Source: https://en.sanha-shop.com/Privacy-Policy
Timestamp: 2019-04-26 06:37:29+00:00

Document:
So that you know who you can contact when about your data, we shall inform you who is legally responsible for the processing of data and who is the specific contact person when you want to discuss matters pertaining to yourself.
Basically, we only evaluate log data to remedy faults in the operation of our website or to clarify security incidents.
For troubleshooting or to preserve evidence in case of security incidents, it may be necessary for us to collect additional personal data with the log data. In these cases we base the processing of the log data on legal permission.
These processing operations are based on Art. 6 Para. 1 lit. f DSGVO (General Data Protection Regulation); our interest is the technical provision, security and optimisation of the site.
You can contact us using the contact form. The data entered there is sometimes required to enable communication and to deal with your concerns. In this case these are marked as mandatory fields. Other data that you provide us with facilitate addressing you personally or better or faster processing.
These processing operations are based on Art. 6 Para. 1 lit. b DSGVO.
You can subscribe to a newsletter on our website. We use the „double opt-in procedure“ to check whether registration for the newsletter has actually been made by the owner of an e-mail address. The newsletter is only subscribed if the owner of the e-mail address has expressly confirmed activation of the newsletter beforehand by clicking on the link in the confirmation e-mail and thus giving his express and individual consent. We log execution of the individual phases of the double-opt-in procedure as proof.
When you sign up to receive our newsletter and agree to receive it, your data will only be used to send the newsletter to you. You can revoke this consent at any time. Every newsletter contains a link to allow you to do this. We note your cancellation of the newsletter in our database.
These processing operations are based on Art. 6 Para. 1 lit. a GDPR.
Cookies cannot be used to launch programs or to transfer viruses to a computer. Cookies can only be read by the web server from which they originated.
Cookies that store certain user preferences (e.g. search or language settings).
Cookies that store data to ensure trouble-free playback of video or audio content.
Cookies that temporarily store certain user input (e.g. contents of a shopping cart or an online form).
Cookies used to identify or authenticate our users.
We store the data until the end of the duration of a particular cookie or until the cookies are deleted by you.
These processing operations are based on Art. 6 Para. 1 lit. f GDPR. Our interest is ongoing website optimisation and improving the ease of use.
This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; "Google"). Its use includes the operating mode "Universal Analytics". This allows assigning data, sessions and interactions across multiple devices to a pseudonymous user ID, thus analysing the activities of a user across devices.
To statistically record the use of our website and to evaluate it for the purpose of optimising our website, we also use Google conversion tracking. In doing so, Google AdWords will set a cookie (see paragraph 5) on your computer if you have reached our website via a Google ad.
These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the AdWords customer's website and the cookie has not expired, Google and the customer will be able to recognise that the user clicked on the ad and was redirected to this page.
Every AdWords customer receives a different cookie. Cookies cannot be tracked via the websites of AdWords customers. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers discover the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
Our website contains simple links to our online presence on different social networks. When you follow the link from our website to a social network or sign up to share our website's content with your social network, your data will be processed by the respective social network provider. Please refer to the privacy information of the respective provider for the purpose and scope of the data collection, the further processing and use of data by the provider of the social network as well as related rights and settings options to protect your privacy.
You can order goods on our website as a commercial customer. You have to register for this purpose. You can enter your data in an input mask as part of the registration. Personal data that we absolutely need are marked accordingly. Without this data, we cannot create an individual and functional account, making it impossible to place an order as the provision of this data is contractually necessary. We use this data to process the order initiated by you as desired and in accordance with the contract, in particular to arrange the invoicing, shipping and payment.
These processing operations are based on Art. 6 Para. 1 lit. b or lit. f (if the contracting party is not a natural person, but the data of his employees are processed) GDPR.
We will only transmit your data to these recipients if this is necessary to fulfil a contract with you or if there is a legitimate interest in the disclosure of your data or if we have your consent to provide the data.
Unless otherwise stated, we do not disclose your personal data to recipients who are located outside the EEA.
If data is transmitted, we shall ensure, through contractual or organisational measures, that the recipient either has an adequate level of data protection (e.g. based on a decision of adequacy by the EU Commission on the appropriate country or the so-called EU standard contractual clauses with the recipient) or if we have your consent to transmit the data.
Please contact our data protection officer for more information, especially regarding the measures taken.
If personal information is required to establish and conduct the business relationship and the associated contractual or legal obligations, you have to provide such information to enable us to meet our performance obligations or legal obligations. Without provision of the data, we may not be able to perform the service properly, fully or any longer. The provision of other data is neither contractually nor legally necessary. We will inform you in the appropriate places whether the provision is necessary when you use the website.
We will only store your personal information, if necessary, for a limited period of time and no longer than necessary. Basically, we will delete your data if it is no longer necessary for the purpose for which it was collected or if there are other legal reasons that require deletion.
If we are subject to statutory record retention requirements that require a longer storage period, we store the data for this period, in particular for the fulfilment of commercial and tax retention periods, which are between 2 and 10 years.
Other legal grounds for retention may include the provision of evidence for the duration of the applicable statute of limitations. These periods are usually between 2 and 30 years.
You have the following legal rights regarding your personal data. You can contact our data protection officer, also when you want to know more about what these rights entail in detail. As the legal details are quite complicated, we provide you with the most important information about the rights below. Please let us know how you want to receive the information. If you do not specify a preference, we usually reply to your query in the same form as the request. You will receive feedback within one month. In the request is manifestly unfounded or excessive, we are entitled to demand a reasonable fee or to refuse your request.
You have the right to request information about whether we process personal information about you or not. When we process your personal data, you will receive information about the specific data plus additional information.
You have the right to ask us to correct your data if it is incorrect, inaccurate and/or incomplete; the right to rectification includes the right to completion by supplementary statements or notifications.
You have the right to ask us to delete your personal data if there is no reason to store it.
You have the right to restrict the processing of your personal data in certain circumstances.
You have the right in certain circumstances to demand that your data be provided in a common electronic machine-readable data format. The right to transfer data includes the right to transfer the data to another controller; on request, we will - where technically feasible - transfer data directly to a person designated or to be designated by you. The right to transfer data exists only for data provided by you, and requires processing to be performed on the basis of consent or performance of a contract, using automated means.
If personal data is processed for the exercise of public interest tasks (Article 6 Para. 1 lit. e GDPR) or for the exercise of legitimate interests (Article 6 Para. 1 lit. f GDPR), you can refuse the processing of personal data related to you at any time with effect for the future if there is no reason for further processing.
If you have given us consent to process your personal data, you can revoke this consent at any time and without stating reasons with future effect. Please contact the contact point where you gave your consent or contact the data protection officer directly.
You have the right to lodge a complaint with the competent supervisory authority when it concerns processing of your personal data, Art. 77 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 77