Source: https://bindit.de/pt-pt/protecao-de-dados-pessoais/
Timestamp: 2019-04-25 22:26:45+00:00

Document:
We will solely process your personal data (e.g. title, name, email address, telephone number, bank account details, credit card number) in accordance with the framework of German data protection regulations and the General Data Protection Regulations of the European Union (EU – GDPR). The following provisions will provide you with information about the purpose of processing, who receives your data, legalities, period of data storage, as well about your rights and information about those processing your data. This data protection statement refers exclusively to our website. If you follow links from our webpages to other pages outside of our website, please check these sites for their specific data protection policies.
The following data will be registered on our server log files: website visit, time of access, amount of data transferred in bytes, source / link from where the website was accessed, and the browser, operating system and IP-address used to access the site.
Your collected data is only used for statistical analysis and to help us improve our website. However, the website operator reserves the right to check server log files in cases where there is a concrete indication of unlawful use.
The personal data that you have made available to us during the ordering process is necessary to conclude a contract with us. Without receiving information about your address, we will not be able to send your order to you. For many of our payment processes, it is necessary to transfer your payment data to a third party as it is required by our subcontractor who provides us with payment services (Novalnet AG Finanzdienst-leistungsinstitut (BA), Gutenbergstr. 2, 85737 Ismaning). The personal data collected during the ordering process is necessary for carrying out your contracted order.
If you contact us before the contract has been concluded via email, through a contact form, etc. with a request, the thereby stored data will solely be used to process your request, to contact you about the necessary measures to be taken to complete your order, or to answer questions about our products.
The legal basis for data processing is delineated in Article 6 § 1 point (b) of the EU-GDPR.
Those who may receive your data fall under the categories of: payment service suppliers, delivery service suppliers, hosting operators, or when applicable, merchandise management systems.
The personal data that is necessary to carry out your contracted order will be stored in accordance with the statutory storage time limits and when applicable, until the contract guarantee period has ended.
The data that is required by the statutory regulations regarding warranties and if applicable, guarantee periods, will be stored until the statutory limits have expired.
Data that is required by commercial and tax laws will be stored for the period deemed by law, as a rule, for ten years pursuant to §257 of the German Commercial Code (HGB) and §147 of the German Tax Code (AO).
After the expiration of the storage period, a routine deletion of the data is performed as long as the data is no longer necessary for purposes of initiating or fulfilling a contract.
Your image data (photographs) will strictly be used within the framework of statutory regulations.
Your photographs will only be used to create your photo albums and will be subsequently deleted after a holdback period of a few weeks in case of reclamations.
Please note: the created album and the photographs that were uploaded using the Online Designer to create said album will not be automatically deleted. You can delete individual photos or an entire album, including all photos used to create it, by using the Online Designer.
In order to make the website more attractive for the user and to make the usability of particular functions possible, we make use on various webpages of so-called ‘cookies.’ Cookies are small text files that are put on your computer when you are browsing through our web pages. These cookies make it possible to, for example, put more than one product in the shopping cart or to recognize your browser on your next visit. Cookies also make it possible to save your customer account passwords permanently.
Our justifiable interest is the functionality of our website. The data collected through the installation of technically required cookies and the permanent cookies described here, will not be used to compile user profiles. In this way, your data protection interests can be ensured.
Some of the installed cookies expire after you close your browser (these are so-called session cookies). Other cookies remain on your device and enable your browser to be recognized upon your next visit (these are so-called persistent cookies).
If you do not want have these cookies stored, you need to deactivate the storage of cookies in your internet browser configuration. Please be aware that when you refuse to accept cookies, the usability of our website may be impaired. Permanent cookies can also be deleted over your browser.
Under http://www.google.com/intl/de/analytics/privacyoverview.html, you can access general information about Google Analytics and data protection. We would like to point out that on this website, Google Analytics with the code “gat._anonymizelp();” will make your IP address anonymous (so-called IP masking) to guarantee your privacy.
The website will continue to use the Google +1 button which is linked to Google Plus. This function is operated by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). When you visit a page that has a +1 button, a direct connection between your browser and the Google server is established. The website operator does not have any influence on the nature and scope of data which is transferred through the plug in to the Google server. According to Google, Inc., if you click on the +1 button while you are logged on to Google +, the contents of the page will be collected and connected to your personal profile account only after you click on the +1 button. Also, the IP addresses of users will be directly recognized and assigned to your account.
If you would like to object the storing and linking your data to your personal account by Google Inc., log out of Google before using this website.
When you visit one of our webpages that contains such a plug-in, your browser makes a direct connection to Facebook’s servers. Facebook will transmit the contents of the plug-in directly to your browser and embed it in the website. Through embedded plug-ins, Facebook receives data pertaining to correlating information you call up on our website – even if you do not have a Facebook account or are not logged in to your Facebook account at the time. This information (including your IP address) is transmitted over your browser directly to a Facebook server in the USA and stored there. If you are logged into Facebook, Facebook can associate this information with your Facebook account. When you interact with the plug-ins (for example, by clicking the ‘like’ button or leaving a comment), the corresponding information is transmitted directly from your browser to Facebook, where it is saved. The information is also posted on Facebook and can be seen by your Facebook friends.
One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND). If you visit a page that contains such a function, a direct connection between your browser and the Twitter server will be established. The website operator has no influence over the nature and the scope of the data that is transferred to Twitter’s server through the plug in.
When you contact the website operator through the contact possibilities offered on the website, the personal data that you have made available will be stored in order to refer to it when processing and answering your request. This information cannot be transferred to a third party without your consent.
When you leave a comment or a forum contribution, your IP address will be stored. This is necessary for the security of the website operator – if your text infringes upon any laws, the operator must be able to trace your identity.
With the following notices, will explain the topics concerning our newsletter, as well as our registration, delivery and statistical analysis and your right to object to the collection of your personal data. When you subscribe to our newsletter, you have given your consent to receiving said newsletter and have been thus informed and have consented to the other processes described hereafter.
When you register for our newsletter, your email will be used for advertising purposes. Therefore, within the framework of the newsletter, we will inform you particularly about our product range. For statistical purposes, we can also analyze what links have been clicked on in the newsletter. However, the concrete identity of an individual who clicked on an item remains anonymous. You have given your consent expressly either specifically or during the process of ordering by clicking on: subscribe to newsletter.
Registration for our newsletter is done with a so-called double opt-in process. After subscribing, you will receive a confirmation email and you will be asked to click on a link to verify your registration. This confirmation is necessary to ensure that no one can register email addresses that are not their own.
The newsletter registration is protocolled to ensure that the registration process fulfills legal requirements. In this process, the time of registration and confirmation will be noted along with your IP address.
Those who may receive your data could also fall under the category of a newsletter dispatch service supplier.
Your email address will be only be used for sending the newsletter to you and only stored as long as you are a subscriber.
You can revoke your consent for future dissemination at any time. If you no longer wish to receive the newsletter, you can unsubscribe using the ‘unsubscribe’ link given in the newsletter.
When your personal data has been processed by us, you are a “data subject” as understood in the General Data Protection Regulation of the European Union (EU-GDPR) and as such, you are afforded the following rights from us as the responsible processors of your personal data, i.e. the controller.
You can request a confirmation from the controller verifying if personal data about you as the data subject is being / has been processed by Bindit.
(7)	the right to any available information about the source of the data in the event that personal data has not been collected from you as the data subject. Furthermore, you also have the right to request information from us as to whether your stored or collected personal data has been transferred to a third country or international organization. In this context, you have the right to request an appropriate guarantee pursuant to Article 46 EU-GDPR and in relation to this, to be advised of such transference.
You have the right to require us to rectify and / or complete the data you have provided as the responsible processor of your data when the processed personal data that concerns you is incorrect or incomplete. In this case, we will immediately undertake the necessary rectifications.
(4) where a request for the processing of personal data to be restricted has been made under Article 21 §1 EU-GDPR and it is not clear whether the legal grounds for the processing by the responsible controller override those of the data subject.
(6) the personal data has been collected in relation to the offer of information society services referred to in Article 8 § 1.
If we, as the responsible party for the processing of your personal data, have made your personal data public and are therefore obligated to erase the personal data pursuant to Article 17 §1 EU-GDPR, we will take appropriate measures as far as available technology and the costs of implementation allow, and including technical measures, to inform controllers processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of this personal data.
If you have exercised the right of rectification, erasure or restriction of processing as the data subject to us as the controller, i.e. responsible party for processing your data, then we are obligated to communicate the rectification, erasure or restriction to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right as data subject to be informed about those recipients by Bindit, as the controller, and we are obligated to do so upon your request.
(2) the processing is carried out through automated means.
In exercising this right, you have the further right to have the personal data in question be transferred directly from one controller to another in as far as this technically feasible. The rights and freedoms of third parties shall not be adversely affected thereby. The right of data portability shall not apply to the processing of personal data that is necessary for the performance of a task that is carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right to object to the processing of your personal data on grounds related to your particular situation and at any time, based on Article 6 §1 point (e) or (f), including profiling based on those provisions.
We, as the controller, i.e. the party responsible for collecting and / or storing your personal data, shall no longer process said data in accordance with your right to object unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. When you, as the data subject, object to processing your personal data for direct marketing purposes, then your personal data shall no longer be processed for such purposes.
You have the right to rescind your data protection declaration of consent at any time. The legality of the processing of your personal data carried out after you gave your consent until receipt of your revocation remains valid.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the regulations set forth in EU-GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 or the EU-GDPR.

References: § 1
 §257
 §147
 §1
 § 1
 §1
 §1