Privacy Policy

1) Information about the data controller collecting personal data and contact details

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Gisela Martin, Gisela Martin, Wunnensteinstr. 27, 70188 Stuttgart, Germany, Tel.: +49 171 8050203, Email: gisela@gaumen-freun.de. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transfer of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the string "https: //" and the lock symbol in your browser line.

2) Data collection when visiting our website

If you use our website purely for information, i.e. you do not register or transmit information in any other way, we only collect the data that your browser transmits to our server (so-called “server logfiles”). When you call up our website we will collect the following data that we require from a technical point of view to display our website to you:

  • The website visited
  • Date and time of accessing the website
  • Volume of data transmitted in bytes
  • Source/reference from where you accessed the website
  • Browser used
  • Operating system used.
  • IP address used (anonymous if applicable)

The data is processed in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disseminated or used in any other way. However, we reserve the right to check the server logfiles retrospectively if there is concrete evidence of unlawful use.

2.1) Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, on our website. Google may also process data in the USA. The purpose of this processing is to analyze website usage in order to improve our online services. The legal basis for this is your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG (German Telemedia Act). Google Analytics is only activated after you have given your consent. Data collected may include, among other things, an anonymized IP address, device and browser information, pages visited, interactions, duration of stay, technical events, and the approximate region. IP anonymization is activated, so your IP address is shortened within the EU. Data may be transferred to the USA. This is done on the basis of the EU-US Data Privacy Framework or the standard contractual clauses of the EU Commission. The storage period for user and event data is generally between 2 and 14 months, depending on our settings in Google Analytics. You can withdraw your consent at any time by reopening the cookie settings via the link in the footer.

3) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when the browser is closed (so-called "session cookies"), some of these cookies remain longer on your device and allow you to save page settings (so-called "persistent cookies"). In the latter case, you can see the storage duration in the overview of the cookie settings in your web browser.

If personal data is also processed by individual cookies we use, the processing takes place in accordance with Art. 6 Paragraph 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 Paragraph 1 lit. According to Art. 6 Para. 1 lit.f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

Please note that the functionality of our website may be restricted if you reject cookies.

4) Contacting us

When you contact us (e.g. via the contact form or email), personal data will be processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit.f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention requirements

5) Data processing when opening a customer account

In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide us with this when you open a customer account. The data required to open an account can be found in the input mask of the relevant form on our website. A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deleting your customer account, your data will be deleted provided that all contracts concluded about it have been fully processed, there are no legal retention periods to the contrary and we have no legitimate interest in further storage.

6) comment function

As part of the comment function on this website, in addition to your comment, information on the time the comment was created and the name of the commentator you have chosen will be stored and published on this website. Furthermore, your IP address will be saved for security reasons in order to enable attribution to the author in the event of illegal comments. Your e-mail address will be saved so that you can be contacted if a third party should complain that your published content is illegal.

7) Use of customer data for direct advertising

Goods availability notification by email

For items that are temporarily unavailable, you can sign up to receive goods availability notifications by email. We will send you a one-time email notification about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. The provision of further data is voluntary and may be used in order to be able to address you personally. We use the so-called double opt-in procedure for sending e-mails, which ensures that you will only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the specified e-mail address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Article 6 (1) (a) GDPR. We save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later point in time. The data collected by us when registering for our e-mail notification service for the availability of goods are used strictly for the specific purpose. You can unsubscribe from the availability notifications at any time by sending a message to the person responsible mentioned above. After you have unsubscribed, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration .

8) Data processing for order processing

8.1 Insofar as it is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned bank in accordance with Article 6 Paragraph 1 lit. b GDPR.

In order to process your order, we also work together with the following service provider (s) who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Use of payment service providers (payment services)

  • Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we will transfer your payment data in the course of payment to PayPal (Europe) Sarl et Cie, SCA, 22- 24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), continue. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for the payment process.

PayPal reserves itself for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment" via PayPal the execution of a credit check. If necessary, your payment data will be processed in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of the legitimate interest of PayPal in the determination of their solvency to credit bureaus passed. The result of the credit check for statistical probability of default is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit information can contain probability values ​​(so-called score values). As far as score values ​​are included in the results of the credit rating, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values ​​includes, but is not limited to, address data. Further data protection information, among other things to the used credit reference agencies, please refer to the privacy policy of PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to be entitled to process your personal data, if this is necessary for the contractual payment.

9) Rights of the data subject

9.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the person responsible with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:

  • Right to information in accordance with Art. 15 GDPR;
  • Right to rectification in accordance with Art. 16 GDPR;
  • Right to deletion in accordance with Art. 17 GDPR;
  • Right to restriction of processing in accordance with Art. 18 GDPR;
  • Right to information in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
  • Right to lodge a complaint in accordance with Art. 77 GDPR.

9.2 OPPOSITION RIGHT

IF WE PROCESS YOUR PERSONAL DATA WITHIN A BALANCING OF INTERESTS AND BASED ON OUR OVERRIDING LEGITIAMTE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS EMANATING FROM YOUR SPECIFIC SITUATION.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT WE WILL TERMINATE PROCESSING THE RELEVANT DATA. WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING PRIVILEGED REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES AT ANY TIME. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT WE WILL TERMINATE PROCESSING THE RELEVANT DATA FOR DIRECT ADVERTISING PURPOSES.

10) Storage period of personal data

The storage duration of personal data is determined by the respective legal framework, the processing purpose, and - where appropriate - additionally by the respective legal retention period (e.g. retention periods pertaining to commercial or tax legislation).

When processing personal data based on an explicit consent in accordance with Article 6(1)(a) GDPR this data will be stored until the data subject withdraws their consent.

If legal retention periods exist for data that have been processed within transactional or transactional-similar obligations on the basis on Article 6(1)(b) GDPR, these data will be routinely erased after expiry of the retention period provided they are no longer required for the fulfilment or initiation of a contract and/or no legitimate interest on continued storage continues from our side.

When processing personal data on the basis of Article 6(1)(f) GDPR we will store these data until the data subject exercises their right to object in line with Article 21(1) GDPR, unless we can prove compelling privileged reasons for processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defence of legal claims.

When processing personal data for the purpose of direct advertising on the basis of Article 6(1)(f) GDPR these data are stored until the data subject exercises their right to object in line with Article 21(2) GDPR.

If any other information of this declaration about specific processing situations does not result in any other outcomes, stored personal data will be erased when they are no longer required for the purposes for which they were collected or processed in any other way.