1. COLLECTION AND PROCESSING OF PERSONAL DATA
We will only collect and process the personal data (such as your name, address, e-mail address, telephone number, payment details) you provide when ordering goods, opening a customer account or for other purposes if and to the extent that you have consented to the processing thereof or other permission pursuant to Art. 6 General Data Protection Regulation (GDPR) exists.
The IP address of the user will also be logged on our website for technical reasons.
We process and use the personal data collected in order to perform the service you requested (Art. 6 (1) letter b) GDPR), to process your enquires (Art. 6 (1) letter b) GDPR), on the basis of your express consent to perform a credit check if you want us to make an advance performance, such as when purchasing on account (Art. 6 (1) letter a) GDPR), to issue an invoice (Art. 6 (1) letter b) GDPR), in order to ensure compliance with laws and regulations, particularly the retention requirements pursuant to Section 257 German Commercial Code (HGB) (Art. 6 (1) letter c) GDPR) and in order to assert (legal) claims (Art. 6 (1) letter f) GDPR).
Subject to your separate consent, we will also use the personal data we store in order to inform you about products and other services in our newsletter. We will only send you our newsletter by e-mail if you have provided your express consent in the double opt-in procedure. You can also unsubscribe to our newsletter at any time by clicking on the link at the end of our newsletter.
2. DISCLOSURE OF PERSONAL DATA
For the purposes mentioned in Section 1, we reserve the right to transfer your personal data within the European Union and other States party to the Agreement on the European Economic Area to service providers engaged by us. They are obliged to treat your personal data confidentially and to only use them in compliance with applicable data protection provisions in order to render the requested services.
We work with the following categories of service provider:
- E-commerce agency and web host for the running of our website and our webshop
- Fulfillment service provider for shipping
- Hotline service provider for customer service
- Shipping providers for goods shipment
- Payment services provider for clearing, factoring and payment processing
- Banks for payment processing
- Tax advisors for financial accounting
- IT service providers for the technical support of our IT systems
- Online marketing agencies and newsletter senders for customer communication
- Online analyse agencies for IP allocation und tracking
If you are not the recipient of the services, you are obliged to obtain the consent of the recipient to the processing of their personal data before providing them to us.
Apart from such cases, we will only disclose the personal data we store to third parties if you have expressly authorised us to do so (Art. 6 (1) letter a) GDPR) or we are obliged to do so by law (Art. 6 (1) letter c) GDPR), or such a transfer is necessary in order to assert or protect our rights (Art. 6 (1) letter f) GDPR).
3. DURATION OF STORAGE OF YOUR PERSONAL DATA
To fulfil our retention obligations pursuant to Section 257 of the German Commercial Code (HGB), we will store your personal data collected within the scope of a goods order for 10 years from the last invoice or credit note issued to you. If you have not settled all payment claims due to us within the 10-year period, we will continue storing your personal data until all our outstanding payment claims are settled. We will store data collected within the scope of other contracts for 6 years from our last response (Section 257(4) HGB).
If you have requested our newsletter, we will store your personal data until you unsubscribe our newsletter or object to the further processing of your personal data to send the newsletter.
4. YOUR RIGHTS
You can send an e-mail to firstname.lastname@example.org
at any time in order to enquire about the personal information we have stored, add to your personal data and request the rectification of incorrect personal data. We will process your enquiry promptly.
You can of course send an e-mail to email@example.com
to request the erasure pursuant to Art. 17 GDPR or the restriction of processing pursuant to Art. 18 GDPR of the personal data we have stored. We will then immediately erase or restrict the processing of your personal data we have stored. The erasure or restriction of processing shall in any case only take place once all existing contracts and other legal relationships with you have been completed. Data may only be erased once we are no longer required to retain them by law. Please note that once we have erased or restricted the processing of the data, we can no longer access the data you have provided and may not be able to process any pending enquiries. Insofar as we are required by law to retain personal data, we will make them subject to a non-disclosure notice and no longer use them for communication.
Insofar as we process your personal data, you are entitled to request a copy of those data in writing or electronically. We shall send you the first copy of your personal data or forward this to the third party appointed by you free of charge.
Insofar as you have consented to the processing of your personal data and we have not yet stored these, we shall provide these to you or to a third party appointed by you at your request.
Should you believe that the processing of your personal data constitutes a breach of the GDPR, you also have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
If the data processing takes place on the basis of your consent (particularly in order to perform a credit check and if applicable to send our newsletter), you can revoke consent at any time.
You have the right to object to the processing of your personal data for the purposes of the legitimate interests pursued by us or a third party pursuant to Art. 6 (1) letter f) GDPR pursuant to Art. 21 GDPR. Upon your objection, we shall suspend the data processing on the basis of Art. 6 (1) letter f) GDPR, unless we can demonstrate compelling and legitimate grounds for the processing, particularly if you have not yet settled all our outstanding payment claims.
If you have any questions on data protection, you can send us an e-mail at firstname.lastname@example.org
. We will be happy to answer your questions free of charge. Instead of e-mail, you can of course also contact the responsible office pursuant to section 11 by post or by fax.
5. PROVIDING DECLARATIONS OF CONSENT
If this has not yet been done separately, you hereby consent to the use of your personal data to the following extent:
a) Permission to send newsletters
Your e-mail address will only be used for our own advertising purposes, until you unsubscribe from the newsletter.
By subscribing, you have provided the following consent: "You would like to regularly receive the newsletter of Coeur de Lion by e-mail." You may withdraw this consent at any time with future effect by clicking on the "Unsubscribe from newsletter" at the end of the newsletter or sending an e-mail to email@example.com. Please state the exact e-mail address that is to be deleted from the distribution list.
b) Registering a customer account
By registering, you have provided the following consent: "You would like to register for future orders and ask for your data to be included in our customer database." You may withdraw the consent at any time and revoke consent with effect for the future.
c) Transfer of data to Facebook
You agree that we will transfer your anonymised e-mail address to Facebook for the purpose of anonymous modulation of advertising on Facebook accounts. You may object to the transfer of the anonymised e-mail address at any time and revoke consent with effect for the future.
d) Transfer of data to Klarna by choosing pay after delivery service
If you choose to use the payment services of Klarna Bank AB, you thereby consent to us transferring the data required to process payment and perform an identity and credit check to Klarna. In Germany, the credit agencies named in Klarna's privacy statement may be used for the identity and credit check. You may revoke your consent to this use of personal data by Klarna at any time.
7. FUNCTIONS OF AND DATA COLLECTION BY SOCIAL NETWORKS
Our services use social network functions (plugins): Plugins with a white "f"
on a blue tile or "thumbs up"
operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"
If you enter a website we operate that uses such plugins, your browser will connect with servers of the plugin provider, which may be in the USA. The content of the plugins is transferred directly by the plugin providers to your browser and integrated in the page. We have no control over the extent of the data that the plugin provider collects. According to the representations of the platforms, personal data of non-members, of logged in or non-logged in members, including their IP addresses, will be collected, processed and transferred to servers in the USA and other locations.
If you are logged into the particular social network, this can directly assign the visit to our website to your profile. If you interact with the plugins (such as by clicking on the "like"
button or making a comment), this information (including your IP address) will also be transferred directly to a server of the plugin provider, which may be in the USA, and stored there.
Facebook users should also note that the "Website Custom Audiences ("WCA") communication tool provided by Facebook is used. To this end, Facebook pixels are integrated in our website, which anonymously flag you as a user of our website without identifying you personally. If you subsequently log into Facebook, a non-reversible and also non-personal checksum (profile) of your usage data is transferred to Facebook for analysis and marketing purposes. For further information on the purpose and scope of data collection and the further processing and use of the data by Facebook as well as your settings options to protect your privacy, please read the Facebook data protection guidelines, which can be found at https://www.facebook.com/ads/website_custome_audiences/
. If you wish to object to the use of WCA, you can do so at: https://www.facebook.com/ads/website_custome_audiences/
If you are a member of the relevant network, but do not wish the provider to link the data collected from our website to your profile, you can take the following measures:
8. GOOGLE ANALYTICS
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"
). Google Analytics uses "cookies"
You can also refuse the logging of the data generated by the cookie in relation to your use of the website (incl. your IP address) for Google and the processing of this data by Google by downloading and installing the browser plugin available on the following link: http://tools.google.com/dlpage/gaoptout?hl=de
Please click here
to disable Google Analytics tracking.
On this website, technologies of Hurra Communications GmbH (www.hurra.com
) collect and store data on your user behaviour on our website for optimisation and marketing purposes. These data are used to analyse the conduct of visitors and are used to create pseudonymous usage profiles. For this purpose, cookies which allow the recognition of an Internet browser when revisiting the website are used. However, usage profiles collected by hurra.com technologies are not associated with personal data on the bearer of the pseudonym without the express consent of the visitor. The IP addresses of visitors are shortened prior to storage in order to prevent personal identification and any association of usage profiles with IP addresses.
You will find further information in the hurra.com privacy statement
. Visitors to the website can refuse the data collection and storage by hurra.com technology for this website at any time with future effect by opting out
10. DATA SECURITY
In the order process, your personal data will be transmitted over the Internet using SSL encryption. We secure our website and other systems with technical and organisational measures against loss, destruction, access, changes or the distribution of your data by unauthorised persons. Access to your customer account is only possible by entering your personal password.
You should always treat your access information confidentially and close the browser window if you have finished communicating with us, particularly when you are using a shared computer.
12. MINIMUM AGE
We offer our services and products to users who are at least 16 years of age.
13. CONTACT PERSON FOR DATA PROTECTION
For any questions on the collection, processing or use of your personal data, for information, rectification, blocking or erasure of data and to revoke any consent granted, please contact our data protection officer, Mr. René Rautenberg by e-mail at firstname.lastname@example.org
or under our postal address with the addition: “data protection officer“.
The controller as defined by the General Data Protection Regulation is:
COEUR DE LION Schmuckdesign GmbH
Krefelder Str. 32
phone: +49 (0)711-55 37 55 0
fax: +49 (0)711-55 37 55 10
Our external Data Protection Officer is:
Mr René Rautenberg
René Rautenberg GmbH