Politique de confidentialité
We are delighted that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to take this opportunity to inform you about which of your personal data we collect when you visit our website and for what purposes it is used. Personal data refers to individual details about the personal or factual circumstances of an identified or identifiable natural person (data subject), e.g. name, address, email addresses, user behaviour. This is therefore data that we can use to identify you. In addition, you will also find occasional information here about data processing procedures outside this website (e.g. video conferences or newsletters).
Responsible for data processing
Responsible
For the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
IN & OUT HOUSE GmbH
Jahnallee 45A
53173 Bonn
Telephone: 08000008209
Email: info@in-out-house.de
Data Protection Officer
exkulpa gmbh
Waldfeuchterstr. 266
52525 Heinsberg
Telephone: 02452 / 99 33 11
Email datenschutz@in-out-house.de
General information
In addition to the data that you actively provide to us on this page (e.g. via our contact form), we collect some technical data. This so-called metadata is automatically transmitted from your computer to our servers as soon as you enter our website (including browser, operating system or timestamp). We use this data to ensure that our website is displayed correctly. In addition, we may collect data via integrated third-party providers (e.g. for external media such as map services or analysis tools). We will explain the individual purposes and legal bases in the course of this privacy policy.
Storage period
Unless a separate storage period is specified in this privacy policy, we will store your personal data for as long as the purpose of data processing exists. If you contact us with a legitimate request for deletion or revoke your consent, we will delete your data. Statutory retention obligations remain unaffected.
Legal basis for data processing
If you have consented to data processing, your personal data will be processed on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR if special categories of data are processed in accordance with Art. 9 (1) GDPR. If you have expressly consented to the transfer of personal data to third countries, the data will also be processed in accordance with Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g. through device fingerprinting), data processing will also take place on the basis of Section 25(1) TDDDG. Your consent can be revoked at any time. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data in accordance with Art. 6 (1) lit. b GDPR. In addition, we process your data if this is necessary to fulfil a legal obligation, on the basis of Art. 6 (1) lit. c GDPR. Data processing may also take place on the basis of our legitimate interest in accordance with Art. 6 (1) lit. f GDPR. In the following sections of this privacy policy, you will be informed about the respective legal basis in individual cases.
Note on data transfer to third countries and US companies without DPF certification
Please note that we use tools from companies based in third countries or the US that are not covered by the EU-US Privacy Shield Framework (DPF) and where data protection is not guaranteed. When using these tools, your personal data may be transferred to these countries and processed there. Please note that in these third countries, a level of data protection comparable to that in the EU cannot be guaranteed.
We would like to clarify that the USA generally offers a level of data protection comparable to that of the EU. The transfer of data to the USA is permitted if the recipient has DPF certification or provides appropriate additional safeguards. Information about data transfers to third countries, including data recipients, can be found in our privacy policy.
Automated decision-making
Your personal data will not be processed for the purpose of automated decision-making.
Your rights
As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: You have the right to request confirmation from us as to whether your personal data is being processed and, if so, to receive further information about the processing and copies of the data being processed (Art. 15 GDPR).
- Right to rectification: You have the right to request the immediate rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).
- Right to erasure: You have the right to request the immediate erasure of personal data concerning you if the legal requirements are met, in particular if the data is no longer necessary for the purposes pursued and the processing is unlawful (Art. 17 GDPR).
- Right to restriction of processing: You have the right to request that we restrict the processing of your personal data if the legal requirements are met, in particular if you dispute the accuracy of the data, the processing is unlawful and you refuse to have it erased (Art. 18 GDPR).
- Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, provided that this is technically feasible (Art. 20 GDPR).
- Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, if the processing is based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR).
- Right to withdraw consent: You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. The withdrawal of your consent does not affect the lawfulness of the processing carried out on the basis of your consent until withdrawal (Art. 7(3) GDPR).
- Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR).
Further data processing procedures
General information obligations
This information is intended for customers, interested parties, suppliers and employees. We process your personal data for the following purposes:
- To fulfil our contractual obligations to you (Art. 6(1)(b) GDPR).
- To perform pre-contractual obligations (Art. 6(1)(b) GDPR).
- To respond to enquiries (Art. 6(1)(b) GDPR).
- If you have given us your consent to process your personal data for specific purposes (e.g. to receive our newsletter), data processing is based on your consent (Art. 6(1)(a) GDPR).
- To fulfil legal obligations to which our company is subject (Art. 6(1)(c) GDPR).
- Where necessary, we also process your data to protect our legitimate interests, in particular to assert legal claims and defend ourselves in legal disputes or to ensure IT security, to consult and exchange data with credit agencies to determine creditworthiness and default risks, for direct marketing and market research, provided you have not objected to the use of your data for this purpose, for measures relating to business management and the further development of services and products, for measures relating to product and sales optimisation, for measures relating to risk management, for the prevention or investigation of criminal offences (Art. 6 para. 1 lit. f GDPR).
Categories of recipients of personal data
Within our company, only those employees who absolutely need the data to perform their tasks have access to it (need-to-know principle). Individual processes and services are carried out by carefully selected service providers who are commissioned in accordance with data protection regulations and are based within the EEA. If service providers commissioned by us have access to personal data when performing their services, data processing agreements have been concluded with them in accordance with Art. 28 (3) GDPR.
Duration of data storage
The data we process is stored for the duration of the existence and execution of the contractual relationship and in compliance with statutory retention periods. These are, in particular, commercial and tax law retention obligations under the German Commercial Code (HGB) and the German Fiscal Code (AO). The regular retention and documentation periods are up to ten years. If no contractual relationship is established, we only process the data for as long as the specific purpose requires.
Cookies
Cookies are small text files that are stored by your browser on your device to store certain information during your use of the website. Cookies enable us to improve various aspects of our website and make your visit more convenient.
There are different types of cookies that serve different purposes. Temporary cookies, also known as session cookies, are only stored for the duration of your use of the website and are automatically deleted when you close your browser. Persistent cookies, on the other hand, remain stored on your device for a longer period of time and enable us to recognise you and your preferences when you visit the website again.
Cookies can also be divided into first-party cookies and third-party cookies. First-party cookies are set by our website, while third-party cookies are set by other websites or service providers whose content is integrated into our website, such as plugins or analysis tools.
Cookies are used for various purposes, for example to ensure the functionality of the website, to store user settings, to compile anonymous statistics on user behaviour or to display personalised content and advertising. The legal basis for the use of cookies varies depending on the purpose of the cookies. In some cases, the setting of cookies is based on your legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in order to make our website functional and user-friendly. As a website operator, we have a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of our services. If we obtain your consent for the use of cookies, processing is based on Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG. Your consent can be revoked at any time.
Use of the cookie consent tool from JTL
We use the cookie consent tool from JTL-Software-GmbH (Rheinstraße 7, 41836 Hückelhoven; "JTL") on our website.
The tool enables you to give your consent to data processing via the website, in particular the setting of cookies, and to exercise your right of revocation for consents already given. The purpose of data processing is to obtain and document the necessary consent to data processing and thus comply with legal obligations. Cookies may be used for this purpose. The following information, among other things, may be collected: IP address, date and time of the page view and consent status.
Data processing is carried out to fulfil a legal obligation based on Art. 6 (1) (c) GDPR.
Further information on data protection at JTL can be found at: https://www.jtl-software.de/datenschutz.
Data processing in detail
Below, we provide information about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. There is no automated decision-making in individual cases, including profiling.
Provision of the website
When you visit and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the file accessed
- Website from which access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf for the purpose of providing the website in accordance with Art. 28 GDPR.
The hoster is used for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Art. 6(1)(b) GDPR) and in the interests of secure, fast and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).
We use the following host:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
Determination of the delivery country
To display prices and VAT correctly for your delivery country, we determine your approximate country of origin from your IP address when you visit our shop. Before the query, our server truncates your IP address (the last part is replaced with zeros) and sends only this truncated address to the service ip2c.org. The query is made server-side; your browser does not connect to ip2c.org, and your full IP address is not transmitted. The service returns only a country code; no user profile is created. According to its own information, ip2c.org stores the date and time of each query, the IP address of the requesting server and the queried (truncated) IP address in order to compile statistics, ensure service quality and detect abuse.
We store the determined or selected delivery country in the technically necessary cookie “oss_country”. The cookie is deleted at the end of your browser session, at the latest after 30 days. The legal basis for storage on your device is Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act).
The legal basis for the processing is Art. 6(1)(f) GDPR; our legitimate interest is to display prices and VAT correctly for your delivery country. You can change the delivery country manually at any time using the country selection in the header of the shop. During checkout, the delivery address you enter always applies. You have the right to object to this processing under Art. 21 GDPR.
Contact form
Type and scope of processing
When you send us enquiries (e.g. via contact form, email or telephone), we store all data resulting from this (e.g. name, email address, subject of the enquiry, etc.). We need this data to process your enquiry and to be able to answer follow-up questions. We do not pass on this data without your consent.
Purpose and legal basis
This data is processed on the basis of Art. 6(1)(b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. Otherwise, the processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if you have given it beforehand.
Storage period
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.
Contact form for applicants
Type and scope of processing
We collect and process the personal data of applicants. The relevant data processing may also be carried out electronically, for example when applicants send us their application documents by email or via a web form on our website . On our website, we offer you the option of sending us applications for advertised job vacancies by email.
Purpose and legal basis
We process the personal data of applicants in accordance with the legal requirements for the purpose of initiating an employment relationship (Art. 6 (1) (b) GDPR). You are not obliged to provide us with this data. However, without this data, we cannot carry out an application process with you.
If your application is successful, the data you submit will be stored in our data processing systems on the basis of Art. 6 (1) (b) GDPR and, if you provide us with special categories of personal data such as health information, on the basis of Art. 9 (2) (b) for the purpose of implementing the employment relationship.
For the purpose of contacting potential applicants, we also use the services of the professional networks LinkedIn and XING. The operators of these networks act as processors for us in accordance with our instructions. The legal basis for data processing when contacting potential applicants on our behalf is Art. 6 (1) lit. f GDPR (our legitimate interests). If you send us your application as a result of such an approach, we will process your data for the purpose of initiating an employment relationship as described above on the basis of Art. 6 (1) lit. b GDPR.
Storage period
In the event of rejection, your data will be stored for a period of 6 months after the end of the application process. This is done to protect our legitimate interests in order to check whether we need the data to defend against any claims in connection with the application process. We are then obliged to delete or anonymise your data. In this case, the data is only available to us as so-called metadata without direct personal reference for statistical evaluations (e.g. proportion of female or male applicants, number of applications per period, etc.).
If it is apparent that further storage of the data is necessary after the expiry of the 6-month period to safeguard our legitimate interests (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies. The legal basis for this further data storage is our legitimate interests in asserting, exercising or defending civil law claims (Art. 6(1)(f) GDPR in conjunction with Section 24(1)(2) BDSG or, insofar as special categories of personal data are stored, Art. 9 (2) (f) GDPR in conjunction with § 24 (2) BDSG).
Inclusion in the applicant pool
As part of the application process, we offer applicants the opportunity to be included in our "talent pool" for a period of 24 months on the basis of consent within the meaning of Art. 6 (1) (a), Art. 9 (2) (a) GDPR. If you have provided special categories of personal data in your application, such as health information, your consent also extends to this data. You are not obliged to provide us with your application data for our talent pool. However, without this data, we cannot consider you for future vacancies unless you submit a new application.
Consent to the inclusion of application data in the talent pool is voluntary and can be revoked at any time for the future. Revocation of consent does not affect the lawfulness of data processing carried out on the basis of consent until revocation.
Your application documents will be deleted from the talent pool at the latest after the expiry of the storage period or in the event of revocation or acceptance of a job offer from one of the companies responsible for the talent pool.
If you receive an offer of employment from us during the application process and accept it, we or this company will store the personal data collected during the application process for the purpose of implementing the employment relationship. The legal basis for this data processing is Art. 6 (1) (b) GDPR or, if you provide us with special categories of personal data such as health information, Art. 9 (2) (b).
Registration of a customer account
Processing of customer and contract data
We collect, process and use your personal data only to the extent necessary for the establishment, amendment or fulfilment of a legal relationship. This is done for the fulfilment of a contract or pre-contractual measures in accordance with Art. 6 (1) lit. b GDPR.
The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Data transfer upon conclusion of a contract for online shops, retailers and goods dispatch
We only transfer personal data if this is necessary for the execution of the contract, for example to shipping service providers or the credit institution responsible for payment processing. Any further transfer of data will not take place unless you have expressly consented to the transfer.
The basis for data processing is the fulfilment of a contract or pre-contractual measures in accordance with Art. 6 (1) (b) GDPR.
Data transfer upon conclusion of a contract for services and digital content
We only transfer personal data if this is necessary for the execution of the contract, for example to the credit institution responsible for payment processing. Any further transfer of data will not take place unless you have expressly consented to the transfer.
The basis for data processing is the fulfilment of a contract or pre-contractual measures in accordance with Art. 6 (1) (b) GDPR.
Credit checks
When purchasing on account or using another payment method where we make advance payments, we may carry out a credit check (scoring). For this purpose, we transfer the data you have entered (e.g. name, address, age or bank details) to a credit agency. This data is used to determine the probability of default. If the risk of default is excessive, we may refuse the payment method in question.
Under certain circumstances, we or the payment service provider may carry out a credit check. The payment service provider uses the result of the credit check in relation to the statistical probability of default to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit check, these are based on a scientifically recognised mathematical-statistical method. The calculation of the score values includes, for example, name, address, age or bank details.
The basis for data processing is the fulfilment of a contract or pre-contractual measures in accordance with Art. 6 (1) lit. b GDPR, as well as to avoid payment defaults (legitimate interest pursuant to Art. 6 (1) lit. f GDPR). If you have previously given your consent to data processing, the processing of your data will take place solely on the basis of Art. 6 (1) (a) GDPR; consent can be revoked at any time.
Payment services
We integrate third-party payment services on our website. When you make a purchase from us, your payment details (e.g. name, payment amount, account details, credit card number) are processed by the payment service provider for the purpose of payment processing; the respective contractual and data protection provisions of the respective providers apply. The basis for data processing is the fulfilment of a contract or pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR and in the interest of a smooth, convenient and secure payment process (Art. 6 para. 1 lit. f GDPR). If you have previously given your consent to data processing, the processing of your data will take place solely on the basis of Art. 6 (1) lit. a GDPR; consent can be revoked at any time.
We use the following payment service providers:
PayPal
The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.
For details, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of PayPal Plus
We use the PayPal Plus payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to enable us to offer you payment via the payment service. When you select and use payment via PayPal, credit card via PayPal or direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you at using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
For certain payment methods, such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right to obtain credit information based on mathematical-statistical methods using credit agencies. To this end, PayPal transmits the personal data required for a credit check to a credit agency and uses the information obtained about the statistical probability of a payment default to make a balanced decision about the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical methods and which include address data, among other things, in their calculation. Your interests worthy of protection will be taken into account in accordance with the statutory provisions. The purpose of data processing is to check creditworthiness for the initiation of a contract. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default if PayPal makes advance payments.
You have the right to object to this processing of your personal data based on Art. 6 (1) lit. f GDPR at any time for reasons arising from your particular situation by notifying PayPal. The provision of data is necessary for the conclusion of the contract with your desired payment method. Failure to provide this data will result in the contract not being concluded with your chosen payment method.
Use of PayPal Express
We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to offer you payment via the PayPal Express payment service.
In order to integrate this payment service, PayPal must collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. Cookies enable your browser to be recognised.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Article 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR.
For more information on data processing when using the PayPal Express payment service, please refer to the relevant privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS
Use of PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to enable us to offer you payment via the payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Cookies may be stored in this process, which enable your browser to be recognised. The resulting data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in offering a customer-oriented range of different payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, PayPal reserves the right to obtain credit information based on mathematical-statistical methods using credit agencies. To this end, PayPal transmits the personal data required for a credit check to a credit agency and uses the information obtained about the statistical probability of a payment default to make a balanced decision about the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical methods and which include address data, among other things, in their calculation. Your interests worthy of protection will be taken into account in accordance with the statutory provisions. The purpose of data processing is to check creditworthiness for the initiation of a contract. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default when PayPal makes advance payments.
You have the right to object to this processing of personal data concerning you based on Art. 6 (1) lit. f GDPR at any time for reasons arising from your particular situation by notifying PayPal. The provision of data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide this data will result in the contract not being concluded with the payment method you have chosen.
Purchase on account via PayPal
When paying by purchase on account, the data required for payment processing is first transmitted to PayPal. To execute this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Ratepay may carry out a credit check on the basis of mathematical-statistical methods (probability or score values) using credit agencies in accordance with the procedure described above. The purpose of data processing is to check creditworthiness for the initiation of a contract. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default if Ratepay makes advance payments. Further information on data protection and which credit agencies Ratpay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
For more information on data processing when using PayPal, please refer to the relevant privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Apple Pay
The payment service provider is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. Apple's privacy policy can be found at: https://www.apple.com/legal/privacy/de-ww/.
Google Pay
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google's privacy policy can be found here: https://policies.google.com/privacy.
American Express
The provider of this payment service is American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany (hereinafter referred to as "American Express").
American Express may transfer data to its parent company in the USA. Data transfer to the USA is based on the Binding Corporate Rules. Details can be found here: https://www.americanexpress.com/en-iec/company/legal/privacy-centre/binding-corporate-rules/
For further information, please refer to the American Express privacy policy: https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html.
Mastercard
This payment service is provided by Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter referred to as "Mastercard").
Mastercard may transfer data to its parent company in the United States. Data transfers to the United States are based on Mastercard's Binding Corporate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.
VISA
This payment service is provided by Visa Europe Services Inc., London branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter referred to as "VISA").
The United Kingdom is considered a safe third country in terms of data protection law. This means that the United Kingdom has a level of data protection that corresponds to the level of data protection in the European Union.
VISA may transfer data to its parent company in the United States. Data transfers to the United States are based on the standard contractual clauses of the European Commission. Details can be found here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.
For further information, please refer to VISA's privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.
Presence on social media platforms
We operate public profiles on various social networks on our website. More detailed information on the social networks we use can be found in the relevant sections of our privacy policy.
Social networks such as Facebook, Twitter and others can comprehensively analyse your user behaviour when you visit their websites or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data processing operations relevant to data protection:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. This allows interest-based advertising to be displayed to you both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.
Please note that we cannot track all processing operations on social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.
Legal basis for data processing
Our social media presence serves to ensure the most comprehensive presence possible on the internet. This is a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).
Controller and assertion of rights
When you visit our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).
Despite our joint responsibility with the social media portal operators, we do not have full control over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Duration of data storage
The data collected directly by us via our social media presence will be deleted from our systems as soon as you request us to do so, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.
We have no influence on the storage period of your data stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. via their privacy policy, see below).
Facebook page
Our company has a profile on Facebook. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as Meta). According to Meta, the data collected is also transferred to the USA and other third countries.
We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement specifies which data processing operations we and Meta are responsible for when you visit our Facebook page. You can view the agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
The company is certified under the EU-US Data Privacy Framework (DPF), an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Certification under the DPF requires companies to comply with these data protection standards.
Data transfers to the United States are based on the standard contractual clauses of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For further information, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/.
Instagram page
Our company has a profile on Instagram. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The company is certified under the EU-US Data Privacy Framework (DPF), an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Certification under the DPF requires companies to comply with these data protection standards.
Data transfers to the United States are based on the EU Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
For more information on how your personal data is handled, please refer to Instagram's privacy policy: https://help.instagram.com/519522125107875.
Video conferencing
Data processing
We use online conferencing tools to communicate with our customers. The specific tools we use are listed below. When you communicate with us via video or audio conference, your personal data is collected and processed by us and the provider of the respective tool.
The tools collect the data you provide, including your email address and telephone number. They also process the duration of the conference, when you participated in the conference, the number of participants and other metadata.
In addition, the provider of the tool processes all technical data necessary to conduct the conference. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.
When you share content in this service, it is stored on the providers' servers. This includes cloud recordings, chat messages, voice messages, and photos and videos that you have shared while using this service.
Please note that we do not have full control over the data processing operations of the tools used. For more information on data processing by the conference tools, please refer to the privacy policies of the respective tools used.
Purpose and legal basis
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest within the meaning of Art. 6(1)(f) GDPR). If you have previously given your consent to data processing, the processing of your data will take place solely on the basis of Art. 6 (1) (a) GDPR; consent can be revoked at any time.
Storage period
The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to its storage or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence on the storage period of your data stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.
Conference tools used
We use the following conference tools:
Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Details on data processing can be found in the Microsoft Teams privacy policy: https://privacy.microsoft.com/de-de/privacystatement.
Webex
We use Webex. This service is provided by Webex Communications Deutschland GmbH, Hansaallee 249 c/o Cisco Systems GmbH, 40549 Düsseldorf, Germany.
It cannot be ruled out that the data processed with WebEx may be transferred to third countries (e.g. the USA). In this case, the provider has Binding Corporate Rules (BCR) that have been approved by Dutch, Polish, Spanish and other relevant European data protection regulatory authorities. Details can be found here: https://www.cisco.com/c/de_de/about/trust-center/data-protection-and-privacy-policy.html and https://konferenzen.telekom.de/fileadmin/Redaktion/conference/cisco-webex/Webex_Compliance_Deutsch_V1.0.pdf.
For details on data processing, please refer to the Webex privacy policy: https://www.cisco.com/c/de_de/about/legal/privacy-full.html.
Zoom
We use Zoom. This service is provided by Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. Details on data processing can be found in Zoom's privacy policy: https://zoom.us/de-de/privacy.html.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://zoom.us/de-de/privacy.html.
Services and tools used
Google Tag Manager
We use services and functions from Google Tag Manager on this website, which are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that helps us use other tools on our website. It does not create user profiles, store cookies or perform independent analyses. However, your IP address is recorded and may be transferred to the USA. Google Tag Manager itself is only used to manage the tools that are integrated via it.
Purpose & legal basis
When using Google Tag Manager on this website, we rely on Art. 6 (1) lit. f GDPR as the legal basis, as we have a legitimate interest in implementing and controlling tracking tools on this website quickly and easily. If you have previously given your consent to data processing on this website by Google Tag Manager, the processing of your data is based solely on the legal basis of Art. 6 (1) lit. a GDPR § 25 (1) TDDDG. You can revoke your consent at any time.
The company is certified under the EU-US Data Privacy Framework (DPF), an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Certification under the DPF obliges companies to comply with these data protection standards. For more information, please visit: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Google DoubleClick
We use services and functions from Google DoubleClick on this website, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Type and scope of data processing
Google DoubleClick enables us to display targeted advertisements in Google applications that match the interests of users. In order to offer relevant advertising, Google DoubleClick must identify users and link their visits to websites, clicks and other information to their user behaviour. To do this, Google DoubleClick uses cookies and technologies to recognise users and creates pseudonymised user profiles based on the data collected.
You can deactivate this personalised advertising in your personal Google account at https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.
Legal basis
When using Google DoubleClick, we refer to Art. 6 (1) lit. f GDPR as the legal basis, as we have a legitimate interest in analysing the use of our website. This enables us to optimise our online presence and offers for you. If you have previously given your consent to data processing by Google DoubleClick on this website, the processing of your data is based on Art. 6 (1) lit. a GDPR in conjunction with §25 (1) TDDDG. You can revoke your consent at any time.
Google Ads
We use Google Ads services and functions on this website, which are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Type and scope of data processing
With the help of Google Ads, we can display online advertisements in the Google search engine or on other websites when users search for specific terms. In addition, advertisements can be placed for specific target groups based on user data. For example, the advertisements are tailored to the interests and location of the users. We evaluate this user data and the number of clicks in order to measure the success of our advertisements.
Legal basis
When using Google Ads, we rely on Art. 6 (1) lit. f GDPR as the legal basis, as we have a legitimate interest in analysing the use of our website in order to successfully market our services and products.
The transfer of your personal data to the USA is based on the standard contractual clauses of the EU Commission. For more information, please visit https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the EU-US Data Privacy Framework (DPF), an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. DPF certification requires companies to comply with these data protection standards. For more information, please visit: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Use of Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"), on our website. With the help of Google Analytics 4, we can analyse the behaviour of visitors to our website and continuously improve our offering.
Purpose and legal basis
Google Analytics 4 enables us to evaluate usage behaviour on our website (e.g. page views, length of stay, interactions) and to create statistical reports. Your data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR, which you can revoke at any time via our consent management tool.
When using Google Analytics 4, various data, such as your IP address (truncated), technical information about your device and browser, and usage data, is collected. IP anonymisation is enabled by default in Google Analytics 4, so your IP address is truncated within the EU before it is transmitted to Google. It is not merged with other Google data.
We have configured the settings of Google Analytics 4 so that only the data required for analysis purposes is collected. We do not collect personal data, such as exact location data or unique user IDs. In addition, we use the options offered by Google Analytics 4 to customise data collection in order to limit processing to the necessary extent and to ensure the best possible protection of your privacy.
Storage period
The data collected by Google Analytics 4 is stored for a maximum period of 14 months and then automatically deleted. For more information on the storage period, please refer to the Google Analytics privacy policy.
Further information on data processing by Google can be found in Google's privacy policy.
Google API
On our website, we use the services and functions of Google APIs, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Type and scope of data processing
Google APIs allows us to access additional services and data from Google. When using these services, your IP address is transmitted to Google Ireland Limited. Please note that we provide specific information in our privacy policy for each additional Google service we use. Further information about Google APIs and data protection can be found in Google's privacy policy: https://policies.google.com/privacy.
Legal basis
We use Google APIs based on our legitimate interests (i.e., the interest in optimising our online offering) in accordance with Art. 6(1)(f) GDPR. If we obtain consent (e.g. consent to store cookies), data processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; you can revoke this consent at any time.
Order processing
To ensure that personal data is processed in accordance with our specifications and in compliance with the GDPR, we have concluded a contract for order processing (AVV) with the provider.
Google AdSense
We use Google AdSense services and functions on this website in non-personalised mode, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Type and scope of data processing
Google AdSense in non-personalised mode means that no user profiles are created to display personalised advertisements (for more information, see https://support.google.com/adsense/answer/9007336). Instead, the advertisements are based on contextual information such as location and search terms used. Nevertheless, cookies or technologies for recognising users may be used to prevent misuse of user data, according to Google. You can find more information about the advertising technologies used by Google at , https://policies.google.com/technologies/ads and https://www.google.de/intl/de/policies/privacy/. It is also possible to adjust the settings for advertisements in your personal account at https://adssettings.google.com/authenticated.
Legal basis
When using Google AdSense in non-personalised mode, we refer to Art. 6 (1) lit. f GDPR as the legal basis, as we have a legitimate interest in analysing the use of our website in order to successfully market our services and products. If you have previously given your consent to data processing by Google AdSense on this website, the processing of your data is based on Art. 6 (1) (a) GDPR in conjunction with §25 (1) TDDDG. You can revoke your consent at any time.
The company is certified under the EU-US Data Privacy Framework (DPF), an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Certification under the DPF obliges companies to comply with these data protection standards.
The transfer of your personal data to the USA is based on the standard contractual clauses of the EU Commission. For more information, please visit https://privacy.google.com/businesses/controllerterms/mccs/.
Pinterest Tag
We use the Pinterest Tag of Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland ("Pinterest") on this website. The Pinterest Tag is only loaded if you have given your consent via our cookie consent tool.
Type and scope of data processing
The Pinterest Tag allows us to track which actions visitors take on our website after they have seen or clicked on one of our ads on Pinterest (conversion measurement). It also allows us to evaluate the success of our ads and to show ads on Pinterest to people who have already visited our website (retargeting). For this purpose, cookies or similar technologies are used. In particular, the following data is transmitted to Pinterest: IP address, information about the browser and device (e.g. device type, operating system, device and cookie identifiers), click identifiers from Pinterest ads, the pages visited and events on our website, e.g. viewing a product, adding it to the shopping cart or making a purchase, including order number and order value.
Transmission of personal customer data
In addition, we transmit to Pinterest personal data that you have provided to us, e.g. when placing an order, in particular your e-mail address and, where applicable, further contact data (e.g. name, telephone number, address), as well as an internal customer identifier. This data is pseudonymised using a hashing procedure (SHA-256). Pinterest uses the hashed values to match events on our website to a Pinterest account, even if no Pinterest cookie is present. According to Pinterest, unhashed values are not stored and the hashed values are deleted once the matching process is complete. The matching serves exclusively to measure and optimise our advertising on Pinterest.
Purpose and legal basis
The data processing serves to measure, evaluate and optimise our ads on Pinterest. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future by changing your selection in the cookie consent tool.
Data transfer to the USA
According to Pinterest, Pinterest Europe Ltd. and Pinterest, Inc., 651 Brannan Street, San Francisco, CA 94107, USA, are jointly responsible for the processing of your data by Pinterest. Data may be transferred to the USA in this context. Pinterest bases this transfer on the EU-US Data Privacy Framework (DPF), under which Pinterest, Inc. is certified, and on the standard contractual clauses of the EU Commission.
Storage period
The storage period of the data at Pinterest is governed by Pinterest's privacy policy. Further information on data processing by Pinterest can be found at https://policy.pinterest.com/en/privacy-policy.
PayPal
Type and scope of processing
We have integrated PayPal components into our website. PayPal is a service provided by PayPal Pte. Ltd. and offers online payment solutions worldwide.
If you choose PayPal as your payment method, the data required for the payment process will be automatically transmitted to PayPal Pte. Ltd., San Jose, California, US.
In this context, the following data is usually collected: name, address, company (if applicable), email address, telephone and mobile phone number, and IP address.
Purpose and legal basis
The use of the service is based on the performance of a contract, i.e. for the processing of payment transactions in accordance with Art. 6 (1) (b) GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by PayPal Pte. Ltd. Further information can be found in the PayPal privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Accessibility with EyePivot
On our website we use the EyePivot tool of Themeart GmbH, Henricistraße 34, 45136 Essen, Germany (hereinafter "Themeart").
Description and scope of data processing
EyePivot is a widget that enables visitors to our website to individually adjust the accessibility of the website (e.g. by adjusting the contrast, enlarging the font or applying filters). To provide these functions, it is technically necessary for your browser to connect to Themeart's servers. In the process, your IP address is transmitted to Themeart so that the widget can be loaded and displayed correctly on your terminal device. In addition, your selected accessibility settings (e.g. "high contrast activated") are stored locally in your browser (e.g. in local storage or as a cookie) so that the settings are retained when you switch between subpages.
Purpose of data processing
EyePivot is used for the purpose of making our website accessible and easy to access for all users – in particular for people with disabilities – and to implement statutory accessibility requirements (such as the German Accessibility Strengthening Act – BFSG).
Legal basis
The legal basis for the processing of your data (transmission of the IP address and storage of the settings on your terminal device) is your express consent pursuant to Art. 6(1)(a) GDPR (and, where applicable, Section 25(1) TDDDG for the storage of information on the terminal device).
Storage period and objection
The IP address is transmitted only transiently to establish the connection. The accessibility settings stored locally in your browser remain there until you clear your browser cache or deactivate storage via your browser settings.
Brevo
This website uses Brevo to send newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.
Brevo is a service for organising and analysing the sending of newsletters. The data you provide for receiving the newsletter is stored on Brevo's servers in Germany.
Brevo enables us to analyse our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked. In this way, we can determine which links were clicked most often.
Brevo also makes it possible to divide newsletter recipients into different categories ("clustering"). For example, newsletter recipients can be divided by age, gender or place of residence. In this way, the newsletters can be better tailored to the respective target groups.
If you do not want Brevo to carry out an analysis, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message.
Further information on the functions of Brevo can be found here: https://www.brevo.com/de/newsletter-software/.
The data processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal.
The data stored by us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the distribution list after you unsubscribe from the newsletter. Data that we have stored for other purposes remains unaffected.
After you have been removed from the newsletter list, your e-mail address may be stored by us or the newsletter service provider in a blacklist in order to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
Further information on data protection at Brevo can be found here: https://www.brevo.com/de/legal/privacypolicy/.
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement (DPA) with the provider.
Responsable/Commissaire à la protection des données
N’hésitez pas à nous contacter. Le chargé de traitement des données est: In & Out House GmbH, Jahnallee 45A, 53173 Bonn Deutschland, +49 (0)228 76365010, datenschutz@in-out-house.de
Contactez directement nos commissaires à la protection des données à: exkulpa gmbh
Waldfeuchter Str. 266
52525 Heinsberg
Telefon: (+49)02452 / 99 33 11
E-Mail: datenschutz@in-out-house.de
Compte client Commandes
Évaluations Annonce publicitaire
Pour notre site Web, nous utilisons l'outil d'évaluation « shopauskunft.de » de Händlerbund Management AG (Kohlgartenstraße 11 - 13, 04315 Leipzig; « Shopauskunft »).
À l’issue de votre commande, nous vous invitons à évaluer et à commenter l’achat que vous avez effectué chez nous. Vous recevrez à cette fin un e-mail de notre part, dans lequel nous nous servons du système technique « Rechtssichere Bewertungsanfrage (Demande d’évaluation juridique, RBA) ». Nous traiterons alors les données de votre commande (numéro de commande/de facture, valeur d’achat et frais de port) ainsi que votre adresse e-mail. Le traitement a lieu sur la base de l'art. 6 alinéa 1 lettre a RGPD avec votre consentement, à condition que vous ayez expressément consenti à la divulgation de vos données et à la réception de la demande d'évaluation.
Vous pouvez à tout moment révoquer votre consentement en utilisant le lien correspondant dans l'e-mail ou en nous le notifiant sans affecter la légalité du traitement effectué sur la base de votre consentement jusqu'à la révocation.
Pour plus d'informations sur la protection de la vie privée lors de l'utilisation de Shopauskunft, veuillez consulter le site: https://www.shopauskunft.de/datenschutz
Nous utilisons votre adresse e-mail pour vous envoyer des informations et des offres par newsletter, dans la mesure où vous y avez expressément consenti. Le traitement des données sert exclusivement à des fins de prospection commerciale. À cet effet, nous traitons votre adresse e-mail ainsi que, le cas échéant, d'autres données que vous avez fournies volontairement dans le cadre de l'inscription à notre newsletter.
Le traitement est effectué sur la base de l'article 6, paragraphe 1, point a) du RGPD avec votre consentement. Vous pouvez révoquer votre consentement à tout moment, sans que cela n'affecte la légalité du traitement effectué sur la base du consentement jusqu'à la révocation.
Pour ce faire, vous pouvez vous désabonner à tout moment de la newsletter en utilisant le lien correspondant dans la newsletter ou en nous en informant. Votre adresse e-mail sera ensuite supprimée de la liste de diffusion. Malgré la suppression de la liste de diffusion, nous pouvons continuer à enregistrer votre adresse e-mail dans une liste dite noire afin d'éviter que vous ne receviez à l'avenir des e-mails de newsletter de notre part. Ce stockage est effectué sur la base de l'article 6, paragraphe 1, point f du RGPD, pour notre intérêt légitime et le vôtre à empêcher la réutilisation de votre adresse e-mail pour l'envoi de notre newsletter. Vous avez le droit de vous opposer à tout moment, pour des raisons liées à votre situation particulière, à ce traitement des données à caractère personnel vous concernant.
Utilisation de Brevo (anciennement Sendinblue)
Pour l’envoi de la newsletter, nous avons recours aux services de Sendinblue GmbH (Köpenicker Straße 126, 10179 Berlin, ci-après dénommée « Brevo ») dans le cadre d’un accord de sous-traitance du traitement des données.
Nous communiquons à Brevo les informations que vous avez communiquées lors de l’inscription à la newsletter (adresse mail, le cas échéant prénom et nom). Le traitement de données sert aux fins d’envoi de la newsletter et à son évaluation statistique.
Pour évaluer les campagnes de newsletters, les newsletters envoyées par e-mail contiennent un graphique 1x1 pixel (pixel de suivi) et/ou un lien de suivi. Nous pouvons ainsi constater si vous avez ouvert la newsletter et si vous avez, le cas échéant, cliqué sur les liens intégrés. À cet égard, vos données à caractère personnel telles que par exemple l’adresse IP, le type de navigateur et d’appareil ainsi que l’heure de l’ouverture peuvent également être collectées. À partir de ces données, il est possible de créer des profils utilisateurs pseudonymisés. Les données collectées ne sont pas utilisées afin de vous identifier personnellement. Les données collectées sont seulement utilisées afin d’effectuer une évaluation statistique en vue d’améliorer les campagnes de newsletters.
Vos données à caractère personnel sont traitées sur la base de l’art. 6, par. 1, lettre f du RGPD, en lien avec notre intérêt légitime prédominant à établir un système de newsletter ciblé, ergonomique et assurant une promotion efficace. Vous avez le droit de vous opposer à tout moment, pour des raisons tenant à votre situation particulière, au traitement des données à caractère personnel vous concernant.
Pour toute information complémentaire concernant la politique de confidentialité de Brevo, veuillez consulter la page suivante : https://www.brevo.com/de/legal/privacypolicy/.
Utilisation de l'adresse e-mail pour les notifications de disponibilité
Nous proposons sur notre site Internet le service de notification de la disponibilité des marchandises. Si un article n'est pas disponible pour une courte durée, vous avez la possibilité d'inscrire votre adresse e-mail sur l'article concerné et d'être informé par e-mail par nos soins en cas de disponibilité, dans la mesure où vous avez donné votre accord. En cas de disponibilité de la marchandise, vous recevrez une seule fois un e-mail vous informant de la disponibilité de l'article concerné. Le traitement est effectué sur la base de l'article 6, paragraphe 1, point a) du RGPD avec votre consentement. Vous pouvez révoquer votre consentement à tout moment, sans que cela n'affecte la légalité du traitement effectué sur la base du consentement jusqu'à la révocation. Vous pouvez vous désabonner à tout moment des notifications de disponibilité en nous en informant. Votre adresse e-mail sera ensuite supprimée de la liste de diffusion.
Entreprises chargées de la livraison Gestion des marchandises
Prestataires de paiement
Utilisation de PayPal
Nous utilisons sur notre site Web le service de paiement PayPal de PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg ; « PayPal »). Le traitement des données a pour but de pouvoir vous proposer le paiement via le service de paiement. La sélection et l'utilisation du paiement via PayPal entraînent la transmission à PayPal des données nécessaires au traitement du paiement, afin de pouvoir remplir le contrat avec vous en appliquant le mode de paiement choisi. Le traitement est effectué sur la base de l’article 6, alinéa 1, point b du RGPD.
Toutes les transactions PayPal sont soumises à la politique de confidentialité de PayPal. Vous les trouverez sur la page Web suivante : https://www.paypal.com/fr/webapps/mpp/ua/privacy-full
Utilisation de PayPal Plus
Nous utilisons sur notre site Web le service de paiement PayPal Plus de PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg ; « PayPal »). Le traitement des données a pour but de pouvoir vous proposer le paiement via le service de paiement. La sélection et l'utilisation du paiement via PayPal, de la carte de crédit via PayPal, du prélèvement automatique via PayPal entraînent la transmission à PayPal des données nécessaires au traitement du paiement, afin de pouvoir remplir le contrat avec vous en appliquant le mode de paiement choisi. Le traitement est effectué sur la base de l’article 6, alinéa 1, point b du RGPD.
Concernant certains modes de paiement tels que les cartes de crédit via PayPal, le débit direct via PayPal, PayPal se réserve le droit d'obtenir un rapport de solvabilité sur la base de procédures mathématiques et statistiques en utilisant des bureaux de crédit. À cet effet, PayPal transmet les données personnelles nécessaires pour une évaluation de la solvabilité à une société de renseignement et utilise les informations obtenues relatives à la probabilité statistique de défaut de paiement, afin de prendre une décision documentée en ce qui concerne la création, l'exécution ou la résiliation du contrat. L'enquête de solvabilité peut inclure des valeurs de probabilité (valeurs de score), qui sont calculées sur la base de méthodes mathématico-statistiques scientifiquement reconnues et qui intègrent dans leurs calculs, entre autres, des données d'adresse. La protection de vos intérêts est respectée conformément aux dispositions légales. Le traitement des données a pour but de vérifier la solvabilité pour une initiation de contrat. Le traitement est effectué sur la base de l’article 6, alinéa 1, point f du RGPD dans notre intérêt légitime prépondérant à la protection contre le défaut de paiement, si PayPal a effectué un paiement anticipé.
Pour des raisons tenant à votre situation particulière, vous avez à tout moment le droit de vous opposer à ce que vos données personnelles soient traitées conformément à l’article 6 alinéa 1, point f du RGPD, vous pouvez vous opposer au traitement des données personnelles vous concernant en envoyant une notification à PayPal. La mise à disposition des données est nécessaire pour la conclusion du contrat en appliquant le mode de paiement souhaité. En cas de non-mise à disposition, le contrat ne peut pas être conclu avec le mode de paiement que vous avez choisi.
Sur notre site web, nous utilisons le service de paiement PayPal Check-Out développé par PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxemburg; « PayPal »). Le traitement des données vise à vous procurer le paiement à travers ce service de paiement. En choisissant et en utilisant le paiement via PayPal, la carte de crédit via PayPal, le prélèvement automatique via PayPal ou le « paiement différé » via PayPal, les données nécessaires au traitement du paiement sont transmises à PayPal afin d'assurer le respect du contrat conclu avec vous au moyen du mode de paiement choisi. Ce traitement est effectué aux termes de l'article 6, paragraphe 1, point b) du RGPD.
Ces opérations peuvent nécessiter le dépôt de cookies permettant de reconnaître le navigateur. Ce traitement des données qui en découle est fondé sur l’art. 6, par. 1, lettre f du RGPD relatif à notre intérêt légitime prépondérant à offrir aux clients des moyens de paiement répondant à leurs besoins. Vous avez le droit de vous opposer à tout moment, pour des raisons tenant à votre situation particulière, au traitement des données à caractère personnel vous concernant.
Carte de crédit via PayPal, débit direct via PayPal & « payez plus tard » via PayPal
Pour certains modes de paiement tels que la carte de crédit via PayPal, le débit direct via PayPal ou le « paiement différé » via PayPal, PayPal se réserve le droit de requérir, le cas échéant, des informations sur la solvabilité, sur la base des procédés mathématiques et statistiques en faisant appel à des agences d'évaluation du crédit. Pour ce faire, PayPal transmet les données personnelles nécessaires au contrôle de solvabilité à une agence d'évaluation du crédit et utilise les informations reçues relatives à la probabilité statistique d'un défaut de paiement afin de prendre une décision adaptée sur l'établissement, l'exécution ou la résiliation de la relation contractuelle. Les informations relatives à la solvabilité peuvent contenir des valeurs de probabilité (valeurs de score) qui sont calculées sur la base des procédés mathématiques et statistiques scientifiquement reconnus et dont le calcul intègre, entre autres, des données d'adresse. Vos exigences en matière de protection sont prises en compte conformément aux dispositions légales. Le traitement des données vise la vérification de la solvabilité en vue de l'établissement d'un contrat. Ce traitement est effectué aux termes de l'article 6, paragraphe 1, point f du RGPD, en raison de notre intérêt légitime prépondérant à la protection contre le non-paiement lorsque PayPal prend les devants.
Vous disposez du droit à tout moment, de manifester votre mécontentement pour des raisons tenant à votre situation particulière, à ce traitement de données à caractère personnel vous concernant, selon l'article 6, paragraphe 1, point f), du RGPD, en en informant PayPal. La mise à disposition des données est nécessaire à la conclusion du contrat en fonction du mode de paiement que vous avez choisi.
La non-fourniture de ces données a pour conséquence que le contrat ne peut être conclu selon le mode de paiement que vous avez choisi.
Fournisseurs d'accès locaux
En cas de paiement via le mode de paiement d'un prestataire tiers local, les données nécessaires au traitement du paiement sont transmises à PayPal. Ce traitement est effectué aux termes de l'article 6, paragraphe 1, point b) du RGPD. En vue de l'exécution de ce type de paiement, les données sont éventuellement transmises ensuite par PayPal au fournisseur concerné. Ce traitement est effectué aux termes de l'article 6, paragraphe 1, point b) du RGPD. Les fournisseurs d'accès locaux peuvent être par exemple :
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Irlande)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irlande)
Achat sur facture via PayPal
En cas de paiement via le mode de paiement achat sur facture, les données nécessaires au traitement du paiement sont d'abord transmises à PayPal. En vue de l'exécution de ce mode de paiement, les données sont ensuite transmises par PayPal à la société Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin ; « Ratepay ») afin de permettre l'exécution du contrat avec vous au moyen du mode de paiement choisi. Ce traitement est effectué aux termes de l'article 6, paragraphe 1, point b) du RGPD. Ratepay effectue le cas échéant une enquête de solvabilité sur la base des procédés mathématiques et statistiques en faisant appel à des agences de renseignements selon la procédure déjà décrite ci-dessus. Le traitement des données vise la vérification de la solvabilité en vue de l'établissement d'un contrat. Ce traitement est effectué aux termes de l'article 6, paragraphe 1, point f du RGPD, en raison de notre intérêt légitime prépondérant à la protection contre le non-paiement lorsque PayPal prend les devants. Pour plus d'informations sur la protection des données et les agences d'évaluation du crédit utilisées par Ratpay, veuillez consulter les sites https://www.ratepay.com/legal-payment-dataprivacy/ et https://www.ratepay.com/legal-payment-creditagencies/.
De plus amples informations relatives au traitement des données lors de l'utilisation de PayPal sont disponibles dans la déclaration de protection des données correspondante à l'adresse: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Cookies
Notre site Web utilise des cookies. Les cookies correspondent à de petits fichiers texte enregistrés dans votre navigateur Web ou par votre navigateur Web dans le système informatique d’un utilisateur. Si un utilisateur se rend sur un site Web, alors un cookie est susceptible d’être enregistré sur le système d’exploitation de l’utilisateur. Ce cookie contient une chaîne de caractères spécifique permettant une identification univoque du navigateur lors de la prochaine visite du site Web.
Les cookies sont enregistrés sur votre ordinateur. Par conséquent, vous contrôlez entièrement l’utilisation des cookies. En sélectionnant les paramètres techniques correspondants dans votre navigateur Internet, vous pouvez être informé avant l’activation de cookies et décider de les accepter au cas par cas ainsi qu’empêcher l’enregistrement des cookies et la transmission des données qu’ils contiennent. Les cookies déjà enregistrés peuvent être supprimés à tout moment. Nous attirons cependant votre attention sur le fait que vous ne pourrez alors pas utiliser pleinement l’ensemble des fonctionnalités de ce site Web.
En cliquant sur les liens ci-dessous, vous trouverez toutes les informations concernant la gestion (entre autres la désactivation) des cookies sur les principaux navigateurs :
Navigateur Chrome : https://support.google.com/accounts/answer/61416?hl=fr
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox : https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari : https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Cookies techniquement nécessaires
Sauf indication contraire dans la déclaration de protection des données ci-dessous, nous utilisons seulement ces cookies afin de rendre nos contenus plus conviviaux, plus efficaces et plus sûrs. Par ailleurs, les cookies permettent à nos systèmes de reconnaître votre navigateur, même après un changement de page, et de vous proposer des services. Certaines fonctionnalités de notre site Internet ne pourraient pas être proposées sans l’utilisation de cookies. Pour qu’elles fonctionnent, il est nécessaire que le navigateur soit reconnu même après un changement de page.
L'utilisation de cookies ou de technologies comparables est effectuée sur la base de l'article 25, paragraphe 2 TDDDG. Le traitement se fait sur la base de l’art. 6 alinéa 1 lettre f RGPD au titre d’un intérêt légitime prédominant quant à la garantie d’une fonctionnalité optimale du site Internet et d’une présentation conviviale et efficace de notre offre.
Pour des raisons tenant à votre situation particulière, vous avez le droit de vous opposer à tout moment au traitement de vos données à caractère personnel, lequel est effectué sur la base de l’art. 6 (1) lettre f du RGPD.
Analyse Suivi publicitaire
Google utilise des technologies telles que les cookies, la mémoire web dans le navigateur et les pixels de suivi, qui permettent d'analyser votre utilisation du site web. L'utilisation de cookies ou de technologies comparables s'effectue avec votre consentement sur la base de l'article 25, paragraphe 1, phrase 1 de la loi TDDDG en relation avec l'art. 6 alinéa 1, lettre a du RGPD.
Le traitement de vos données personnelles s'effectue avec votre consentement sur la base de l'article 6, paragraphe 1, point a) du RGPD. Vous pouvez désister à tout moment, sans que cela n'affecte la légalité du traitement effectué sur la base du consentement jusqu'au désistement.
Les informations ainsi générées sur votre utilisation de ce site web sont généralement transmises à un serveur de Google aux États-Unis où elles sont enregistrées. En ce qui concerne les États-Unis, il existe une décision de la Commission européenne constatant le caractère adéquat : le Cadre transatlantique de protection des données personnelles (CTPD). Google s’est certifié selon le CTPD et est donc tenu de respecter les règles de protection des données européennes. Google et les autorités publiques américaines ont accès à vos données.
Vous trouverez de plus amples informations sur les conditions d'utilisation et la protection des données sur https://policies.google.com/technologies/partner-sites et sur https://policies.google.com/privacy?hl=de&gl=de.
Utilisation du suivi des conversions Google Ads
Nous utilisons sur notre site Web le programme de publicité en ligne « Google Ads » et, dans ce cadre, le suivi des conversions (évaluation des actions des internautes). Le suivi des conversions de Google est un service d’analyse de Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Irlande; "Google").
Si vous cliquez sur une annonce publiée par Google, un cookie sera déposé sur votre ordinateur pour le suivi des conversions. Ces cookies ont une validité limitée, ils ne contiennent aucune donnée à caractère personnel et ne permettent donc aucune identification personnelle. Si vous vous rendez sur certaines pages de notre site Web et que le cookie n’a pas encore expiré, Google et nous sommes en mesure de détecter que vous avez cliqué sur l’annonce et que vous avez été redirigé(e) vers cette page. Tous les clients de Google Ads reçoivent alors un autre cookie. Il est ainsi impossible de garder la trace des cookies sur les sites Web des clients Ads.
Les informations recueillies à l’aide du cookie de conversion nous permettent d’élaborer des statistiques de conversion. Nous sommes ainsi informés du nombre total d’utilisateurs ayant cliqué sur l’une de nos annonces et ayant été redirigés vers une page dotée d’un tag de suivi des conversions. Nous ne recevons toutefois aucune information pouvant identifier personnellement les utilisateurs. Nous utilisons l'implémentation avancée du mode de consentement (Advanced Consent Mode). Dans ce cas, même si le consentement n'est pas donné, des données utilisateur sont transmises à Google sous forme de "pings". Ces pings peuvent contenir, entre autres, les informations suivantes : Adresse IP pour déduire le pays IP (un enregistrement de l'adresse IP n'a pas lieu), date et heure de la consultation de la page, URL des pages visitées, User-Agent, URL de référence (site web par lequel vous avez accédé à notre site web) ou informations sur le déclenchement d'événements sur le site web, comme par exemple une conversion. Sur la base de ces informations, Google procède à une modélisation des données d'utilisation afin de pouvoir procéder à une analyse complète de l'utilisation malgré le refus du consentement.
Vos données seront éventuellement transmises aux serveurs de Google LLC aux États-Unis. En ce qui concerne les États-Unis, il existe une décision de la Commission européenne constatant le caractère adéquat : le Cadre transatlantique de protection des données personnelles (CTPD). Google s’est certifié selon le CTPD et est donc tenu de respecter les règles de protection des données européennes.
L'utilisation de cookies ou de technologies comparables est effectuée avec votre consentement sur la base de l'article 25, paragraphe 1, p. 1 TDDDG en lien avec l’art. 6 alinéa 1 lettre a RGPD. Le traitement de vos données à caractère personnel est effectué avec votre consentement sur la base de l'art. 6 alinéa 1 lettre a RGPD. Vous pouvez révoquer à tout moment votre consentement, sans que la licéité du traitement ayant eu lieu depuis votre consentement jusqu’à votre révocation ne soit affectée.
Pour toute information complémentaire et pour consulter la politique de confidentialité de Google, rendez-vous sur https://www.google.de/policies/privacy/
Plug-ins
Intégration du logo des membres de la Händlerbund
Le logo des membres de la Händlerbund (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) est intégré à notre site Internet. Lorsque vous consultez notre site web, le navigateur utilisé sur votre terminal envoie automatiquement des informations au serveur du Händlerbund e.V.. Ces informations sont enregistrées temporairement dans un fichier journal du serveur pendant 7 jours. Les informations suivantes sont saisies sans intervention de votre part et enregistrées jusqu'à leur suppression automatique :
- Adresse IP de l'ordinateur demandeur,
- Date et heure de l'accès,
- Nom et URL du fichier consulté,
- site web à partir duquel l'accès a eu lieu (Referrer-URL),
- le navigateur utilisé et, le cas échéant, le système d'exploitation de votre ordinateur ainsi que le nom de votre fournisseur d'accès.
Droits des personnes concernées et durée d’enregistrement
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
E-Mail: poststelle@ldi.nrw.de
