K-fee System (hereinafter "K-fee" or "we") the protection of your personal data is an important concern. The processing of your personal data by K-fee therefore takes place exclusively within the framework of the data protection provisions of the European Data Protection Regulation (EU-GDPR). On this page we inform you according to Art. 13, 14 EU-GDPR about the processing of your personal data.
Controller for data processing is
Our data protection officer is
PricewaterhouseCoopers Legal AG Rechtsanwaltsgesellschaft
Moskauer Straße 19
When visiting this website and using the various offers, we process your personal data as described in detail below.
Table of contents
3. Google Ads Remarketing
4. Social Media Plugins - Youtube
5. Online Advertising via Facebook Pixel
6. Google Analytics
6.1 Google Analytics Advertising Features
7. Campaign Manager (formerly Doubleclick by Google)
8. Affiliate Marketing
9. Online Advertising via Google - Google Ads (formerly Google AdWords)
10. Contact and customer complaints
12. Rights of the data subject
We use so-called cookies on the website hosted at www.k-fee.com (including its subpages). These are small text files that are transferred from our web server to your computer via your web browser and stored there on the permanent memory (hard disk, fixed memory, etc.). The information stored in cookies (e.g. IP address, date and time of the request, web browser used and operating system) is read by us. Below you will find further information on individual cookies used by us.
a) Necessary Cookies
Some of these cookies process personal data to the extent that this is necessary for the provision of certain functions of the web pages, e.g. when entering data, in order to enable you to navigate the web pages without having to repeat your entries on each subpage (hereinafter referred to as "necessary cookies"). The processing of your personal data in this respect is based on Art. 6 Para. 1 S. 1 lit. b) EU-GDPR, whereby this data is only stored for the duration of your current browser session. You have no legal or contractual obligation to provide the data collected by function cookies, but you cannot use our websites without processing this data.
In the following you will find more detailed information on the necessary cookies used:
|K-fee System||__csrf_token||Protects the user from CSRF attacks.||session||https://www.k-fee.com/service/datenschutz|
|K-fee System||allowCookie||Cookie storage||6 months||https://www.k-fee.com/service/datenschutz|
|K-fee System||BasketToken||Storage of the reference ID for the data in the shopping cart||1 year||https://www.k-fee.com/service/datenschutz|
|K-fee System||nocache||Used for cache control for pages or elements that should not be kept in the cache.||session||https://www.k-fee.com/service/datenschutz|
|K-fee System||session||Retains user states for all page requests.||session||https://www.k-fee.com/service/datenschutz|
|K-fee System||slt||Shopware Login Token||1 year||https://www.k-fee.com/service/datenschutz|
|K-fee System||x-cache-context-hash||Remembers customer group and tax rate.||session||https://www.k-fee.com/service/datenschutz|
|K-fee System||x-ua-device||Determination of the end device used.||session||https://www.k-fee.com/service/datenschutz|
b) Functional Cookies
We currently use the following functional cookies:
|K-fee System||lastCheckSubscriptionDate||Storage of the date of the last visit||1 day||https://www.k-fee.com/service/datenschutz|
|doubleclick.net||test_cookie||This cookie determines whether the browser accepts cookies.||session||https://policies.google.com/privacy|
|google.com||CONSENT||The cookie stores permission for third party content to be used in frames.||20 years||https://policies.google.com/privacy|
c) Marketing Cookies
We currently use the following marketing cookies:
|doubleclick.net||IDE||Used by Google DoubleClick to register and report the user's actions on the website after viewing or clicking on one of the provider's ads, for the purpose of measuring the effectiveness of an advertisement and displaying targeted advertising to the user.||1 year||https://policies.google.com/privacy|
|google.com||1P_JAR||Used to tailor advertisements to the user.||1 month||https://policies.google.com/privacy|
|google.com||ANID||This is a cookie used by Google AdWords to monitor advertising performance and deliver ads to visitors based on previously visited websites.||1 year||https://policies.google.com/privacy|
|google.com||NID||DoubleClick cookie, part of Google Analytics. Used to make ads more attractive.||6 months||https://policies.google.com/privacy|
|google.com||ads/ga-audiences||Used by Google AdWords to re-involve visitors who are likely to become customers because of their online behavior on different websites.||session||https://policies.google.com/privacy|
|google.com||_ga||This cookie is used to differentiate visitors.||2 years||https://policies.google.com/privacy|
|google.com||_gat||Used to throttle the polling rate.||10 minutes||https://policies.google.com/privacy|
|google.com||_gid||Register a unique ID that is used to generate statistical data about how the visitor uses the site.||1 day||https://policies.google.com/privacy|
|google.com||collect||Used to send data to Google Analytics about the device and the behavior of the visitor. Captures the visitor across devices and marketing channels.||session||https://policies.google.com/privacy|
|google.com||DV||This cookie is used to collect information about how visitors use our website.||session||https://policies.google.com/privacy|
|facebook.com||fr||Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.||3 months||https://www.facebook.com/privacy/explanation|
|facebook.com||tr||Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.||session||https://www.facebook.com/privacy/explanation|
|facebook.com||_fbp||Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.||3 months||https://www.facebook.com/privacy/explanation|
In addition, each time you visit our website, your browser automatically transmits your IP address, identification (manufacturer, version, operating system) and language settings of your web browser, the time of your visit and visited sub-pages of our website, your referrer URL (i.e. the URL of the page from which you are visiting us), as well as the data volume generated during your visit to our website (hereinafter "access data"). We process your access data in order to guarantee system security (e.g. to ward off hacker attacks) and to compile usage statistics. This processing takes place on the basis of our legitimate overriding interest (Art. 6 Para. 1 S. 1 lit. f) EU-GDPR). You have neither a legal nor a contractual obligation to provide your access data, nor is this necessary for the conclusion of a contract. However, you must provide us with your access data so that you can access our website and use the offers and services provided on it.
a) Processing Purposes, Profiling:
On the Websites, we use Google LLC's AdWords Remarketing service to alert you to our goods and services through advertisements placed on third-party websites and Google search results.
If you have given us your consent to do so, Google will place a remarketing cookie (see also section 1 lit. c) on your device when you visit our website, which will create a pseudonymised profile of your surfing behaviour. This profile records, for example, which pages you have visited and which advertisements you have already seen or clicked. This "remarketing" function enables us to adapt the above advertising content to your personal interests (which we determine on the basis of the data collected with the remarketing cookie). In this respect, our use of Google Ads also results in profiling within the meaning of Art. 4 No. 4 EU-GDPR.
Further data processing will only take place if you have agreed to Google linking your web and app browser history to your Google Account and using information from your Google Account to personalize ads you see on the web. In this case, if you are logged in to Google while browsing our site, Google will use your information in conjunction with Google Analytics data to create cross-device remarketing audience lists. For this purpose, Google temporarily links your personal data to Google Analytics data in order to form target groups.
b) Legal basis, storage period, no obligation to provide:
The legal basis for the use of the remarketing function of Google Ads is Art. 6 para. 1 S. 1 lit. a) EU-GDPR. The data collected in this context will be deleted after we have discontinued the use of Google AdWords Remarketing for the intended purpose and at the end of its use. You are neither obliged to provide data for the operation of Google Ads, nor is this necessary for the conclusion of a contract.
The data collected using Google Ads (including your IP address and your pseudonymous usage profile) is transmitted to a Google server located in the USA and processed there. Google LLC has its headquarters in the USA. There is no adequacy decision by the Commission of the European Union that the United States ensures an adequate level of data protection. An adequate level of data protection is ensured by the fact that Google LLC has submitted to the EU-US Privacy Shield (list available at https://www.privacyshield.gov/list).
d) Right to withdraw:
You can withdraw your consent to the processing of your data within the scope of Google Ads Remarketing at any time with effect for the future (see also section 12 g) below). There are several ways to do this: You can generally block tracking or third party cookies using your browser settings. You can also set your browser to block cookies from the "www.googleadservices.com" domain (via https://www.google.de/settings/ads; please note that this setting will be deleted if you delete your cookies). You can also deactivate Google's personalised advertising by installing the browser plugin available at http://www.google.com/settings/ads/plugin. You can also deactivate personalised advertising from participants in the self-regulation campaign "About Ads" (including Google) via the link http://www.aboutads.info/choices (please note that your setting will also be deleted here if you delete your cookies). Finally, you can also withdraw your consent by contacting us directly (see also section 12 f) below).
On our website we use YouTube. This is a video portal of YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as "YouTube".
YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only referred to as "Google".
We use YouTube in conjunction with the "Privacy Enhanced Mode" feature to display videos to you. According to YouTube, the function " Privacy Enhanced Mode " means that the data described in more detail below will only be transmitted to YouTube's server if you actually start a video; i.e. all these plug-ins are deactivated as long as you do not activate the relevant click field with a mouse click. Your IP address and referrer URL (hereinafter "social media data") will only be transmitted to YouTube or Google when you click on them. This also applies if you do not have a Google account or are not logged in. If you are logged in at Google, your social media data collected by us will be directly assigned to your existing account at Google. We recommend that you log out regularly after using a social network, especially before activating the click field, as this will help you avoid being assigned to your profile on Google.
We use YouTube to show you videos about our products, etc., so that we can improve our offering and make it more interesting for you as a user. Legal basis for the use of YouTube by us is Art. 6 Para. 1 S. 1 lit. f) EU-GDPR. In the case of YouTube/Google, your social media data will also be transferred to the USA; the legal basis for the transfer of such data to third countries is the certification of the aforementioned providers in accordance with EU-US Privacy Shield (see https://www.privacyshield.gov/EU-US-Framework). You have neither a legal nor a contractual obligation to provide your social media data, nor is this necessary for the conclusion of a contract.
YouTube/Google stores your social media data in user profiles created for you personally in order to process them for the purposes of advertising, market research and/or the needs-based design of your websites. Such an evaluation is carried out in particular (also for users who are not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective provider to exercise this right.
We have no influence on the data collected and data processing operations of YouTube/Google, nor are we aware of the full scope of data collection, the purposes of processing or storage periods. We also do not have any information on the deletion of the collected data by YouTube/Google. Further information on the purpose and scope of data collection can be found in the data protection declarations listed below. There you will also find further information on your rights in this regard and setting options to protect your privacy:
- Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA. Google has submitted to the EU-US Privacy Shield. The provider provides further information on data processing here:
- YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The provider provides further information on data processing here:
The website uses the remarketing function "Custom Audiences" of Facebook Inc. ("Facebook"). This allows users of our site to display interest-based ads ("Facebook Ads") on one of the Facebook social networking platforms (including WhatsApp or Instagram) on their next visit to our site. We are interested in displaying advertisements that are tailored to you in order to make our website more interesting for you. The Facebook pixel is used because of our legitimate interest pursuant to Art. 6 Para. 1 S. 1 lit. f EU-GDPR. Our interest lies in the follow-up of our marketing measures and the optimisation of our advertising. The data collected in this context will be deleted after the purpose for which it was collected has ceased and at the end of our use of Facebook pixels.
A combination with other data entered by you in the context of a possible ordering process with us does not take place.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the extent and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding website of our website or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible for the provider to find out and store your IP address and other identification features.
The Facebook pixel is an offer from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The parent company, Facebook Inc. has its headquarters in the USA and is certified under the EU-US Privacy Shield. There is no adequacy decision by which the Commission of the European Union has decided that the United States ensures an adequate level of data protection. An adequate level of data protection is ensured by the fact that Facebook Inc. has submitted to the EU-US Privacy Shield. The list is available at: https://www.privacyshield.gov/list.
For more information about data processing by Facebook, please https://www.facebook.com/about/privacy.
Categories of data, recipients, processing purposes
As a rule, no personal data is processed when Google Analytics is used. Your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there (for these cases Google has subjected itself to the EU-US Privacy Shield, available at https://www.privacyshield.gov/EU-US-Framework). We would like to point out that on our web pages Google Analytics has been extended by the plug-in "AnonymizeIP"; in order to guarantee an anonymised collection of your IP address also in these exceptional cases, so that your data are not referable to your person.
The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
b) Legal basis, storage period
The legal basis for the use of Google Analytics is Art. 6 Para. 1 lit. a) / f) EU-GDPR. Sessions are terminated regularly after 30 minutes without activity and campaigns after six months; data on campaigns can be stored for a maximum of two years.
c) Right to object
If Google Analytics processes your data in personal form, you can object to this at any time - in this case this processing will be stopped immediately.
In particular, you can send your informal objection to our data protection officer: firstname.lastname@example.org.
You may also exercise your right to object by selecting the appropriate settings on your browser to prevent the cookies used by Google Analytics from being saved (see here for further information); however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as Google from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
Please note that you are leaving our website by doing so.
d) Information of Google
Google Dublin, Google Ireland Ltd.
Gordon House, Barrow Street, Dublin 4, Ireland
Fax: +353 (1) 436 1001.
In addition to the standard functions, we also use the advanced functions of Google Analytics on this website. The Google Analytics advertising features implemented on this website include:
- Reports about impressions in the Google Display Network;
- Google Analytics reports on performance by demographics and interests;
- Integrated services for which Google Analytics collects data for advertising purposes, including collection of data via cookies for ads preferences and anonymous identifiers.
For this purpose, in addition to the data collected by the Google Analytics analysis tool, other data about Google cookies for ads preferences and anonymous access identifiers is collected. We use this information to improve our websites. You can prevent the use of Google Analytics advertising features in a number of ways: a) by setting your browser software accordingly; b) by setting Google's ad preferences at https://www.google.com/ads/preferences/?hl=en c) by setting a cookie accordingly, or d) by opting out of the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
More information on cookies can also be found under the previous paragraph 1 c) "Marketing Cookies". Lifetime of cookies: up to 12 months (this only applies to cookies set via this website). Storage period: up to 26 months Legal basis for this is Art. 6 Para 1 lit. a) EU-GDPR.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Campaign Manager, Google receives the information that you have called the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, the provider may still store your IP address.
In addition, the Campaign Manager (DoubleClick Floodlight) cookies used enable us to understand whether you are performing any actions on our website after you have accessed or clicked on one of our display/video ads on Google or another platform via Campaign Manager (conversion tracking). Campaign Manager uses this cookie to understand the content that you have interacted with on our websites in order to send you targeted advertisements later.
You can also find more information about cookies under the previous paragraph 1 c) under "Marketing Cookies".
You can prevent participation in this tracking process in several ways: a) by setting your browser software accordingly, in particular by suppressing third party cookies so that you do not receive advertisements from third parties; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, at https://www.google.de/settings/ads, whereby this setting is deleted when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the "About Ads" self-regulatory campaign via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies; d) by permanently disabling it in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin; e) by setting the appropriate cookies setting. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
In addition, you can prevent Google from collecting the information generated by the cookies about your use of the websites and the processing of this information by Google by downloading and installing the browser plug-in available at https://support.google.com/adsense/answer/142293?hl=en under "Display settings", "Campaign Manager deactivation extension".
The legal basis for this is Art. 6 Para. 1 S. 1 lit. f) EU-GDPR.
The K-fee processes your personal data for the implementation of an affiliate marketing campaign. This helps us to track which third party provider of websites, apps or other technologies referred potential customers to our websites and apps ("referrer") and pay them a commission in return for these referrals. We have a legitimate interest in running an online advertising campaign that is performance-based. The legal basis is Art. 6 para. 1 lit. f) EU-DSGVO. The collected data will be deleted after 36 months
It contains information about your rights with regard to data processing by Awin.
In some cases, Awin may maintain a restricted profile relating to you. However, this will not reveal your identity, online behavior or other personal characteristics. The sole purpose of this profile is to track whether a forwarding was initiated on one device and completed on another.
In some cases, Awin and the referrer of the potential customer may receive and process your personal data in order to jointly implement the affiliate marketing campaign with us.
We also receive personal data of potential customers from Awin and the referrers, which can be divided into the following categories: Cookie data, data relating to the website, app or technology from which a potential customer was referred to us and technical information about the device you are using.
You have the right to withdraw your consent to the affiliate marketing at any time and for the future by disabling the affiliate marketing cookie via this link https://www.awin.com/fr/cgv/optout.
We use the services of Google Ads Conversion to draw attention to our services with the help of advertising media (so-called Google Ads) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In doing so, we pursue the interest of displaying advertising to you that is of interest to you, of making our website more interesting for you and of achieving a fair calculation of advertising costs. The legal basis is Art. 6 Para. 1 S. 1 lit. f) EU-GDPR.
These advertising media are delivered by Google via so-called "Ad Servers". For this purpose we use Ad Server Cookies, which can be used to measure certain parameters such as the display of advertisements or clicks by users. If you access our website via a Google advertisement, Google Ads stores a cookie on your device. These cookies usually lose their validity after 30 days. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an ad customer's website and the cookie stored on their computer has not expired, Google and the customer may recognize that the user clicked on the ad and was directed to that page. Each ads customer is assigned a different cookie. Cookies cannot therefore be tracked through the websites of ads customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: By integrating Ads Conversion, Google receives the information that you have called the relevant part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible for the provider to find out and store your IP address.
Google Ads Conversion is a service provided by Google LLC (www.google.de). Google LLC has its headquarters in the USA and is certified under the EU-US Privacy Shield. An adequacy decision by which the European Union Commission has decided that the U.S. ensures an adequate level of data protection does not exist. An adequate level of data protection is ensured by the fact that Google LLC has submitted to the EU-US Privacy Shield. The list is available at: https://www.privacyshield.gov/list.
You may opt-out of the use of Ad Server Cookies at any time with future effect by deactivating Ad Server Cookies via this link: https://adssettings.google.com/authenticated?hl=en#display_optout. In addition, you can obtain information from the Digital Advertising Alliance about the setting of cookies and make settings in this regard.
You have the option of contacting us directly via a contact form provided on our website. In this case, you must provide your name, e-mail address and a subject for your request. We also offer you the opportunity to contact us directly via e-mail. If you click on the "E-Mail" button on our website, your e-mail program will open and you can send us a message to our pre-registered e-mail address. If you contact us via e-mail or web form, we will also collect your IP address and the time at which you send us your message. You are under no legal or contractual obligation to provide your aforementioned data, nor is this necessary for the conclusion of a contract. Without this data, however, it will not be possible to process your request. We use the information you send us via contact form or e-mail exclusively to process your request. The legal basis for this processing is Art. 6 Para. 1 S. 1 lit. b) EU-GDPR. We process your IP address and the time of your request in order to identify and ward off automated access and hacker attacks. The legal basis for this processing is Art. 6 para. 1 S. 1 lit. f) EU-GDPR. In principle, we delete this data at the end of one week after your request has been answered or otherwise dealt with; in individual cases, however, we keep this data for longer if we are legally entitled or obliged to do so (e.g. by virtue of commercial or tax retention periods).
a) Shop orders:
In addition to using our website for information purposes, you can also order our products via our online shop www.k-fee.com . If you would like to order in our online shop, you must provide us with your name, address and other contact data as mandatory information; you can provide further information on a voluntary basis (hereinafter jointly referred to as "order data").
We process your order data only to the extent necessary to fulfill the contract with you. The legal basis for this is Art. 6 Para. 1 S. 1 lit. b) EU-GDPR. Due to commercial and tax law requirements, we are obliged to store your order data regularly for six or ten years (starting at the end of the year in which the respective document is created or finalised). However, we restrict the processing of this data at the latest after two years, i.e. your data will only be processed to comply with legal obligations. You are neither legally nor contractually obliged to provide us with your order data which is marked „mandatory“. Without this data though, we are not able to provide you with the ordered products.
b) Customer account:
You are free to voluntarily create a customer account where your order data will be saved for further purchases and to display your personal order history. The legal basis for this processing is Art. 6 Para. 1 S. 1 lit. f) EU-GDPR.
We store the order data stored in your customer account until individual details are updated or your account is deleted in its entirety. The longer-term storage of your order data due to legal storage obligations (see section 9 a) above) remains unaffected. You have neither a legal nor a contractual obligation to provide your order data for the customer account, nor is this necessary for the conclusion of a contract. You can also order goods from us without setting up a customer account. However, it is not possible to provide a customer account without your order data.
c) Recipient of your personal data:
If you order products in our online shop, your personal data will also be disclosed to the following recipients, whose services we use to process your order:
- external service providers who support us in the technical provision of our services, who have been carefully selected and integrated in compliance with data protection laws and who process your data on our behalf;
- Postal service providers who are involved in the processing of your order (shipping) (legal basis for this transmission is Art. 6 Para. 1 S. 1 lit. b) EU-GDPR);
- Payment service provider for the processing of your payment, depending on the type of payment you have chosen, to credit institutions, PayPal, Amazon or paydirekt (legal basis for this transfer is Art. 6 Para. 1 S. 1 lit. b) EU-GDPR);
We are entitled to obtain and evaluate creditworthiness information if and as long as you have given us your consent (Art. 6 Para. 1 S. 1 lit. a EU-GDPR). In addition, there are cases in which obtaining creditworthiness information is in our legitimate interest (Art. 6 para. 1 S. 1 lit. f EU-GDPR), if we bear a considerable credit risk through the drafting of the contract, in particular if we make advance payments, especially as you can also choose other methods of payment (without credit assessments).
Our customers can use the payment option offered by PayPal, a company based in Luxembourg, and pay directly through their PayPal account. In order to process your order, PayPal requires some information, such as your name or address, your e-mail address and the goods purchased plus the amount to be paid. PayPal receives some of this data from us through the transmission of your order data, and the rest directly from you by depositing the requested information with PayPal. The provision of your data by you is necessary for payment processing and execution of the contract.
How PayPal handles your data cannot be influenced by us, is beyond our knowledge and is the subject of the contractual relationship between you and PayPal. However, we would like to point out that PayPal may transfer your data to credit agencies in order to obtain a credit rating to assess the liability risk. The valid data protection regulations of PayPal can be called up under https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
You are free to choose this payment service and are under no obligation to do so. If you decide to use PayPal, the transmission of the data to PayPal is necessary for processing and therefore permissible according to Art. 6 Para. 1 S. 1 lit. b) EU-GDPR.
In order to protect your personal data in the best possible way, we use SSL encryption (https-standard) to implement technical and organisational security measures, which are also adapted to the current state of the art in accordance with the risks involved.
Our customers can use the payment option offered by Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg ("Amazon Payments"). Amazon Payments may, if necessary, transfer the processed personal data to Amazon Payments UK Limited, which will also act as the data controller in connection with the Service. Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three located at 38 avenue J.F. Kennedy, L-1855, Luxembourg, are data processors of information collected for the Service.
In order to process the payment of the order, Amazon Payments, according to its own information, processes information that you provide directly to Amazon Payments (e.g. name, address, e-mail address, login information and bank details when opening a payment account; e.g. date of birth, passport, driver's license number, credit card statements and information, current utility bill or similar to verify your identity), automatically collected information (e.g. IP address, computer, device, operating system, device application, etc.) and information from other sources (e.g. account information and credit history information from credit bureaus). The provision of your data by you or the collection of the data by Amazon Payments is necessary for payment processing and execution of the contract.
Amazon Payments is also entitled to pass on your data to unnamed third parties (e.g. third party service providers such as banks, affiliated companies, etc.).
You are free to choose this payment service and are under no obligation to do so. If you decide to use Amazon Payments, the transmission of the data to Amazon Payments is necessary for processing and is therefore permissible according to Art. 6 Para. 1 S. 1 lit. b) EU-GDPR.
Our customers can make use of the payment option offered by paydirekt GmbH, a company based in Germany. In order to process an order, paydirekt processes its payment data (e.g. payment amount, details of the payee) and its confirmation of the payment data according to its own specifications. paydirekt also collects and stores transaction data (transaction reference, transaction ID and, if applicable, information on the shopping basket). paydirekt receives some of this data from us through the transmission of your order data, and the rest from you directly by providing the information requested to paydirekt. The provision of your data by you is necessary for payment processing and execution of the contract. paydirekt transmits this data to your bank so that it can authorise payment.
You are free to choose this payment service and are not obliged to do so. If you decide to use paydirekt, the transmission of the data to paydirekt is necessary for processing and therefore permissible according to Art. 6 Para. 1 S. 1 lit. b) EU-GDPR.
In the following we would like to inform you about the further rights to which you are entitled as a data subject according to Art. 15-21 and Art. 77 para. 1 EU-GDPR. To assert these rights, you can contact our data protection officer email@example.com by e-mail in particular.
a) Right of access:
Pursuant to Art. 15 EU-GDPR, you have the right to obtain information on data processing and a copy of the data processed. Within this context you also have the right to receive a copy of your personal data processed by us in accordance with Art. 15 para. 3-4 EU-GDPR.
b) Right to rectification:
In accordance with Art. 16 EU-GDPR, you have the right to demand that we correct or complete your personal data.
c) Right to erasure (‘right to be forgotten’):
In accordance with Art. 17 para. 1 EU-GDPR you have the right to demand that we delete your personal data. If we have published your personal data, you also have the right, in accordance with Art. 17 para. 2 EU-GDPR, to request that we inform other responsible persons of your request to delete all links to and/or copies or replications of your personal data.
d) Right to restriction of processing:
In accordance with Art. 18 EU-GDPR, you have the right to demand that we restrict the processing of your personal data.
e) Right to data portability:
Pursuant to Art. 20 EU-GDPR, you have the right to receive the personal data about you that you have provided to us in a structured, common and machine-readable format and to request the transfer of this data to another controller.
f) Right to withdraw consent:
If you have given us your consent to process your personal data, you can withdraw this consent at any time, in total or with regard to individual processing purposes, in each case without giving reasons.
Please note that a lawful processing of your personal data, which has taken place until the time of your withdraw, will not be retroactively unlawful by this.
You can withdraw any consent you have given us for the processing purposes listed above, in particular by clicking on the hyperlinks mentioned there. You may also withdraw your consent in particular by send a respective e-mail to firstname.lastname@example.org.
If you withdraw your consent to a particular service, you can no longer use that service; you will not suffer any further disadvantages.
g) Right to object:
Pursuant to Art. 21 EU-GDPR, you have the right to object to the processing of your personal data by us insofar as this is carried out for the purpose of direct advertising and/or on the basis of a "legitimate interest" within the meaning of Art. 6 para. 1 S. 1 lit. f) EU-GDPR.
h) Right to lodge a complaint with a supervisory authority:
According to Art. 77 para. 1 EU-GDPR, you have the right to lodge a complaint with a supervisory authority against the processing of your personal data by us if you are of the opinion that the processing of your personal data violates data protection regulations.
State Commissioner for the Protection of Data and Freedom of Information
Postfach 20 04 44
In addition, you have the option of asserting other legal remedies to which you are entitled (e.g. with courts or supervisory authority).