Privacy Policy
Scope
This privacy policy informs users of this website, in accordance with the Federal Data Protection Act and the Telemedia Act, about the nature, scope and purpose of the collection and use of personal data by the website operator,
TNC-Hamburg ek,
Warnstedtstrasse 12 D
22525 Hamburg
Tel 04042910050
Email info@tnc-hamburg.de
The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with legal requirements.
Please bear in mind that data transmission over the internet may generally be subject to security vulnerabilities. It is not possible to provide complete protection against access by third parties.
Personal data may be collected on the website. This is the case when you place an order, subscribe to a newsletter or contact us via the website. Furthermore, we collect technical information and general data about the use of our website via cookies used on our website, which are collected automatically.
Below, we provide detailed information on what data is collected, for what purposes, whether it is passed on to third parties, and how long it is stored. You will then find an overview of your rights:
I. Data collected on the website
1. Ordering in the online shop
If you place an order in our online shop, a contract can only be concluded and processed if you provide us with the following personal data: first name, surname, street, postcode, town/city, email address, telephone number and, depending on the payment method selected, your bank details. We also store the date and time of the order. The provision of this data is necessary for the conclusion of the contract. Failure to provide this data means that no contract can be concluded. You may also voluntarily provide comments regarding the order or an alternative delivery and/or billing address. The processing of all data collected in connection with an order is based on Article 6(1)(b) of the GDPR.
Your data will not be disclosed to third parties without your express consent. The only exception to this is disclosure to our service partners, whom we require to process the contractual relationship, or service providers whom we engage within the scope of data processing on our behalf. In addition to the recipients named in the relevant clauses of this privacy policy, these include, for example, recipients in the following categories: delivery service providers, payment service providers, merchandise management service providers, order processing service providers, web hosts, IT service providers and dropshipping retailers. In all cases, we strictly adhere to the legal requirements. The scope of data transfer is limited to a minimum. The corresponding data processing is necessary for the performance of the contract and is based on Article 6(1)(b) of the GDPR.
Disclosure of your email address to the shipping company for information on the shipping status: We pass on your email address to the shipping company as part of the contract processing. The purpose of this disclosure is to inform you of the shipping status via email. We have a legitimate business interest in having the shipping company inform you directly about the shipping status, thereby enabling you to know at any time when your order will arrive. The corresponding data processing is carried out on the basis of Article 6(1)(f) of the GDPR.
If you choose to pay via PayPal, you will be redirected to PayPal to finalise your order. Data is exchanged between PayPal and the website operator. Your data will be passed on to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The transfer of data serves the purpose of contract performance and is based in this respect on Article 6(1)(b) of the GDPR. All PayPal transactions are subject to the PayPal Privacy Policy. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=de_DE.
We store the data required for contract processing until the expiry of the statutory warranty periods. We store the data required under commercial law or tax law in accordance with the statutory retention periods pursuant to Section 257 of the German Commercial Code (HGB) and Section 157 of the German Fiscal Code (AO), generally for a period of 10 years. Personal data processed for the purpose of carrying out pre-contractual measures will be deleted within 12 months if no contract is concluded.
If we receive your email address in connection with the conclusion of a contract, we are permitted to send you information about our own similar offers, e.g. via our newsletter, to your email address. We have a commercial interest in sending such promotional offers. The processing of your email address is based in this respect on Article 6(1)(f) of the GDPR in conjunction with Section 7(3) of the Unfair Competition Act.
2. User account
You have the option of setting up a user account on our website. This includes an overview of orders placed and active order processes. To create a user account, you must provide us with the following personal data: first name, surname, street, postcode, town/city, email address, telephone number and a password of your choice. We also store the date and time of registration. The provision of this data is necessary for the creation of a customer account. Failure to provide this data means that you will not be able to create a customer account.
The processing of all data collected in connection with the creation of a user account is based on your consent given by providing the data and thus on Article 6(1)(a) of the GDPR. You may withdraw your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
We will store the data you provide when registering a user account for as long as you maintain your user account or until we receive a revocation of your declaration of consent in this regard.
If you, as a customer, leave the online shop, you will be automatically logged out. The operator accepts no liability for password misuse, provided this was not caused by the operator itself.
3. Newsletter
The website operator offers you the opportunity to subscribe to a newsletter, in which they inform you about current events and offers. If you wish to subscribe to the newsletter, you must provide a valid email address. We require this to be able to send you the newsletter. The processing of your data is based on the consent you have given and thus on Article 6(1)(a) of the GDPR.
You may withdraw your consent to receive the newsletter at any time, for example by emailing info@tnc-hamburg.de. You may also unsubscribe from the newsletter at any time by clicking on the unsubscribe link included in every newsletter. We will store your data for this purpose until we receive a withdrawal of your consent or an objection to the processing of your data for marketing purposes.
4. Contact
If you contact the website operator using the contact options provided, the personal data you provide when making contact will be stored so that it can be accessed to process and respond to your enquiry. This data will not be passed on to third parties without your consent. Processing takes place on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. We use your email address solely to process your enquiry and store it for one year in case of follow-up questions. Your data will then be deleted unless you have consented to further processing and use.
5. Automatically collected data
a. Access data / log files
The website operator or hosting provider collects data on visits to the site and stores this as “server log files”. The following data is logged:
- Website visited
- Date, time
- Type of request, protocol type and access status
- Amount of data sent in bytes
- File name
- Information about the website from which you found us
- Description of the type of web browser version and operating system used
- IP address used
The data collected is used solely for statistical analysis and to improve the website. Data processing is based on our legitimate interest in processing data for the aforementioned purposes and thus on Article 6(1)(f) of the GDPR.
The IP address, i.e. the only piece of data that could be linked to you personally, is deleted or anonymised after seven days at the latest, so that it is no longer possible to establish a personal link. However, the website operator reserves the right to review the server log files retrospectively should there be concrete indications of unlawful use.
b. Cookies
This website uses cookies. These are small text files that are stored on your device. Your browser accesses these files. The use of cookies enhances the user-friendliness and security of this website.
Common browsers offer the option to disable cookies. Please note: We cannot guarantee that you will be able to access all functions of this website without restrictions if you make such settings.
Please note that you can configure your browser to notify you when cookies are set, allowing you to decide on a case-by-case basis whether to accept them, or to block the acceptance of cookies in specific cases or generally. You can find configuration instructions for the various web browsers via the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
To make visiting our website an enjoyable experience and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information to a limited extent, such as browser and location data as well as IP addresses. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. Where individual cookies implemented by us also process personal data, such processing is carried out in accordance with Article 6(1)(b) of the GDPR either for the performance of a contract or in accordance with Article 6(1)(f) of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective design of the site visit. We may work with advertising partners who help us make our website more interesting for you. To this end, when you visit our website, cookies from partner companies may also be stored on your hard drive (third-party cookies). Where we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the following paragraphs.
c. Web analytics services
1. Google (Universal) Analytics with Google Signals This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called "cookies", which are text files stored on your device and which enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website (including the truncated IP address) is usually transmitted to a Google server and stored there; this may also involve transmission to the servers of Google LLC in the USA. This website uses Google (Universal) Analytics exclusively with the "_anonymizeIp()" extension, which ensures the anonymisation of the IP address by truncation and excludes direct personal identification. This extension causes Google to truncate your IP address within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a server of Google LLC in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services relating to website and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data. Google Analytics also enables the creation of statistics regarding the age, gender and interests of website visitors via a special function known as ‘demographic characteristics’, based on an analysis of interest-based advertising and using third-party information. This allows the definition and differentiation of user groups on the website for the purpose of targeting marketing measures at specific audiences. However, data records collected via “demographic characteristics” cannot be attributed to any specific individual. All processing described above, in particular the setting of Google Analytics cookies for the retrieval of information from the device used, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, Google Analytics will not be used during your visit to the website. You may withdraw your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service using the “Cookie Consent Tool” provided on the website. We have entered into a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties. For the transfer of data from the EU to the USA, Google relies on the European Commission’s Standard Data Protection Clauses, which are intended to ensure compliance with European data protection standards in the USA. Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de As an extension of Google Analytics, this website also uses the Google Signals service. Google Signals enables us to generate cross-device reports via Google (so-called “cross-device tracking”). Provided you have enabled “personalised ads” in your Google Account settings and have linked your internet-enabled devices to your Google Account, Google may analyse user behaviour across devices, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) of the GDPR (see above), and create database models based on this. This takes into account the logins and device types of all site visitors who were logged into a Google account and carried out a conversion. Among other things, the data shows on which device you first clicked on an advert and on which device the associated conversion took place. We do not receive any personal data from Google in this context, but only statistics generated on the basis of Google Signals. You have the option to disable the ‘personalised ads’ feature in your Google Account settings and thereby stop cross-device analysis. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de You can find further information about Google Signals here: https://support.google.com/analytics/answer/7532985?hl=de
d. Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they visit the page in the form of an interactive user interface, on which consent for specific cookies and/or cookie-based applications can be granted by ticking the relevant boxes. When the tool is used, all cookies/services requiring consent are only loaded if the respective user grants the relevant consent by ticking the appropriate boxes. This ensures that such cookies are only set on the user’s device if consent has been granted. The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context. However, if in individual cases the storage, classification or logging of cookie settings does lead to the processing of personal data (such as the IP address), this is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website. A further legal basis for the processing is Article 6(1)(c) of the GDPR. As the data controller, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the user’s consent. Further information regarding the operator and the configuration options of the cookie consent tool can be found directly in the relevant user interface on our website.
e. PayPal transactions
Please note that all PayPal transactions are subject to the PayPal Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full Where legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please follow the procedure described above for lodging an objection.
II. User rights
You have the right to request information at any time regarding the personal data we hold about you. Furthermore, you also have the right to data portability, rectification or erasure, as well as the right to restrict the processing of your data. You may also object to the processing of your data at any time. In detail:
1.) Right of access
Under Article 15 of the GDPR, you have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you also have the right to access this personal data and to information regarding the purpose of processing, the categories of personal data being processed, the recipients or categories of recipients to whom the personal data has been or will be disclosed, the envisaged duration for which the personal data will be stored, the existence of a right to rectification or erasure of the data concerning you, to restriction of processing, the existence of a right to object to such processing, the existence of a right to lodge a complaint with a supervisory authority, and, where the personal data has not been collected from you, to all available information regarding the origin of the data.
2.) Right to rectification
Subject to the conditions set out in Article 16 of the GDPR, you also have the right to request the rectification or completion of inaccurate personal data concerning you without delay.
3.) Right to erasure
Subject to the conditions set out in Article 16 of the GDPR, you also have the right to request the rectification or completion of inaccurate personal data concerning you without undue delay.
4.) Right to restriction
Subject to the conditions set out in Article 18 of the GDPR, you have the right to request the restriction of the processing of your data.
5.) Right to data portability
Under Article 20 of the GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, as well as the right, provided the conditions of Article 20 of the GDPR are met, to transmit this data to another controller. In this context, you have the right to have the personal data concerning you transmitted directly to the other controller.
6.) Right to object
Under Article 21 of the GDPR, where your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR, provided there are grounds for doing so arising from your particular situation. You have the right to object to the processing of your data for the purposes of direct marketing at any time without having to specify a particular situation.
Right to lodge a complaint
If you believe that the processing of your data infringes data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with the competent supervisory authority.
