Data protection
§ 1. General
Your personal data (e.g. title, name, address, email address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases, storage periods, the following regulations also inform you about your rights and who is responsible for your data processing. This data protection declaration only applies to our websites. If you are redirected to other sites via links on our pages, please inform yourself there about how your data is handled.
§ 2 Data processing to fulfill the contract
(1) Purpose of processing
The personal data you provide to us during the ordering process is required to conclude a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without providing your address. For some payment methods, we require the necessary payment data in order to pass it on to a payment service provider commissioned by us. The data entered in the ordering process will be processed for the purpose of fulfilling the contract.
If you send us an inquiry by email, via a contact form, etc. before concluding the contract, we will process the data received in this way to carry out pre-contractual measures and respond, for example. B. Your questions about our products.
If you open a customer account, your data (in particular name, address, payment method, email and password) will be processed to register and create a customer login. With the saved data you can shop with us more quickly and view the orders you have placed at any time. You can remove the account again by sending a message to us or using the delete function.
(2) Legal basis
The legal basis for this processing is Article 6 Paragraph 1 b) GDPR.
(3) Recipient categories
Payment service providers, shipping service providers, hosting providers, if applicable merchandise management system, if necessary suppliers (dropshipping).
(4) Storage period
We store the data required to process the contract until the statutory warranty and, if applicable, contractual guarantee periods expire.
We retain the data required by commercial and tax law for the legally specified periods, usually ten years (see Section 257 HGB, Section 147 AO).
The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and it is clear that a contract will not be concluded.
§ 3 Comments
(1) Purpose of processing
It is possible to write a comment. Your data (e.g. name/pseudonym, email address, website) will then only be processed for the purpose of publishing your comment.
(2) Legal basis
The legal basis for this processing is Article 6 Paragraph 1 f) GDPR.
(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on certain topics and products. The publication serves, among other things, transparency and opinion formation. Your interest in data protection is protected because you can publish your comment under a pseudonym.
(4) Storage period
A specific storage period is not provided. You can request that your comment be deleted at any time.
(5) RIGHT TO OBJECT
You have the right to object at any time to data processing that is carried out on the basis of Article 6 Paragraph 1 f) GDPR and is not used for direct advertising for reasons arising from your particular situation.
In the case of direct advertising, however, you can object to the processing at any time without giving reasons.
§ 4 PayPal transactions
Please note that all PayPal transactions are subject to the PayPal Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
§ 5 Credit check by Klarna
Please note the following data protection regulations if you choose Klarna's payment services:
http://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
§ 6 Information about cookies
(1) Purpose of processing
Technically necessary cookies are used on this website. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable e.g. B. placing several products in a shopping cart.
(2) Legal basis
The legal basis for this processing is Article 6 Paragraph 1 f) GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected through technically necessary cookies is not used to create user profiles. This protects your interest in data protection.
(4) Storage period
The technically necessary cookies are usually deleted when you close the browser. Permanently stored cookies have a varying lifespan, from a few minutes to several years.
(5) RIGHT TO OBJECT
If you do not want these cookies to be stored, please deactivate the acceptance of these cookies in your internet browser. However, this may result in a functional restriction on our website. You can also delete permanently stored cookies at any time via your browser.
§ 7 Newsletter
(1) Purpose of processing
When you register for the newsletter, your email address will be used for advertising purposes, i.e. H. As part of the newsletter, we inform you in particular about products from our range. For statistical purposes, we can evaluate which links in the newsletter are clicked. We cannot see which specific person clicked. You have given the following consent separately or, if necessary, expressly during the ordering process: Subscribe to the newsletter
(2) Legal basis
The legal basis for this processing is Article 6 Paragraph 1a) GDPR.
(3) Recipient categories
If necessary, newsletter delivery provider
(4) Storage period
Your email address will only be saved for the newsletter dispatch for the duration of the desired registration.
(5) Right of withdrawal
You can revoke your consent at any time with future effect. If you no longer wish to receive the newsletter, you can unsubscribe as follows: Using an unsubscribe link in the newsletter; By email
§ 8 Your rights as a data subject
If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights towards us as the person responsible:
1. Right to information
You can request information about your personal data processed by us within the scope of Article 15 GDPR.
2. Right to rectification
If the information concerning you is no longer accurate, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
3. Right to deletion
You can request the deletion of your personal data under the conditions of Art. 17 GDPR.
4. Right to restriction of processing
Within the framework of the provisions of Article 18 GDPR, you have the right to request a restriction on the processing of the data concerning you.
5. Right to data portability
According to Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.
6. Right to revoke the declaration of consent under data protection law
According to Art. 7 Para. 3 GDPR, you have the right to revoke your data protection declaration of consent at any time. This does not affect the lawfulness of the processing carried out based on consent until its revocation.
7. Right to complain to a supervisory authority
If you are of the opinion that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your place of residence, your place of work or the place of the alleged violation) in accordance with Article 77 of the GDPR. to.
Please also note your right to object according to Art. 21 GDPR:
a) General: justified objection required
Personal data concerning you is processed
- to protect our overriding legitimate interest (legal basis according to Art. 6 Para. 1 f) GDPR) or
- in the public interest (legal basis according to Art. 6 Para. 1 e) GDPR),
you have the right to object to processing at any time for reasons relating to your particular situation; This also applies to profiling based on the provisions of the GDPR.
In the event of an objection, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
b) Special case of direct advertising: a simple objection is sufficient
If your personal data is processed for the purpose of direct advertising, you have the right to object to this processing at any time and without giving reasons; This also applies to profiling insofar as it is connected to such direct advertising.
If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes.
§ 9 Hotjar
We use Hotjar to better understand the needs of our users and to optimize the offering and experience on this website. Using Hotjar's technology, we get a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click, what they like and don't like, etc.) and this helps us tailor our offering based on our users' feedback to align. Hotjar works with cookies and other technologies to collect data about the behavior of our users and their devices, in particular the IP address of the device (is only recorded and stored in anonymized form during your use of the website), screen size, device type (unique device identifiers ), information about the browser used, location (country only), preferred language for viewing our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.
Person responsible for data processing:
Enzo Escoba| est. 2017
Siedlerstrasse 31
85716 Unterschleissheim
Telephone: +4915775007355
info@enzoescoba.de