Privacy policy

§ 1 General

We only process your personal data (e.g. title, name, address, email address, telephone number, bank details, credit card number) in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you about the purposes of processing, recipients, legal bases, storage periods, your rights and the controller responsible for your data processing. This privacy policy applies only to our websites. If you are redirected to other sites via links on our sites, please inform yourself there about the respective handling of your data.

§ 2 Data processing for the fulfilment of contracts

(1) Purpose of processing

The personal data you provide to us during the ordering process is necessary for us to conclude a contract with you. You are not obliged to provide your personal data. However, we cannot send you the goods without your address. For some payment methods, we need the necessary payment details in order to pass them on to a payment service provider commissioned by us. The data you enter during the ordering process is therefore processed for the purpose of fulfilling the contract.

If you send us an enquiry by e-mail, via a contact form, etc. before concluding a contract, we will process the data received in this way to carry out pre-contractual measures and answer your questions about our products, for example.

If you open a customer account, your data (in particular your name, address, payment method, email address and password) will be processed for the purpose of registering and creating a customer login. The stored data allows you to shop with us more quickly and view your orders at any time. You can delete your account by sending us a message or using the delete function.

(2) Legal basis

The legal basis for this processing is Art. 6 (1) b) GDPR.

(3) Categories of recipients

Payment service providers, shipping service providers, hosting providers, merchandise management system (if applicable), suppliers (dropshipping) (if applicable).

(4) Storage period

We store the data required for contract processing until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.

We store the data required under commercial and tax law for the periods specified by law, usually ten years (cf. Section 257 HGB, Section 147 AO).

The data processed for the implementation of pre-contractual measures will be deleted as soon as the measures have been carried out and it is clear that a contract will not be concluded.

§ 3 Comments

(1) Purpose of processing

It is possible to write a comment. Your data (e.g. name/pseudonym, email address, website) will then only be processed for the purpose of publishing your comment.

(2) Legal basis

The legal basis for this processing is Art. 6 para. 1 f) GDPR.

(3) Legitimate interest

Our legitimate interest is the public exchange of user opinions on specific topics and products. Publication serves, among other things, to promote transparency and opinion-forming. Your interest in data protection is protected, as you can publish your comment under a pseudonym.

(4) Storage period

There is no specific storage period. You can request the deletion of your comment at any time.

(5) RIGHT TO OBJECT

You have the right to object at any time to data processing based on Art. 6 (1) f) GDPR and not used for direct marketing for reasons arising from your particular situation.

In the case of direct marketing, however, you may object to the processing at any time without giving reasons.

§ 4 Further information

We use your email address to enable our shipping service provider DHL to track your shipment.

§ 5 PayPal transactions

Please note that all PayPal transactions are subject to the PayPal privacy policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

§ 6 Information about cookies

(1) Purpose of processing

Technically necessary cookies are used on this website. These are small text files that are stored on your computer system by your internet browser. These cookies enable, for example, the addition of multiple products to a shopping basket.

(2) Legal basis

The legal basis for this processing is Art. 6 (1) f) GDPR.

(3) Legitimate interest

Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies is not used to create user profiles. This protects your interest in data protection.

(4) Storage period

Technically necessary cookies are usually deleted when you close your browser. Permanently stored cookies have a varying lifespan of a few minutes to several years.

(5) RIGHT TO OBJECT

If you do not want these cookies to be stored, please deactivate the acceptance of these cookies in your internet browser. However, this may result in functional restrictions on our website. You can also delete permanently stored cookies at any time via your browser.

§ 7 Newsletter

(1) Purpose of processing

When you subscribe to the newsletter, your email address will be used for advertising purposes, i.e. we will use the newsletter to inform you in particular about products from our range. For statistical purposes, we may evaluate which links in the newsletter are clicked. However, we cannot identify which specific person clicked on them. You have given the following consent separately or, if applicable, expressly during the ordering process: Newsletter registration.

(2) Legal basis

The legal basis for this processing is Art. 6 (1) a) GDPR.

(3) Categories of recipients

Newsletter distribution providers, if applicable.

(4) Storage period

Your email address will only be stored for the duration of your subscription to the newsletter.

(5) Right of withdrawal

You can withdraw your consent at any time with future effect. If you no longer wish to receive the newsletter, you can unsubscribe as follows: Via an unsubscribe link in the newsletter

§ 8 Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:

1. Right to information

You can request information about your personal data processed by us within the scope of Art. 15 GDPR.

2. Right to rectification

If the information concerning you is no longer accurate, you can request rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

3. Right to erasure

You can request the erasure of your personal data under the conditions of Art. 17 GDPR.

4. Right to restriction of processing

Within the scope of the provisions of Art. 18 GDPR, you have the right to request a restriction on the processing of data concerning you.

5. Right to data portability

Pursuant to Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller.

6. Right to withdraw your consent to data processing

Under Article 7(3) of the GDPR, you have the right to withdraw your consent to data processing at any time. This does not affect the lawfulness of the processing carried out on the basis of your consent until its withdrawal.

7. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement) in accordance with Art. 77 GDPR.

Please also note your right to object under Art. 21 GDPR:

a) General: justified objection required

If the processing of personal data concerning you is carried out

- to safeguard our overriding legitimate interest (legal basis under Art. 6(1)(f) GDPR) or

- in the public interest (legal basis according to Art. 6 (1) e) GDPR),

you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.

In the event of an objection, we will no longer process the personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

b) Special case of direct marketing: simple objection is sufficient

If the personal data concerning you is processed for direct marketing purposes, you have the right to object to this processing at any time without giving reasons; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Data controller:

Textilmanufaktur Sirko Galz

Am Almenhof 2

93133 Burglengenfeld

Telephone: 09471/6050977

info@textilmanufaktur-galz.de

This document was created and is updated using technology from janolaw AG.