1) Information about the collection of personal data and contact details of the person responsible
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 Blanche Industries GmbH, Salzschlirfer Str. 4, 60386 Frankfurt am Main, Germany, Tel. : 069 8008830, fax: 069 80088329, email: firstname.lastname@example.org. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.
1.3 This website uses an SSL or. TLS encryption. You can start an encrypted connection by “https://” and the lock symbol in your browser line.
2) Data collection when visiting our website
At the mereß informational use of our website, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Used browser
- Operating system used
- IP address used (if necessary: in anonymous form)
The processing takes place in accordance with; Article 6 paragraph 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
If individual cookies used by us also process personal data, the processing takes place in accordance with; Article 6 paragraph 1 lit. b GDPR either for the execution of the contract, in accordance with; Art. 6 (1) lit. a GDPR in the case of a given consent or according to Article 6 paragraph 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.< br /> Please note that if you do not accept cookies, the functionality of our website may be restricted.
When contacting us (e.g. via contact form or e-mail), – exclusively for the purpose of processing and answering your request and only to the extent required for this – personal data processed. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with; Article 6 paragraph 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the facts in question have been finally clarified and provided there are no legal storage obligations to the contrary
5) Data processing when opening a customer account
According to&rszlig; Article 6 paragraph 1 lit. b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website. A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded have been completed in full, there are no legal retention periods to the contrary and we have no legitimate interest in further storage.
6) Use of customer data for direct advertising
6.1 - Newsletter dispatch via MailChimp
Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to which we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with; Article 6 paragraph 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. Please note that your data is usually transferred to a MailChimp server in the USA and stored there.
MailChimp uses this information to send and statistically evaluate the newsletter on our behalf. For the evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files that are stored on our website. In this way it can be determined whether a newsletter message has been opened and which links have been clicked on. With the help of the web beacons, Mailchimp automatically creates general, non-personal statistics about the reaction behavior to newsletter campaigns. On the basis of our legitimate interest in the statistical evaluation of the newsletter campaigns to optimize advertising communication and better alignment with recipient interests, the web beacons in accordance with Art. 6 Para. 1 lit f GDPR but also data of the respective newsletter recipient (mail address, time of retrieval, IP address, browser type and operating system) and used. This data allows an individual conclusion to be drawn about the newsletter recipient and is processed by Mailchimp to automatically generate statistics that show whether a specific recipient has opened a newsletter message.
If you want to deactivate the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
MailChimp can also use this data in accordance with Article 6 paragraph 1 lit. f GDPR itself due to its own legitimate interest in the needs-based design and optimization of the service and for market research purposes, for example to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them themselves or to pass them on to third parties.
To protect your data in the USA, we have concluded a data processing agreement („Data Processing Agreement”) with MailChimp based on the standard contractual clauses of the European Commission to enable the transmission of your personal data to MailChimp. If you are interested, this data processing contract can be viewed at the following Internet address: https://mailchimp.com/ legal/data-processing-addendum/
6.2 Goods availability notification by email
For items that are temporarily unavailable, you can opt-in to receive e-mail notifications of product availability. We will send you a one-off email message about the availability of the item you have selected. The only mandatory information for sending this notification is your e-mail address. Providing further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending emails, which ensures that you only receive a notification if you have expressly given us your consent in this regard by clicking on a verification link sent to the specified email address have confirmed.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6 paragraph 1 lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data collected by us when you register for our e-mail notification service for the availability of goods is used strictly for the intended purpose. You can unsubscribe from the availability notifications at any time by sending a message to the person responsible mentioned above. After you have unsubscribed, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law is and about which we inform you in this statement.
7) Data processing for order processing
7.1 Insofar as it is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be processed in accordance with Art. 6 Para. 1 lit. b GDPR passed on to the commissioned transport company and the commissioned credit institution.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provide when ordering (name, address, e-mail address) in order to be able to contact you As part of our statutory information obligations in accordance with Art. 6 (1) (c) GDPR to be personally informed via a suitable communication channel (e.g. by post or e-mail) about upcoming updates within the legally stipulated period. Your contact details will be used strictly earmarked for notifications about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the information in question.
To process your order, we also work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
7.2 Passing on of personal data to shipping service providers
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Str&rszlig;chensweg 10, 53113 Bonn), we will provide your e-mail address in accordance with Article 6 (1) (a) GDPR before the goods are delivered to DHL for the purpose of coordinating a delivery date or delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery, we shall give Art. 6 (1) (b) GDPR only forwards the name of the recipient and the delivery address to DHL. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery notification is not possible.
The consent can be revoked at any time with effect for the future from the above-mentioned person responsible or from the transport service provider DHL.
7.3 Use of payment service providers (payment services)
If you select the payment method 'Invoice purchase' or "Direct Debit" via Novalnet you will be asked to enter your personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address and telephone number) during the ordering process. In order to safeguard our legitimate interest in determining the solvency of our customers and to protect ourselves from payment defaults, this data is processed by us in accordance with; Art. 6 Paragraph 1 lit. f GDPR first to Novalnet AG, Feringastr. 4, 85774 Unterfuhring ("Novalnet"). Novalnet then forwards this data for the purpose of carrying out a credit check as part of an assignment of claims in accordance with Art. 6 Paragraph 1 lit. f GDPR to Financial Management Solutions GmbH (under the InfinitePay brand), Haifa-Allee 28, 55128 Mainz. InfinitePay uses the personal data you provide and other data (e.g. shopping cart, invoice amount, order history, payment history) to check whether the payment option you have selected is appropriate with regard to payment and/or bad debt risks; hr.
For the decision in the context of the application review, in addition to internal criteria according to Art. 6 Paragraph 1 lit. f GDPR also identity and creditworthiness information from the following credit agencies are included:
- infoscore Consumer Data GmbH (arvato), Rheinstraße 99, D-76532 Baden-Baden, Tel.: +49 (0)7221-5040-1000, Fax: -1001
- atriga GmbH, Pittlerstr. 47, 63225 Langen
- informa solution GmbH, Rheinstrasse 99, 76532 Baden-Baden
The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical process. The calculation of the score values includes, among other things, but not exclusively, address data.
You can object to this processing of your data at any time by sending a message to the person responsible for data processing or to Novalnet. However, Novalnet may still be entitled to process your personal data if this is necessary for contractual payment processing.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or “Payment by installments” via PayPal we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), further. The transfer takes place according to; Article 6 paragraph 1 lit. b GDPR and only to the extent that this is necessary for payment processing.
PayPal reserves the right for the payment methods credit card via PayPal, direct debit via PayPal or – if offered - "purchase on account" or “Payment by installments” via PayPal to carry out a credit check. For this purpose, your payment data may be processed in accordance with; Article 6 paragraph 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency to credit agencies. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical process. Among other things, but not exclusively, address data are included in the calculation of the score values. Further data protection information, including information on the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
8) Page functionalities
8.1 - FontAwesome
This site uses so-called web fonts from "FontAwesome", a service of Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA ("FontAwesome") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.
For this purpose, the browser you are using must connect to the FontAwesome servers. This may also result in the transmission of personal data to the FontAwesome servers in the USA. In this way, FontAwesome learns that our website has been accessed via your IP address. The processing of personal data in the course of establishing a connection with the provider of the fonts will only be carried out if you have informed us in accordance with; Art. 6 (1) (a) GDPR have given your express consent to this. You can revoke your consent at any time with effect for the future by using this service in the “Cookie Consent Tool” provided on the website. deactivate. If your browser does not support web fonts, a standard font will be used by your computer.
For more information about FontAwesome, visit: https://fontawesome.com/privacy
- Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers. This can also lead to the transmission of personal data to the servers of Google LLC. come in the US. In this way, Google becomes aware that our website has been accessed via your IP address. The processing of personal data in the course of establishing a connection with the provider of the fonts will only be carried out if you have informed us in accordance with; Art. 6 (1) (a) GDPR have given your express consent to this. You can revoke your consent at any time with effect for the future by using this service in the “Cookie Consent Tool” provided on the website. deactivate. If your browser does not support web fonts, a standard font will be used by your computer.
8.2 Google reCAPTCHA
On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an entry was made by a natural person or whether it was misused by machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with; Article 6 paragraph 1 letter f GDPR on the basis of our legitimate interest in determining individual personal responsibility on the Internet and avoiding misuse and spam. When using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. come to the USA.
Insofar as this is legally required, we have obtained your consent to the processing of your data as described above in accordance with; Art. 6 Para. 1 lit. a DSGVO obtained. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the option described above for making an objection.
9) Tools and Miscellaneous
9.1 Cookie Consent Tool
This website uses a so-called “Cookie-Consent-Tool” to obtain effective user consent for cookies that require consent and cookie-based applications. The “Cookie Consent Tool” is displayed to users when the page is accessed in the form of an interactive user interface on which consent can be given for certain cookies and/or cookie-based applications by ticking the box. By using the tool, all cookies/services that require consent are only loaded if the respective user gives their consent by ticking the box. This ensures that such cookies are only set on the respective end device of the user if consent has been given.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed here.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this takes place in accordance with; Article 6 paragraph 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and therefore in a legally compliant design of our website.
Another legal basis for processing is Art. 6 (1) (c) GDPR. As the person responsible, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Further information on the operator and the setting options of the cookie content tool can be found directly in the corresponding user interface on our website.
9.2 - Google Maps
On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. Using this service will show you our location and make it easier to get there.
As far as legally required, we have your consent to the processing of your data as described above in accordance with; Art. 6 Para. 1 lit. a DSGVO obtained. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the above-described possibility of making an objection.
10) Rights of the data subject
10.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the person responsible with regard to the processing of your personal data, whereby for the respective exercise requirements reference is made to the stated legal basis:
- Right to information according to; Article 15 GDPR;
- Right to rectification according to; Article 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing in accordance with; Article 18 GDPR;
- Right to information according to; Art. 19 GDPR;
- Right to data portability in accordance with; Art. 20 GDPR;
- Right to revoke granted consent in accordance with; Art. 7 Para. 3 GDPR;
- Right to complain according to Article 77 GDPR.
10.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT; R INSERT THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED. FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPREHENSIVE REASONS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOM ;CHEN SERVES.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. YOU CAN OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
11) Duration of storage of personal data
The duration of the storage of personal data is based on the respective legal basis, the processing purpose and - where relevant - additionally based on the respective legal retention period (e.g. commercial and tax retention periods).
When processing personal data on the basis of express consent in accordance with Art. 6 (1) (a) GDPR, this data is stored until the data subject revokes their consent.
If there are statutory retention periods for data that are processed within the framework of legal or similar obligations on the basis of Article 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired ; will be deleted if they are no longer required to fulfill or initiate a contract and/or we have no legitimate interest in further storage.
When personal data is processed on the basis of Article 6 (1) (f) GDPR, this data is stored until the data subject exercises his or her right to object under Article 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct advertising on the basis of Article 6 (1) (f) GDPR, this data is stored until the data subject exercises his or her right to object under Article 21 (2) GDPR.
Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will be deleted if they are necessary for the purposes for which they were collected or otherwise processed are no longer necessary.