Source: https://www.e15.shop/en/l/privacy
Timestamp: 2019-04-25 00:02:58+00:00

Document:
Please note: This English version is a translation of the original in German for informational purposes only. In case of a discrepancy, the German original will prevail.
When we say “we,” “us,” “our,” and “e15,” we are referring to the e15 Design und Distributions GmbH, filed in the commercial register in Frankfurt am Main, Germany under HRB 98376 (full address see below). When we use the term “online services” or “online service” we are referring to our website itself, one of our connected websites, applications, blogs, functions and contents as well as external online presences such as our social media profiles. With regard to the terminology used, e.g. “processing” or “controller” we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
meta- or communication data (e.g. device information, IP-addresses).
Visitors and users of our online services (hereinafter collectively referred to as users).
Financial transaction data (such as credit card, account details, etc.) will not be stored by us, as they will be forwarded to a service provider (a so-called "payment processor" or"payment service provider") for fulfilling the payment transaction. If you provide us with personal information through the contact form on our website, we will use that information to process your request and respond to your message. This data is stored with us.
The term “personal data” describes all information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). A natural person becomes identifiable if he is directly or indirectly, especially with the help of the assignment to an identifier such as a name, to an identification number (e.g. customer number), to location data, to an online identifier (e.g. cookie) or to one or more special features. Special features are those that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
“Processing” means any process or series of operations associated with personal data, with or without the aid of automated procedures. The term is very far-reaching and includes virtually every handling of data.
“Controller” means the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data.
In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 GDPR, the legal basis for the processing for the fulfillment of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 (1) lit. b GDPR, the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing in order to maintain our legitimate interests is Article 6 (1) lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as legal basis.
If, in the course of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them to them or otherwise grant them access to the data, this is done only on the basis of a legal permit. This is in accordance with Art. 6 (1) lit. b GDPR if we use data, e.g. as part of the fulfillment of the contract to payment or shipping service providers, you have consented, a legal obligation specifies to do so or based on our legitimate interests (for example, in the use of agents, web hosts, etc.).
If we process data in a third country outside the European Union (EU) or the European Economic Area (EEA) or in the context of the use of third party services or disclosure, or transmission of data to third parties, this will only be done if it is to fulfill our (pre-) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. GDPR. This means that the processing e.g. on the basis of specific guarantees, such as the officially acknowledged level of data protection (e.g. for the USA through the Privacy Shield) or compliance with officially recognized special contractual obligations (so-called “standard contract clauses”).
You have the right to ask for confirmation as to whether e15 is processing your personal information. If this is the case, you have the right to obtain information about this data as well as a copy of the data in accordance with Art. 15 GDPR. You also have the right to know the purposes of the processing, the categories of the personal data being processed, and the recipients or categories of recipients to whom your personal information has been disclosed or is being disclosed. You also have the right to know how long e15 plans to use, store and process your personal information or the criteria that determine that duration.
According to Art. 16 GDPR, you have the right to demand the completion of the data concerning you or the correction of the incorrect data concerning you.
In accordance with Art. 17 GDPR, you have the right to demand personal data to be deleted immediately or, alternatively, to require a restriction of the processing of data in accordance with Art. 18 GDPR.
You have the right to demand receiving the data concerning you that you have provided to us in accordance with Art. 20 GDPR as well as demanding it being forwarded to any other controller.
According to Art. 77 GDPR you have the right to file a complaint with the competent supervisory authority.
You have the right to withdraw granted consents in accordance with. Art. 7 (3) GDPR with effect for the future.
“Cookies” are small files that are stored on users’ computers. Different information can be stored within the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after his visit to an online service. Temporary cookies, or “session cookies”, are cookies that are deleted after a user leaves an online service and closes their browser. In such a cookie, e.g. the contents of a shopping cart are stored in an online store or a login status. The term “permanent” or “persistent” refers to cookies that remain stored even after the browser has been closed. With those permanent cookies the login status could be saved if users re-visit it after several days. Likewise, in such a cookie the interests of the users can be stored, which are used for range measurement or marketing purposes. A “third party cookie” refers to cookies that are stored by providers other than the controller for the online service (if it is only the controller’s cookie, then it’s called “first-party cookie”).
If users do not want cookies stored on their computer, they will be asked to disable the option in their browser’s system settings. Already saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online service.
According to legal requirements in Germany, some date must be stored for 6 years in accordance with § 257 (1) HGB (German trade law) (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) as well as for 10 years in accordance with § 147 (1) (German tax law) (financial books, records, management reports, accounting records, trade and business letters, tax documents, etc.).
We process data in the context of administrative tasks as well as the organization of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in fulfilling our contractual services. The processing principles are Art. 6 (1) lit. c. GDPR, Art. 6 (1) lit. f. GDPR. The processing affects customers, prospects, business partners and website visitors. The purpose and our interest in processing lies in administration, financial accounting, office organization, data archiving, ie tasks which serve to maintain our business activities, perform our tasks and provide our services.
When contacting e15 (for example, by contact form, e-mail, telephone or via social media), the information provided by the user for processing the contact request and its processing is processed according to Art. 6 (1) lit. b GDPR. User information can be stored in a Customer Relationship Management System (“CRM System”) or similar organizational tool.
Google will use this information on our behalf to evaluate the use of our online service by users, to compile reports on the activities within our online service and to provide us with further services related to the use of our online service. In this case, pseudonymous usage profiles of the users can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the IP address of the users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and only then shortened.
The IP address provided by the user’s browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly. In addition, users may prevent the collection by Google of the data generated by the cookie and related to its use of the online offer as well as the processing of such data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
For more information about Google’s data usage, settings and opt-out options, visit Google’s websites: https://www.google.com/intl/en/policies/privacy/partners (“Google Data Usage When You Use Our Partners Sites or Apps”), http://www.google.com/policies/technologies/ads (“Use of data for promotional purposes”), http://www.google.com/settings/ads (“Manage information Google uses to show you ads”).
The following consent (s) you may have given us expressly and we have recorded your consent. According to the German Telemedia Act, we are obliged to keep the contents of consent ready for retrieval at any time. You can revoke your consent(s) at any time with effect for the future.
I would like to register for future orders and ask for inclusion of my data in your customer database.
At any time you have the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing and a right to correct, block or delete this data. You can contact us at any time via e-mail to data@e15.com as well as to further questions on the subject of personal data.
We are happy to give you information regarding the processing of your personal data. If you have any questions that this privacy statement could not answer, please contact us at data@e15.com.

References: Art. 13
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 44
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 20
 Art. 77
 Art. 7
 § 257
 § 147
 Art. 6
 Art. 6
 Art. 6