Privacy Policy
Controller for data processing is: Walter Häfner GmbH Ostring 1 97688 Bad Kissingen Germany Email: [email protected]
Phone: 0971/2468
We appreciate your interest in our online shop. The protection of your privacy is very important to us. Below, we provide you with detailed information about how we handle your data.
- Access Data and Hosting
You can visit our websites without providing any personal information. When you access a website, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, date and time of access, transmitted data volume, and the requesting provider (access data). These access data are evaluated solely for the purpose of ensuring the smooth operation of the site and improving our offerings. This is necessary to safeguard our legitimate interests in providing a properly functioning service as per Art. 6(1)(f) GDPR. All access data is deleted no later than one month after the end of your visit to the site.
Hosting
Some of the services for hosting and displaying the website are provided by our service providers as part of data processing on our behalf. Unless otherwise explained in this privacy policy, all access data as well as all data collected through forms on this website are processed on their servers. For questions about our service providers and the basis of our cooperation with them, please refer to the contact information provided in this privacy policy.
Our service providers are located and/or use servers in countries outside the EU and the EEA. For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on the standard data protection clauses of the European Commission.
Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Canada.
- Data Processing for Contract Processing and Contact
2.1 Data Processing for Contract Processing
For the purpose of contract processing (including inquiries about and processing of any existing warranty and performance claims as well as any legal update obligations) pursuant to Art. 6(1)(b) GDPR, we collect personal data when you voluntarily provide it to us within the scope of your order. Mandatory fields are marked as such, as in these cases we require the data for contract processing and cannot send the order without providing it. The data collected can be found in the respective input forms.
Further information on the processing of your data, especially on the transfer to our service providers for the purpose of order, payment, and shipping processing, can be found in the following sections of this privacy policy. After complete processing of the contract, your data will be restricted for further processing and deleted after the expiration of the retention periods under tax and commercial law according to Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we reserve the right to further use data beyond this, which is legally permissible and about which we inform you in this declaration.
2.2 Customer Account
If you have given your consent to this pursuant to Art. 6(1)(a) GDPR by deciding to open a customer account, we will use your data for the purpose of opening the customer account as well as for storing your data for future orders on our website. You can delete your customer account at any time, either by sending a message to the contact information described in this privacy policy or through a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted, unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we reserve the right to further use data beyond this, which is legally permissible and about which we inform you in this declaration.
2.3 Contact
In the context of customer communication, we collect personal data pursuant to Art. 6(1)(b) GDPR, if you voluntarily provide it to us when contacting us (e.g. via contact form or email). Mandatory fields are marked as such, as in these cases we require the data for processing your contact request. The data collected can be found in the respective input forms. After complete processing of your inquiry, your data will be deleted, unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we reserve the right to further use data beyond this, which is legally permissible and about which we inform you in this declaration.
Live Chat Tool Userlike
For the purpose of customer communication, we use the live chat tool provided by Userlike UG (limited liability), Probsteigasse 44-46, 50670 Cologne, Germany ("Userlike"). This serves the protection of our legitimate interests in an effective and improved customer communication pursuant to Art. 6(1)(f) GDPR. Userlike acts on our behalf.
- Data Processing for the Purpose of Shipping Processing
For the purpose of contract fulfillment pursuant to Art. 6(1)(b) GDPR, we pass on your data to the shipping service provider commissioned with the delivery, to the extent necessary for the delivery of ordered goods.
The same applies to data transfer to our manufacturers or wholesalers in cases where they take over the shipping for us (drop shipping). These are considered shipping service providers within the meaning of this privacy policy.
Data transfer to shipping service providers for the purpose of delivery announcement
If you have given your explicit consent to this pursuant to Art. 6(1)(a) GDPR during or after your order, we will pass on your email address to the selected shipping service provider for the purpose of announcing delivery or coordinating delivery.
The consent can be revoked at any time by sending a message to the contact information described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we reserve the right to further use data beyond this, which is legally permissible and about which we inform you in this declaration.
General Logistics Systems Germany GmbH & Co. OHG GLS Germany-Straße 1 - 7 DE-36286 Neuenstein Germany
- Data Processing for Payment Processing
When processing payments in our online store, we work with the following partners: technical service providers, credit institutions, payment service providers.
4.1 Data Processing for Transaction Processing
Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers, who act as processors on our behalf, or to the commissioned credit institutions or the selected payment service provider, to the extent necessary for payment processing. This is necessary for the fulfillment of the contract pursuant to Art. 6(1)(b) GDPR. Payment service providers may collect the data required for processing the payment themselves, e.g. on their own website or via technical integration in the ordering process. The data processing is based on an agreement between joint controllers for the respective technology pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy policy.
Google Analytics
For the purpose of web analysis, data (IP address, time of visit, device and browser information, as well as information about your use of our website) are collected and transmitted to Google's servers in the USA and stored there when you access our website. This also includes the transmission of the data to third parties if they process this data on our behalf. The legal basis for this is your consent pursuant to Art. 6(1)(a) GDPR, which you grant when you access our website.
Google Tag Manager
We also use the Google Tag Manager from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA to integrate and manage various marketing services on our website. The Google Tag Manager is a solution that allows us to manage so-called website tags through a user interface. The Tag Manager itself (which implements the tags) does not process any personal data of the users of the site. With regard to the processing of personal data of users on our website, please refer to the other information in this privacy policy. The Google Tag Manager simplifies the integration of our services and technologies. For example, we use it to integrate and manage Google Analytics and other Google marketing services into our website.
Google Maps
We use Google Maps to display maps and directions on our website and to enable you to use the map function. Google Maps is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing, and use of the automatically collected data and data you enter by Google, one of its representatives, or third-party providers. The terms of use for Google Maps can be found at: https://www.google.com/intl/en_US/help/terms_maps.html.
Google Fonts
We use Google Fonts provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA on our website. These are used to display fonts uniformly on our website. When you access our website, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. To do this, the browser you are using must connect to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. Google Fonts are used in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Further information on data processing by Google can be found in Google's privacy policy: https://www.google.com/policies/privacy/.
VII. Data Processing for Marketing Purposes
Your data will be processed for advertising purposes in accordance with the following provisions.
Newsletter
By providing your consent, you can subscribe to our newsletter, which provides you with regular information about our offers. The advertised goods and services are specified in the declaration of consent.
For registration for our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the specified email address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
The only requirement for sending the newsletter is your email address. The indication of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Art. 6(1)(a) GDPR.
You can revoke your consent to receiving the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email, by sending an email to the contact information provided in this privacy policy, or by sending a message using the contact details provided in the legal notice.
Email Advertising without Newsletter Registration and Your Right to Object
If we receive your email address in connection with the sale of goods or services and you have not objected to this, we are entitled to send you regular offers for similar products, such as those already purchased, from our range by email. This serves to protect our legitimate interests in addressing our customers in an advertising-like manner within the scope of a weighing of interests.
You can object to this use of your email address at any time by sending a message to the contact information provided in this privacy policy or by using the link provided in the advertising email, without incurring any costs other than the transmission costs according to the basic rates.
The data will be processed for the purpose of advertising mailings within the framework of a weighing of interests in accordance with Art. 6(1)(f) GDPR.
Product Recommendations by Email
As a customer of our online shop, you will regularly receive product recommendations from us by email. In doing so, we use the email address you provided when purchasing goods or services. We will send you product recommendations regardless of whether you have subscribed to a newsletter.
In this way, we want to send you information about products from our offer that you may be interested in on the basis of your recent purchases of goods or services from us. Compliance with legal data protection regulations is of course guaranteed. You can object to this use of your email address at any time by sending a message to the contact information provided in this privacy policy or by using a link provided for this purpose in the advertising email, without incurring any costs other than the transmission costs according to the basic rates.
The data will be processed for the purpose of advertising mailings in accordance with Art. 6(1)(f) GDPR.
VIII. Online Marketing
Google Ads Remarketing
We use Google Ads to advertise our website in Google search results and on third-party websites. For this purpose, when you visit our website, the so-called remarketing cookie is set by Google, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit.
The data processing takes place on the basis of an agreement between joint controllers for the respective technology pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy policy: https://www.google.com/policies/privacy/.
Google Maps
This website uses Google Maps to visually display geographic information. When Google Maps is used, Google also collects, processes, and uses data about the use of map functions by visitors. Further information about Google's data processing can be found in Google's privacy policy: https://www.google.com/policies/privacy/. There you can also change your personal data protection settings in the data protection center.
IX. Rights of Data Subjects
The applicable data protection law grants you comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, about which we inform you below:
Right of Access by the Data Subject
You have the right to obtain confirmation from us as to whether personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipient to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from us rectification or erasure of personal data or restriction of processing of personal data concerning
