Data Protection Declaration

Data Protection Declaration

 1) Information on the Collection of Personal Data and Contact Details of the

Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In

the following, we inform you about the handling of your personal data when using our

website. Personal data is all data with which you can be personally identified.

 1.2 The controller in charge for data processing on this website within the meaning of

the General Data Protection Regulation (GDPR) is BuchholzMedia Inh. René Weissinger

e.K. e.K., Fünfbronn 7, 91174 Spalt, Deutschland, Tel.: 091759079115, E-Mail:

t.buchholz@buchholz-media.de. The controller in charge of the processing of personal

data is the natural or legal person who alone or jointly with others determines the

purposes and means of the processing of personal data.

 1.3 This website uses SSL or TLS encryption for security reasons and to protect the

transmission of personal data and other confidential content (e.g. orders or inquiries to

the controller). You can recognize an encrypted connection by the character string

https:// and the lock symbol in your browser line.

 2) Data Collection When You Visit Our Website

When using our website for information only, i.e. if you do not register or otherwise

provide us with information, we only collect data that your browser transmits to our

server (so-called "server log files"). When you visit our website, we collect the following

data that is technically necessary for us to display the website to you:

- Our visited website

- Date and time at the moment of access

- Amount of data sent in bytes

- Source/reference from which you came to the page

- Browser used

- Operating system used

- IP address used (if applicable: in anonymized form)

Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of

our legitimate interest in improving the stability and functionality of our website. The

data will not be passed on or used in any other way. However, we reserve the right to

check the server log files subsequently, if there are any concrete indications of illegal

use.

 3) Contacting

In the context of contacting us (e.g. via contact form or e-mail), personal data is

collected. Which data is collected in the case of a contact form can be seen from the

respective contact form. These data are stored and used exclusively for the purpose of 

 responding to your request or for establishing contact and for the associated technical

administration. The legal basis for processing data is our legitimate interest in

responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is

aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1)

point b GDPR. Your data will be deleted after final processing of your enquiry; this is the

case if it can be inferred from the circumstances that the facts in question have been

finally clarified, provided that there are no legal storage obligations to the contrary.

4) Data Processing When Opening a Customer Account and for Contract

Processing

 Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and

processed if you provide them to us for the execution of a contract or when opening a

customer account. Which data is collected can be seen from the respective input forms.

It is possible to delete your customer account at any time. This can be done by sending

a message to the above-mentioned address of the controller. We store and use the data

provided by you for contract processing. After complete processing of the contract or

deletion of your customer account, your data will be blocked in consideration of tax and

commercial retention periods and deleted after expiry of these periods, unless you have

expressly consented to further use of your data or a legally permitted further use of data

has been reserved by our site, about which we will inform you accordingly below.

5) Processing of Data for the Purpose of Order Handling

5.1  To process your order, we work together with the following service provider(s),

which support us wholly or partially in the execution of concluded contracts. Certain

personal data is transferred to these service providers in accordance with the following

information.

The personal data collected by us will be passed on to the transport company

commissioned with the delivery within the scope of contract processing, insofar as this is

necessary for the delivery of the goods. We will pass on your payment data to the

commissioned credit institution within the framework of payment processing, if this is

necessary for payment handling. If payment service providers are used, we explicitly

inform you of this below. The legal basis for the transfer of data is Art. 6 (1) point b

GDPR.

5.2  Use of Payment Service Providers

- Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered -

"purchase on account" or "payment by instalments" via PayPal, we transmit your

payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449

Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6

(1) point b GDPR and only insofar as this is necessary for payment processing.

PayPal reserves the right to carry out credit checks for the payment methods credit card

via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "payment by 

 installments" via PayPal. For this purpose, your payment data may be passed on to

credit agencies on the basis of PayPal's legitimate interest in determining your solvency

pursuant to Art. 6 (1) point f GDPR. PayPal uses the result of the credit assessment in

relation to the statistical probability of non-payment for the purpose of deciding on the

provision of the respective payment method. The credit report can contain probability

values (so-called score values). If score values are included in the result of the credit

report, they are based on recognized scientific, mathematical-statistical methods. The

calculation of the score values includes, but is not limited to, address data. For further

information on data protection law, including the credit agencies used, please refer to

PayPal's data protection declaration at:

https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.

You can object to this processing of your data at any time by sending a message to

PayPal. However, PayPal may still be entitled to process your personal data if this is

necessary for contractual payment processing.

- SOFORT

If you select the "SOFORT" payment method, payment will be processed by the payment

service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

(hereinafter "SOFORT"), to whom we will pass on your information provided during the

order process together with the information about your order in accordance with Art. 6

(1) point b GDPR. SOFORT is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen

46, 11134 Stockholm, Sweden). Your data will only be passed on for the purpose of

payment processing with the payment service provider SOFORT and only to the extent

necessary. For more information about the privacy policy of SOFORT visit:

https://www.klarna.com/uk/privacy-policy/.

6) Use of Videos

 Use of Youtube Videos

This website uses the Youtube embedding function for display and playback of videos

offered by the provider Youtube, which belongs to Google LLC, 1600 Amphitheatre

Parkway, Mountain View, CA 94043, USA ("Google").

To this end, the extended data protection mode is used to ensure, according to provider

information, that user information will only be stored once the playback function of the

video is started. When the playback of embedded YouTube videos is started, the

provider sets "YouTube" cookies in order to collect information about user behavior.

According to indications from Youtube, the use of those cookies is intended, among

other things, to record video statistics, to improve user-friendliness and to avoid

improper actions. If you are logged in to Google, your information will be directly

associated with your account when you click on a video. If you do not wish to be

associated with your profile on YouTube, you must log out before activating the button.

Google saves your data (even for users who are not logged in) as usage profiles and

evaluates them. Such an evaluation takes place in particular according to Art. 6 (1) point

f GDPR on the basis of the legitimate interests of Google in the insertion of personalized

advertising, market research and/or demand-oriented design of its website. You have 

 the right to object to the creation of these user profiles, whereby you must contact

YouTube to exercise this right.

Regardless of whether the embedded video is played back, a connection to the Google

network "double click" is established when visiting this website. This may trigger further

data processing beyond our control.

Google LLC, based in the USA, is certified for the US-European data protection

agreement "Privacy Shield", which guarantees compliance with the data protection level

applicable in the EU.

Further information on YouTube data protection can be found in the provider's data

protection statement at: www.google.com/policies/privacy/

7) Web Analysis Services

 Google (Universal) Analytics

- Google Analytics

This website uses Google Analytics, a web analysis service of Google LLC, 1600

Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics

uses so-called cookies, which are text files stored on your computer, to help the website

analyze how users use the site. The information generated by the cookies about your

use of this website (including the shortened IP address) is generally transmitted to a

Google server in the USA and stored there.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()",

which ensures an anonymization of the IP address by shortening it and excludes a direct

personal relationship. As a result of the extension, your IP address will previously be

shortened by Google within member states of the European Union or in other signatory

states to the Agreement on the European Economic Area. Only in exceptional cases, the

full IP address will be transmitted to a Google server in the USA and shortened there. In

these exceptional cases, processing is carried out in accordance with Art. 6 (1) point f

GDPR on the basis of our legitimate interest in the statistical analysis of user behavior

for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, to

compile reports on website activity and to provide us with other services relating to

website and internet use. The IP address transmitted by your browser in the context of

Google Analytics is not merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your

browser. However, we should point out that in that case you might not be able to use

the full functionality of this website. You may permanently refuse Google to collect data

generated by cookies regarding the use of the website (including your IP address) and to

process them. You can download and install the browser plugin available under the

following link: https://tools.google.com/dlpage/gaoptout?hl=en.

As an alternative to the browser plug-in or for browsers on mobile devices, please click

on the following link in order to set an opt-out cookie which disables Google Analytics to

collect data on this website in the future (this opt-out cookie only functions for this 

 browser and this domain. If you delete your cookies on this browser, you must click

again on this link):

<a ('Google Analytics has been disabled');

"href="javascript:gaOptout()">Disable Google Analytics</a>

Google LLC, based in the United States, is certified for the US-European data protection

agreement "Privacy Shield", which guarantees compliance with the data protection level

applicable in the EU.

More information on how Google Analytics handles user data can be found in Google's

privacy policy at: https://support.google.com/analytics/answer/6004245?hl=en

8) Tools and Miscellaneous

 Google Web Fonts

This site uses web fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain

View, CA 94043, USA ("Google") to uniformly display fonts. When you call up a page,

your browser loads the required web fonts into its browser cache to display texts and

fonts correctly.

To do this, the browser you are using must have a connection to Google's servers. In this

way, Google will be informed that our website has been accessed via your IP address.

Google Web Fonts are used for the purpose of a uniform and attractive presentation of

our online offers and its use is in our legitimate interest within the meaning of Art. 6 (1)

point f GDPR. If your browser does not support web fonts, a default font is used by your

computer.

Google LLC, based in the USA, is certified for the US-European data protection

agreement "Privacy Shield", which guarantees compliance with the data protection level

applicable in the EU.

Further information about Google Web Fonts can be found at

https://developers.google.com/fonts/faq and in Google's privacy policy:

https://policies.google.com/privacy?hl=en.

9) Rights of the Data Subject

9.1  The applicable data protection law grants you comprehensive rights of data subjects

(rights of information and intervention) vis-à-vis the data controller with regard to the

processing of your personal data, about which we inform you below :

- Right of access by the data subject pursuant to Art. 15 GDPR

- Right to rectification pursuant to Art. 16 GDPR

- Right to erase (“right to be forgotten”) pursuant to Art. 17 GDPR

- Right to restriction of processing pursuant to Art. 18 GDPR

- Right to be informed pursuant to Art. 19 GDPR

- Right to data portability pursuant to Art. 20 GDPR

- Right to withdraw a given consent pursuant to Art. 7 (3) GDPR

- Right to lodge a complaint pursuant to Art. 77 GDPR 

 9.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR

PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU

HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE

FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA

CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN

PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH

OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE

PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE

THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA

WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE

OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA

CONCERNED FOR DIRECT ADVERTISING PURPOSES.

 10) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal

retention period (e.g. commercial and tax retention periods). After expiry of this period,

the corresponding data will be routinely deleted, provided they are no longer necessary

for the performance or initiation of the contract and/or there is no longer any legitimate

interest on our part in the further storage.

Copyright © 2018, IT-Recht-Kanzlei · Alter Messeplatz 2 · 80339 München

Tel: +49 (0)89 / 130 1433 - 0· Fax: +49 (0)89 / 130 1433 - 60

RenéRosa Trikotmanufaktur distributed by BuchholzMedia Inh. René Weissinger e.K.
Fünfbronn 7 91174 Spalt