data protection
We only process personal data (hereinafter referred to as “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Article 4, Paragraph 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” is considered to be any process carried out with or without the help of automated processes or any series of processes carried out in this context with personal data, such as collecting, recording, organizing, arranging, storing, adapting or changing, reading, querying, using, disclosing by transmission, dissemination or any other form of provision, comparison or linking, restricting, deleting or destroying.
With the following data protection declaration we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or jointly with others. We will also inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.
Our data protection declaration is structured as follows:
I. Information about us as controllers
II. Rights of users and those affected
III. Information on data processing
I. Information about us as controllers
The responsible provider of this website in terms of data protection law is:
Aaron Kukic
Fuchslochweg 2
89597 Munderkingen
Telephone: +49 172 6999024
Email: info@aaronkukic.de
II. Rights of users and those affected
With regard to the data processing described in more detail below, users and those affected have the right
- for confirmation as to whether data concerning you is being processed, for information about the data processed, for further information about data processing and for copies of the data (see also Article 15 GDPR);
- to correct or complete incorrect or incomplete data (see also Art. 16 GDPR);
- to the immediate deletion of the data concerning you (see also Art. 17 GDPR), or, alternatively, to the extent that further processing is necessary in accordance with Art. 17 Para. 3 GDPR, to restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning you and provided by you and to transmit this data to other providers/responsible parties (see also Art. 20 GDPR);
- to complain to the supervisory authority if you are of the opinion that the data concerning you is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or the restriction of processing that takes place on the basis of Articles 16, 17 Paragraph 1, 18 GDPR teach. However, this obligation does not apply if this notification is impossible or involves disproportionate effort. Without prejudice to this, the user has the right to information about these recipients.
According to Article 21 of the GDPR, users and those affected also have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Article 6 (1) (f) of the GDPR. In particular, an objection to data processing for the purpose of direct advertising is permitted.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data does not conflict with any legal retention obligations and no different information is subsequently provided about individual processing procedures.
Subscription to posts
If you publish posts on our website, we also offer you the opportunity to subscribe to any follow-up posts from third parties. In order to be able to inform you about these follow-up posts by email, we process your email address.
The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR. You can revoke your consent to this subscription at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation or click on the unsubscribe link contained in the respective email.
Cookie Manager
To obtain consent for the use of technically unnecessary cookies on the website, the provider uses a cookie manager.
When the website is accessed, a cookie with the settings information is stored on the user's device so that consent does not have to be asked on a subsequent visit.
The cookie is required to obtain legally compliant consent from the user.
The user can prevent or stop the installation of cookies through the settings of their browser.
Cookies
a) Session cookies/session cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are stored and stored on your device by the Internet browser you use. These cookies process certain information about you on an individual basis, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offering of a shopping cart function.
The legal basis for this processing is Art. 6 Para. 1 lit b.) GDPR, provided that these cookies data are processed for the purpose of initiating or executing a contract.
If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Article 6 Paragraph 1 Letter f) GDPR.
When you close your internet browser, these session cookies are deleted.
b) Third-party cookies
Our website may also use cookies from partner companies with whom we work for the purposes of advertising, analysis or the functionality of our website.
Please see the information below for details, in particular the purposes and legal basis for processing such third-party cookies.
c) Possibility of elimination
You can prevent or restrict the installation of cookies by setting your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you use. If you have any questions, please use the help function or documentation of your Internet browser or contact the manufacturer or support. However, with so-called Flash cookies, the processing cannot be prevented via the browser settings. Instead, you have to change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may result in not all functions of our website being fully usable.
Contest
We offer you the opportunity to participate in competitions via our website. If you take part in one of our competitions, the data you enter when participating will be processed without your further consent, but of course only for the purpose of carrying out and processing the respective competition.
As part of the processing of the competition, we will pass on your data to the transport company responsible for delivering the goods or to a financial service provider if the transfer is necessary for the delivery or payment of your prize. If your data is published in the event of a win, you will be informed of this as part of the declaration of consent.
The legal basis for passing on the data is then Article 6 Paragraph 1 Letter b) GDPR.
You can revoke your consent to the processing of data for participation in our competitions at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation.
Contact inquiries/contact options
If you contact us via contact form or email, the data you provide will be used to process your request. Providing the data is necessary to process and answer your request - without it, we cannot answer your request or at best respond to a limited extent.
The legal basis for this processing is Article 6 Paragraph 1 Letter b) GDPR.
Your data will be deleted if your request has been answered conclusively and deletion does not conflict with any legal retention obligations, such as in the event of any subsequent contract processing.
Customer account / registration function
If you create a customer account with us via our website, we will use the data you entered during registration (e.g. your name, address or email address) exclusively for pre-contractual services, for contract fulfillment or for the purpose of Customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called wish list function) collect and save. At the same time, we then save the IP address and the date of your registration and time. Of course, this data will not be passed on to third parties.
As part of the further registration process, your consent to this processing will be obtained and reference will be made to this data protection declaration. The data we collect is used exclusively to provide the customer account.
If you consent to this processing, Article 6 Paragraph 1 Letter a) GDPR is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or the fulfillment of the contract, the legal basis for this processing is also Art. 6 Para. 1 lit. b) GDPR.
You can revoke your consent to open and maintain your customer account at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation.
The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must observe retention periods under tax and commercial law.
Newsletter
If you register for our free newsletter, the data requested from you, i.e. your email address and - optionally - your name and address, will be transmitted to us. At the same time, we store the IP address of the Internet connection from which you access our website as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to send the newsletter, describe the content specifically and refer you to this data protection declaration. We use the data collected exclusively for sending newsletters - which is why they are not passed on to third parties.
The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR.
You can revoke your consent to receive the newsletter at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation or click on the unsubscribe link contained in every newsletter.
User contributions, comments and ratings
We offer you the opportunity to publish questions, answers, opinions or reviews, hereinafter referred to as “contributions,” on our website. If you take advantage of this offer, we will process and publish your contribution, the date and time of submission and the pseudonym you may have used.
The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR. You can revoke your consent at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation.
We also process your IP and email address. The IP address is processed because we have a legitimate interest in taking or supporting further steps if your contribution encroaches on the rights of third parties and/or is otherwise unlawful.
The legal basis in this case is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the legal defense that may be necessary.
Checking creditworthiness and scoring
If we give you the basic option of paying by invoice as part of our range of goods or services and you make use of this, we reserve the right to provide a credit rating report on a mathematical basis from a credit agency (such as Creditreform, Schufa, Bürgel or infoscore). -statistical procedures. For this purpose, your data, to the extent that it is contractually relevant, such as your name and address, will be forwarded to the credit agency. We use the subsequent information about the statistical probability of non-payment to decide whether we offer you payment by invoice.
The legal basis for this processing is our legitimate interest in the reliability of the claim in accordance with Article 6 Paragraph 1 Letter f) GDPR.
Server data
For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted to us or our web space provider through your Internet browser. These so-called server log files contain, among other things, the type and version of your internet browser, the operating system, the website from which you switched to our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the Internet connection from which our website is used.
The data collected in this way will be stored temporarily, but not together with other data about you.
This storage takes place on the legal basis of Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data will be deleted after seven days at the latest, unless further storage is required for evidentiary purposes. Otherwise, the data will be completely or partially excluded from deletion until an incident has been finally clarified.
Contract execution
The data you provide to use our range of goods and/or services will be processed by us for the purpose of contract processing and is necessary to this extent. Contract conclusion and contract processing are not possible without providing your data.
The legal basis for processing is Article 6 Paragraph 1 Letter b) GDPR.
We delete the data once the contract has been fully processed, but we must observe the tax and commercial law retention periods.
As part of the contract processing, we pass on your data to the transport company commissioned to deliver the goods or to the financial service provider, if the transfer is necessary for the delivery of goods or for payment purposes.
The legal basis for passing on the data is then Article 6 Paragraph 1 Letter b) GDPR.
To advertise our products and services and to communicate with interested parties or customers, we maintain a company presence on the Facebook platform.
We are jointly responsible for this social media platform with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Facebook's data protection officer can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting processing of personal data and described below is Article 6 Paragraph 1 Letter f of the GDPR. Our legitimate interest lies in the analysis, communication, sales and promotion of our products and services.
The legal basis can also be the user's consent to the platform operator in accordance with Article 6 Paragraph 1 Letter a of the GDPR. The user can revoke his consent to this at any time in the future in accordance with Art. 7 Para. 3 GDPR by notifying the platform operator.
When you access our online presence on the Facebook platform, Facebook Ireland Ltd. As the operator of the platform in the EU, we process user data (e.g. personal information, IP address, etc.).
This user data serves to provide statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. For example, it is possible to advertise to users within and outside of Facebook based on their interests. If the user is logged into their Facebook account at the time of access, Facebook Ireland Ltd. also link the data to the respective user account.
If the user contacts you via Facebook, the user's personal data entered on this occasion will be used to process the request. We will delete the user's data as long as the user's request has been answered conclusively and there are no legal retention obligations, such as in the event of subsequent contract processing.
To process the data, Facebook Ireland Ltd. Cookies may also be set if necessary.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. With Flash cookies, processing cannot be prevented via the browser settings, but rather by setting the Flash player accordingly. If the user prevents or restricts the installation of cookies, this may result in not all of Facebook's functions being fully usable.
Further information about the processing activities, how to prevent them and how to delete the data processed by Facebook can be found in Facebook's data policy:
https://www.facebook.com/privacy/explanation
It cannot be ruled out that processing by Meta Platforms Ireland Limited will also take place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
To promote our products and services and to communicate with interested parties or customers, we maintain a company presence on the Instagram platform.
We are jointly responsible for this social media platform with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Instagram's data protection officer can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting processing of personal data and described below is Article 6 Paragraph 1 Letter f of the GDPR. Our legitimate interest lies in the analysis, communication, sales and promotion of our products and services.
The legal basis can also be the user's consent to the platform operator in accordance with Article 6 Paragraph 1 Letter a of the GDPR. The user can revoke his consent to this at any time in the future in accordance with Art. 7 Para. 3 GDPR by notifying the platform operator.
When you access our online presence on the Instagram platform, Facebook Ireland Ltd. As the operator of the platform in the EU, we process user data (e.g. personal information, IP address, etc.).
This user data serves to provide statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. For example, it is possible to advertise to users within and outside of Instagram based on their interests. If the user is logged into their Instagram account at the time of access, Facebook Ireland Ltd. also link the data to the respective user account.
If the user contacts you via Instagram, the user's personal data entered on this occasion will be used to process the request. We will delete the user's data as long as the user's request has been answered conclusively and there are no legal retention obligations, such as in the event of subsequent contract processing.
To process the data, Facebook Ireland Ltd. Cookies may also be set if necessary.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. With Flash cookies, processing cannot be prevented via the browser settings, but rather by setting the Flash player accordingly. If the user prevents or restricts the installation of cookies, this may result in not all of Facebook's functions being fully usable.
Further information about the processing activities, how to prevent them and how to delete the data processed by Instagram can be found in Instagram's data policy:
https://help.instagram.com/519522125107875
It cannot be ruled out that processing by Facebook Ireland Ltd. also via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
YouTube
We maintain an online presence on YouTube to present our company and our services and to communicate with customers/prospects. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA.
In this respect, we would like to point out that it is possible that user data may be processed outside the European Union, particularly in the USA. This can result in increased risks for users in that, for example, subsequent access to user data can be made more difficult. We also have no access to this user data. Access is exclusively via YouTube.
YouTube's data protection information can be found at
https://policies.google.com/privacy
General links to third-party profiles
The provider uses a link to the social networks listed below on the website.
The legal basis for this is Article 6 Paragraph 1 Letter f GDPR. The provider's legitimate interest is in improving the quality of use of the website.
The plugins are integrated via a linked graphic. Only by clicking on the corresponding graphic will the user be redirected to the service of the respective social network.
After the customer has been forwarded, information about the user is collected by the respective network. First of all, this is data such as IP address, date, time and page visited. If the user is logged into their user account of the respective network, the network operator may be able to assign the collected information from the user's specific visit to the user's personal account. If the user interacts via a “share” button on the respective network, this information can be saved in the user’s personal user account and, if necessary, published. If the user wants to prevent the collected information from being directly assigned to his user account, the user must log out before clicking on the graphic. It is also possible to configure the respective user account accordingly.
The following social networks are linked by the provider:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Data protection declaration: https://www.facebook.com/policy.php
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Data protection declaration: https://help.instagram.com/519522125107875
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA
Data protection declaration: https://policies.google.com/privacy
Google Analytics
We use Google Analytics on our website. This is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this function, Google shortens the IP address within the EU or EEA.
The data collected in this way is in turn used by Google to provide us with an analysis of visits to our website and usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.
Google states that it does not associate your IP address with other data. In addition, Google is keeping under
https://www.google.com/intl/de/policies/privacy/partners
Further data protection information is available for you, including, for example, the options for preventing data use.
Google also offers under
https://tools.google.com/dlpage/gaoptout?hl=de
a so-called deactivation add-on along with further information about this. This add-on can be installed with common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on tells Google Analytics' JavaScript (ga.js) that information about visits to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You can of course also find out whether and which other web analysis services we use in this data protection declaration.
YouTube
We use YouTube on our website. This is a video portal of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “YouTube”.
We use YouTube in connection with the “Extended data protection mode” function to be able to show you videos. If you have given your consent for this processing, the legal basis is Article 6 (1) (a) GDPR. The legal basis can also be Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the “Extended Data Protection Mode” function means that the data described in more detail below is only transmitted to the YouTube server when you actually start a video.
Without this “extended data protection” a connection to the YouTube server in the USA will be established as soon as you access one of our websites on which a YouTube video is embedded.
This connection is required in order to be able to display the respective video on our website via your Internet browser. In the course of this, YouTube will at least collect and process your IP address, the date and time and the website you visited. A connection is also established to Google’s “DoubleClick” advertising network.
If you are logged in to YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and to analyze usage behavior, YouTube permanently stores cookies on your device via your Internet browser. If you do not agree to this processing, you have the option of preventing the storage of cookies by setting your Internet browser. You can find more information about this under “Cookies” above.
Google provides further information about the collection and use of data as well as your related rights and protection options in the following
https://policies.google.com/privacy
available data protection information.
Shopify (shop software + web analytics)
a) Shopify store software
We use “Shopify” to host our shop system and to display our offers and contract processing.
The legal basis is Article 6 Paragraph 1 Letter b) GDPR (contract initiation/contract processing).
“Shopify” is the service of a group of companies consisting of Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., Shopify (USA) Inc., Shopify Commerce Singapore Pte. Ltd., and Shopify International Limited exist.
If we are based in the European Economic Area (EEA), processing is carried out by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, hereinafter referred to as “Shopify”.
However, due to the group of companies, it cannot be ruled out that processing will also take place in Canada and the USA, i.e. outside the EEA. However, when data is transferred to the Canadian Shopify Inc., an adequate level of data protection is guaranteed by the European Commission's adequacy decision.
Shopify processes the following data on our behalf:
Name, billing and, if applicable, shipping address, email address, payment information, company name, if applicable, telephone number, if applicable, IP address, information about orders, information about the Shopify-supported merchant stores that you visit, and information about Your device and your internet browser.
Shopify also offers...
https://www.shopify.de/legal/datenschutz
further data protection information.
b) Shopify web analytics
If we also use Shopify's web analysis service on our website, Shopify stores cookies on your device via your Internet browser. These cookies provide further information, such as: B. The location, time or frequency of your visit to our website is transmitted to a Shopify server and evaluated.
If you have given your consent for this processing, the legal basis is Article 6 (1) (a) GDPR. The legal basis can also be Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in the analysis and optimization of our website.
If you do not agree to this processing, you have the option of preventing the storage of the cookie by setting your Internet browser. You can find more information about this under “Cookies” above.
Use of PayPal as a payment method
If you decide to pay with the online payment service provider PayPal as part of your ordering process, your contact details will be transmitted to PayPal as part of the order placed in this way. PayPal is an offer from PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal takes on the function of an online payment service provider as well as a trustee and offers buyer protection services.
The personal data transmitted to PayPal is usually first name, last name, address, telephone number, IP address, email address, or other data that is necessary for order processing, as well as data in connection with the order such as number of items, item number, invoice amount and taxes in percent, invoice information, etc.
This transmission is necessary to process your order with the payment method you selected, in particular to confirm your identity, to administer your payment and the customer relationship. The transmission of your data to PayPal is therefore based on Art. 6 Para. 1 lit. b GDPR.
Please note, however, that PayPal may also pass on personal data to service providers, subcontractors or other affiliated companies to the extent that this is necessary to fulfill the contractual obligations arising from your order or the personal data is to be processed in the order.
Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transmitted by PayPal to credit reporting agencies. This transmission serves to check your identity and creditworthiness in relation to the order you have placed. You can find out which credit agencies these are and which data is generally collected, processed, stored and passed on by PayPal in PayPal's data protection declaration at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of instant transfer as a payment method
If you decide to pay with the online payment service provider Sofortüberweisung as part of your ordering process, your contact details will be sent to Sofortüberweisung as part of the order placed in this way.
Sofortüberweisung is an offer from SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany. Sofortüberweisung takes on the function of an online payment service provider that enables cashless payment of products and services on the Internet.
The personal data transmitted to Sofortüberweisung is usually first name, last name, address, telephone number, IP address, email address, or other data that is necessary for order processing, as well as data in connection with the order such as number of items, item number, invoice amount and taxes in percent, invoice information, etc.
This transmission is necessary to process your order with the payment method you selected, in particular to confirm your identity, to administer your payment and the customer relationship. The transmission of your data to SOFORT GmbH is therefore based on Art. 6 Para. 1 lit. b GDPR.
However, please note: Personal data can also be passed on by Sofortüberweisung to service providers, subcontractors or other affiliated companies to the extent that this is necessary to fulfill the contractual obligations arising from your order or the personal data is to be processed in the order.
Under certain circumstances, the personal data transmitted to Sofortüberweisung will be transmitted by Sofortüberweisung to credit reporting agencies. This transmission serves to check your identity and creditworthiness in relation to the order you have placed.
You can find out which data protection principles Sofortüberweisung applies when processing your data in the data protection information that is displayed to you during the Sofortüberweisung payment process.
If you have any further questions about the use of your personal data, you can contact Sofortüberweisung by email (datenschutz@sofort.com) or in writing (SOFORT GmbH, Data Protection, Theresienhöhe 12, 80339 Munich).
Klarna “CHECK OUT”
To process payments for orders via our online shop, we use the payment service of Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden, hereinafter referred to as “Klarna”, on our website.
For this purpose, we have integrated Klarna's so-called check-out into the final order page of our online shop.
The legal basis is the fulfillment of the contract in accordance with Article 6 Paragraph 1 Letter b) GDPR. We also have a legitimate interest in offering effective and secure payment options, so that a further legal basis follows from Article 6 Paragraph 1 Letter f.) GDPR.
By integrating Klarna, your internet browser loads the check-out page from a Klarna server. This means that the operating system you are using, the type and version of your internet browser, the website from which the check-out was requested, the date and time of the visit and the IP address are transmitted to Klarna - even without you having to do so interact with the check-out page.
As soon as you complete the order in our online shop, the data you enter into the input fields on the check-out page will be processed by Klarna under its own responsibility to process the payment.
For the payment methods “PayPal” and “Prepayment” offered, processing is limited to passing on the payment data to us or PayPal without your further consent.
For the payment methods offered “purchase on account”, “installment purchase”, “credit card”, “direct debit” or “immediate transfer”, the following personal data in particular are processed by Klarna for the purpose of payment processing and for identity and creditworthiness checks:
– Contact information, such as names, addresses, date of birth, gender, email address, telephone number, mobile phone number, IP address, etc.
– Information about processing the order, such as product type, product number, price, etc.
– Payment information, such as debit and credit card details (card number, expiry date and CCV code), billing details, account number, etc.
If you select the payment method “purchase on account” or “installment purchase”, Klarna collects and uses personal data and information about your previous payment behavior to decide whether you will be granted the desired payment method. Probability values for your future payment behavior (so-called scoring) are also used. The calculation of the scoring is carried out on the basis of scientifically recognized mathematical and statistical methods.
Klarna assumes
https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf
Further information on the processing described above as well as the applicable data protection regulations are available.
Sample data protection declaration from the law firm Weiß & Partner
