Privacy policy
"Personal data" means any information relating to an identified or identifiable natural person.
Contact
Responsible/Data protection officer
Contact us if you wish. The contact details of the data controller can be found in our imprint.
You can reach our data protection officer directly at: heinrich.stedler@drstedler.de.
Initiative contact of the customer by e-mail
If you initiate business contact with us by e-mail, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the treatment and answer of your contact inquiry.
If the contact serves the execution of pre-contractual measures (e.g. consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b DSGVO.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO due to our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) (f) DSGVO for reasons arising from your particular situation.
We will only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you.
If the contact serves the execution of pre-contractual measures (e.g. consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b DSGVO.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO due to our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) (f) DSGVO for reasons arising from your particular situation.
We will only use your e-mail address to process your request. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use.
Customer account orders
Customer account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6 para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.
Reviews Advertising
Data collection when writing a comment
When commenting on an article or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling commenting and displaying comments. By sending the comment, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 (1) lit. a DSGVO with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Your personal data will then be deleted.
When your comment is published only the name given by you will be published.
Trustami customer rating
To display the collected ratings as well as social media feedback, the Trustami trust seal is integrated on this website. This serves the implementation of our legitimate interests in an optimal marketing of our offer on our own website according to Art. 6 para. 1 p. 1 lit. f DSGVO. When the Trustami trustmark is called up, the web server automatically saves data (access data) in the form of a server log file containing the name of the website called up, the file, the date and time of the call, your IP address in abbreviated form, the volume of data transferred, the message about a successful call, the browser type, the user's operating system, the referrer URL (the previously visited page) and the requesting provider. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site. The Trustami trustmark and the services advertised with it are an offer of Trustami GmbH, Schröderstraße 5, 10115 Berlin. The privacy policy of Trustami at www.trustami.com/datenschutz applies to the processing of data collected by Trustami.
Use of your e-mail address for the sending of direct advertising
We use your e-mail address, which we have received in connection with the sale of a good or service, to send you electronic advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. The provision of the e-mail address is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 (1) lit. f DSGVO from our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the imprint. You can also use the link provided for this purpose in the advertising e-mail. This does not incur any costs other than the transmission costs according to the base rates.
Merchandise management
Use of an external merchandise management system
We use an enterprise resource planning system for contract processing within the scope of order processing. For this purpose, your personal data collected in the course of the order will be transferred to
pixi - Descartes
transmitted.
Payment service provider credit information
Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of PayPal Express
We use the PayPal Express payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. In order to integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when you call up the website. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.
The use of cookies or comparable technologies takes place on the basis of § 15 para. 3 p. 1 TMG. The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f DSGVO from our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
With the selection and use of PayPal Express, the data required for payment processing will be transmitted to PayPal in order to be able to fulfil the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b DSGVO. For more information on data processing when using the PayPal Express payment service, please refer to the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of personal data when selecting Klarna payment options
In order to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. This enables Klarna to assess whether you can use the payment options offered via Klarna and to adapt the payment options to your needs. For general information about Klarna, please visit: https://www.klarna.com/de/. Your personal information will be treated by Klarna in accordance with applicable data protection laws and as set out in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
Cookies
//support.google.com/accounts/answer/61416?hl=deInternet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Analysis
Use of Google Analytics
We use the Google Analytics web analytics service provided by Google LLC on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and ensuring compliance with applicable data protection laws.
The data processing serves the purpose of analysing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. In doing so, the following information may be collected, among others: IP address, date and time of page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of the website. The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is no adequacy decision of the EU Commission. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks. Both Google and US government agencies have access to your data. Your information may be linked by Google to other data, such as your search history, personal accounts, usage data from other devices, and any other data Google may have about you.
IP anonymization is enabled on this website. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The use of cookies or comparable technologies takes place with your consent on the basis of § 15 para. 3 p. 1 TMG in conjunction with. Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent on the basis of Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/ and https://policies.google.com/technologies/cookies?hl=de.
Plug-ins and other
We use the Google Tag Manager of Google LLC on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and complying with applicable data protection laws.
This application manages JavaScript tags and HTML tags used to implement tracking and analysis tools in particular. The data processing serves the purpose of designing and optimizing our website to meet the needs of our customers.
The Google Tag Manager itself neither stores cookies nor does it process personal data. However, it enables the triggering of other tags that can collect and process personal data.
You can find more information on the terms of use and data protection here.
We use the single sign-on feature (formerly Facebook Connect) of Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Facebook") on our website.
Facebook Ireland and we are jointly responsible for the collection of your data and the transmission of this data to Facebook when the service is integrated. This is based on an agreement between us and Facebook Ireland regarding the joint processing of personal data, which sets out the respective responsibilities. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible in particular for fulfilling the information obligations pursuant to Art. 13, 14 of the GDPR, for complying with the security requirements of Art. 32 of the GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations pursuant to Art. 33, 34 of the GDPR insofar as a personal data breach affects our obligations under the joint processing agreement. Facebook Ireland has the responsibility to enable data subject rights under Art. 15 - 20 GDPR, to comply with the security requirements of Art. 32 GDPR with respect to the security of the Service, and to comply with the obligations under Art. 33, 34 GDPR insofar as a personal data breach affects Facebook Ireland's obligations under the Joint Processing Agreement.
This feature allows website visitors to log in to the website using their existing Facebook account. The purpose of the data processing is for registration verification, personalization and interest-based advertising targeting.
In order to offer the function on the website, a connection to the Facebook server is established. Cookies are used for this purpose. In the process, the following information, among other things, may be collected and transmitted to Facebook: IP address, browser information, referrer URL (website from which you accessed our website), location data. This applies regardless of whether you are registered or logged in to the social network. Transmission also takes place for non-registered or non-logged-in users. If you are connected to one or more of your social network accounts at the same time, the collected information can also be assigned to your corresponding profiles. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons. Your data may be transmitted to the USA. There is no adequacy decision of the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, viewable at: https://www.facebook.com/legal/EU_data_transfer_addendum.
When using the single sign-on function, the Facebook profile of the website visitor is linked to a customer account for this website. In doing so, we receive personal data of the user through Facebook, as specified in the login process. This may include, but is not limited to, the following information: Name, address, public profile information (e.g. name, profile picture, age, gender), email address, friend lists, "Like" information.
The use of cookies or comparable technologies takes place with your consent on the basis of § 15 para. 3 p. 1 TMG in conjunction with. Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent on the basis of Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
For more information on the collection and use of data by Facebook, your rights in this regard and ways to protect your privacy, please refer to Facebook's privacy policy at https://www.facebook.com/about/privacy/.
If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company associated with Google which is responsible for processing your data and complying with the applicable data protection laws. The purpose of the query is to distinguish between input by a human or by automated, machine processing. For this purpose, your input is transmitted to Google and further used there. In addition, the IP address and possibly other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to the USA. For the USA, there is no adequacy decision of the EU Commission. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks.
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of the uniform display of fonts on our website. In order to load the fonts, a connection to Google servers is established when the page is called up. Cookies may be used for this purpose. Among other things, your IP address and information about the browser you are using will be processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transmitted to the USA. For the USA, there is no adequacy decision of the EU Commission. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks.
The use of cookies or comparable technologies takes place on the basis of § 15 para. 3 p. 1 TMG. The processing of your personal data is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO from our overriding legitimate interest on a user-friendly and aesthetic design of our website. You have the right to object at any time to this processing of your personal data based on Art. 6 (1) (f) DSGVO for reasons arising from your particular situation by notifying us.
For more information on data processing and data protection, please visit https://www.google.de/intl/de/policies/ and https://developers.google.com/fonts/faq.
Data subject rights and storage period
Duration of storage
After complete processing of the contract, the data will initially be stored for the duration of the warranty period, thereafter taking into account legal, in particular tax and commercial law retention periods and then deleted after expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
You are entitled to the following rights according to Art. 15 to 20 DSGVO if the legal requirements are met: right to information, to correction, to deletion, to restriction of processing, to data portability.
In addition, you have the right to object to processing based on Art. 6(1)(f) DSGVO and to processing for the purposes of direct marketing in accordance with Art. 21(1) DSGVO.
Right of complaint to the supervisory authority
Pursuant to Art. 77 DSGVO, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is not lawful.
Right of objection
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO, you have the right to object to this processing with effect for the future at any time for reasons arising from your particular situation.
After the objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.
If personal data is processed for direct marketing purposes, you may object to this processing at any time by notifying us. After the objection has been made, we will stop processing the data concerned for direct marketing purposes.
last update: 27.10.2020