General information

(Last update 04.07.2024)

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified

Data collection on this website

Personal data (usually just referred to as “data” below) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data, such as collecting, recording, organizing, arranging, storing, adapting or changing, reading out, querying, using, disclosing through transmission, distribution or any other form of provision, comparison or linking, restricting, deleting or destroying.

With the following data protection declaration we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or together with others. In addition, we will inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.

Name and address of those responsible

Responsible body for the collection, processing and use of your personal data within the meaning of the General Data Protection Regulation (GDPR) is Mr. Senol Celebi, Teutonenweg 10c, 22453 Hamburg (hereinafter: we). If you wish to object to the collection, processing or use of your data by us in accordance with these data protection regulations, either as a whole or for individual measures, you can send your objection by e-mail or letter to the following contact details:

Senol Celebi, Teutonenweg 10c, 22453 Hamburg, email address: datenschutz@master-watch-parts.com

In addition, you can of course also receive information about the data stored by us at any time free of charge.

1. Description and scope of data processing and hosting

You can visit our website without providing any personal information. Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected here:

  • Information about the browser type and version used
  • The user’s operating system
  • The IP address of the user
  • Date and time of access
  • Websites from which the user’s system accesses our website
  • Websites accessed by the user’s system through our website

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. This serves according to Art. 6 para. 1 S. 1 lit. f DSGVO the protection of our legitimate interests in a correct presentation of our offer, which prevail in the context of a balancing of interests. All access data will be deleted no later than seven days after the end of your visit to the site.

Third Party Hosting Services

As part of processing on our behalf, a third-party provider provides the services for hosting and displaying the website. All data that is collected as part of the use of this website or in the forms provided for this purpose in the online shop as described below is processed on its servers. Processing on other servers only takes place within the framework explained here. Our hoster will only process your data to the extent that this is necessary to fulfill its performance obligations and will follow our instructions in relation to this data.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para 1 lit. f GDPR).

If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

We use the following hoster:

lima-city: A project of TrafficPlex GmbH

TrafficPlex GmbH

Konsul-Smidt-Str. 90

28217 Bremen

Phone: +49 421/40 89 99 94

E-mail: support@lima-city.de

The following list shows the cookies used on our website by our hoster.

Cookie description

_lcp Used to detect spam and improve the security of the website

_lcp2 Used to detect spam and improve the security of the website

_lcp3 Used by the website to suppress spam in the comment function of the website

identify and eliminate.

Under the following links you can find out about the handling of personal data at Lima-City:

www.blog.lima-city.de/2014/07/spam-schutz-fuer-die-webseiten/

Wordfence: Firewall and security and error detection functions to detect and prevent unauthorized access attempts and technical vulnerabilities that could enable such access. For these purposes, cookies and similar storage methods necessary for this purpose may be used and security logs may be created during the audit and in particular in the event of unauthorized access. In this context, the users’ IP addresses, a user identification number and their activities, including the time of access, are processed and stored and compared with the data provided by the provider of the firewall and security function and transmitted to them; Service provider: Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://www.wordfence.com; Privacy policy: https://www.wordfence.com/privacy-policy/; Basis for third country transfer: standard contractual clauses (https://www.wordfence.com/standard-contractual-clauses/). Further information: https://www.wordfence.com/help/general-data-protection-regulation/.

WordPress.com: Hosting and software for creating, providing and operating websites, blogs and other online offerings; Service provider: Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://wordpress.com/; Privacy policy: https://automattic.com/de/privacy/. Order processing contract: https://wordpress.com/support/data-processing-agreements/. Basis of third country transfer: EU-US Data Privacy Framework (DPF).

2. Collection, processing and disclosure of personal data when placing orders

When ordering, we collect and process your personal data only to the extent necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide this provision means that no contract can be concluded. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the performance of a contract with you.

Your data will be passed on, for example, to the shipping companies selected by you, shipping service providers, dropshipping providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.

Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.

The storage in log files takes place to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.

Note on data transfer to the USA and other third countries

Among other things, we use tools from companies based in the USA or other

third countries that are not safe under data protection law. If these tools are active, your

personal data are transferred to and processed in these third countries. We would like to point out that in these countries no level of data protection comparable to that of the EU can be guaranteed.

For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

Note on data transfer to shipping service providers

If you have given us your express consent to this during or after your order, we will give us your express consent on the basis of this in accordance with Art. 6 para. 1 S. 1 lit. a GDPR, forward your e-mail address and telephone number to the selected shipping service provider so that they can contact you before delivery for the purpose of delivery announcement or coordination.

The consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

Data Purpose Processor

Personal data Shipping and logistics Deutsche Post AG

Personal data shipping and logistics DPD Deutschland GmbH

Personal data Shipping and logistics Hermes Germany GmbH

Personal data shipping and logistics Jumingo GmbH

Personal data shipping and logistics UPS (United Parcel Service Deutschland S.à r.l. & Co. OHG)Versand und Logistik UPS (United Parcel Service Deutschland S.à r.l. & Co. OHG)

Personal data shipping and logistics Transglobal Express GmbH

Personal data Shipping and logistics Packlink Shipping, S.L.

General contact information ( Telofon, Fax* or Email):

Deutsche Post AG Tel.:0 228 4333 112

DPD Deutschland GmbH info@dpd.de – Tel.: 06021 8430

Hermes Germany GmbH Phone: 040 593 551 111

Jumingo GmbH Phone: 0221 98044999

UPS 02131-1542222 * (Fax)

Transglobal Express GmbH Phone: 069 90506780

Packlink sales@packlink.de

Use of an external merchandise management system

We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected in the context of the order will be sent to:

Billbee Limited Liability Company

Arolser Str. 10
34477 Twistetal

billbee@support.io

transmitted.

Proactive contact of the customer by e-mail or via chat function

Processing purposes

We use the collected data exclusively for the purpose of answering your request, as well as for other purposes specified in the data collection. If you contact us via a contact form, telephone, online chat or e-mail, your personal data will be collected and stored.

Type of data

The following data may be collected. Whether this data is collected depends on your request:

  • Forename
  • Name
  • Address
  • Tracking number
  • Telephone number
  • E-mail address
  • Account details
  • et cetera

Legal basis

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. In this case, our legitimate interest outweighs your legitimate interest. The reason for this is that it is not possible to process your request without processing your personal data. The use of the contact form or the establishment of contact is also voluntary.

Duration of storage

We delete the resulting data from the contact form or by e-mail or from the chatbot after the storage is no longer necessary for the purpose of the contact, or – if relevant – taking into account the statutory retention obligations.

Possibility of revocation/objection and deletion

In the event of a legitimate interest, you have the possibility to object to the processing for the future at any time. In the event of an objection, the correspondence cannot be continued. All personal data collected in this context will be deleted in the event of a legitimate objection.

Obligation to provide your personal data

You are not obliged to disclose personal data. The fields marked in the input mask are mandatory fields, without which your request cannot be processed.

Chat function

Processing purposes

The chat function is used to contact you. You can use the chat like a contact form to chat with us in near real time.

Type of data

When the chat starts, the following personal data is generated:

  • Date and time of the call
  • Browser type/version
  • IP address
  • Operating system used
  • URL of the previously visited website
  • Amount of data sent
  • Content of the communication
  • Tracking number
  • Contact details (if specified, e.g. first name, surname and e-mail address)

Depending on the course of the conversation with us, further personal data may be generated in the chat, which will be entered by you. The nature of this data depends heavily on your request or the problem you describe to us. Please only provide us with the data required for your request. The processing of all this data serves to provide you with a fast and efficient contact option and thus to improve our customer service

Legal basis

The processing of the data is carried out on the basis of Art. 6 para. 1 lit. a GDPR. The consent here lies in the use of the chat.

Duration of storage

The storage of chat data serves the purpose of ensuring the security of our information technology systems.

In addition, we store the history of the chats, the chat data, as well as the contact data provided by you for a period of four weeks. This serves the purpose of facilitating further inquiries based on the chat history, as well as for constant quality control of our chat offer.

Possibility of revocation/objection and deletion

If you do not wish to be stored, you are welcome to inform us of this using the contact details listed below. Stored chats will then be deleted by us immediately.

Further information

By visiting our website, the chat widget is loaded in the form of a JavaScript file from Amazon CloudFront. The chat widget technically represents the source code that runs on your computer and enables chat.

We use the company’s chat software:

Userlike UG (limited liability)
Probsteigasse 44-46
50670 Köln

Further information about the processed data can be found at:
www.userlike.com/de/terms#privacy-policy

Processing of your personal data in third countries

In principle, we have commissioned the processing of your personal data in the European Union. Nevertheless, your personal data may be processed in the United States of America (USA). For the US, there is no adequacy decision by the European Commission. We have therefore secured the level of data protection with suitable guarantees within the meaning of Art. 46 GDPR.

Obligation to provide your personal data

You are not obliged to disclose personal data. If you do not give your consent, it is unfortunately not possible for you to use the chat function.

If the contact serves the implementation of pre-contractual measures (e.g. advice on purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 para. 1 lit. b GDPR.

If the contact is made for other reasons, this data processing takes place on the basis of Art. 6 para. 1 lit. f GDPR for our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to refer to Art. 6 para. 1 lit. f GDPR based on processing of personal data concerning you.

We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact.

If the contact serves the implementation of pre-contractual measures (e.g. advice on purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 para. 1 lit. b GDPR.

If the contact is made for other reasons, this data processing takes place on the basis of Art. 6 para. 1 lit. f GDPR for our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to refer to Art. 6 para. 1 lit. f GDPR based on processing of personal data concerning you.

We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer Account Orders

Customer account registration function

If you create a customer account with us via our website, we will use the data you enter during registration (e.g. Your name, address or e-mail address) exclusively for pre-contractual services, for the fulfilment of the contract or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called notepad function). At the same time, we then store the IP address and the date of your registration together with the time. Of course, this data will not be passed on to third parties.

As part of the further registration process, your consent to this processing will be obtained and reference will be made to this data protection declaration. The data collected by us will be used exclusively for the provision of the customer account.
If you consent to this processing, Art. 6 para. 1 lit. a) GDPR Legal basis for processing.
If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 para. 1 lit. b) GDPR.

You can give us your consent to the opening and maintenance of the customer account in accordance with Art. 7 para. 3 GDPR at any time with effect for the future. All you have to do is inform us of your revocation.
The data collected in this respect will be deleted as soon as the processing is no longer necessary. In doing so, however, we must observe retention periods under tax and commercial law.

Possibility of objection and removal

As a user, you have the option of cancelling the registration at any time. You can have the data stored about you changed at any time.

The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.

If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible unless contractual or legal obligations prevent deletion.

Newsletter

If you subscribe to our free newsletter, the data you request for this purpose, i.e. your e-mail address and – optionally – your name and address, will be transmitted to us. At the same time, we store the IP address of the Internet connection from which you access our website as well as the date and time of your registration and your operating system and browser. As part of the registration process, reference is first made to the data protection declaration Your consent to the sending of the newsletter is obtained. We use the data collected exclusively for sending the newsletter – they will therefore not be passed on to third parties.
The legal basis for this is Art. 6 para. 1 lit. a) GDPR.

You can consent to the newsletter dispatch in accordance with Art. 7 para. 3 GDPR at any time with effect for the future. All you have to do is inform us of your revocation or click on the unsubscribe link contained in each newsletter.

Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

Cookies

We use so-called cookies with our website. Cookies are small text files or other storage technologies that are stored on your device by the Internet browser you use. These cookies process certain information about you to an individual extent, such as your browser or location data or your IP address.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide on the acceptance individually as well as prevent the storage of cookies and transmission of the data contained. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.

Under the following links you can find out how to manage cookies on the most important browsers (including deactivating them):

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated in the data protection declaration below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The use of cookies or comparable technologies is based on § 25 para. 2 TTDSG. The processing of your personal data takes place on the basis of Art. 6 para. 1 lit. f GDPR for our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.

You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.

Use of Real Cookie Banner

We use the cookie banner and consent management tool Real Cookie Banner devowl.io GmbH, Tannet 12, 94539 Grafling, Germany (“Real Cookie Banner”) on our website.

The tool enables you to give your consent to data processing via the website, in particular the setting of cookies, and to make use of your right of revocation for consents already given. The purpose of data processing is to obtain and document the necessary consents in data processing and thus to comply with legal obligations.

Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to Real Cookie Banner: anonymized IP address, date and time of consent, URL from which consent was sent, anonymous, random, encrypted key, consent status. This data will not be passed on to other third parties.

The data processing takes place to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR.

Further information on data protection at Real Cookie Banner can be found at:

www.devowl.io/de/datenschutzerklaerung/

Analysis

Plug-ins and miscellaneous

Using Google Tag Manager

We use the Google Tag Manager of Google LLC on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws.

This application manages JavaScript tags and HTML tags, which are used to implement tracking and analysis tools in particular. The data processing serves the purpose of the needs-based design and optimization of our website.

The Google Tag Manager itself neither stores cookies nor does it process personal data. However, it allows the triggering of further tags that may collect and process personal data.

Further information on terms of use and data protection can be found here.

YouTube

We use YouTube on our website. This is a video portal of YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter referred to as “YouTube”.
YouTube is a subsidiary of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
Through the certification according to the EU-US Privacy Shield (“EU-US Privacy Shield”), Google and thus also its subsidiary YouTube guarantee that the data protection requirements of the EU are also complied with when processing data in the USA.

We use YouTube in connection with the “Advanced Privacy Mode” function to be able to show you videos. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the “Extended Data Protection Mode” function means that the data described below is only transmitted to YouTube’s server if you actually start a video.
Without this “Extended Data Protection”, a connection to the YouTube server in the USA is established as soon as you access one of our websites on which a YouTube video is embedded.

This connection is necessary in order to be able to display the respective video on our website via your Internet browser. In the course of this, YouTube will at least record and process your IP address, the date and time as well as the website you are visiting. In addition, a connection to the advertising network “DoubleClick” is established by Google.

If you are logged in to YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and for the analysis of usage behavior, YouTube permanently stores cookies on your device via your Internet browser. If you do not agree with this processing, you have the option of preventing the storage of cookies by setting it in your Internet browser. Further information can be found above under “Cookies”.
Google provides further information about the collection and use of data as well as your rights and protection options in this regard in the data protection information available under https://policies.google.com/privacy.

Data processing for payment processing

When processing payments in our online shop, we work together with these partners: technical service providers, credit institutions, payment service providers.

Data processing for transaction processing

Depending on the selected payment method, we pass on the data necessary for the processing of the payment transaction to our technical service providers who work for us in the context of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for the processing of the payment. This serves the fulfilment of the contract in accordance with Art. 6 para. 1 sentence 1 S. 1 lit. b GDPR. In some cases, the payment service providers collect the data required for the processing of the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the data protection declaration of the respective payment service provider applies. Below we provide you with information about our payment service providers PayPal and Stripe.
If you have any questions about our payment processing partners and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

PayPal

We offer you to pay for your purchase in the online shop via the PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). PayPal is an e-money service provider licensed in Luxembourg. If you select “PayPal” when selecting the payment method, we will pass on the following information provided by you during the ordering process to PayPal: name, address, e-mail address, invoice amount. We receive the following personal data from PayPal: name, address, e-mail address, invoice amount, paid: yes/no. Your data will be passed on exclusively for the purpose of processing the payment of your respective order with the payment service provider PayPal and only to the extent that it is necessary for this. The legal basis is Art. 6 para. 1 lit. b GDPR (for the purpose of fulfilling the contract).

We have no influence on the data processing by PayPal; this is done on your own responsibility by PayPal within the framework of the contractual relationship between you and PayPal. If you click on the “PayPal” payment option, you will be redirected to the secure pages of PayPal, where you will have to log in with your e-mail address and password or, if you do not yet have a PayPal account, register. The use of PayPal takes place exclusively on the basis of the contract concluded between you and PayPal. The data processing by PayPal is based on the data protection information that PayPal has communicated to you at the time of conclusion of the contract. To this end, PayPal provides the following information:

According to its own information, PayPal processes the data received from you for the processing of the payment on your instructions and credits us with the amount on your behalf. According to its own information, PayPal reserves the right to carry out a credit report for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal. For this purpose, your payment data may be processed in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest of PayPal passed on to credit agencies in determining your solvency. The result of the credit check with regard to the statistical probability of default PayPal used for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values.

Further data protection information, including on the credit agencies used by PayPal, can be found directly in PayPal’s privacy policy:https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

Stripe


We also offer the processing of the payment via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter referred to as “Stripe”). If you select “Stripe” when selecting the payment method, we will pass on the following information provided by you during the order process to Stripe for the purpose of payment processing: Name, address, email address, invoice amount, credit card information. We receive the following personal data back from Stripe: name, address, e-mail address, invoice amount, paid: yes/no. Your data will be passed on exclusively for the purpose of processing the payment of your respective order with the payment service provider Stripe and only to the extent that it is necessary for this. The legal basis is Art. 6 para. 1 lit. b GDPR (for the purpose of fulfilling the contract).

Further information on the handling of personal data can be obtained from the Privacy Center: https://stripe.com/de/privacy-center/legal

Third-country transfer: Stripe uses the EU standard contractual clauses for its subcontractors, which are considered suitable guarantees under Art. 46 para. 2 lit c) GDPR. Informationen von Stripe zu internationalen Datentransfers sind hier abrufbar: https://stripe.com/de/privacy-center/legal#data-transfers

In addition, Stripe protects your data through certain security measures and data protection compliance measures. You can find out what these are here:https://stripe.com/de/guides/general-data-protection-regulation

Data processing for the purpose of fraud prevention and the optimization of our payment processes

If necessary, we provide our service providers with further data that they use together with the data necessary for the processing of the payment as our processors for the purpose of fraud prevention and the optimization of our payment processes (e.g. invoicing, processing of disputed payments, support of accounting). This serves according to Art. 6 para. 1 S. 1 lit. f GDPR the protection of our legitimate interests in our protection against fraud or in efficient payment management, which prevail in the context of a balancing of interests.

Rights of data subjects and storage period

Duration of storage

After completion of the contract, the data will first be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial retention periods and then deleted after expiry of the period, unless you have consented to further processing and use.

Rights of the person concerned

As a person concerned, you have the following rights:
• in accordance with Article 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• in accordance with Article 16 GDPR, the right to demand the immediate correction of incorrect or completion of your personal data stored by us;
• in accordance with Article 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing
– to exercise the right to freedom of expression and information;
– to comply with a legal obligation;
– for reasons of public interest, or
– to assert, exercise or defend legal claims
is required;
• in accordance with Article 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
– the accuracy of the data is disputed by you;
– the processing is unlawful, but you object to its deletion;
– we no longer need the data, but you need it to assert, exercise or defend legal claims or
– you have objected to the processing in accordance with Article 21 GDPR;
• in accordance with Article 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
• in accordance with Article 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of granted consent or objection to a specific use of data, please contact us directly using the contact details in our imprint.

Right to lodge a complaint with the supervisory authority

In accordance with Article 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

Right to object to data collection in special cases as well as to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING

INSERTION; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).