 b DSGVO). Beyond that, personal data will only be processed if we have received your consent to do so (Art. 6 I S. 1 a DSGVO). As a matter of principle, they are not passed on to third parties. Only for the fulfillment of the contract, the data will be passed on to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. For the processing of payments, the payment data required for this purpose will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider. The processing of your personal data takes place exclusively within the EU, unless otherwise stated below.

1.3 Usage data

When visiting the website, general technical information is collected. These are the IP address used, time, duration of the visit, browser type and, if applicable, the page of origin. For technical reasons, this usage data is registered in a log file and can be used and stored for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.

1.4 Registration data

Registration is required for full use of the features of our website. The registration data is collected through your corresponding entries and used for the specifically stated purpose in accordance with your consent (Art. 6 I S. 1 a DSGVO).

1.5 Duration of storage

We store your personal data after the termination of the purpose for which the data was collected only as long as this is required by law (especially tax law).

2. your rights

2.1 Information

You can request information from us as to whether we process personal data about you and, if this is the case, you have a right to information about this personal data and to the further information specified in Art. 15 DSGVO.

2.2 Right to rectification

You have the right to have inaccurate personal data concerning you corrected and may request that incomplete personal data be completed in accordance with Article 16 of the GDPR.

2.3 Right to deletion

You have the right to demand that we delete the personal data concerning you without delay. We are obliged to delete them immediately, especially if one of the following reasons applies:

Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
You withdraw your consent on which the processing of your data was based and there is no other legal basis for the processing.
Your data has been processed unlawfully.
The right to deletion does not exist insofar as your personal data is required for the assertion, exercise or defense of our legal claims.

2.4 Right to restriction of processing

You have the right to request us to restrict the processing of your personal data if

you dispute the accuracy of the data and we therefore verify the accuracy,
the processing is unlawful and you refuse the erasure and request the restriction of use instead
we no longer need the data, but you need it to assert, exercise or defend legal claims,
you have objected to the processing of your data and it has not yet been determined whether our legitimate grounds outweigh your grounds.

2.5 Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us with the help of automated processes.

2.6 Right of withdrawal

If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

2.7 General and right of appeal

The exercise of your above rights is in principle free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the State Data Protection Commissioner, directly.

3. data security

3.1 Data security

All data on our website is secured by technical and organizational measures against loss, destruction, access, modification and distribution.

3.2 Sessions and cookies

To operate the website, we may use cookies or server-side sessions in which data can be stored. Cookies are files that are placed on your hard drive by a website in order to automatically recognize this computer the next time you visit the website and thus to be able to adapt the use of the website to you. Some of the cookies used are deleted after the end of the browser session. These are so-called session cookies. Other cookies remain on your terminal device and allow the browser to be recognized during a subsequent visit to our website (persistent cookies). You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Please note that you may not be able to use some features of this website if cookies are disabled. We ensure that no personal data is taken from sessions or through cookies and that cookies are only used if this is technically necessary for the website. Thus, the weighing shows that there are no overriding interests on your part (Art. 6 I p. 1 f DSGVO).

4. newsletter

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our e-mail newsletter on a regular basis. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to us via the contact options provided in the imprint or via the link provided for this purpose in the newsletter.

5. third party services

5.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, operated by Google Inc.,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) and collects and stores data via this web analytics service, from which user profiles are created using pseudonyms. The usage profiles created in this way are used to evaluate visitor behavior in order to design and improve the offer presented on this website in line with requirements. Google Analytics uses “cookies”, which are small text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The usage profiles kept under a pseudonym will also not be merged with personal data about the user without the user’s express and separately declared consent. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
You can view Google’s privacy policy at http://www.google.de/intl/de/policies/privacy/. For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html. We would like to point out that on this website Google Analytics has been extended by the code “anonymizeIp” to ensure anonymized collection of IP addresses (so-called IP masking).

5.2 Social media links

We have our own social media pages with the third-party providers that can be reached via links from this website. By using the links, you will be taken to the respective websites of the third-party providers (e.g. Facebook, Twitter, Google+). As soon as you have accessed the page of the third-party provider, you are in the area of responsibility of the respective third-party provider, so that their privacy policy or their statements on the use of data also apply. We have no influence on this, but we recommend logging out of the respective third-party provider before using a corresponding link in order to avoid unnecessary data transfer, so that usage profiles cannot be created by the third-party provider simply by using the link.

5.3 Google Web Fonts

In addition, we use so-called web fonts from Google to be able to display a uniform font on our website. These are automatically stored in your browser cache when you call up one of our pages in order to enable the desired display. If your browser does not support the web fonts used, a default font of your computer may be used. Here, no interests of the users are affected which outweigh this technical necessity (Art. 6 I p. 1 f DSGVO). You can view Google’s privacy policy here: https://www.google.com/policies/privacy/ You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq.

5.4 LiveChat Drift

Data collection through use of live chat This website uses Drift, a live chat software from the company Drift, Inc. (https://www.drift.com). Drift uses, among other things, “cookies”, text files that are stored on your computer and that enable a personal conversation in the form of a real-time chat on the website with you. Your data transmitted in the live chat will be stored on servers of Drift, Inc. stored in the USA. By using the live chat, you consent to this transfer. The privacy policy of Drift, Inc. (in English) can be found here: https://www.drift.com/privacy-policy/

5.5 Hotjar

We use Hotjar, an analytics software provided by Hotjar Ltd (“Hotjar”) (http://www.hotjar.com, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta, Europe) on our website. With Hotjar we have the possibility to measure and evaluate your clicks, mouse movements etc. on our website. The information generated by the “tracking code” and “cookie” about your visit to our website is transmitted to the Hotjar servers in Ireland and stored there. Cookies from Hotjar can remain valid for up to 365 days. The following information is collected:

End device specific data

The following information is collected in relation to your terminal device and browser:

IP address of the terminal device (it is collected and stored in anonymized form);
Resolution of the screen/displays of the end device screen;
End device type (individual end device identifiers), operating system, and browser type;
geographic location (country only);
language preferred when viewing the Hotjar-based web page.
User interactions

Mouse events (movements, position and clicks);
Log data

On a random basis, Hotjar’s servers automatically record information collected by our website and Hotjar’s website. Among other things, the following data is collected:

referring domain;
pages visited;
geographic location (country only);
language preferred when displaying the web page;
Date and time when the pages of the website were accessed.
Hotjar uses this information to evaluate your use of our website, compile reports on usage, and other services relating to website usage and internet evaluation of the website.

Hotjar also makes use of third-party services such as Google Analytics and Optimizely. These can store information that your browser sends as part of the website visit (e.g. cookies or IP requests). You can find more information in the privacy policy of these services.

If you do not want recording, you can disable it by setting the DoNotTrack header in your browser. You can also prevent the collection of data by Hotjar by clicking on the following link and following the instructions there: https://www.hotjar.com/opt-out.

You can view Hotjar’s privacy policy at https://www.hotjar.com/privacy.

Contact

To contact us regarding data protection, please feel free to contact us using the contact options below. Responsible person in the sense of the DSGVO:

ECORETAIL Ltd.
Brussels street 6
53842 Troisdorf

Tel: +49 (0) 2241-89632-00
Fax: +49 (0) 2241-89632-99