Controller for data processing is: Walter Häfner GmbH Ostring 1 97688 Bad Kissingen Germany Email: [email protected]
We appreciate your interest in our online shop. The protection of your privacy is very important to us. Below, we provide you with detailed information about how we handle your data.
- Access Data and Hosting
You can visit our websites without providing any personal information. When you access a website, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, date and time of access, transmitted data volume, and the requesting provider (access data). These access data are evaluated solely for the purpose of ensuring the smooth operation of the site and improving our offerings. This is necessary to safeguard our legitimate interests in providing a properly functioning service as per Art. 6(1)(f) GDPR. All access data is deleted no later than one month after the end of your visit to the site.
Our service providers are located and/or use servers in countries outside the EU and the EEA. For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on the standard data protection clauses of the European Commission.
Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Canada.
- Data Processing for Contract Processing and Contact
2.1 Data Processing for Contract Processing
For the purpose of contract processing (including inquiries about and processing of any existing warranty and performance claims as well as any legal update obligations) pursuant to Art. 6(1)(b) GDPR, we collect personal data when you voluntarily provide it to us within the scope of your order. Mandatory fields are marked as such, as in these cases we require the data for contract processing and cannot send the order without providing it. The data collected can be found in the respective input forms.
2.2 Customer Account
In the context of customer communication, we collect personal data pursuant to Art. 6(1)(b) GDPR, if you voluntarily provide it to us when contacting us (e.g. via contact form or email). Mandatory fields are marked as such, as in these cases we require the data for processing your contact request. The data collected can be found in the respective input forms. After complete processing of your inquiry, your data will be deleted, unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we reserve the right to further use data beyond this, which is legally permissible and about which we inform you in this declaration.
Live Chat Tool Userlike
For the purpose of customer communication, we use the live chat tool provided by Userlike UG (limited liability), Probsteigasse 44-46, 50670 Cologne, Germany ("Userlike"). This serves the protection of our legitimate interests in an effective and improved customer communication pursuant to Art. 6(1)(f) GDPR. Userlike acts on our behalf.
- Data Processing for the Purpose of Shipping Processing
For the purpose of contract fulfillment pursuant to Art. 6(1)(b) GDPR, we pass on your data to the shipping service provider commissioned with the delivery, to the extent necessary for the delivery of ordered goods.
Data transfer to shipping service providers for the purpose of delivery announcement
If you have given your explicit consent to this pursuant to Art. 6(1)(a) GDPR during or after your order, we will pass on your email address to the selected shipping service provider for the purpose of announcing delivery or coordinating delivery.
General Logistics Systems Germany GmbH & Co. OHG GLS Germany-Straße 1 - 7 DE-36286 Neuenstein Germany
- Data Processing for Payment Processing
When processing payments in our online store, we work with the following partners: technical service providers, credit institutions, payment service providers.
4.1 Data Processing for Transaction Processing
For the purpose of web analysis, data (IP address, time of visit, device and browser information, as well as information about your use of our website) are collected and transmitted to Google's servers in the USA and stored there when you access our website. This also includes the transmission of the data to third parties if they process this data on our behalf. The legal basis for this is your consent pursuant to Art. 6(1)(a) GDPR, which you grant when you access our website.
Google Tag Manager
We use Google Fonts provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA on our website. These are used to display fonts uniformly on our website. When you access our website, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. To do this, the browser you are using must connect to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. Google Fonts are used in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
VII. Data Processing for Marketing Purposes
Your data will be processed for advertising purposes in accordance with the following provisions.
By providing your consent, you can subscribe to our newsletter, which provides you with regular information about our offers. The advertised goods and services are specified in the declaration of consent.
For registration for our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the specified email address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
The only requirement for sending the newsletter is your email address. The indication of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Art. 6(1)(a) GDPR.
Email Advertising without Newsletter Registration and Your Right to Object
If we receive your email address in connection with the sale of goods or services and you have not objected to this, we are entitled to send you regular offers for similar products, such as those already purchased, from our range by email. This serves to protect our legitimate interests in addressing our customers in an advertising-like manner within the scope of a weighing of interests.
The data will be processed for the purpose of advertising mailings within the framework of a weighing of interests in accordance with Art. 6(1)(f) GDPR.
Product Recommendations by Email
As a customer of our online shop, you will regularly receive product recommendations from us by email. In doing so, we use the email address you provided when purchasing goods or services. We will send you product recommendations regardless of whether you have subscribed to a newsletter.
The data will be processed for the purpose of advertising mailings in accordance with Art. 6(1)(f) GDPR.
VIII. Online Marketing
Google Ads Remarketing
We use Google Ads to advertise our website in Google search results and on third-party websites. For this purpose, when you visit our website, the so-called remarketing cookie is set by Google, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit.
IX. Rights of Data Subjects
The applicable data protection law grants you comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, about which we inform you below:
Right of Access by the Data Subject
You have the right to obtain confirmation from us as to whether personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipient to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from us rectification or erasure of personal data or restriction of processing of personal data concerning