Source: http://www.berlinerbrandstifter.com/en/privacy-policy/
Timestamp: 2019-04-24 12:49:24+00:00

Document:
is responsible within the confines of Art. 4 para. 7 of EU Regulation 2016/679, called the General Data Protection Regulation (GDPR), and other national data protection laws of the Member States as well as other provisions of data protection law.
You can visit us (the websites of the Berlin Brandstifter GmbH) without telling us who you are. When you visit our website, your browser automatically transmits various data, see below „IV. Provision of the website and creation of „log files“. This information is evaluated purely for statistical purposes and then deleted. Our services are reserved for adult visitors.
Personal data is only collected on our website if you provide it to us of your own accord (e.g. as part of the order process). We use this data exclusively for the purposes stated in each case, as listed below.
We contractually bind external service providers who process personal data for us, so-called contractors, in accordance with Art. 28 GDPR. The contractors have been carefully selected by us, specifically commissioned and are bound by our instructions. States outside the European Union/European Economic Area are designated as third party countries by the GDPR. The transfer of data to these countries is regulated separately in accordance with Articles 44 to 49 GDPR. In some cases we use contract processors in third countries and name them below. For the USA, the EU Commission has determined the adequacy of the data protection level there in accordance with Art. 44 para. 3 GDPR for the EU-US Privacy Shield (C(2016) 4176 final). Our contract processors in the USA are certified according to this.
We maintain current technical measures to guarantee the protection of personal data. These are adapted to the current state of the art in each case.
The processing of personal data is also legal pursuant to Art. 6 para. 1 lit. f) if it is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail, in particular if the data subject is a minor.
Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer: domain, visitor’s IP address, HTTP method (GET/POST), file accessed, HTTP response, response size, visitor’s user agent.
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The deletion takes place after 8 weeks according to the statement of our hosting service provider.
Processing is carried out by our hosting service provider ONE.COM (B-one FZ-LLC), Dubai, UAE, represented in Europe by One.com A/S, Copenhagen, Denmark. The servers for the storage of personal data are located in Denmark, the processing of the data takes place exclusively within the EU. There is an order data processing agreement between us and ONE.COM.
Insofar as our log files mean the processing of personal data, the legal basis is Art. 6 para. 1 lit. b, lit. f GDPR.
Temporary storage of the IP address by the system is necessary within the meaning of Art. 6 para. 1 lit. b GDPR to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for its duration. The repeated automated reading of the web pages (so-called scraping) is also made more difficult by recording the IP address. The storage of data in the event of an error is required within the meaning of Art. 6 (1) (f) GDPR in order to ensure the website’s operability.
The collection of data for the provision of the website is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
The websites use so-called cookies in several places. They serve to make our offer more user-friendly and effective. Cookies are small text files that are stored on your computer and saved by your browser. Some of the cookies we use are so-called „session cookies“, which are automatically deleted when you close your browser. In addition, there are some persistent cookies that we use to recognize you as a visitor. Cookies do not cause any damage to your computer and do not contain any viruses. If you do not wish cookies to be installed, you can deactivate the acceptance of cookies in your browser. However, we would like to point out that you may not be able to use our website in full with deactivated cookies.
The user data collected in this way is pseudonymised by technical precautions. Therefore, it is not possible to assign the data to the calling user as a person. The data will not be stored together with other personal data of the user, unless otherwise described below.
You can find more information about Google at http://www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and data protection). Google offers an extension for web browsers (Add-On) to prevent data collection by Google Analytics and processing of this data by Google. The add-on can be downloaded and installed at https://tools.google.com/dlpage/gaoptout at your own risk.
The analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimize our offer. We recognize which advertising measures caused our websites to be visited (so-called conversion tracking). We can determine in relation to the data of the advertising campaigns how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, to make our website more interesting and easier for you and to achieve a fair calculation of advertising costs.
Retargeting takes place in order to address previous users of our websites again to third party websites and to motivate them to interact. Users receive advertising content on third-party websites that is related to their interests instead of merely general advertising content.
The cookie storage time is indicated above. Otherwise they are set indefinitely until you delete the memory in the browser.
The objection remains valid as long as the associated OptOut cookie is not deleted. This cookie is set for the domain, per browser and user of a computer. If you access our website from multiple devices and browsers, you must therefore object to data collection separately and again on each of these devices and in each browser.
During the registration process, your consent is obtained for the processing of the data and reference is made to this data protection declaration. You will first receive an e-mail requesting confirmation of your registration (double-opt-in procedure). If you are a customer, we will create the newsletter for you as individually as possible, taking into account your previous purchases and sales.
If you buy or sell goods on our website and provide us with your e-mail address, we may subsequently use it to send you a newsletter. In such a case, the newsletter will only send direct advertising for similar goods or services of our own. You will be notified of this upon registration or sale.
In connection with the data processing for the dispatch of newsletters, no data is passed on to third parties for own purposes.
The legal basis for e-mails and their usage measurement is Art. 6 Para. 1 lit. a, lit. f GDPR.
The messages to customers as reminders of shopping baskets or loyalty campaigns offer targeted communication for users and us. Requests for surveys and evaluations are also in our legitimate interest because they improve our services.
After a cancellation we store the data purely statistically and anonymously.
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter. Furthermore you have the possibility to unsubscribe from the newsletter in your customer account. For further information see below „Rights of the data subject“.
You can also restrict the usage measurement by deactivating the display of images in your e-mail program by default.
When you visit our website you may be asked to rate our products. This is done with separate windows (PopUps). Participation in the evaluation is always voluntary. The platforms do not receive any personal data from us unless otherwise stated here.
The legal basis for requests for evaluations is Art. 6 para. 1 lit. f GDPR.
If you unsubscribe from the newsletter, you will no longer receive any e-mails from us requesting an evaluation.
On our website we offer users the possibility to buy goods from us.
With the sale process, the user’s consent to the processing of the data mentioned below is obtained.
The data is either entered by the user in the order form or – especially when the user uses the express function – transmitted to us by the payment service provider.
The shipping company is DHL Paket GmbH. They will act for you as the responsible body. We transmit the information to them as far as it is required for delivery or status of the shipment.
The legal basis is Art. 6 para. 1 lit. a and lit. b and lit. f GDPR.
The user gives his consent. The processing of data for logistics, payment and dispatch is necessary for the fulfilment of the contract in accordance with Art. 6 Para. 1 lit. b GDPR. This concerns our sale of goods by or to the user. With regard to the integration of the Trusted Shop seal of approval, there is a legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR.
This is the case for those during the sales contract or for the execution of pre-contractual measures when the data is no longer necessary for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.
You can change the data stored about you at any time. For further information see below „Rights of the data subject“.
We send e-mails in connection with the sale of goods (so-called transaction e-mails) via the „one.com“ service.
The user gives his consent. The processing of the personal data from the input mask serves us for the treatment of the establishment of contact.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is terminated when the circumstances are such that it is certain that the matter in question has been finally clarified.
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. For further information see below „Rights of the data subject“.
If the personal data concerning you are processed for direct marketing purposes, you have the right pursuant to Art. 21 para. 2, 3 GDPR to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing.

References: Art. 4
 Art. 28
 Art. 44
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21