The controller for data processing is:
SLG Werbeartikel Promotion Service GmbH
Herrenstrasse 13
50170 Kerpen (Sindorf)
Germany
kvb.shop@slg-kerpen.de
We are delighted that you are interested in our online shop. We attach a great deal of importance to protecting your privacy. Below, we have provided you with detailed information about how your data is handled.
1. Access data and hosting
You can also visit our website without providing any personal information. Whenever a website is accessed, all the web server does is automatically save what is known as a ‘server log file’ that contains e.g. the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data) and documents the retrieval.
This access data is evaluated for the sole purposes of ensuring that the website operates faultlessly and of improving our services. In accordance with Art. 6 (1), sentence 1, (f) of the GDPR, this serves to safeguard our legitimate interests in presenting our services correctly, which outweigh other interests in the context of balancing of interests. All access data shall be deleted within seven days of your visit to the website ending at the latest.
Hosting services through a third-party provider
In the context of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. All data collected in the context of using this website or in forms provided for this purpose in the online shop as described below are processed on its servers. Processing on other servers only takes place in the context explained here.
This service provider is based in a country in the European Union or the European Economic Area. 2. Collecting and using data for the purpose of contract processing, contact and opening a customer account
We collect personal data if you voluntarily provide us with the same in the context of your order or when contacting us (e.g. using the contact form or by email). Mandatory fields are marked as such because, in these cases, we need the data under all circumstances to process the contract or to process your contact, and you cannot send the order or make contact without indicating the same. Please see the entry forms in question to find out what data is collected. We use the data you provide us with in accordance with Art. 6 (1), sentence 1, (b) of the GDPR for the purpose of processing contracts and handling your enquiries.
Insofar as you have given your consent to this effect in accordance with Art. 6 (1), sentence 1, (a) of the GDPR by deciding to open a customer account, we shall use your data for the purpose of opening a customer account.
After the contract has been processed in full or your customer account has been deleted, your data shall be restricted for further processing and erased once the retention periods under tax and commercial law have elapsed, unless you have expressly consented to your data being put to further use, or we reserve the right to use your data for other purposes that are permitted by law and that we inform you of in this policy. You can delete your customer account at any time, either by sending a message using the contact details provided below, or by using a function in the customer account provided for this purpose.
3. Data transfer
To fulfil the contract in accordance with Art. 6 (1), sentence 1, (b) of the GDPR, we transfer your data to the shipping company engaged to carry out the delivery, insofar as doing so is necessary for delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we shall transfer the payment data collected for this purpose to the bank tasked with the payment and, if applicable, to the payment service provider we engaged or to the selected payment service for the purpose of processing payments. In some cases, the selected payment service providers also collect this data themselves if you open an account with them. In this case, you must log into the payment service provider’s portal with your access credentials during the ordering process. In this respect, the relevant payment service provider’s privacy policy shall apply. Data transfer to shipping service providers If you have given us your express consent to do so while or after placing your order, we shall pass on your email address to the selected shipping service provider in accordance with Art. 6 (1), sentence 1, (a) of the GDPR, so that this provider can contact you before delivery for the purpose of notifying you of or coordinating delivery. You can revoke your consent at any time by sending us a message using the contact details provided below or by sending a message directly to the shipping service provider on the contact address listed below. Following cancellation, we shall delete your details provided for this purpose, unless you have expressly consented to further use of your data beyond this or we have reserved the right to further and legally permissible data use, which we inform you of in this policy.
UPS
Görlitzer Str. 1
41460 Neuss
Germany
4. Cookies and web analytics
We use what are known as ‘cookies’ on various pages of our website to make your visit to our website attractive and to enable the use of certain functions to display appropriate products or to conduct market research. This serves to safeguard our legitimate interests in displaying our services in an optimised manner in accordance with Art. 6 (1), sentence 1, (f) of the GDPR, which outweigh other interests in the context of balancing of interests. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted once the browser session has ended, i.e. after you close your browser (‘session cookies’). Other cookies remain on your terminal device and enable us to recognise your browser the next time you visit our website (persistent cookies). You can see the storage duration in your web browser’s cookie settings. You can make settings in your browser so that you are informed of cookies being set and can decide on a case-by-case basis on whether to accept them, or whether to accept cookies for certain cases or categorically prevent use of the same. Each browser is different in the way that it manages cookie settings. This is described in every browser’s Help menu, which explains to you how you can change your cookie settings. You will find this information for the browser in question at the following links:
Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™
If you do not accept cookies, our website’s functionality may be restricted.
Using Google (Universal) Analytics for web analytics
Insofar as you have given your consent in accordance with Art. 6 (1), sentence 1, (a) of the GDPR, this website uses Google (Universal) Analytics for website analytics purposes. The web analytics service is provided by Google Ireland Limited, a company incorporated and run under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.co.uk). Google (Universal) Analytics uses methods that enable analysis of your use of the website, such as cookies. The information automatically collected about your use of this website is generally transmitted to and stored on a Google server in the USA. If IP anonymisation is activated on this website, Google shall, however, truncate your IP address before transmission within Member States of the European Union or other states that are parties to the Agreement on the European Economic Area. Only in exceptional cases shall the full IP address be transmitted to a Google server in the USA and truncated there. However, the anonymised IP address transmitted by your browser in the context of Google Analytics is generally not associated with other data held by Google. Once the purpose no longer applies and we are no longer using Google Analytics, the data collected in this context shall be deleted.
Insofar as information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the EU/US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
You can revoke your consent at any time with effect for the future by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB. This shall prevent Google’s collection and processing of the data generated by the cookie and related to your use of the website (including your IP address).
As an alternative to the browser plugin, you can click on this link to prevent Google Analytics from collecting data on this website in future. An opt-out cookie shall be stored on your terminal device during this process. If you delete your cookies, you shall be asked to give your consent again.
5. Contact details and your rights
As a data subject, you have the following rights:
• According to Art. 15 of the GDPR, you have the right to the extent described therein to request information about what personal data we process;
• According to Art. 16 of the GDPR, you have the right to immediately request rectification of incorrect personal data or completion of your personal data that we store;
• In accordance with Art. 17 of the GDPR, you have the right to demand that we erase personal data about you that we have stored, unless further processing is required
o to exercise the right to freedom of expression and information;
o to fulfil a legal obligation;
o for reasons of public interest; or
o to establish, exercise or defend legal claims;
• According to Art. 18 of the GDPR, you have the right to request that processing of your personal data be restricted, provided that
o you dispute the accuracy of the data;
o processing is unlawful, but you refuse to have the data erased;
o we no longer need the data, but you require the same to establish, exercise or defend legal claims; or
o you have filed an objection to processing in accordance with Art. 21 of the GDPR;
• According to Art. 20 of the GDPR, you have the right to receive your personal data that you provided us with in a structured, commonly used and machine-readable format or to request transfer to another controller;
• According to Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. Generally speaking, you can contact the supervisory authority of your usual place of residence or workplace or of our corporate headquarters for this purpose.
If you have any questions about how your personal data is collected, processed or used, would like to gain access to, rectify, restrict or erase your data, as well as to revoke any consent that you have granted or object to certain use of your data, please contact us directly using the contact details provided in our legal notice.
Right of objection
Insofar as we process personal data as explained above to safeguard our legitimate interests, which outweigh other interests in the context of balancing of interests, you can object to such processing with effect for the future. If processing is performed for direct marketing purposes, you may exercise this right at any time as described above. If processing is performed for other purposes, you have the right to object only if there are grounds arising from your particular situation.
Once you have exercised your right of objection, we shall no longer process your personal data for these purposes unless we can demonstrate compelling and legitimate grounds for processing that outweigh your interests, rights and freedoms, or if processing serves to assert, exercise or defend legal claims
This does not apply if processing is performed for direct marketing purposes. Then, we shall not further process your personal data for this purpose.
Privacy policy created with the Trusted Shops legal writer in cooperation with Wilde Beuger Solmecke Lawyers.