Source: https://www.willows.world/content/8-privacy-policy
Timestamp: 2019-04-22 10:46:43+00:00

Document:
The careful handling of your personal data is a matter of great importance to us. Security and transparency have absolute priority. For this reason, we strictly observe the legal requirements of the EU General Data Protection Regulation (hereinafter: GDPR) when collecting, processing and using such data.
This page tells everything you should know about data protection at Delta Distribution GmbH (hereinafter DELTA Distribution). If you should nevertheless have any questions you can contact us at any time.
The body responsible for the collection, processing and use of your personal data within is Delta Distribution.
When initiating, concluding, performing and cancelling a contract of sale, including possible warranties given at a later date, we will collect, process and use your personal data according to the regulations of the GDPR.
The personal data that you send us, for instance when you make an order or in an email (e.g. your name and your contact data) will only processed in order to make contact with you and for the purpose for which you have provided us with. Should external service providers be involved in the execution of contract, e.g. Logistics companies or payment service providers, your data will be passed on to the extent required.
According to the regulations of the GDPR, you have various rights that you can assert against us. This includes, among other things, the right to object to selected data processing; in particular, data processing for advertising purposes.
Article 6 (1) (f) GDPR provides the legal basis for processing the IP address. Our legitimate interest derives from the purposes of data collection listed below. At this juncture, we would like to point out that from the data collected, no direct conclusions about your identity can be made nor are they drawn by us.
In order for this data not to get into the wrong hands, we encrypt it using the SSL method (Secure Socket-Layer). The use of the SSL method ensures that your data will be encrypted before it is sent to us in such a way that it cannot be reconstructed by a third party. This encryption method also ensures that your data is sent only to the server that requested the data.
To process your email address, we are obligated to send an electronic order confirmation due to a requirement in the Civil Code (BGB) (see Article 6 GDPR). We can assure you that we will not disclose your personal data to third parties unless the law obliges us to do so or you have previously given your explicit consent. When we engage the services of third parties in order to carry out and handle processing activities, we will strictly comply with the legal requirements of the GDPR.
Furthermore, when you visit our online shop a protocol will be kept in what are known as "log files" of the current IP address, date and time shown on your PC or laptop, the type of browser and the operating system of your PC or laptop as well as the pages you have viewed. We use this data in order to optimize our website and our shop and to make them more user-friendly. It is not possible for us to draw conclusions about your personal data and this is not our intention. The data is stored for a period of 30 days and then automatically deleted.
You can lodge an objection against future data processing for the aforementioned purposes at any time, free of charge, for any model of communication to which you object. Just send an email to hello@delta-dist.eu or send a letter to the address mentioned under RESPONSIBLE BODY & DATA PROTECTION OFFICER above.
If you file an objection, the affected contact address will be disabled from further advertisement processing. We would like to point out that in exceptional cases, even after receipt of your objection, it is possible that advertising material may continue to be delivered for a temporary period. This is due to the necessary lead time of advertisements and does not mean that we have not implemented your objection. Thank you very much for understanding!
Similarly, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our website again, it will automatically recognise that you have visited the site before and will implement any input or settings you previously applied, so that you don’t have to enter them all again.
If you have a customer account with DELTA Distribution and you are logged in, the information stored in cookies will be assigned to your customer account and saved.
are transmitted to a Google server in the US and stored there. The information is used to evaluate the usage of the website, to compile reports on website activity and to provide other services related to website and internet usage for the purposes of market research and tailor-made website design. This information may also be transferred to third parties if required by law or if those third parties are processing the data on Google’s behalf. Your IP address will never be merged with other data from Google. The IP addresses are rendered anonymous, so that identification and assignment is not possible (so-called IP masking).
We use Google Analytics including the features of Universal Analytics. Universal Analytics allows us to analyse the activities on our pages across devices (so-called cross-device tracking, for example, when you access via laptop and later via a tablet). This is made possible by assigning a pseudonymous user ID to a user. This kind of allocation occurs, for example, when you register for a customer account or when you sign into your customer account. However, no personal information is forwarded to Google. Adding additional features to Google Analytics with Universal Analytics does not entail any limitation or reduction of data protection measures such as IP masking or the browser add-on.
You may also prevent the collection of data generated by the cookie and relevant to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing this browser add-on.
For more information about privacy in connection with Google Analytics, please visit the Google Analytics website.
In order to provide you with the greatest possible ease while shopping, we offer you the option to permanently store your personal data in a password-protected customer account. The creation of a customer account is voluntary and is contingent on your consent in accordance with Article 6 (1) (a) GDPR. After setting up a customer account, no repeated data entry is necessary. You can also view and change the data stored in your customer account at any time.
In addition to the data requested from you while placing an order, you must provide a self-chosen password in order to set up a customer account. This, together with your email address, will be used to access your customer account. Please treat your personal access data confidentially and, in particular, do not make it accessible to unauthorized third parties. We cannot accept liability for misused passwords provided we are not responsible for the misuse. Please note that after leaving our website, you will remain logged in unless you actively log out. You have the option to delete your customer account at any time. Please note, however, that this does not mean that the data in the customer account shall be deleted, as we are bound by statutory retention periods.
Due to legal regulations, our website contains information that allows you to quickly contact our company and to communicate with us directly. If you contact us by email, via our contact form or by using the feedback button integrated on our site, the personal data you provide will be automatically saved. These include your name, your email address, your IP-Address and your message.
Such personal data transmitted by you to us on a voluntary basis will be stored for the purpose of contacting you or processing. No disclosure of this personal data to third parties shall take place. The processing of your personal data is carried out in accordance with Art. 6 (1) (b) GDPR.
You have the right to information about your personal data stored by us in accordance with Art. 15 GDPR. In particular, you are entitled to information about processing purposes, the category of personal information, the categories of recipients to whom your information has been disclosed, the projected retention period of your data, and the source of your data, if not collected directly from you.
You have the right to rectification, i.e. the right to correct inaccurate data or to complete correct, yet incomplete, data in accordance with Art. 16 GDPR.
You have the right to erase your personal data stored by us in accordance with. Art. 17 GDPR, except insofar as required by statutory and/or contractual retention periods. Other statutory obligations and/or rights for further storage are also to be observed.
You have the right to restrict the processing of your data in accordance with Art. 18 GDPR, provided that (1) the processing is unlawful and you oppose the erasure of the personal data, and instead request the restriction of their use, (2) the person responsible for the data no longer needs it, but you need it for the establishment, exercise or defence of legal claims, or (3) you have objected to processing in accordance with Art. 21 GDPR.
You have the right to data portability in accordance with Art. 20 GDPR, i.e. You have the right to receive selected data concerning yourself, which you have provided to us, in a commonly-used, machine-readable format or to request to have the personal data transmitted directly from one controller to another.
You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your place of residence or work, or of our company headquarters.
Under the conditions of Article 21 (1) GDPR, data processing can be objected to for reasons related to the concerned person’s particular situation.

References: Art. 6
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 21
 Art. 20