Source: http://www.topreiter.de/epages/TOPREITERWEBSHOP.sf/en_GB/?ObjectPath=/Shops/TOPREITERWEBSHOP/Categories/PrivacyPolicy
Timestamp: 2019-04-21 03:06:53+00:00

Document:
Note text: Please select the applicable data types, delete those that do not, or supplement them with your own information. The explanations in the parentheses are for illustrative purposes only and may be amended or deleted.
☒ Inventory data (e.g., names, addresses).
☒ contact information (e.g., e-mail, phone numbers).
☒ content data (e.g., text input, photographs, videos).
☒ contract data (for example, subject matter, term, customer category).
☒ Payment details (e.g., bank details, payment history).
☒ Usage data (e.g., websites visited, interest in content, access times).
☒ Meta / communication data (e.g., device information, IP addresses).
In principle, no special categories of data are processed unless they are sent by the users to the processing, e.g. entered in online forms.
Customers / prospects / suppliers, as well as visitors and users of the online offer.
In the following, we also refer to the persons concerned as "users".
Note: Please select the appropriate purposes of processing, delete those that do not, or supplement them with your own information.
☒ Providing the online offer, its contents and functions.
☒ Provision of contractual services, service and customer care.
☒ Answering contact requests and communicating with users.
☒ Marketing, Advertising and Market Research.
We take appropriate technical measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons and organizational measures to ensure a level of protection appropriate to the risk; Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as their access, input, disclosure, availability and separation. In addition, we have established procedures that ensure the enjoyment of data subject rights, data erasure and data vulnerability. Furthermore, we consider the protection of personal data already in the development, or selection of hardware, software and procedures, according to the principle of data protection by technology design and by privacy-friendly default settings taken into account (Article 25 GDPR).
One of the security measures is the encrypted transfer of data between your browser and our server.
Germany: According to legal requirements, the storage takes place in particular for 6 years according to § 257 paragraph 1 HGB (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) and for 10 years in accordance with § 147 Abs. 1 AO (books, records , Management reports, accounting documents, trade and business letters, documents relevant to taxation, etc.).
We process inventory data (e.g., names and addresses as well as contact information of users), contract data (e.g., services used, names of contacts, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. Art. 6 para. 1 lit b. DSGVO. The entries marked as obligatory in online forms are required for the conclusion of the contract.
Users can optionally create a user account, in particular by being able to view their orders. As part of the registration, the necessary mandatory information will be communicated to the users. The user accounts are not public and can not be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention is for commercial or tax law reasons according to Art. 6 para. 1 lit. c DSGVO necessary. It is the responsibility of the users to secure their data upon termination before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract.
As part of the registration and re-registration as well as use of our online services, the IP address and the time of the respective user action will be saved. The storage is based on our legitimate interests, as well as the user's protection against misuse and other unauthorized use. A transfer of these data to third parties does not take place, unless it is necessary for the prosecution of our claims or there is a legal obligation in accordance with. Art. 6 para. 1 lit. c DSGVO.
The deletion takes place after expiry of legal warranty and comparable obligations, the necessity of keeping the data is checked every three years; in the case of legal archiving obligations, the deletion takes place after its expiry (end of commercial law (6 years) and tax law (10 years) retention obligation); Information in the customer account remains until its deletion.
If we make an advance payment (for example, when purchasing on account), we reserve the right to obtain identity and credit information for the purpose of assessing the credit risk on the basis of mathematical-statistical procedures from specialized service providers (credit reporting agencies).
We process the information obtained by the credit reference agencies on the statistical probability of a default in the context of an appropriate discretionary decision on the establishment, implementation and termination of the contractual relationship. We reserve the right, in the case of a negative result of the credit check, to refuse payment on account or any other advance payment.
In accordance with Art. 22 GDPR, the decision as to whether we are making advance payments is made solely on the basis of an automated decision in individual cases, which our software carries out on the basis of the information provided by the credit reference agency.
If we obtain an explicit consent from you, the legal basis for the credit information and the transmission of the customer's data to the credit bureaus is the consent in accordance with. Art. 6 para. 1 lit. a, 7 DSGVO. If no consent is obtained, our legitimate interests in the reliability of their claim for payment are the legal basis. Art. 6 para. 1 lit. f. DSGVO.
When contacting us (via contact form or e-mail), the information provided by the user to process the contact request and its processing acc. Art. 6 para. 1 lit. b) DSGVO processed.
User information can be stored in our Customer Relationship Management System ("CRM System") or similar request organization.
We delete the requests, if they are no longer required. We check the necessity every two years; Inquiries from customers who have a customer account, we store permanently and refer to the deletion on the details of the customer account. In the case of legal archiving obligations, the deletion takes place after its expiry (end of commercial law (6 years) and tax law (10 years) retention obligation).
If users leave comments or other contributions, their IP addresses are based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO stored for 7 days.
This is for our own safety, if someone leaves illegal content in comments and contributions (insults, prohibited political propaganda, etc.). In this case, we ourselves can be prosecuted for the comment or post and are therefore interested in the identity of the author.
Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of seven days and then deleted. Data whose further retention is required for evidential purposes shall be exempted from the cancellation until final clarification of the incident.
Cookies are information transmitted from our web server or third-party web servers to users' web browsers and stored there for later retrieval. Cookies can be small files or other types of information storage.
We use "session cookies" that are only stored for the duration of the current visit to our online presence (for example, to enable the storage of your login status or the shopping cart function and thus the use of our online offer at all). In a session cookie, a randomly generated unique identification number is stored, a so-called session ID. In addition, a cookie contains information about its origin and the retention period. These cookies can not save any other data. Session cookies will be deleted if you have finished using our online offer and you have e.g. log out or close the browser.
We use Google Analytics to display advertisements displayed within Google and its affiliate advertising services, only those users who have shown an interest in our online offering or who have certain characteristics (eg interests in specific topics or products visited by them) Web pages) that we submit to Google (so-called "remarketing" or "Google Analytics audiences"). With Remarketing Audiences, we also want to make sure that our ads are in line with the potential interest of users and are not annoying.
For more information about Google's data usage, hiring and opt-out options, please visit Google's websites: https://www.google.com/intl/de/policies/privacy/partners ("Google's use of your data when you use websites or apps Our Partners "), https://policies.google.com/technologies/ads (" Advertising Use of Data "), https://adssettings.google.com/authenticated (" Managing information Google uses to show you advertising ").
If a user is a Facebook member and does not want Facebook to collect data about him via this online offer and link it to his member data stored on Facebook, he must log out of Facebook and delete his cookies before using our online offer. Other settings and inconsistencies regarding the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US-American site http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform independent, i. they are adopted for all devices, such as desktop computers or mobile devices.
Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter "newsletter") only with the consent of the recipient or a legal permission. Insofar as the contents of a newsletter are concretely described, they are authoritative for the consent of the users. Incidentally, our newsletters contain information about our products, offers, promotions and our company.
Furthermore, the shipping service provider may, according to its own information, transmit these data in pseudonymous form, i. without assignment to a user, to optimize or improve their own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletters or for statistical purposes, to determine from which countries the recipients come. However, the shipping service provider does not use the data of our newsletter recipients to write them down or to pass them on to third parties.
Germany: The sending of the newsletter and the measurement of success are based on the consent of the recipients acc. Art. 6 para. 1 lit. a, Art. 7 DSGVO in connection with § 7 Abs. 2 Nr. 3 UWG or on the basis of the legal permission according to Art. § 7 Abs. 3 UWG.
Austria: The dispatch of the newsletter and the success measurement are made on the basis of a consent of the recipients acc. Art. 6 para. 1 lit. a, Art. 7 DSGVO i.V.m. § 107 Abs. 2 TKG or on the basis of the legal permission acc. Section 107 (2) and the like 3 TKG.
The logging of the registration process is based on our legitimate interests in accordance with. Art. 6 para. 1 lit. f DSGVO and serves as proof of consent to the receipt of the newsletter.
Termination / Revocation - You may terminate the receipt of our newsletter at any time, ie. Revoke your consent. A link to cancel the newsletter can be found at the end of each newsletter. If the users have only subscribed to the newsletter and terminated this registration, their personal data will be deleted.
Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO), we make use of content or services offered by third-party providers in order to provide their content and services Services, such as Include videos or fonts (collectively referred to as "content"). This always presupposes that the third-party providers of this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include, but is not limited to, technical information about the browser and operating system, referring web sites, visit time, and other information regarding the use of our online offer.
If our customers use the payment services of third parties (for example, PayPal or Sofortüberweisung), the terms and conditions and the privacy notices of the respective third party providers, which are retrievable within the respective websites, or transactional applications apply.

References: Art. 32
 § 257
 § 147
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 § 7
 § 7
 Art. 6
 Art. 7
 § 107
 Art. 6
 Art. 6