Source: https://eolane-syscom.berlin/en/datenschutz
Timestamp: 2019-04-25 12:08:10+00:00

Document:
Personal data is any information that relates to an identified or identifiable natural person. A natural person well be considered as identifiable - either direct or indirect - in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, which does express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
Affected person is any identified or identifiable natural person whose personal data is processed by the repsonsible personsof our company.
Processing means performing any process related to personal data with or without automated processing related to personal data, such as collecting, organizing, storing, adapting or modifying, selecting, querying and using the data, with or without the aid of automated procedures as well as disclosure by submission, distribution or any other form of provision, reconciliation or association, restriction, deletion or destruction.
Restriction of the processing is the marking of filed personal data with the aim to limit its future processing.
Profiling is any kind of automated processing of personal data that serves to use personal information and to evaluate certain personal aspects relating to a natural person, particulary focusing on the analysis and prediction of aspects related to job performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or relocation of that natural person.
Pseudonymisation is the processing of personal data in a way that personal data can no longer be attributed to a person´s specific data without using additional information, as long as such additional information is kept separatly and subjected to technical and organizational measures ensuring that the personal data can not be assigned to an identified or identifiable natural person.
The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the person responsible.
Recipient is a natural or legal person, public authority, agency, company or other entity to whom Personal Data is disclosed, no matter if it is a third party or not. However, public authorities which may receive personal data under EU or national law as part of a particular inquiry on this are not considered receivers.
A third party is a natural or legal person, public authority, agency, company or body other than the affected person, the controller, the data processor or the persons authorized under the direct responsibility of the controller or the data processor to process the personal data.
A consent is any voluntarily given and unambiguously expressed act by the affected person in the form of a statement or other unambiguous confirmation on the particular case, by which the affected person indicates that she consents and accepts the processing of the concerned personal data.
Art. 6 para. 1 lit. A GDPR serves our company as the legal basis for processing operations where we obtain consent for a particular processing purpose. If the processing of personal data is necessary to fulfill a contract of which you are a party (e.g. in processing operations necessary for the supply of goods or the provision of any other service or consideration), the processing is based on Art. 6 para. 1 lit. b GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 lit. c GDPR. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. Then processing would be based on Art. 6 para. 1 lit. d GDPR. Finally processing operations can be based on Art. 6 para. 1 lit. f GDPR. On this legal basis, Data will be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’). The processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person prevail. Such processing operations are particularly allowed to us since they have been specifically mentioned by the European legislator. In that regard, a legitimate interest may be assumed, if you are a customer of our company (Recital 47, second sentence, GDPR).
This Web site uses an SSL or TLS encryption to ensure the security of the data processing and to protect the transmission of confidential content, such as orders, login details or contact requests that you send to us as the operator or user. An encrypted connection can be recognized by the fact that the address bar of the browser contains an "https: //" instead of an "http: //" and the lock symbol in your browser bar. If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.
4. to provide law enforcement with information necessary for prosecution in the event of a cyberattack.
This collected data and information is therefore on the one hand statistically evaluated by us and furthermore aims to increase data protection and data security in our company in order to ensure an optimum level of protection for the personal data we process. The data of the server log files are stored separately from all personal data provided by an affected person. The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest is shown in the data collection purposes listed above.
You have the opportunity to make a request on our website by providing personal information. Which personal data are transmitted to us, results from the input mask that is used for the transaction. The personal data entered by you will be collected and stored solely for internal use by us and for our own purposes. We may arrange a transfer of your data to a processor, such as a parcel service, who also uses the personal information solely for internal use attributable to us. By placing an order on our website, the IP address assigned by your Internet service provider (ISP), the date and time of the order are also stored. The storage of this data takes place against the background that only so the misuse of our services can be prevented, and these data in case of need make it possible to clarify committed offenses. In this respect, the storage of this data is required for our protection. A disclosure of these data to third parties is not, unless there is a legal obligation to pass on or the disclosure of law enforcement serves. Your order voluntarily providing personal information also serves to provide you with content or services that, due to the nature of the item, can only be offered to registered customers. You have the option to modify the personal data given at the time of registration at any time or to have it completely deleted from our database. We will give you information on request at any time about which personal data is stored about you. Furthermore, we correct or delete personal data at your request, as far as there are no statutory storage requirements. A data protection officer named by name in this data protection declaration and all other employees are available to the data subject in this context as a contact person. The processing of your data is done in the interest of a comfortable and easy use of our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DS GMO. The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of the contract, insofar as this is necessary for the delivery of the goods. We will pass on your payment details to the commissioned bank as part of the payment process, if this is necessary for the payment process. If payment service providers are used, we will inform you explicitly below. The legal basis for the transfer of the data is Art. 6 para. 1 lit. b DS-GMO.
We only transfer personal data to third parties if this is necessary in the course of the contract, for example to the companies entrusted with the delivery of the goods or the bank responsible for processing the payment. A further transmission of the data does not take place or only if you have expressly consented to the transmission. A transfer of your data to third parties without explicit consent, such as for advertising purposes, does not occur. The basis for data processing is Art. 6 para. 1 lit. b DS-GVO, which allows the processing of data to fulfill a contract or precontractual measures.
is transmitted to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purpose of market research and tailor-made website design.This information may also be transferred to third parties if required by law or if third parties process this data in the order.Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymized, so that an assignment is not possible (IP masking). You can prevent the installation of cookies by setting the browser software accordingly; however, we point out that in this case not all features of this website may be fully exploited. You have given your consent to this within the meaning of Art. 6 para. 1 lit. A GDPR via our opt-in cookie banner. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data from Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent detection by Google Analytics by clicking on the following link: Deactivate Google Analytics. An opt-out cookie, that will prevent the future collection of your data when visiting this website, will be set. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.For more information about privacy related to Google Analytics, see the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=en).
You have the right to ask us for confirmation of your personal data being processed.
You have the right at any time to receive free information from us about the personal data stored about you and to receive a copy of this data.
You have the right to demand the correction of incorrect personal data concerning your records. Furthermore, the affected person has the right to request the completion of incomplete personal data, taking into account the purposes of the processing.
You have the right to demand that the personal data concerning you is being deleted without delays, if applicable by law and processing is not required.
You have the right to demand that we restrict processing, if there are no other legal requirements valid in case.
You have the right to receive your personal data record provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another responsible entity without impediment by us (if we have been provided with the personal data from your side), if the processing is based on the consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and the processing is carried out by automated processes, unless the processing is not or no more necessary for the performance of a task in the public interest or in the exercise of official authority which has been entrusted to us. In addition, when exercising your right to data portability under Article 20 (1) of the GDPR, you have the right to obtain that your personal data will be transmitted directly from one controller to another, where technically feasible and as long as the liberties of any others are not affected.
For reasons arising from your particular situation, you have the right to contradict against the processing of personal data related to you, which have been pursued due to Art. 6 para. 1 lit. e (data processing in the public interest) or f (data processing based on a balance of interests) GDPR at any time. This also applies to a profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. If you refuse the processing, we will no longer process your personal information unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves the asserting, exercising or defending legal claims. In addition, you have the right, for reasons arising from your particular situation, to refuse to the processing of personal data concerning for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) of the GDPR unless such processing is necessary to fulfill a public interest task. Feel free, in the context of using any services of information societies, not withstanding Directive 2002/58 / EC, to exercise your right of refusal through automated procedures where technical specifications are used.
You have the right to complain to the Berliner Beauftragten für Datenschutz und Informationssicherheit, Friedrichstr. 219, 10969 Berlin (https://www.datenschutz-berlin.de/) about our processing of personal data.
We process and store your personal data only for the period required to achieve the purpose of the storage or as provided by the legislation and laws to which our company is subject. If the purpose of the storage is omitted or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
The criteria for the duration of the storage of personal data is the respective statutory retention period. After the deadline is passed, the corresponding data will be routinely deleted, if the data is no longer required to fulfill the contract or to initiate a contract.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 6
 Art. 6
 Art. 4
 Art. 89