Source: https://www.olympia-prohome.de/en/privacy-policy.html
Timestamp: 2019-04-26 16:40:34+00:00

Document:
We, Olympia Business Systems Vertriebs GmbH, are delighted at the interest you have shown in respect of our website, www.olympia-vertrieb.de, and the offers available on its pages.
The protection of your personal data is an important, major concern for us. Therefore, we would like to provide you with detailed information on the data we compile through your visit to our website and use of offers there, and how we subsequently process or use it. We would also like to explain the protective measures we have implemented in both a technical and organisational respect.
Although we, as the data controller, have implemented numerous technical and organisational measures for the processing of personal data, an internet-based data transfer can always have some security loopholes, meaning that absolute security cannot be fully guaranteed. Please take this into consideration when using our website.
In accordance with legal requirements, retention is necessary for six years compliant with § 257 Sec. 1 HGB (German Commercial Code) (account books, inventories, opening balance sheets, annual final statements, business letters, invoices, etc.) and for ten years compliant with § 147 Sec. 1 AO (German Revenue Code) (books, recordings, situation reports, invoices, commercial and business letters, etc.).
Each data subject has the right granted by the European legislator to obtain confirmation from the data controller as to whether or not personal data concerning him or her is being processed. If a data subject wishes to make use of this right of confirmation, they may contact us at any time.
Furthermore, the data subject has a right to obtain information as to whether personal data is transferred to a third country or to an international organisation. Where this is the case, the data subject has the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to make use of this right of access, they may contact us at any time.
Each data subject has the right granted by the European legislator to demand immediate correction of inaccurate personal data concerning them by the data controller. Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If a data subject wishes to make use of this right of correction, they may contact us at any time.
- the personal data was collected in relation to the offer of information society services referred to in Article 8 Sec. 1 of the GDPR (DSGVO).
If one of the aforementioned reasons applies, and a data subject wishes to request the deletion of personal data stored by Olympia Business Systems Vertriebs GmbH, they can contact us at any time. We will ensure that the request for deletion is complied with immediately.
If the personal data has been made public by Olympia Business Systems Vertriebs GmbH and our company is the data controller in the terms of Article 17 Sec. 1 of the GDPR (DSGVO) and therefore obliged to delete the personal data, Olympia Business Systems Vertriebs GmbH taking account of available technology and the cost of implementation, must take reasonable steps, including technical measures, to inform other data controllers responsible for processing the disclosed personal data that the data subject has requested deletion by such controllers responsible for any links to this personal data, or copies or replication of the personal data, insofar as processing is not required. We will take the necessary steps on a case-by-case basis.
If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by Olympia Business Systems Vertriebs GmbH, they can contact us at any time. We will then arrange restriction of the processing.
Each data subject has the right granted by the European legislator to receive the personal data concerning them that was provided to a data controller, in a structured, commonly used and machine-readable format. They have the right to transmit the data to another data controller without hindrance from the data controller to which the personal data has been provided, as long as the processing is based on consent pursuant to Article 6 Sec. 1 Point a of the GDPR (DSGVO) or Article 9 Sec. 2 Point a of the GDPR (DSGVO) or of a contract pursuant to Article 6 Sec. 1 Point b of the GDPR (DSGVO) and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
Furthermore, in exercising their right to data portability pursuant to Article 20 Sec. 1 of the GDPR (DSGVO), the data subject has the right to have personal data transmitted directly from one data controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
Each data subject has the right granted by the European legislator to object, on grounds relating to their particular situation, at any time, to the processing of personal data concerning them which is based on Article 6 Sec. 1 Point e or f of the GDPR (DSGVO). This also applies to profiling based on these provisions.
Olympia Business Systems Vertriebs GmbH may no longer process the personal data in the event of the objection unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defence of legal claims.
Where Olympia Business Systems Vertriebs GmbH processes personal data for direct marketing purposes, the data subject has the right to object to the processing of personal data concerning them for such marketing at any time. This applies to profiling to the extent that it is related to such direct marketing. Where the data subject objects to Olympia Business Systems Vertriebs GmbH regarding the processing for direct marketing purposes, Olympia Business Systems Vertriebs GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right to object to the processing of personal data concerning them by Olympia Business Systems Vertriebs GmbH for scientific or historical research purposes or for statistical purposes pursuant to Article 89 Sec. 1 of the GDPR (DSGVO) on grounds relating to their particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
The data subject can exercise their right to object by contacting us directly. In addition, the data subject is free in the context of the use of information society services and, notwithstanding Directive 2002/58/EC, to use their right to object by automated means using technical specifications.
- is not based on the explicit consent of the data subject.
- is based on the explicit consent of the data subject, Olympia Business Systems Vertriebs GmbH must implement appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, at least the right to obtain human intervention on the part of the data controller, to express their point of view and contest the decision.
If the data subject wishes to assert rights concerning automated individual decision-making, they can contact us at any time.
Each data subject has the right granted by the European legislator to withdraw his or her consent to the processing of their personal data at any time.
If the data subject wishes to assert the right to withdraw the consent, they can contact us at any time.
Each data subject can contact us directly and at any time with regard to queries and suggestions concerning data protection.
Each data subject affected by the processing of personal data has the right to appeal to a data protection supervisory body against the processing of their personal data by us.
Article 6 I lit. a of the GDPR (DSGVO) serves as the legal basis of the processing for Olympia Business Systems Vertriebs GmbH in cases where consent must be obtained for a certain processing purpose. If the processing of personal data is necessary in order to fulfil a contract where the contractual party is the data subject, Article 6 I lit. b of the GDPR (DSGVO) serves as the legal foundation. The same applies to processing operations which are necessary to complete precontractual measures, such as in cases of queries related to our services and products. If Olympia Business Systems Vertriebs GmbH is subject to a legal obligation which necessitates the processing of personal data, Article 6 I lit. c of the GDPR (DSGVO) serves as the legal foundation. In rare cases, the processing of personal data may be necessary in the vital interests of the data subject or to protect another natural person. In such cases, processing is based on Article 6 I lit. d of the GDPR (DSGVO). Processing operations could also be based on Article 6 I lit. f of the GDPR (DSGVO). This legal foundation is used for processing operations which are not covered by any of the previous legal foundations in cases where processing serves for protecting a legitimate interest of Olympia Business Systems Vertriebs GmbH or a third party, and if the interests, fundamental rights and fundamental freedoms of the data subject do not override the first-mentioned interest. Such processing operations are permitted by us because they are explicitly mentioned by the European legislator (cf. Recital 47 Sentence 2 of the GDPR (DSGVO)).
In cases where you use the details provided on our website (such as our e-mail address or fax number) to contact us, the personal data you enter to do this is only processed for the purpose of establishing contact.
Where the reason for your contact is an interest in our services or products or in the fulfilment of a contract drawn up with us, Article 6 Sec. 1 lit. b of the GDPR (DSGVO) serves as the legal foundation. In all other cases where you make contact, we have an overriding interest pursuant to Article 6 Sec. 1 lit. f of the GDPR (DSGVO) regarding data processing due to the communication initiated by you.
We store the data required for processing contracts until the legal guarantee and, if necessary, contractual warranty deadlines have expired. We store the commercial and tax-related data required for legally defined periods, normally ten years (cf. § 257 HGB (German Commercial Code) , § 147 AO (Revenue Code)). The data processed in order to complete precontractual measures is deleted as soon as the measures have been completed and it is clear that a contract will not be concluded.
The personal data stored by us for legitimate interests is stored until the purpose of establishing contact has been achieved. You have the right to revoke data processing performed on the basis of Article 6 Sec. 1 f) of the GDPR (DSGVO) and not for the purpose of direct mailing for reasons which result from your particular situation, at any time. In the case of direct mailing, you can revoke processing without specifying any reasons.
Recipients of personal data processed according to this regulation are IT service organisations (particularly hosts) with which we have a corresponding order processing agreement in accordance with Article 28 of the GDPR (DSGVO).
We compile and process personal data from applicants for the purpose of completing application processes and, thus, based on a precontractual measure in the terms of Article 6 Sec. 1 lit. b of the GDPR (DSGVO) and our legitimate interest pursuant to Article 6 Sec. 1 lit. f of the GDPR (DSGVO) in employing staff.
Processing can be completed in electronic form, e.g. if an applicant submits application documents to us in electronic form, such as per e-mail or via our contact form. If we draw up an employment contract with an applicant, the data submitted for the purposes of processing the employment relationship is stored taking any legal regulations into account. If the data controller does not draw up an employment contract with the applicant, the application documents will be deleted manually two months after the rejection decision has been announced, provided that deletion does not prejudice any other legitimate interests of the data controller. Other legitimate interest in the terms related here is, for example, a burden of proof in a process pursuant to the German Equal Treatment Act (AGG).
Due to the digitised nature of the application data submitted, recipients of the processed personal data are our IT service organisations (particularly hosts) with whom we have concluded the appropriate data processing agreements in the terms of Article 28 of the GDPR (DSGVO).
The scope and type of acquisition and use of your data differs according to whether you visit our website simply to view contents for informational purposes or whether you want to take advantage of services we offer, e.g. on concluding a contract on the website.
(2) The data processed according to Sec. 1 of this regulation will be stored for the specified purpose for a period of max. 30 days and then deleted.
(3) In addition to the data previously mentioned, our cookies will be stored on your computer during the course of the using the website. This occurs due to our legitimate interest pursuant to Article 6 Sec. 1 lit. f of the GDPR (DSGVO) in optimisation and economic operation of our online service. Cookies are small text files which are stored on your hard disk and assigned to the browser you use and enable certain information to be copied by us to the location on your computer defined by the cookie. Cookies cannot execute a programme or transfer viruses to your computer. They serve to make the overall online service more user-friendly and effective.
b) Transient cookies are automatically deleted when the browser is closed. They mainly include the session cookies. These store a so called session ID via which various queries from your browsers can be assigned the basic session. This means that your computer is recognised again when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a prescribed time which can vary according to the cookie and can cover several years. You can delete the cookies in the Security Settings of the browser at any time.
d) You can configure your browser setting according to your needs and, for example, reject the acceptance of third-party cookies or all cookies. We would like to point out that in such cases, you may not be able to exploit all the functions of the website to the full.
(5) Recipients of personal data processed according to the above paragraphs are IT service organisations (particularly hosts) with which we have corresponding order processing agreements in accordance with Article 28 of the GDPR (DSGVO).
This website uses the Matomo (www.matomo.org) analytic tool which is operated by InnoCraft Ltd., 150 Willis St, 6011 Wellington, Neuseeland, ("Mataomo") which acquires and stores data based on our legitimate interest in a web analytic service for statistical evaluation of user behaviour for optimisation and marketing purposes pursuant to Article 6 Sec. 1 lit. f of the GDPR (DSGVO).
Data collected in this way could be used, for the same purpose, to create and evaluate pseudonymised usage profiles. Cookies can be implemented for this. Cookies are small text files which are stored locally in the buffer memory of the internet browser of the website visitor. Cookies enable recognition of the of the internet browsers, amongst other things. Data collected using Matomo technology (including your pseudonymised IP address) will be processed on our servers.
The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data concerning the bearer of the pseudonym.
If you do not agree with the storage and evaluation of this data from your visit, then you can subsequently object to the storage and use at any time with a click of the mouse. In this case, a so-called opt-out cookie is stored in your browser, with the result that Matomo does not collect any session data. Please note that the complete deletion of your cookies will result in the opt-out cookie being deleted as well and possibly re-activated by you.
On the basis of our legitimate interests (ie interest in the economic operation of our online offer as defined in Art. 6 (1) lit. DSGVO), we use the Google AdWords service of Google Inc., 1600 Amphitheater Pkwy, Mountain on our website View, CA 94043-1351, USA.
Google AdWords is an Internet advertising service that allows advertisers to run both Google search engine results and the Google Network. Google AdWords allows an advertiser to pre-set certain keywords that display an ad on Google's search engine results only when the user searches for a relevant search result through the Google search engine.
The purpose of Google AdWords is to promote our site by displaying interest-based advertising on third-party websites and in Google search engine results, and to display advertisements on our website. If an affected person reaches our website via a Google ad, a so-called conversion cookie will be placed on the data subject's device by Google Inc., which will expire after thirty days and will not identify the data subject. If the conversion cookie has not expired yet, the conversion cookie will check whether certain subpages have been accessed on our website. The conversion cookie allows both us and Google to understand whether an affected person who came to our website via an AdWords ad generated revenue, ie, completed or canceled a purchase.
The data and information collected through the use of the conversion cookie are used by Google to create visitor statistics for our website. These visit statistics are then used by us to determine the total number of users who have been sent to us through AdWords ads, in order to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future , Neither our company nor any other Google AdWords advertiser receives any information from Google that could identify the data subject. By means of the conversion cookie personal data, such as the internet pages visited by the affected person. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States. This personal information is stored by Google in the United States. Google may share this personal information with third parties.
The data subject can prevent the setting of cookies through our website, at any time by means of an appropriate setting of the Internet browser and thus permanently contradict the setting of cookies. Such a setting of the Internet browser would also prevent Google from setting a conversion cookie on the affected person's device. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software.
Where you want to take advantage of the services offered on our website, such as orders from our online shop which are subject to charges or use of our contact form, it is necessary that you enter more personal data. For further details, please refer to the following provisions.
(1) The personal data, which you provide during the ordering process, is necessary in order to conclude a contract with us (e.g. information on contractual party) or is legally necessary (e.g. tax regulations). A failure to provide the personal data means that a contract cannot be drawn up with you. In the case of some payment procedures, we need the necessary payment data in order to refer you to a payment service commissioned by us.
If you send an e-mail to us prior to concluding a contract, submit a query via a contact form or conclude a contract via our website, we process the data received to complete the precontractual measures and answer you queries in respect of our services and products, for example.
The processing of the data you have provided is completed for the purpose of fulfilling the contract or completing precontractual measures pursuant to Article 6 Sec. 1 b of the GDPR (DSGVO) and fulfilling legal obligations pursuant to Article 6 Sec. 1 c of the GDPR (DSGVO).
(2) The recipients of this personal data processed according to these regulations are payment services, shipping services, IT service organisations (particularly hosts), if necessary merchandise management system, if necessary suppliers (drop shipping) with whom we have drawn up the corresponding order processing agreements in accordance with Article 28 of the GDPR (DSGVO).
(3) We store the data required for processing contracts until the legal guarantee and, if necessary, contractual warranty deadlines have expired. We store the commercial and tax-related data required for legally defined periods, normally ten years (cf. § 257 HGB (German Commercial Code) , § 147 AO (Revenue Code)). The data processed in order to complete precontractual measures is deleted as soon as the measures have been completed and it is clear that a contract will not be concluded.
(1) During the voluntary use of our Online Service Form - Cash Register Support, you are requested to provide information on your forename, surname, your e-mail address, if necessary your telephone number and the reason for your query / contact (message). A compulsory field for your query is simply your e-mail address. The information is acquired and stored purely with the aim of replying to your query.
(2) When you register, we store the IP address used and the time of the registration. The purpose of the process is to prove your query and, if necessary, be able to clarify any possible misuse of your personal data.
(3) The legal basis for the processing of your personal data is the consent explicitly granted by you in accordance with Article 6 Sec. 1 lit. a of the GDPR (DSGVO) as well as our legitimate interest pursuant to Article 6 Sec. 1 lit. f of the GDPR (DSGVO) in answering your query regarding our services and offers as well as providing proof of any possible misuse of the e-mail address used. Also, the legal basis for processing your personal data is Article 6 Sec. 1 lit. b of the GDPR (DSGVO) because the query serves to complete precontractual measures.
(4) Following your confirmation, we store the information you have provided via the contact form until the purpose of your query has been fulfilled. The personal data beyond that which is stored compliant with Sec. 2, is stored for maximally one month following receipt of confirmation.
(5) Recipients of personal data processed according to these regulations are IT service organisations (particularly hosts) with which we have corresponding order processing agreements in accordance with Article 28 of the GDPR (DSGVO).
(1) During the voluntary use of our Online Service Form - Service Support, you are requested to provide information on your forename, surname, your e-mail address, if necessary your telephone number and the reason for your query / contact (message). A compulsory field for your query is simply your e-mail address. The information is acquired and stored purely with the aim of replying to your query.
e-mail address used. Also, the legal basis for processing your personal data is Article 6 Sec. 1 lit. b of the GDPR (DSGVO) because the query serves to complete precontractual measures.
(1) During the voluntary use of our Contact Form, you are requested to provide information on your forename, surname, your e-mail address, if necessary your telephone number and the reason for your query / contact (message). A compulsory field for your query is simply your e-mail address. The information is acquired and stored purely with the aim of replying to your query.
(3) Following your confirmation, we store the information you have provided via the contact form until the purpose of your query has been fulfilled. The personal data beyond that which is stored compliant with Sec. 2, is stored for maximally one month following receipt of confirmation.
(4) Recipients of personal data processed according to these regulations are IT service organisations (particularly hosts) with which we have corresponding order processing agreements in accordance with Article 28 of the GDPR (DSGVO).
(1) By providing your consent and specification of your e-mail address, you can subscribe to our Newsletter with which we can inform you of all our latest information and offers. The goods or services purchased are specified in the declaration of consent. The compulsory field for sending our newsletter is simply your e-mail address.
(2) To register for our newsletter, we use the so called double-opt-in process. This means that, following your registration, we send an e-mail to the e-mail address specified in which we request confirmation that you want the newsletter delivered to you. If you do not confirm your registration within 24 hours, your data is blocked and automatically deleted after one month. Furthermore, we store the IP addresses used and the time stamp for the registration and confirmation. The purpose of the process is to prove your registration and, if necessary, be able to clear any possible misuse of your personal data. Following confirmation of the newsletter, we store the information you provided in accordance with Sec. 2 for the purpose of sending the newsletter and providing proof of a possible misuse of your e-mail address in accordance with Sec. 2.
(3) Furthermore, we complete a performance measurement by enclosing a so called "web beacon" with every newsletter, i.e. a pixel-sized file which is downloaded by our server when the newsletter is opened. Within the scope of this download, information is compiled on the browser you are using, the ID of the click, details of your e-mail address and concrete e-mailing, your IP address or DNS name and the time of the download. This information is used for technical improvement of the services according to the technical data, or target groups and their reading habits according to the location of viewing (determined with the aid of the IP address) or the access times. The statistical analyses also includes determining whether the newsletters are opened, when they were opened and which links were clicked. Due to the technology used, this information could be assigned to the individual newsletter recipients. However, it is not our intention to observe individual users. The evaluations serve to provide us with information to determine the reading habits of our users and adapt our newsletter contents to the users or supply different contents according to the different interests of the users.
(4) The legal basis for the processing of your personal data is the consent explicitly granted by you in accordance with Article 6 Sec. 1 lit. a of the GDPR (DSGVO) and, with regard to the data processed pursuant to Sec. 2, our legitimate interest pursuant to Article 6 Sec. 1 lit. f of the GDPR (DSGVO) for a performance measurement of our advertising efforts and as well as providing proof of any possible misuse of the e-mail address used.
(5) You can revoke your consent to receipt of the newsletter and cancel the newsletter at any time. To revoke the subscription, simply click on the link provided in every newsletter e-mail or send an e-mail to datenschutz@olympia-vertrieb.de or send a message to the contact address stipulated in the Legal Notice.
(6) Your e-mail address is only stored for the newsletter distribution for the duration of the requested registration. The other data, stored in accordance with Sec. 1, will be deleted maximally one month after you have deregistered.
(7) Recipients of personal data processed according to these regulations are IT service organisations (newsletter service, particularly hosts) with which we have corresponding order processing agreements in accordance with Article 28 of the GDPR (DSGVO).
telephone number and the reason for your query / contact (message). A compulsory field for your query is simply your e-mail address. The information is acquired and stored purely with the aim of replying to your query.

References: § 257
 § 147
 § 257
 § 147
 Art. 6
 § 257
 § 147