Privacy Policy

PRIVACY POLICY

This privacy policy applies to the website www.automatenhandel24.com

Responsible:

ShopSmart24 GmbH

Ingo Stumpf

Alte Dorfstraße 1a

63584 Gründau

info@automatenhandel24.com

Data Protection Officer:

Marc Dimolaidis

lawyer

Wilhelm-Dieß-Weg 13

81927 Munich

• Processing of personal data

We process your personal data on the website, among other things, as follows (for further data processing on the website, please refer to the following sections of this privacy policy):

Log files when visiting the website

When you use our website, our hosting provider records so-called "log file" data each time you access the server, such as the name of the website accessed, the previously visited page ("referrer" URL), product and version information of the browser and operating system used, the requesting provider, the date and time of access, the search engines used, the country of access, the amount of data transferred, the names of downloaded files and the IP address.

The legal basis for processing is Article 6 (1) (f) GDPR. Our legitimate interest in storing log file data lies in ensuring system security, including investigating misuse. IP addresses are deleted after a maximum of seven days, unless they are required longer due to a security-relevant incident, e.g., for investigation or evidentiary purposes.

Contact requests :

 

When you contact us, we process your personal data such as name, address, email address, telephone number, etc., which we need to answer your inquiry.

The legal basis for the processing of your personal data in the context of contact inquiries is Art. 6 Para. 1 b) General Data Protection Regulation.

When you contact us, we will store your personal data for as long as necessary to process your request, plus a reasonable retention period for follow-up queries.

The provision of this personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. However, if you do not provide us with this data, we will not be able to respond to your contact request or, in the case of limited contact information, not be able to respond to it via all requested communication channels.

Registration/ Orders:

 

When you register or place an order, we process your personal data such as name, address, email address, telephone number, date of birth, self-selected user name, payment details, etc., which we need to fulfill the contractual relationship with you or to carry out pre-contractual measures that are carried out at your request.

We will store your personal data collected during registration or orders for as long as it is necessary to fulfill the contractual relationship (including, if applicable, the provision of the customer account) and/or to carry out pre-contractual measures at your request and/or with regard to warranty, guarantee or similar obligations and/or with regard to statutory retention periods.

The legal basis for the processing of your personal data collected during registration or orders is Art. 6 (1) (b) and Art. 6 (1) (c) of the General Data Protection Regulation.

The provision of this personal data is not required by law or contract. However, it is necessary for the conclusion of the contract, i.e., the registration or order, insofar as the relevant information is mandatory (rather than merely voluntary) in our registration/order process.

Newsletter:

If you subscribe to our newsletter, we will process the data collected, such as your email address, title, etc., for the purpose of sending the newsletter.

The legal basis for the processing of your personal data in the context of sending our newsletter is Art. 6 Para. 1 a) of the General Data Protection Regulation.

We store the personal data we need to send the newsletter until you revoke your consent to receive the newsletter.

If information is mandatory (rather than voluntary) when registering for the newsletter, we cannot accept your newsletter registration without this information.

• Use of cookies

In this section we inform you about the use of cookies on our website.

1. Description and functionality

Cookies are small text files that are stored on the user's computer and that enable an analysis of the user's use of the website.

1. Own cookies

We use cookies to make using the website easier and more convenient for visitors and to enable certain functions in the first place.

The legal basis for our processing of your personal data in connection with the use of cookies is Article 6 (1) (f) of the General Data Protection Regulation (“legitimate interest”). This legitimate interest arises from the purposes stated above.

When using cookies, we store your personal data for as long as necessary to make using our website easier and more convenient.

1. Third-party cookies

The website may also use third-party cookies to collect or receive information from our website and elsewhere on the internet and then use that information to provide, for example, web tracking services, rating services or targeted advertising.

When using cookies, your personal data will be stored for as long as necessary to achieve the purposes described above.

To the extent that data processing for the purposes described above is carried out with your consent, the legal basis is Article 6, paragraph 1 a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6, paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes stated above.

1. 
   d) Revocation/ objection/ settings

You have the option to revoke your consent to the setting of cookies or to object to data processing through cookies at any time by deleting the cookies in your browser settings.

You can also set your browser so that cookies are only accepted if you agree to this.

You can find further options for revoking, objecting to and/or managing your cookies here:

Regarding advertising cookies, you can block and/or manage many of them through the following services:

www.aboutads.info/choices/

www.youronlinechoices.com/uk/your-ad-choices/

www.networkadvertising.org/managing/o pt_out.asp

However, if you reject cookies, you may not be able to use certain website features, services, applications or tools.

• Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is typically transferred to a Google server in the United States and stored there. Google bases this data transfer on the EU Standard Contractual Clauses.

However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Unless cookies are only set on the website with your corresponding consent, you can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

The data processed as part of the use of Google Analytics is automatically deleted after 365 days.

To the extent that data processing is carried out with your consent, the legal basis is Article 6, paragraph 1 a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6, paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes listed below.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

• Rights of those affected

According to Article 15 of the General Data Protection Regulation, you have the right to request information about the processing of your personal data ("right of access of the data subject").

According to Article 16 of the General Data Protection Regulation, you have the right to request the rectification and erasure of inaccurate personal data concerning you ("right to rectification").

According to Article 17 of the General Data Protection Regulation, you can request the erasure of personal data concerning you if one of the reasons listed therein applies ("right to be forgotten").

Likewise, according to Article 18 of the General Data Protection Regulation, you have the right to request the restriction of the processing of personal data concerning you if one of the conditions listed therein applies ("right to restriction of processing").

According to Article 20 of the General Data Protection Regulation, you have the right to have personal data concerning you made available to you and to have this data transmitted to another controller ("right to data portability").

Revocation of consent: See section “Right of withdrawal” in this privacy policy.

Right of objection: See the “Right of objection” section in this privacy policy.

You have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority is ........................

• Right of withdrawal

 

You can revoke your consent to the processing of your personal data at any time, for example, by sending an email to the address mentioned above. This does not affect the legality of the processing carried out on the basis of your consent until the revocation.

 

 

• Right of objection

 

To the extent that our data processing is based on Article 6 (1) (f) GDPR (“legitimate interests”), you have the right to object to the processing of your personal data in accordance with Article 21 GDPR.

 

 

• Sharing your data

Unless already stated elsewhere in this privacy policy, we will pass on your personal data to the following additional recipients or categories of recipients

……..……….

…….…….….

…………..….

Unless already stated elsewhere in this privacy policy, we intend to transfer your personal data to the following third country or international organization.

……..……….

…….…….….

……………...

This privacy policy should be made accessible from every single page of the website via a “Privacy Policy” link.

You should remove information listed in this privacy policy, such as information about the third-party tool Google Analytics, if you do not use these tools, so that the explanatory value of this privacy policy is not diluted. Conversely, you should add information about third-party tools that you use but that are not covered by this privacy policy.

Contact details of the data protection officer only need to be provided if a data protection officer is required or has been voluntarily appointed. The name of the data protection officer does not need to be provided.

A data protection officer is required if at least 20 people in your company are constantly involved in the automated processing of personal data (i.e., they constantly work with personal data on computers – e.g., data of employees or customers). For details and other cases in which a data protection officer must be appointed, see here: https://www.lda.bayern.de/media/dsk_kpnr_12_datenschutzbeauftragter.pdf

The transmission of personal data, including, for example, the collection of personal data via a contact form, should be encrypted. A recognized encryption method is required.

Please note that when using contact forms, any information that is not required to process your contact request should only be provided voluntarily.

It should be noted that cookies that are not absolutely necessary for the use of a website, in particular cookies used for tracking and advertising purposes, may only be set if the users have actively given their informed consent.

Google bases the transfer of data to the USA on the EU standard contractual clauses. However, according to the data protection authorities, these are generally insufficient for data transfers to the USA without additional measures (see here ). What specific additional measures could remedy this situation has not yet been clarified. Apart from that, measures taken by the user alone would certainly not be sufficient. Accordingly, a use of the service (like many other services that transfer personal data to the USA) in compliance with data protection law is currently not possible. If you want to avoid the associated data protection risks, you should refrain from using the service.

For companies based in Bavaria, the Bavarian State Commissioner for Data Protection (BayLfD), Prof. Dr. Thomas Petri, is responsible. Postal address: PO Box 22 12 19, 80502 Munich, Germany, and street address: Wagmüllerstraße 18, 80538 Munich. An overview of the data protection supervisory authorities in the other federal states can be found at the following link:

https://www.datenschutz-bayern.de/infoquel/ds-inst/deutschland.html

When it comes to cross-border processing, the authority at the location of the main establishment has primary responsibility.

Please list here, if applicable, any recipients (including data processors) to whom you disclose personal data, e.g., shipping service providers, credit rating agencies, payment service providers, marketing service providers, etc. In practice, it is common practice not to specifically identify the recipients in question, but rather simply by type, e.g., "shipping service provider" or "payment service provider." However, if you want to be legally certain, you should identify the recipients by name/company name and address, where possible.

If you intend to transfer the data to a recipient in a third country (third countries are countries outside the EU and EEA states) or an international organization, you must explicitly inform the data subject of this.

Transfer to such recipients is permitted if there is an adequacy decision by the Commission that allows the data transfer to the country in question in accordance with Art. 45 (1) GDPR (adequate level of data protection).

A list of countries for which such an adequacy decision exists can be found here .

The data subject may also have to be informed whether or not such an adequacy decision exists.

If such a decision is missing – as is the case with the USA, for example – please let us know. The transfer may then still be permissible, for example, on the basis of appropriate safeguards pursuant to Art. 46 (including the so-called EU standard contractual clauses) or Art. 49 (1) (2) (including the consent of the data subject or the transfer is necessary for the performance of the contract).