1. General
1.1 What is Personal Data
Personal data are data which disclose or can disclose the customer’s identity. We adhere to the policy of data avoidance. As far as possible, a collection of personal data is avoided.
1.2 Dealings with Personal Data
Personal data is used exclusively for the purpose of establishing the contract, defining its content, implementing or processing the contractual relationship (Art. 6 (1 b) GDPR).
Beyond that, personal data will only be processed if we have received your consent to do so (Art. 6 (1 a) GDPR) or if it is data whose processing is necessary for our legitimate interests and insofar as the balancing process shows that no overriding interests, fundamental rights or freedoms on your part are opposed (Art. 6 (1 f) GDPR).
We may use processors to process your personal data, with whom we have concluded a contract for order processing where necessary, but we will not pass on personal data to third parties beyond this.
Only for the fulfillment of the contract, the data will be passed on to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. For the processing of payments, the payment data required will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.
Your personal data is processed in the EU and in countries classified as safe or appropriate by the EU. If personal data is processed in the USA, care is taken to ensure that the services we use are certified under the “Data Privacy Framework”.
1.3 User Data
When visiting this website, general technical information is raised. These are the IP-address used, time, length of visit, browser type and, if necessary, the site of origin. These user data are registered in a log file due to technical conditions and can be used and stored for statistical purposes of this website. Additional personal data are not linked to this user data.
1.4 Length of Storage
We store your personal data beyond the end of the purpose for which the data was raised, but only for the length of time which is required based on legal regulations (esp. fiscal tax law).
Specifically, for example, the following retention periods apply:
| Type of Data | Retention Period |
|---|---|
| Tax Data | 10 years |
| Commercial or business letters (including emails and faxes) and other documents insofar as they are relevant for taxation. | 6 years from the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance, the annual financial statement or the management report was prepared, the commercial or business letter was received or sent, or the booking document was created, as well as when the record was made or the other documents were created. |
| Transaction and Registration Data | 10 years from the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance, the annual financial statement or the management report was prepared, the commercial or business letter was received or sent, or the booking document was created, as well as when the record was made or the other documents were created. |
| Data Protection Consents for Data Processing | For the duration of the possibility for the data subject(s) to assert their rights. |
| (Electronic) Correspondence that Has No Tax-Related Relevance | As long as necessary for the fulfillment of the task, unless the processing serves the assertion, exercise, or defense of legal claims. |
| Usage Data according to Section 1.3 of this Privacy Policy | Max. 30 days |