Source: https://handlewithcare.international/fr/datenschutz/
Timestamp: 2019-04-26 16:27:22+00:00

Document:
This privacy statement clarifies the type, extent and purpose of processing personal data (hereinafter referred to as « data ») within our online offer and the associated websites, functions, contents and externally hosted online presences like social media profiles (hereinafter collectively referred to as “online offer“). the terminology used like “processing“ or “person in charge“, we explicitly refer to the definitions given in article 4 of the General Data Protection Regulation (GDPR).
« Pseudonymization“ concerns the processing of personal data to the extent that any personal data can no longer be allocated to a specific person concerned without the involvement of additional information, as long as these additional information is kept separately and subject to technical and organizational measures which guarantee that that the personal data cannot be allocated to an identified or identifiable natural person.
« Profiling“ concerns any kind of automated processing of personal data with the purpose of evaluating certain personal aspects in relation to a natural person, especially to analyze and predict aspects regarding the performance, economic situation, health, personal preferences, interests, reliability, abode or change of location of this natural person.
Provided we are processing data in a third country (i.e. outside of the European Union (EU) or the European Economic Area (EEA) or in case this happens within the utilization of third party services or by disclosure and transmission of data to third parties, this only occurs for the purpose of fulfilment of our (pre)contractual obligations, on the basis of your consent, on the basis of legal obligation or on the basis of our legitimate interest. Conditionally upon legal or contractual permissions, we process data or have data processed in a third country only in the presence of the particular preconditions given under Art. 44 ff. GDPR. This means the processing may occur on the basis of special guarantees, like the existence of an officially recognized data privacy standard similar to the GDPR (e.g. the “Privacy Shield“ for the US) or in compliance with particular, officially recognized contractual obligations ( so-called “standard contractual clauses“).
“Cookies“ are small files which are saved onto the users’ computers. Numerous pieces of information can be saved within cookies. A cookie primarily serves to safe user information (e.g. the device the cookie is saved on) during or after the visit of an online offer. Temporary cookies, “session cookies“ or “transient cookies“ are cookies which are deleted immediately after the user leaves an online offer or closes his browser. Such cookies safe the content of your shopping cart in an online shop or your login status for example. “Permanent“ or “persistent“ cookies are cookies which remain saved even after closing your browser. They serve to remember the login status for example, when users visit the website after several days again. Such cookies can also safe user interests useful for range measurements or marketing purposes. “Third-party cookies“ are cookies offered by providers not responsible for the online offer (cookies by the person in charge are referred to as “first-party cookies). We can deploy temporary and permanent cookies and hereby inform you with our privacy statement.
Among the processed data are the master data of our contractual partners (e.g: names and addresses), contact data (e.g. email addresses and telephone numbers) as well as contractual data (e.g. services delivered, contractual content, contractual communication, names of contact persons) and payment details (e.g. bank accounts, payment history).
Generally, we do not process any particular categories of personal data, except they are components of an assigned or contractual processing.
In the course of using of our online offer, we can save the IP address and time of the respective user action. Storage happens in accordance with our legitimate interest as well as the users’ interest for protection against misuse and other unauthorized utilization. Transferring data to third-parties does not happen generally, except necessary for the pursuance of our claims in accordance with Art. 6 Par.1 lit. f. GDPR or in case a legal obligation exists in accordance with Art. 6 Par. 1 lit. c GDPR.
In the course of using of our online offer, we can save the IP address and time of the respective user action. Storage happens in accordance with our legitimate interest as well as the users’ interest for protection against misuse and other unauthorized utilization. Transferring data to third-parties does not happen generally, except necessary for the pursuance of our claims in accordance with Art. 6 Par.1 lit. f. GDPR or in case a legal obligation exists in accordance with Art. 6 Par. 1 lit. c GDPR. The deletion of the data is carried out when it is no longer required for the fulfilment of contractual or legal obligations as well as the handling of possible warranty or other obligations. Storage necessity of personal data is reviewed every three years. Otherwise, the statutory preservation duties apply.
In the course of contractual fulfilment, we apply external payment service providers on the basis of Art. 6 Par. 1 lit. b. GDPR. We furthermore apply external payment service providers on the basis of our legitimate interest in accordance with Art. 6 Par. 1 lit. b. GDPR to offer our clients effective and secure payment methods. Among the personal data processed by the external payment service providers are inventory data, e.g. name and address, bank data, e.g. account number and credit card number, passwords, transaction numbers and checksums as well as contractual, amount and recipient-related information. This information is necessary to conduct the transaction. The personal data entered is thus only processed and stored by the external payment service provider. This means we do not receive any bank account- or credit card-related information, but solely information regarding the confirmation or cancellation/refusal of the payment. This data is eventually transmitted to credit agencies by the external payment service provider. This transmission serves the identity verification and credit assessment. To that end, we refer to the general terms and conditions and privacy terms of the external payment service provider. The payment transactions are subject to the terms and conditions and privacy terms of the respective external payment service provider and are retrievable from the respective websites or transaction applications. We also refer to these statements regarding any additional information and assertion of rights of revocation, rights of information as well as any other rights of the persons affected.
We process personal data in the course of administrative tasks like organization of our company, accounting and fulfilment of legal obligations, e.g. filing. Here we process the exact same data which we process in the course of fulfilling our contractual services. The legal foundation for processing the data are Art. 6 Par. 1 lit. c. GDPR and Art. 6 Par. 1 lit. f. GDPR. Processing affects customers, interested parties, business partners and website visitors. The purpose and interest of the data processing is in administration, accounting, office organization and filing of data, all of them tasks which serve the preservation of our business activities, carrying out our responsibilities and providing our services. Deleting data with regard to contractual services and contractual communication conforms to the activities mentioned under these processing operations.
We furthermore store information on suppliers, operators and other business partners on the basis of our business interests, e.g. for the purpose of contact at a later date. This predominantly company-related data is generally stored permanently.
Content of the newsletter: we dispatch newsletters, emails and other electronic notifications with promotional information (hereinafter referred to as « newsletter“) only with consent of the recipient or on the basis of legal permission. Provided the contents of a newsletter are specifically outlined during the course of registration, they are relevant for the user’s consent. Our newsletters furthermore contain information on our services and ourselves.
Termination/revocation: you can always terminate the subscription to our newsletter, i.e. revoke your consent. A link to terminate your subscription of the newsletter can be found at the very end of every newsletter. We can store the signed out email addresses for up to three years on the basis of our legitimate interests before deleting them in order to prove a previously given consent. Processing this data is limited to the purpose of a potential defense of claims. An individual request for deletion is possible at any time, as long as the existence of a previously given consent is confirmed.
The dispatch of our newsletters is carried out with help of the mail-handling service provider “MailChimp“, a newsletter dispatch platform from US service provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, United States. The privacy terms of the mail-handling service provider can be examined under the following link: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement and is thus guaranteeing to comply with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The mail-handling service provider is applied on the basis of our legitimate interest in accordance with Art. 6 Par. 1 lit. f. GDPR and a job processing contract in accordance with Art. 28 Par. 3 p. 1 GDPR.
The mail-handling service provider can utilize the personal data of the recipients in pseudonymous form, i.e. without allocation to a user for the optimization or improvement of his services, e.g. for technical optimization of the dispatch and the representation of the newsletter or for statistical purposes. The mail-handling service provider does not utilize the personal data of our newsletter recipients however, to directly contact them or to pass on their personal data to third parties.
We maintain online presences within social media networks and platforms in order to communicate with active customers, interested parties and users and to inform them about our services. When accessing these networks and platforms, the terms and conditions and privacy terms of the respective operator apply.
As long as not stated otherwise within our privacy terms, we process the data of the users when they communicate with us within the social networks and platforms, e.g. writing posts on our online presences or contacting us via messages.
This always requires that the third-party providers of these contents recognize the IP address of the user, as their contents cannot be send to the user’s browser without the IP address. The IP address is therefore necessary for the display of these contents. We endeavor to only apply such contents whose respective providers solely use the IP address for delivering their contents. Third-party providers can furthermore use so-called pixel tags (invisible graphics, also referred to as “web beacons“) for statistical reasons or marketing purposes. Pixel tags may help to analyze information like visitor traffic on the pages of this website. This pseudonymous information can also be stored in cookies on the device of the user and can contain technical information regarding the browser and operating system, linking websites, time of access as well as additional information regarding the use of our online offer and can also be linked to such information from different sources.

References: Art. 44
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28