Source: https://www.spooks.de/en/datenschutz/
Timestamp: 2020-01-29 15:05:19
Document Index: 331450926

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy Policy | SPOOKS
Our goal is that you should enjoy visiting our website. The protection of your private sphere and your privacy rights are therefore important to us. So we would like to ask you to read carefully the following summary of our website’s operating principles. You can be sure that our data processing is transparent and fair, and we make every effort to ensure the careful and responsible handling of your data.
In the following privacy statement we let you know how we use your personal data. We follow the strict provisions of German data protection law and the requirements under the European General Data Protection Regulation (GDPR).
The controller as defined in the General Data Protection Regulation and other, national data protection legislation of the EU member states and additional data protection provisions is:
Oberbech 8 | 51519 Odenthal | Germany
Tel +49 (0) 2202 96 96 1- 0 | Fax +49 (0) 2202 96 96 1- 99
Registration court: Cologne Amtsgericht [Local Court]
Registration number: HRB 73776
VAT-ID: DE 279517810
Management: Thekla Viktoria Dieckmann
Personally certified external data protection officer (TÜV)[Technischer Überwachungsverein, Technical Inspection Association]
As a general principle, we collect and use your personal data only so far as this is necessary to maintain a functioning website and to provide our content and services, e.g. when you register on our website or log in to an existing customer account or order our products.
We treat the security of your personal data as a high priority. Hence, we protect the data relating to you that we hold, including through technical and organisational measures, that effectively prevent loss of the data or misuse by third parties. In particular, our staff members who process personal data are bound to maintain data secrecy and must comply with this obligation. In order to protect your personal information it is transmitted in encrypted form. For example, for communication via your internet browser, we use SSL=Secure Socket Layer. This is shown by the symbol of a padlock which your browser displays when there is an SSL connection. In order to ensure the long-term protection of your data, the technical security measures are regularly checked and where necessary upgraded to the latest technological standards. These principles also apply to companies that process and use data on our behalf and following our instructions.
4. Purpose of processing and legal basis for processing your personal data
5. Length of storage and routine erasure of personal data
6. Collecting general data and information, log files
how you came onto the website (previous page, hyperlink etc.)
your IP address allocated to your computer by your internet access provider when a connection to the internet is made
7. Cookies and web analysis services
By using our website you expressly declare that you consent to the use of cookies and the use of your personal data by our website to improve our internet services. This agreement includes your consent to SPOOKS GmbH’s use of service providers, such as Google Analytics, and the disclosure of data to them for this purpose.
the storing of products you have placed in your shopping basket or on your wish list,
the storing of data entries you made during check out or while placing an order, so that you do not need to enter these data again,
the storing of pre-settings such as language, place, number of search results etc.,
the storing of settings for the optimal display of videos, e.g. desired buffer size and the resolution data for your screen,
the registering of your browser settings so as to optimise the presentation of our website on your screen,
the recognition of misuse of our websites and services, e.g. through registering a number of consecutive and failed registration attempts,
the even loading of the website so that the website remains accessible and
the saving of your log-in data so that you do not need to enter them again every time you visit.
to record the number of visitors to our websites,
to record the time at which our website visitors visit the site,
to record the order in which various websites are visited,
to assess which parts of our website need to be adapted and
to optimise the websites.
- Use of Google (Universal) Analytics for web analysis
You can prevent the data created by the cookie that relates to your use of the website (including your IP address) from being collected by and processed by Google, by downloading and installing the browser plug-in available under the following link:
The conditions of use and the privacy statements of Google and Google Analytics can be found under
https://www.google.de/intl/de/policies/ or
You can object permanently to cross-device remarketing/targeting by deactivating personalised advertising in your Google account. To do this, follow this link:
Further information and the data protection provisions can be found in Google’s privacy statement under:
Apart from this website we also maintain a presence in various social media. If you visit us there, your personal data may be transmitted to the social network provider. It is possible that apart from storing the data you enter in this specific social medium, additional data may be collected, processed or used by the social network provider.
In addition, the social network provider may collect, process and use the most important data relating to the computer system via which you visit the social network, e.g. the IP address, the type of processor used and the browser version together with plug-ins. If you are logged in with your personal user account of the medium in question during your visit, the medium can assign your visit to this account. If you do not wish this assignment to be possible, you must log out of your account before you visit our website.
Please refer to the data protection provisions of the medium concerned for information on the purpose and scope of data collection by the medium, the further processing and use of your data and your rights in this regard.
The processing of data in this connection is based on Art. 6 (1) f) GDPR.
The following social media plug-ins are inserted in our website:
Operator: Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA
Operator: Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA
Plug-ins of the social network Facebook (provider: Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA), are installed on our websites. You can recognise the Facebook plug-ins by the Facebook logo or the “Like” button on our website. You can find an overview of Facebook plug-ins here:
When you visit our pages, the plug-in will create a direct connection between your browser and the Facebook server. In this way, Facebook receives the information that you visited our page with your IP address. If you click the Facebook “Like” button while you are logged in to your Facebook account, you can link the contents of our pages to your Facebook profile. If you do this, Facebook can assign the visit to our pages to your user account. Please note that as the provider of the websites we receive no information on the content of the transmitted data and the use Facebook makes of them. You can find further information on this in Facebook’s privacy statement at:
If you do not wish Facebook to be able to assign the visit to our pages to your Facebook user account, please log out of your Facebook user account before you use our website.
Processing of data in this connection is based on Art. 6 (1) f) GDPR.
Functions of the Instagram service are installed on our pages. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
If you are logged in to your Instagram account, you can link the contents of our pages to your Instagram profile by clicking on the Instagram button. Through this, Instagram can assign the visit of our pages to your user account. Please note that as the provider of the websites we receive no information on the content of the transmitted data and the use Instagram makes of them.
You can find further information on this in Instagram’s privacy statement:
9. Mailing of information on our services and special promotions and other news, e.g. newsletter
We use your data to send information you have ordered regarding our services and other actions of ours to the email address you have provided. This is done only with your prior consent or with legal permission. Consent to dispatch is on the basis of Art. 6 Abs. 1 a) and Art. 7 GDPR and Section 7, paragraph 3 UWG [Gesetz über den unlauteren Wettbewerb, Unfair Competition Act].
a) Newsletter registration on our website
On our website there is the option to subscribe to a free newsletter. When you register for the newsletter, information from the input mask is transmitted to us; this includes at the least your email address. Registration is by means of the so-called double opt-in procedure. After registration you will receive an email in which you are requested to confirm your registration. This confirmation is necessary so that no one can register using another person’s mail address. Your consent to the processing of the data is requested in the frame of the registration process which also refers to this privacy statement. The newsletter is distributed via “MailChimp”, a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The email addresses of our newsletter recipients as well as further personal data of them described in this privacy statement are stored on MailChimp’s servers in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. In addition, MailChimp, according to its own information, can use this information to optimise or improve its own services, e.g. to improve the distribution and presentation of the newsletter or for commercial purposes to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to contact them itself or to hand on the data to third parties.
We have confidence in MailChimp’s reliability and its IT and data security. MailChimp is certified under the EU-US data protection agreement “Privacy Shield” and has thus undertaken to comply with EU data protection provisions. In addition, we have concluded a “Data Processing Agreement” with MailChimp. This is an agreement in which MailChimp undertakes to protect our users’ data, to process these data on our behalf in accordance with its data protection regulations and in particular not to disclose the data to third parties. You can view MailChimp’s data protection regulations here. In some cases, we will direct newsletter recipients to MailChimp’s websites. For example, our newsletter contains a link through which the newsletter recipient can access the newsletter online (e.g. if there are display problems in the email programme). In addition, newsletter recipients can make subsequent corrections to their data, e.g. email address. Furthermore, MailChimp’s privacy statement is only available on its site.
b) Mailings in connection with the sale of goods and services
If you purchase goods or services on our website, we can send information on other, similar goods and services of ours to the email address you have provided, even without your consent.
Naturally, you may cancel receipt of this information at any time by withdrawing your consent with future effect. You will find a corresponding cancellation link in every mail and newsletter and you can confirm your cancellation on our website. You may also contact us at any time to withdraw your consent:
By email: datenschutz@spooks.de
By post: SPOOKS GmbH, Oberbech 8, 51519 Odenthal, Germany
Some notifications that are necessary to implement contracts and for the functioning of our website, e.g. information on our service (confirmation of registration, customer service information etc.) or on a fee-based package (e.g. order confirmation, contract documents, payment processing) cannot be cancelled. You will receive this information at the address you provide in your contact details.
c) Postal dispatch
We may also use your data to send information on our offers and promotions by post.
10. Processing of personal data during contact, registration or LiveChat
c) CRM System (Zendesk)
We use the ticket system "Zendesk", a customer service platform from Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, and the chat tool Zopim from Zendesk to process customer requests.
In order to process inquiries, necessary data such as surname, first name, postal address, telephone number, e-mail address are collected via our website in order to be able to respond to the need for information.
Zendesk is a certified participant of the so-called "Privacy Shield Framework" and thus fulfils the minimum requirements for legally compliant order data processing.
Zendesk uses user data only for the technical processing of enquiries and does not pass them on to third parties. In order to use Zendesk, it is necessary to provide at least a correct e-mail address. A pseudonymous use is possible. In the course of processing service requests, it may be necessary to collect further data (name, address). The use of Zendesk is optional and serves to improve and accelerate our customer and user service.
More detailed information on data processing by Zendesk can be found in Zendesk's privacy policy at http://www.zendesk.com/company/privacy .
If you have any questions, please contact Zendesk's data protection officer at the following address: privacy@zendesk.com
If users contact us by e-mail, via the contact form or via chat on our website, we use the personal data transmitted only to process the specific request. The data provided will be treated confidentially. The data provided and the progress of messages with our Service Desk are stored for follow-up questions and later contacts. The data entered in the contact form will be processed on the basis of your consent (Art. 6 para. 1 lit. a DSGVO).
If users do not agree with the collection and storage of data in Zendesk's external system, we offer these users alternative contact options for submitting service requests by telephone, fax or post.
when goods are delivered to logistics providers and the postal service provider indicated in the order,
on payment of goods to the payment service provider indicated in the order.
The following payment handling services are charged with processing payments on our website:
BS PAYONE (credit cards)
We have commissioned BS PAYONE GmbH, Fraunhoferstraße 2-4, 24118 Kiel, with processing credit card payments. To do this, BS PAYONE GmbH needs information on inter alia your name and address, your account number and bank sort code or credit card number (including the validity period), the invoiced amount and currency and the transaction number. BS PAYONE GmbH may use this information for the purpose of processing the payment and may disclose it to us. PAYONE has a duty to treat this information in accordance with German data protection law. You can read PAYONE GmbH’s privacy statement under
https://www.payone.de/datenschutz/ .
We have concluded a contract with PAYONE as a contracted data processor and in using PAYONE we fully implement the strict requirements of the German data protection authorities.
Klarna (purchase on account)
On our website we offer via PAYONE inter alia the option of paying through the services of Klarna. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”).
Klarna offers various payment options (e.g. payment in instalments). If you wish to pay using Klarna (Klarna checkout option), Klarna will ask you to provide certain personal data. You can find details in Klarna’s privacy statement under the following link: https://www.klarna.com/de/datenschutz/.
Klarna uses cookies to optimise the use of the Klarna checkout option. Optimisation of the Klarna checkout option is a legitimate interest in the meaning of Art. 6 (1) f) GDPR. Details on the use of Klarna cookies can be found at the following link:
Transfer of your data to Klarna is on the basis of Art. 6 (1) b) GDPR (processing for the performance of a contract).
You have the option of withdrawing your consent to the data processing at any time. Withdrawal of consent does not affect the validity of data processing operations in the past.
On our website we offer via PAYONE inter alia the option of paying by “instant transfer”. The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter “Sofort GmbH”).
Using the “instant transfer” process, we receive confirmation of payment in real time from Sofort GmbH and can proceed immediately to fulfil our obligations.
If you opt for the payment method “instant transfer”, you will send your PIN and a valid TAN to Sofort GmbH which enables the latter to log in to your online banking account. After logging in, Sofort GmbH automatically checks the balance of your account and makes the transfer to us using the TAN you have provided.
Besides the PIN and the TAN, the payment data you have entered and personal data are also transmitted to Sofort GmbH. The personal data includes your first name and family name, your address, telephone number(s), email address, IP address and where applicable other data necessary to process the payment. Transfer of these data is necessary in order to ascertain your identity beyond a doubt and to prevent attempts at fraud.
Transfer of your data to Sofort GmbH is on the basis of Art. 6 (1) b) GDPR (processing for the performance of a contract). You have the option of withdrawing your consent to the data processing at any time. Withdrawal of consent does not affect the validity of data processing operations in the past.
Details on payment by instant bank transfer can be found at the following link: https://www.sofort.com/payment/wizard/getCmsContent/data_protection/DE/0/de
by email: datenschutz@spooks.de or
12. Links to internet pages of other businesses