I. Scope

As the person responsible, we hereby inform. Art. 13 and 14 of the General Data Protection Regulation (GDPR) data subjects on the handling of personal data. The document has been in effect since August 2023. Any future changes to the data processing processes or due to changed legal or official requirements may make it necessary to adapt this document. The current version is always available at https://degeler.com/pages/datenschutzerklarung .

II. Who is responsible for data processing?

The one according to Art. 4 No. 7 GDPR Data processing is:

DEGELER GmbH & Co. KG, Frankfurter Str. 63 A, 63322 Rödermark. The full imprint can be found at https://degeler.com/pages/impressum

III. Is there a data protection officer?

We have not appointed a data protection officer for our company.

IV. What do we process your data for?

IV.1. Logfiles / Hosting

If you visit our website without registering or otherwise providing us with information, we only collect the following data that your browser transmits to our server (so-called „Server-Logfiles“):

  • The individual pages of our website (URL)
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable in anonymous form)

Our internet presence is stored with a hosting provider and is available for retrieval. The web server used stores the above-mentioned server log files.

  • purpose of processing: Internet presence hosting
  • Legal basis and legitimate interests: Processing is carried out on the basis of our overriding legitimate interest (Art. 6 Abs. 1 bed. F GDPR) on the security and stability of our website by commissioning a service provider to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services
  • storage duration: 7 Tage

IV.2. Cookies

IV.2.a. Allgmeines

(Aa) Definitions

In the following you will find extensive information on so-called "cookies" and other storage technologies ("web storage"). This is information that is often stored in databases on your device. Any type of “cookie” or “cookie”. “Web Storage” may contain personal data. However, in many cases the data are pseudonymized. The following terms may be used. Used below:

  • First-Party-Cookie: This cookie is stored or changed by the website on which you are currently surfing
  • Third-Party-Cookie: This cookie is stored or changed by third parties with whom the website operator is connected (e. g. An advertising network, a social media platform, etc.)
  • Session-Cookie: This cookie is deleted from your device when you close the browser. Often a session cookie only stores one session ID to assign several requests from a user on a page to their session
  • Persistent Cookie: This cookie is stored on your device until it expires or you delete it manually or automatically in the browser

  • Definitely required: Without this cookie and web storage, the service you want cannot be provided

  • Optional: This cookie and web storage enables us to use further functions and will only be used if you give your consent
  • Local Storage: Belongs to the so-called "Web-Storage". This information is also stored in your web browser until manual deletion.
  • Session Storage: Belongs to the so-called "Web-Storage". This information is also stored in your web browser until the browser window is closed.

(Bb) Legal basis

  • Strictly required cookies and web storage: The storage and access to information is based on the legal basis of § 25 (2) No. 2 TTDSG.
  • Optional cookies and web storage: The storage of information and access to it are based on the legal basis of your individual personal and voluntary consent in accordance with § 25 (1) TTDSG i.V.m. Art. 6 (1) lit. and DSGVO. You can revoke your consent at any time with effect for the future. The data processing until the revocation remains legal. Please note that if you do not accept optional cookies, individual functions of our website may be restricted.

(Cc) Data Receiver/Access Possibility

  • First-Party-Cookies: Only we, as the person responsible for data processing and website operators, have access to this.
  • Third-Party-Cookies: Only the third party who set these cookies himself has access to this. For example, only Google has access to a cookie set by Google and can read or change it.
  • Web-Storage: Only we, as the person responsible for data processing and website operators, have access to this.

(Dd) Storage Duration

  • Session-Cookies: These are only temporarily stored in your browser until the end of the browser session or can be deleted by you beforehand.
  • Persistent Cookies: These remain stored on your end device as long as specified in the respective cookie or can be deleted by you beforehand.
  • Local-Storage: This remains stored until manual deletion.
  • Session-Storage: This remains stored until the browser window is closed.

The exact storage period is given under “Cookies and Web Storage”.

(Ee) Delete options/contradiction

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:

A general objection to the use of cookies used for the purposes of online marketing can be made on the US website for a large number of services, especially in the case of tracking https://www.aboutads.info/choices / Or the EU side https://www.youronlinechoices.com / To be explained.

IV.2.b. Cookies used

In the following overview, we list the technically necessary first-party cookies used on our website and the purpose of data processing:

  • _ab (Persistent Cookie)
    purpose: Used in conjunction with access to the admin area.
    period of validity: 2 years
  • _secure_session_id (Persistent-Cookie)
    purpose: Used in conjunction with navigation through a storefront.
    period of validity: 24 hours
  • _shopify_country (Session Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: Until the end of the browser session
  • _shopify_m (Persistent-Cookie)
    purpose: Used to manage customer privacy settings
    period of validity: 1 year
  • _shopify_tm (Persistent Cookie)
    purpose: Used to manage customer privacy settings
    period of validity: 30 Minutes
  • _shopify_tw (Persistent Cookie)
    purpose: Used to manage customer privacy settings
    period of validity: 2 weeks
  • _storefront_u (Persistent-Cookie)
    purpose: Used to help update customer account information
    period of validity: 1 Minute
  • _tracking_consent (Persistent-Cookie)
    purpose: Tracking Settings
    period of validity: 1 year
  • c (Persistent-Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: 1 year
  • Cart (Persistent cookie)
    purpose: Used in conjunction with the shopping cart.
    period of validity: 2 weeks
  • cart_currency (Persistent-Cookie)
    purpose: Used in conjunction with the shopping cart.
    period of validity: 2 weeks
  • cart_sig (Persistent-Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: 2 weeks

  • cart_ts (Persistent-Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: 2 weeks

  • cart_ver (Persistent-Cookie)
    purpose: Used in conjunction with the shopping cart.
    period of validity: 2 weeks
  • Checkout (Persistent-Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: 4 weeks
  • Checkout_token (Persistent-Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: 1 year
  • dynamic_checkout_shown_on_cart (Persistent-Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: 30 Minutes
  • hide_shopify_pay_for_checkout (Session Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: Until the end of the browser session
  • keep_alive (Persistent-Cookie)
    purpose: Used in conjunction with buyer localization.
    period of validity: 2 weeks
  • master_device_id (Persistent-Cookie)
    purpose: Used in conjunction with the dealer login.
    period of validity: 2 years
  • previous_step (Persistent-Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: 1 year
  • remember_me (Persistent-Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: 1 year
  • secure_customer_sig (Persistent-Cookie)
    purpose: Used in conjunction with the customer login.
    period of validity: 20 years
  • shopify_pay (Persistent-Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: 1 year
  • shopify_pay_redirect (Persistent-Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: 30 minutes, 3 weeks or 1 year depending on value
  • Storefront_dug (Persistent-Cookie)
    purpose: Used in conjunction with the customer login.
    period of validity: 2 years
  • tracked_start_checkout (Persistent-Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: 1 year
  • checkout_one_experiment (Session Cookie)
    purpose: Used in conjunction with the checkout.
    period of validity: Until the end of the browser session

In the following overview, we list the optional first-party cookies used on our website and the purpose of the data processing:

  • _landing_page (Persistent-Cookie)
    purpose: Tracking Landing Pages
    period of validity: 2 weeks
  • _orig_referrer (Persistent-Cookie)
    purpose: Tracking Landing Pages
    period of validity: 2 weeks
  • _s (Persistent-Cookie)
    purpose: Shopify-Analysen
    period of validity: 30 Minutes
  • _shopify_d (Session Cookie)
    purpose: Shopify-Analysen
    period of validity: Until the end of the browser session
  • _shopify_fs (Persistent-Cookie)
    purpose: Shopify-Analysen
    period of validity: 30 Minutes
  • _shopify_s (Persistent-Cookie)
    purpose: Shopify-Analysen
    period of validity: 30 Minutes
  • _Shopify_sap (Persistent-Cookie)
    purpose: Shopify analytics related to marketing & recommendations.
    period of validity: 30 Minutes
  • _Shopify_at (Persistent-Cookie)
    purpose: Shopify analytics related to marketing & recommendations.
    period of validity: 30 Minutes
  • _shopify_y (Persistent-Cookie)
    purpose: Shopify-Analysen
    period of validity: 1 year
  • _y (Persistent-Cookie)
    purpose: Shopify-Analysen
    period of validity: 1 year
  • _shopify_evids (Session Cookie)
    purpose: Shopify-Analysen
    period of validity: Until the end of the browser session
  • _shopify_ga (Session Cookie)
    purpose: Shopify and Google Analytics
    period of validity: Until the end of the browser session

IV.3. Cookie-Consent-Management

Cookies and consent management

In addition to the storage of cookies (see separate item), we manage the declarations of consent of our Internet users by means of a cookie consent tool.

  • purpose of processing: Compliance with the legal obligation to manage consent
  • legal basis: Art. 6 Abs. 1 sentence 1 lit. c DSGVO
  • storage duration: Until the withdrawal of the consent to cookie storage, long until the expiry of the respective cookie. The storage period of the respective cookies is listed in the cookie table.

As far as mentioned below, we have commissioned the following service providers with consent management:

Usercentrics

This is a service of the User children GmbH, Sendlinger Straße 7, 80331 Munich, https://usercentrics.com/de

  • Storage Duration at User Catrics: 3 years

IV.4. Content-Delivery-Network (CDN)

Shopify CDN

On our website we use a so-called Content Delivery Network ("CDN") from the technology service provider Shopify ("Shopify"). A content delivery network is an online service with the help of which, in particular, static website data is delivered through a network of servers distributed worldwide and connected via the Internet. Essentially, it is your IP address and the data of your browser in order to be able to transfer the website data to you. We ourselves have no access to the data collected by Amazon.

  • purpose of processing: Optimization of the loading speeds of our website
  • Legal basis and legitimate interests: Processing is carried out on the basis of our overriding legitimate interest (Art. 6 Abs. 1 bed. F GDPR) on the speed, security and stability of our website by commissioning a service provider to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services
  • Data Receiver: Shopify International Limited, Victoria Buildings, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Irland, https://www.shopify.de /

IV.5. Contact

In case of your contact with us (e. g. Personal data are collected via contact form, e-mail, telephone, fax). Which data is collected in the case of a contact form can be seen from the respective contact form. These data are used exclusively for the purpose of answering your request. stored and used for establishing contact and the associated technical administration. Without this mandatory information, we will not be able to process your request. All other details are optional.

  • purpose of processing: Answering your concern
  • legal bases: Art. 6 Abs. 1 bed. B GDPR for pre-or contractual matters. Art. 6 Abs. 1 bed. A GDPR for your voluntary information.
  • recipient of the data: E-mail service provider for e-mails, hosting providers for contact form requests
  • storage duration: Your data will be deleted after the final processing of your request. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary. In the case of pre-and contractual matters, your request will be stored until the end of the contract and then restricted in processing. If there is no longer any legal reason for storage, the data will be deleted.

IV.6. Newsletter

We send newsletters by e-mail to registered users with information about our company, our products, services, promotions and offers. The newsletter is sent a maximum of monthly.

  • Double-opt-in casen: The registration for our newsletter is basically carried out using a so-called double opt-in procedure. After registering, you will receive an email asking you to confirm your registration. This confirmation is necessary to verify the accuracy of your email address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address.
  • purpose of processing: Direct Marketing, Customer Communication
  • legal basis: When registering for our newsletter, the applicant gives his consent (Art. 6 Abs. 1 S. 1 lit. and DSGVO).
  • Widget Right/ Opt-Out...: You can cancel the receipt of our newsletter at any time, i.e. Withdrawal your consent by informing us by e-mail (see above under "Who is responsible for data processing?") or by clicking on the link that can be found at the end of each newsletter. The revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.
  • Obligation to provide: To send the newsletter, we need at least your valid e-mail address. Otherwise it is not possible to send it.
  • storage duration: Your data will be stored until your withdrawal. Thereafter, they are restricted in processing and stored for up to three years in order to be able to prove a previously given consent in accordance with the law. This is done on the basis of our legitimate interests (Art. 6 Abs. 1 S. 1 lit. F. GDPR) on the traceability of data protection compliance.

If named below, we use the following service providers:

RapidMail

  • Legal basis and legitimate interests: The data is transferred on the basis of our overwhelming legitimate interest (Art. 6 Abs. 1 bed. F GDPR) on the security and stability of a legally compliant newsletter system incl. Automated double-opt-in and verifiability of user registrations.
  • Third country transmission: None
  • storage duration: Your data will be stored until your withdrawal. Thereafter, they are restricted in processing and stored for up to three years in order to be able to prove a previously given consent in accordance with the law.

We send newsletters by e-mail to our customers with information about our company, our products, services, promotions and offers. The newsletter is sent a maximum of monthly.

  • purpose of processing: Direct Marketing, Customer Communication
  • Legal basis and legitimate interests: The sending is based on our legitimate interests (Art. 6 Abs. 1 S. 1 lit. F. GDPR) on regular customer communication and sales promotion by means of direct marketing.
  • Right to object (opt-out): You can object to the sending of our newsletter at any time with effect for the future by informing us by e-mail (see above under Responsible Person) or by clicking on the link that can be found at the end of each newsletter.
  • storage duration: Your data will be stored until your objection. They are then restricted in processing and blocked for further newsletter sending.

If named below, we use the following service providers:

IV.7. Opening a customer account

If you open a personal customer account with us for future orders, the following regulations apply:

  • purpose of processing: User contract for the personal customer account.
  • legal basis: Contract according to Art. 6 Abs. 1 bed. b DSGVO. Your consent shall apply to the data you voluntarily provide. Art. 6 Abs. 1 bed. and DSGVO.
  • Obligation to provide: The mandatory information results from the registration form. Without this data, we cannot open an account for you.
  • Data Receiver: The customer account is managed via our online shop. This is operated by our web hoster (see above).
  • storage duration: Your data in the customer account will be stored as long as the user contract with us exists. Voluntary information will be stored until your revocation. Thereafter, they are restricted in processing and stored for up to three years in order to be able to prove a previously given consent in accordance with the law. This is done on the basis of our legitimate interests (Art. 6 Abs. 1 S. 1 lit. F. GDPR) on the traceability of data protection compliance.

IV.8. Order of goods or. Services

IV.8.a. General

  • purpose of processing: Execution of your order.
  • legal bases: Contract according to Art. 6 Abs. 1 bed. b DSGVO. Your consent shall apply to the data you voluntarily provide. Art. 6 Abs. 1 bed. and DSGVO. For other processing operations, Art. 6 Abs. 1 bed. f DSGVO.
  • Legitimate Interests: Debt collection and enforcement; business management measures and further development of services and products
  • Data Receiver: Web hoster of the online shop (see above). Shipping and payment service provider. Lawyer, debt collection company, business consultant.

IV.8.b. Payment Processing

  • purpose of processing: Order execution. Settlement of payment.
  • legal basis: Contract according to Art. 6 Abs. 1 bed. b DSGVO.
  • Obligation to provide: Depending on the selected payment method, you must contact us or. Communicate the required payment data to the payment service provider.
  • Data Receiver: The payment service providers used are listed below:

Amazon Pay

  • service provider: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxemburg, https://pay.amazon.de /

Apple Pay

If you decide to pay with Apple Pay, the payment will be processed via the payment service provider Apple, to which we provide your information as part of the order process, along with the information about your order (name, address, account number, bank code, possibly. credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Abs. 1 bed. b GDPR.

Bancontact

EPS

Google Pay

If you decide to pay with Google Pay, payment will be processed via the payment service provider Google, to which we provide your information as part of the order process, along with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Abs. 1 bed. b GDPR.

  • service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
    Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Commission adequacy decision: With regard to the data transfers to Google LLC, we refer to the decision of July 10, 2023 for the EU-USA data protection framework according to Art. 45 DSGVO. The list of companies participating in the EU-US data protection framework is available at https://www.dataprivacyframework.gov /

Klarna

If a Klarna payment service is selected, payment is processed via Klarna Bank AB (hereinafter “Klarna”). In order to enable the payment to be processed, your personal data (first and last name, street, house number, postal code, city, gender, e-mail address, telephone number and IP address) as well as data relating to the order will be processed (e.g. B. Invoice amount, article, type of delivery) forwarded to Klarna.

Identity and credit check

Klarna reserves the right to carry out an identity and credit check using the data received. For this purpose, Klarna's data is forwarded to credit agencies. The list of possible credit agencies can be viewed here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

  • Automatic decision making: The creditworthiness information can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical process. Among other things, but not exclusively, address data is included in the calculation of the score values. Klarna uses the information received about the statistical probability of non-payment for a balanced decision on the establishment, implementation or termination of the contractual relationship.

PayPal

  • service provider: PayPal (Europe) S. to r.l. And Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, https://www.paypal.com/de
  • Credit Report: PayPal reserves the right to carry out credit information for the payment methods credit card via PayPal, direct debit via PayPal or-if offered-“purchase on account” or “installment payment” via PayPal. For this purpose, your payment data may be processed in accordance with Art. 6 Abs. 1 bed. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency to credit agencies. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical process. Among other things, but not exclusively, address data is included in the calculation of the score values.

ShopPay (Shopify)

When selecting payment via ShopPay, payment is processed via Shopify International Limited (hereinafter “Shopify”). In order to enable the payment to be processed, your personal data (first and last name, street, house number, postal code, city, gender, e-mail address, telephone number and IP address) as well as data relating to the order will be processed (e.g. B. Invoice amount, item, delivery type) forwarded to Shopify.

  • service provider: Shopify International Limited, Victoria Buildings, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Irland, https://www.shopify.de /

Immediate transfer

IV.8.c. Shipping Processing

  • purpose of processing: Order execution. Delivery of the goods. Delivery notification. Tracking.
  • legal basis: Name, address and, if applicable, Phone number: contract gem. Art. 6 Abs. 1 bed. b DSGVO. Passing on the e-mail address to the shipping service provider: Consent according to Art. 6 Abs. 1 bed. and DSGVO.
  • Obligation to provide: Without name, address and possibly The respective shipping company cannot deliver the goods to you by phone number. Without consent to pass on the e-mail address to shipping service providers, you will not receive any information on tracking the shipment from there.
  • Data Receiver: The shipping service providers used are listed below:
  • DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn)

IV.8.d. Direct Advertising

  • purpose of processing: Direct advertising, promotion
  • legal basis: Our overriding legitimate interest under Art. 6 Abs. 1 bed. f DSGVO
  • Legitimate Interests: Direct advertising, promotion
  • Data Receiver: Agency, Lettershop

IV.8.e. Legal obligation

  • purpose of processing: Fulfillment of legal obligations (e. g. B. Information, notification, information and retention obligations, payment of taxes and duties)
  • legal bases: The respective legal regulation in connection with Art. 6 Abs. 1 bed. c DSGVO.
  • Data Receiver: Authorities, state institutions, lawyer, tax advisor, if necessary Data Protection Officer

If named below, the person responsible is subject to, inter alia. These special legal obligations:

IV.9. Web-Analyse

Google Analytics 4

(A) General : Our website uses Google Analytics, a web analysis service of Google Ireland Ltd. (Google), with which the use of websites can be analyzed. Here we receive various usage data, such as. B. Page views, length of stay, operating systems used and origin of the user. These data are combined in a user ID and assigned to the respective end device of the website user.

(B) Consent mode: When you first visit a website of our website, you will be contacted by means of our cookie-consent tool, etc. Requested to give us your consent to the setting of optional cookies from Google. Without your consent, certain information about your usage behavior will be provided with so-called "Pings" collected and processed.

(C) After your consent: If you give us your consent to set cookies, the demographics and Google Signals (see paragraphs below) will also be used.

(D) Demographic characteristics: Google Analytics 4 enables a special function that "Demographic characteristics", the compilation of statistics with statements about your age, gender and interests on the basis of an evaluation of interest-related advertising and with the help of third-party information. This makes it possible to determine and differentiate between user groups of the website for the purpose of targeting marketing measures optimized for target groups. However, data collected via the “demographic characteristics” cannot be assigned to a specific person and therefore not to you personally.

(E) Google Signals : We also use the "Signals" service from Google on our website. With "Signals" we can have cross-device reports (reports) created by Google (so-called „Cross Device Tracking“). If you have activated the "personalized ads" in your settings in your Google account and linked your internet-enabled devices to your Google account, Google can analyze the usage behavior when giving your consent to the use of Google Analytics 4 across devices and create database models based on it. The logins and device types of all website users who were logged into a Google account and made a conversion are taken into account. The data shows, among other things, on which end device you clicked on an ad for the first time and on which end device the conversion took place. In the case of the use of Google Signals, we do not receive any personal data from Google, but only statistics created on the basis of Google Signals.

(F) E-commerce measurement : We also use Google's "e-commerce measurement" service on our website. This allows us to analyze the purchasing behavior of the website visitors to improve the online marketing campaigns. Information such as the orders placed, average order values, shipping costs and the time from viewing a product to purchasing it is recorded. This data can be summarized by Google under a transaction ID, which is assigned to the respective user or whose device is assigned.

(G) More details:

  • purposes of processing: Tracking (e. g. interest/behavior-related profiling), visit action evaluation, interest-based and behavior-related marketing, profiling (creation of user profiles), conversion measurement (measurement of the effectiveness of marketing measures), range measurement (e. g. Access statistics, detection of recurring visitors). These purposes apply to us as well as to Google and its parent company.
  • Legal bases and legitimate interests: For the use of Google Analytics, please give us Your consent according to Art. 6 Abs. 1 S. 1 lit. A GDPR, which you can revoke at any time with effect for the future by selecting “Marketing” or “Marketing” in the cookie settings on our page. Undo “Google Analytics 4”. Without your consent, Google Analytics 4 will use the so-called "Pings" from overriding legitimate self-interest (Art. 6 Abs. 1 S. 1 lit. F GDPR), the purposes of the processing (see Above) to reach.
  • storage duration: We store the anonymized data obtained in this way for a maximum period of 14 months. After that, the data is automatically deleted. With regard to the storage period by Google, we refer to their data protection declaration. The data collected through the Demographic Characteristics function is kept for two months and subsequently deleted.
  • Data Receiver/Processor: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
    Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Third country transmission: Unless anonymized data is transferred to Google LLC, data processing also takes place in the USA.
  • Commission adequacy decision: With regard to the data transfers to Google LLC, we refer to the decision of July 10, 2023 for the EU-USA data protection framework according to Art. 45 DSGVO. The list of companies participating in the EU-US data protection framework is available at https://www.dataprivacyframework.gov /

Google Tag Manager

On our website we use the Google Tag Manager of the company Google. The Google Tag Manager is an online tool that allows us to integrate and manage website tags centrally and via a user interface. Tags are small code sections that record your activities on our website, for example. For this purpose, JavaScript code sections are used in the source text of our website. The tags come from Google Ads or Google Analytics, for example, but tags from other companies can also be integrated and managed via the manager. Such tags take on different tasks. You can collect browser data, integrate buttons, set cookies and also track users across multiple websites. In the account settings of the Tag Manager, we have allowed Google to receive anonymized data from us. However, this is only the use and use of our Tag Manager and not your data that is stored via the code sections.

  • purposes of processing: Tracking (e. g. interest/behavior-related profiling), visit action evaluation, interest-based and behavior-related marketing, profiling (creation of user profiles), conversion measurement (measurement of the effectiveness of marketing measures), range measurement (e. g. Access statistics, detection of recurring visitors). These purposes apply to us as well as to Google and its parent company. As far as we know, Google also uses the data collected in this way (anonymized) for its own purposes. In this respect, we refer to Google's data protection declaration.
  • Legal bases and legitimate interests: For the integration of the Google Tag Manager on our website, this processing takes place in accordance with Art. 6 Abs. 1 bed. f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. The use of the various tags then takes place according to the separately described sections with the express consent of the user.
  • storage duration: With regard to the storage period by Google, we refer to their data protection declaration.
  • Data Receiver: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
    Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Third country transmission: Unless anonymized data is transferred to Google LLC, the data processing takes place in the USA.
  • Commission adequacy decision: With regard to the data transfers to Google LLC, we refer to the decision of July 10, 2023 for the EU-USA data protection framework according to Art. 45 DSGVO. The list of companies participating in the EU-US data protection framework is available at https://www.dataprivacyframework.gov /

IV.10. Social Media-Plugins

Our Internet presence uses social plugins from various social networks. In order to increase the protection of your data when visiting our website, these buttons are not integrated into the page without restriction as plugins, but only using an HTML link. This type of integration ensures that when a page of our website contains such buttons, no connection is established with the servers of the respective social network. When you click the button, a new browser window opens and calls the social network page. Possibly. After entering your login data, you can then perform the provided function (e. g. "like" or "share").

By clicking on the respective plugin, you give us your personal consent to the transfer of data to the respective social network. In particular, your IP address is transmitted to the respective social network. The legal basis for this is Art. 6 Abs. 1 bed. and DSGVO. You have the right to revoke your consent at any time. The data processing until the revocation remains legal. The revocation applies only to the future.

The following social networks are used:

Facebook

  • Data Receiver: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”), parent company: Meta Platforms, Inc., 1 Hacker Way, 94025 Menlo Park, California, USA
  • Third country transmission: Unless anonymized data is transferred to Meta Platforms, Inc., the data processing takes place in the USA.
  • Commission adequacy decision: With regard to data transfers to Meta Platforms, Inc., we refer to the decision of July 10, 2023 for the EU-USA data protection framework according to Art. 45 DSGVO. The list of companies participating in the EU-US data protection framework is available at https://www.dataprivacyframework.gov /

Instagram

Instagram is a service of Meta

  • Data Receiver: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Instagram”), parent company: Meta Platforms, Inc., 1 Hacker Way, 94025 Menlo Park, California, USA
  • Third country transmission: Unless anonymized data is transferred to Meta Platforms, Inc., the data processing takes place in the USA.
  • Commission adequacy decision: With regard to data transfers to Meta Platforms, Inc., we refer to the decision of July 10, 2023 for the EU-USA data protection framework according to Art. 45 DSGVO. The list of companies participating in the EU-US data protection framework is available at https://www.dataprivacyframework.gov /

Pinterest

  • Data Receiver: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”), parent company: Pinterest Inc., 505 Brannan Street San Francisco, CA 94107, USA
  • Third country transmission: Unless anonymized data is transferred to Pinterest Inc., the data is processed in the USA.

Twitter

  • Data Receiver: Twitter International Company, Attn: Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Irland (“Twitter”), Mutterkonzern: X Corp., 1355 Market Street Suite 900 San Francisco, CA 94103, USA
  • Third country transmission: Unless anonymized data is transferred to Twitter Inc., the data is processed in the USA.

IV.11. Online-Videos

Our website uses embedded video content provided by the respective third-party provider mentioned below. When you visit a page, your browser first loads a placeholder. No data is exchanged with the third-party provider yet. Only when you click the "Load Video" button will the video be loaded by the third party.

For this purpose, the browser you are using must connect to the servers of the respective third-party provider. As a result, the third-party provider becomes aware that our website has been accessed via your IP address. If you are logged into your third-party account, the third-party provider can personally assign your surfing behavior to you. You can prevent this by logging out of your third-party account beforehand. If a video is started, the third-party provider may use cookies and/or other web storage, which collect information about user behavior.

  • purpose of processing: Providing a comprehensive and professional online offer with videos. User-friendly playback option without changing the website. Speed of video playback.
  • legal bases: Access to your IP address and the setting of any cookies is based on § 25 (2) No. 2 TTDSG. The use of the video functionality and data processing by the third-party provider mentioned below is subject to the conditions of use of the third-party provider (Art. 6 Abs. 1 S. 1 lit. b GDPR).

We use video content from the following third-party provider:

YouTube

  • Data Receiver: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
    Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Third country transmission: Unless anonymized data is transferred to Google LLC, the data processing takes place in the USA.
  • Commission adequacy decision: With regard to the data transfers to Google LLC, we refer to the decision of July 10, 2023 for the EU-USA data protection framework according to Art. 45 DSGVO. The list of companies participating in the EU-US data protection framework is available at https://www.dataprivacyframework.gov /
  • Storage Duration/Opt-Out: You can stop using the video function at any time for the future by closing your browser window or reloading the page. If you were logged in with your YouTube account during video playback, please contact Google regarding your opt-out request.

Online publications

If you have enabled the playing of YouTube videos, so-called web fonts are loaded, which are provided by Google. For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website was accessed via your IP address.

  • purpose of processing: Uniform presentation of online videos in all media
  • legal basis: Access to your IP address and the setting of any cookies is based on § 25 (2) No. 2 TTDSG. The use of the video functionality and data processing by Google is subject to their terms of use (Art. 6 Abs. 1 S. 1 lit. b GDPR).
  • Data Receiver: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Third country transmission: Unless anonymized data is transferred to Google LLC, the data processing takes place in the USA.
  • Commission adequacy decision: With regard to the data transfers to Google LLC, we refer to the decision of July 10, 2023 for the EU-USA data protection framework according to Art. 45 DSGVO. The list of companies participating in the EU-US data protection framework is available at https://www.dataprivacyframework.gov /

IV.12. Online writings

Our website uses so-called web fonts provided by Shopify for the uniform display of fonts. When you access a page, your browser loads the web fonts you need into your browser cache in order to display texts and fonts correctly.

To do this, the browser you are using must connect to the Shopify servers. As a result, Shopify becomes aware that our website has been accessed via your IP address. If your browser does not support Web fonts, a default font will be loaded from your computer.

  • purpose of processing: Uniform presentation of our website in all media
  • Legal basis and legitimate interests: The involvement is based on our legitimate interests (Art. 6 Abs. 1 S. 1 lit. F. GDPR) on a technically secure, maintenance-free and efficient use of fonts, their uniform presentation and taking into account possible licensing restrictions for their integration.
  • Data Receiver: Shopify International Limited, Victoria Buildings, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Irland, https://www.shopify.de /

IV.13. Online translations

Our website uses the online tool "ETranslate" from upper commerce to translate our content into other languages.

  • purpose of processing: User-friendly translation of our content into other languages
  • Legal basis and legitimate interests: The involvement is based on our legitimate interests (Art. 6 Abs. 1 S. 1 lit. F. GDPR) on a user-friendly internet presence.
  • Third country transmission: Unless anonymized data is transferred to upper commerce, data processing takes place in China.

V. What data protection rights do I have?

1. As an affected person, you have the following rights:

  • Confirmation of data processing : You have the right to ask us to confirm whether your personal data is being processed. The requirements for this can be found in Art. 15 GDPR;
  • Information : You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 GDPR;
  • Correction : You have the right to immediately request the correction of incorrect personal data concerning you. The requirements for this can be found in Art. 16 GDPR;
  • Deletion : You have the right to request the immediate deletion of personal data relating to you. The requirements for this can be found in Art. 17 GDPR;
  • Restriction of processing : You have the right to request the restriction of the processing of your personal data. The requirements for this can be found in Art. 18 GDPR;
  • Data portability : You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to have this data transmitted to another controller by us. The requirements for this can be found in Art. 20 GDPR;
  • Revocation of consent : You have the right to revoke your consent at any time if the processing is carried out in Art. 6 (1) lit. a or Art. 9 (2) lit. A DSGVO beruht. The data processing until the revocation remains legal. The revocation applies only to the future. The requirements for this can be found in Art. 7 (3) DSGVO;
  • Complaint : Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR. The requirements for this can be found in Art. 77 GDPR. You can contact the responsible supervisory authority or contact the supervisory authority in your country or country. State. A list of all supervisory authorities can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

2. Right to object

  • For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you, which we process on the basis of our overriding legitimate interest (Art. 6 (1) lit. E or f GDPR) to lodge an objection with effect for the future; this also applies to profiling based on this provision in the sense of Art. 4 No. 4 GDPR. If you file an objection, we will no longer process your personal data, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

3. Right to object to the processing of data for purposes of direct advertising and product reviews

  • We collect and process your personal data in order to conduct direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such direct advertising; this also applies to profiling, insofar as it is connected with such direct advertising.
  • In individual cases, we process and use your personal data in order to send you by e-mail a review request and/or product recommendation that is exclusively related to your purchase, conclusion and/or other analog transactions. We will continue if necessary In this context, use your e-mail address and/or your postal address to send you product recommendations for similar goods and/or services offered by us by e-mail and/or by post. You will receive these review requests and product recommendations from us regardless of whether you have subscribed to a newsletter.
  • Exercise of the Objection: You can use this data processing for direct advertising purposes at any time by letter to DEGELER GmbH & Co. KG, Frankfurter Str. 63 A, 63322 Rödermark or by email to Info@DEGELER.com And/or at the end of each advertising e-mail with effect for the future, without any additional costs than the respective transmission costs according to the basic tariffs. Your right of objection automatically also applies to possible profiling, insofar as it is connected with such direct advertising.
  • If you object to the processing for the purposes of direct advertising, we will no longer process your personal data for these purposes with immediate effect.

WE. How long will my data be stored?

Unless otherwise specified, the following criteria for determining the storage period shall apply:

  • At one Consent In accordance with Art. 6 Abs. 1 bed. A GDPR, the data will be stored until the person concerned revokes his consent.
  • At Pre-and contractual purposes In accordance with Art. 6 Abs. 1 bed. B GDPR, the retention takes place over the end of the contract until the expiry of relevant limitation periods (e. g. 3 years according to § 195 BGB) from the concluded contract.
  • At our predominant Legitimate interest In accordance with Art. 6 Abs. 1 bed. F GDPR, the data will be stored until the person concerned has his right to object in accordance with Art. 21 Abs. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
  • At Direct Advertising In accordance with Art. 6 Abs. 1 bed. F GDPR, the data will be stored until the person concerned has his right to object in accordance with Art. 21 Abs. Exercise 2, 3 GDPR.
  • We are responsible for Storage obligations The relevant documents are issued until the expiry of the relevant legal regulations (e. g. 10 or. 6 years in accordance with § 147 AO and § 257 HGB).
  • Interested party data We store as long as it can be assumed that there is still an interest in working with us. If we assume that there is no longer any interest, we will delete this data.
  • Business partner data We store as long as it can be assumed that there is still an interest in working with us. If we assume that there is no longer any interest, we will delete this data no earlier than 3 years after the termination of the last business relationship, provided that there are no statutory retention obligations.
  • Supplier data We store until the supplier objects and delete them at the earliest 3 years after the termination of the last business relationship, provided that there are no statutory retention obligations.

In addition, personal data is stored only as long as there is a legal reason for storage.

VII. Source of personal data

We process personal data that we have received from you or the recipients of personal data.

VIII. Obligation to provide data

As part of the performance of our contractual or statutory obligations, you as the data subject may be obliged to provide our company with personal data that are necessary for the establishment, execution and termination of the contractual relationship and the fulfilment of the related contractual obligations or of which we are legally obliged to collect. Without this data, as a rule, we will have to refuse to conclude the contract or we will no longer be able to carry out an existing contract and, if necessary, we will not be able to do so. have to finish.

IX. Copyright certificate

Data Protection Information Copyright 2023 Lawyer Marc Oliver Giel