Company in charge of data processing:
ceka! fullservice GmbH
89264 Weißenhorn, Germany
We are delighted that you have chosen to visit our online shop. The protection of your privacy is a matter of great importance to us. Our handling of your data is described in detail below.
1. Access data and hosting
You can visit our websites without disclosing details about yourself. Each time a website is called-up, the web server fully automatically saves what is referred to as a server log file, which contains information such as the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transmitted and the requesting provider (access data) and documents the retrieval.
This access data is evaluated exclusively for the purposes of ensuring error-free operation of the site as well as improving our content. Pursuant to Article 6 paragraph 1 sub-paragraph 1 point f of the General Data Protection Regulation (GDPR), this serves the purposes of our, in the framework of a balancing of interests, overriding legitimate interest in the correct presentation of our offering. All access data are deleted no later than seven days after the end of your visit to the website.
2. Data collection and management for contracts processing, making contact
We collect personal data if you voluntarily disclose it to us in the context of your order or in making contact with us (e.g. via the contact form or by email). Mandatory fields are identified as such, since in these cases we require this data for contracts processing or to process your contact information, and without specifying this information you will not be able to submit your order or make contact. In each case, the data we collect is evident from the relevant input form. Pursuant to Article 6 paragraph 1 sub-paragraph 1 point b of the GDPR, we use the data you provide for performance of contract and for processing your requests. If you have granted your consent in accordance with Art. 6 paragraph 1 sub-paragraph 1 lit. a of GDPR by deciding to open a customer account, we utilize your data for the purpose of opening a customer account. After the full execution of the contract or the deletion of your customer account, your data will be restricted from further processing and deleted after the expiry of the retention period stipulated by tax and commercial law unless you have explicitly consented to the further use of your data or unless we reserve the right to a more extensive use of the data within the confines of the law and about which we inform you in this declaration. You can cancel your customer account at any time, either by sending notification to this effect to the contact address stated below or by using a function provided for the purpose in the customer account.
3. Data disclosure
Data transfer and shipping service providers
Provided that, during or after your purchase order, you have granted us your explicit consent for this purpose, then, on the basis of this consent and in accordance with Art. 6 paragraph 1 sub-paragraph 1 lit. a of GDPR, we will forward your email address and telephone number to the selected shipping service provider so that they can contact you prior to delivery for the purposes of delivery notification or coordination.
You can revoke your consent at any time by sending a message to the contact option described below or by making contact with the shipping service provider directly at the contact address listed below. After revocation, we will delete the data specified for deletion, unless you have explicitly consented to the further use of your data, unless you have expressly consented to the further use of your data or unless we reserve the right to a more extensive use of the data within the confines of the law and about which we inform you in this declaration.
DHL Paket GmbH
53113 Bonn, Germany
United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss, Germany
4. Email newsletter and postal advertising
Email advertising upon registration to the newsletter
If you register for our newsletter, we use the data required to do so or the data separately provided by you in order to regularly send you our email newsletter on the basis of your consent in accordance with Art. 6 paragraph 1 sub-paragraph 1 lit. a of GDPR.
Email advertising without subscription to the newsletter and your right of objection
If we receive your email address in connection with the sale of goods or services and you have not objected, we reserve the right to email you on the basis of section 7 paragraph 3 of Germany's Act Against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb, UWG) regular offers relating to products, similar to those already purchased, from our range. This serves the protection of our legitimate interests in making contact with our customers through marketing, which prevail in the context of a weighing of interests.
You can opt out of this use of your email address at any time by sending a message to the contact option described below or by means of a link that is provided in the advertising newsletter, without incurring any additional costs other than the transmission costs at the basic rates.
The newsletter is distributed on our behalf in the framework of processing by a service provider to whom we disclose your email address for this purpose. This service provider is headquartered in a member state of the European Union or within the European Economic Area.
Postal advertising and your right to object
Furthermore, we reserve the right to use your first and last name as well as your postal address for our internal advertising purposes, for instance for delivering interesting promotions and information about our products by letter mail. This serves the protection of our legitimate interests in making contact with our customers through marketing, which prevail in the context of a weighing of interests, in accordance with Art. 6 paragraph 1 sub-paragraph 1 lit. f of GDPR.
In the context of processing, the advertisements are mailed on our behalf by a service provider to whom we forward your data for this purpose.
You can opt out of the storage and use of your data for these purposes at any time by sending a message to the contact option described below.
5. Integration of the Trusted Shops trustbadge
The Trusted Shops Trustbadge is integrated onto this website for displaying our Trusted Shops signet and any reviews collected as well as for the purpose of offering Trusted Shops products to buyers after making an order.
This serves the protection of our legitimate interests, which prevail in the context of a weighing of interests, in optimal marketing by enabling secure purchasing in accordance with Art. 6 paragraph 1 sub-paragraph 1 lit. f of GDPR.The "Trustbadge" and the services advertised by the use thereof are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. The "Trustbadge" is provided as part of order processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also uses service providers from the United States. A reasonable level of data protection is ensured. You can find further information on the data protection of Trusted Shops GmbH here: https://www.trustedshops.de/impressum/#datenschutz .
When the Trustbadge is called up, the web server automatically stores what is referred to as a server log file, which also contains your IP address, the date and time of the call, the amount of data transmitted and the requesting provider (access data) and documents the call. Individual access data is stored in a security database for the analysis of security abnormalities. The log files are automatically deleted no later than 90 days after creation.
Further personal data will be transmitted to Trusted Shops GmbH if you decide to use Trusted Shops products after completion of an order or if you have already registered to use said products. The contractual agreement made between you and Trusted Shops shall apply. For this purpose, personal data is automatically collected from the order data. Whether you, as a buyer, are already registered for product usage is automatically checked based on a neutral parameter: the email address hashed using a one-way encryption function. Prior to sending, the email address will be converted into this hash value, which cannot be decrypted by Trusted Shops. After checking for a match, the parameter is automatically deleted.
6. Cookies and web analysis
To make visits to our website attractive and enable the use of certain functions, to display suitable products or for market research, we use what are known as cookies on various pages. This serves the protection of our legitimate interests, which prevail in the context of a weighing of interests, in an optimized presentation of our products in accordance with Art. 6 paragraph 1 sub-paragraph 1 lit. f of GDPR. Cookies are small text files that are automatically saved on your device. Some of the cookies that we use are deleted again after the end of the browser session after your browser is closed (called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit our website (persistent cookies). Your internet browser's cookie settings will show you how long these cookies persist on your hard drive. You can configure your browser to notify you whenever a cookie is about to be placed on your device and allow cookies only on a case-to-case basis, to decline cookies in certain cases or generally. Each browser differs in the way it manages the cookie settings. Your browser's Help menu contains the information explaining how to change the cookie settings. You can find these for each respective browser at the following links:
The use of Google (Universal) Analytics for web analytic
If you have granted your consent for this purpose in accordance with Art. 6 paragraph 1 sub-paragraph 1 lit. a of GDPR, this website uses Google (Universal) Analytics for the purposes of website analytics. The web analytics service is a product of Google Ireland Limited, a company incorporated and operated in accordance with Irish law, with headquarters at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). Google (Universal) Analytics employs methods, such as cookies for example, that enable analysis of your use of the website. The automatically collected information about your use of this website is generally transmitted to a Google server located in the USA and saved there. By activation of IP anonymization on this website, prior to transmission the IP address is truncated within the member states of the European Union or in other countries that are contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. In principle, the anonymized IP address transmitted by your browser in the framework of Google Analytics will not be combined with other data by Google. Once we no longer have a purpose for using Google Analytics and have discontinued its use, the data collected in this context will be deleted.
If information is transmitted to Google servers in the United States and stored there, the American Company Google LLC is certified under the EU-US Privacy Shield. Click here to view a current certificate. Based on this agreement between the United States and the European Commission, the European Commission has ascertained an appropriate level of data protection for companies certified under the Privacy Shield.
You can revoke your consent at any time, with effect for the future, by downloading the browser plugin available at the following link ant installing it: https://tools.google.com/dlpage/gaoptout?hl=de . Doing so prevents the acquisition of the data generated by the cookie and related to your use of the website (including your IP address) as well as any processing of this data by Google.
As an alternative to the browser plugin, you can click this link in order to prevent any future data acquisition by Google Analytics on this website. This will place an opt-out cookie on your device. If you delete your cookies you will again be requested to issue your consent.
Facebook pixels for the creation of custom audiences
On this website "Facebook pixels" of the social network Facebook are used in the mode of extended data synchronization. Operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
Based on his or her express consent, when a user clicks on an advertisement placed on Facebook and displayed by us, an addition is added to the URL of our linked page by Facebook pixels. This URL parameter is then written to the user's browser by a cookie that is set by our linked site itself. In addition, this cookie records specific customer data such as the e-mail address that we collect on our website linked to the Facebook ad during processes such as purchase transactions, account logins or registrations (extended data reconciliation). The cookie is then read by Facebook Pixel and enables the data, including specific customer data, to be forwarded to Facebook.
With the help of the Facebook pixel with extended data synchronization, Facebook is on the one hand able to precisely determine the visitors of our online offer as a target group for the display of ads (so-called "Facebook ads"). Accordingly, we use the Facebook pixel with extended data synchronization to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel with extended data matching, we also want to ensure that our Facebook ads correspond to the potential interest of the users and are not annoying. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users have been redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the Standard version of Facebook Pixel, the advanced data matching feature helps us better measure the effectiveness of our advertising campaigns by capturing more assigned conversions.
All transmitted data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, according to the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and outside of Facebook. These processing operations are only carried out if express consent is granted in accordance with Art. 6 para. 1 lit. a DSGVO. Consent to use the Facebook pixel may only be given by users who are older than 16 years of age. If you are younger, please ask your legal guardian for permission. The information generated by Facebook is usually transferred to a Facebook server and stored there. This may also involve a transfer to the servers of Facebook Inc. in the USA. You can revoke your granted consent at any time with effect for the future. To exercise your revocation, remove the "Cookie-Consent-Tool" integrated in the website set check marks next to the "Facebook Pixel" setting.
For the uniform display of character fonts, this site uses what are referred to as Web Fonts, provided by Monotype Imaging Holding Inc. When you call up a page, your browser loads the required Web Fonts into your browser cache in order to display texts and fonts correctly.
What data do we collect from you?
The tracking code of the Web Font does not collect, process or store any personal data. If you access a website that contains our Web Font tracking script or a similar technology, we collect the following data:
The project identification number of the web font (in anonymized form), the URL of the licensed website which is linked to a customer number to permit us to identify the licensee and the licensed web fonts, and the URL of the previously visited web page.
How do we use the data that we collect from you?
- We store the anonymized project identification number of the web font in encrypted log files with such data for a period of 30 days to determine the monthly number of web page call-ups. After such determination and storage of the number of the web page call-ups, the log files are deleted.
- Monotype web fonts are used in the interest of a uniform and pleasing presentation of our online content. This constitutes a legitimate interest as defined by art. 6 sub-paragraph 1 point f of the General Data Protection Regulation (GDPR).
- These fonts are subject to license conditions. The license fee amount is based on the number of page call-ups, which must accordingly be tracked to calculate the license fee.
- Your computer will substitute a standard font if your browser does not support Web Fonts.
7. Social media plug-ins
The use of the social plugins from Facebook, Twitter while using the Shariff solution.
Social Buttons from social networks are used on our website.
This serves the protection of our legitimate interests, which prevail in the context of a weighing of interests, in optimized marketing of our products in accordance with Art. 6 paragraph 1 sub-paragraph 1 lit. f of GDPR. To increase the protection of your data when you visit our website, instead of being incorporated into the page without restriction as plug-ins, their implementation merely involves the use of HTML links. This integration ensures that when you call up a page of our website that contains such buttons, this action in itself does not establish a connection to the servers of the provider of the respective social network.
If you click one of the buttons, a new window in your browser opens and calls up the web page of the respective service provider. On this page, you can, for example, press a "Like" or "Share" button (after entering your login data where applicable).
For the purpose and scope of the data collection and the further processing and usage of the data by the providers on their web pages, as well as a contact option and your rights and settings options for the protection of your privacy relating thereto, please refer to the data protection notices of the providers.
Our online presence on Facebook, Instagram, Xing, LinkedIn
Our presence on social networks and platforms serves the purpose of improved, active communication with our existing and prospective customers. We use social networks and platforms to provide information on our products and ongoing special promotions.
When you visit our online profiles on social media, your data may be collected and stored for the purposes of market research and advertising. This data is used to create usage profiles that make use of pseudonyms. These profiles may be used, for example, to display advertisements both within and outside of the platforms that presumably correspond to your interests. For this purpose, cookies are used on your end device as a rule. The user behavior and the interests of the user are stored in these cookies. In accordance with Art. 6 Paragraph 1 lit. f. of GDPR, this serves the protection of our legitimate interests, which prevail in the context of a weighing of interests, in the optimized presentation of our products and the effective communication with existing and prospective customers. In the event that you are asked by the respective social media platform operators for consent (agreement) to data processing, for example using a checkbox, the legal basis for this data processing is Art. 6 Paragraph 1 lit. a of GDPR.
Insofar as the aforementioned social media platforms are headquartered in the United States, the following applies: The European Commission has made an adequacy decision in favor of the United States. This refers back to the EU-US Privacy Shield. Click here to view a current certificate for the respective company.
For detailed information on the processing and use of data by the providers on their web pages as well as a contact option and your rights and settings options for the protection of your privacy relating thereto, in particular your right of objection (opt-out), please refer to the data protection notices of the providers linked below. If, despite this, you should require assistance concerning this matter, please contact us.
The data processing takes place on the basis of an agreement between mutually responsible parties in accordance with Art. 26 of GDPR, which can be viewed here:
Right of objection (opt-out):
8. Ways of making contact and your rights
As data subject, you have the following rights:
- pursuant to Article 15 of GDPR, the right to request information about your personal data processed by us within the scope denoted here;
- pursuant to Article 16 of GDPR, the right to promptly request the amendment of incorrect or incomplete personal data stored by us;
- pursuant to Article 17 of the GDPR, the right to obtain erasure of your personal data saved by us, where further processing is not necessary;
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest, or
- for the establishment, exercise or defense of legal claims;
- pursuant to Article 18 of the GDPR, the right to obtain restriction of processing of your personal data, where
- the accuracy of the personal data is contested by you;
- the processing is unlawful but you oppose the erasure of the personal data;
- we no longer need the data, but they are required by you for the establishment, exercise or defense of legal claims, or
- you, pursuant to Article 21 of the GDPR object to processing of the data;
- pursuant to Article 20 of the GDPR, the right to receive the personal data concerning you, which you have provided, in a structured, commonly used and machine-readable format or to transmit those data to another controller;
- pursuant to Article 77 of the GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can lodge your complaint with the supervisory authority in the EU member state of your habitual residence or place of work or of our company headquarters.
If you have any questions on the collection, processing or use of your personal data, if you want to request information on your data or request that your data be updated, restricted or deleted, or if you wish to withdraw your stated consent or object to a certain use of data, please contact us directly by means of the contact data found in our legal notice.
Right of objection
Insofar as we process personal data, as explained above, to serve the protection of our legitimate interests, which prevail in the context of a weighing of interests, you can opt out of this processing with effect for the future. If processing is for the purposes of direct marketing, you can exercise this right at any time as set out above. Insofar as the processing takes place for other purposes, you will only have a right of objection on the basis of reasons arising from your particular situation.
After exercising your right of objection, we will cease to process your personal data for these purposes unless we can verify compelling reasons for this processing that are worthy of protection and that outweigh your interests, rights and freedoms, or if the processing serves the purpose of enforcing, exercising or defending legal claims.
This does not apply if the processing takes place for the purposes of direct marketing. In that case, we will cease to process your personal data for these purposes.