We take the protection of your personal data very seriously. Data will be “processed” by us in accordance with the applicable statutory data protection regulations, from May 25, 2018 in particular in accordance with the European General Data Protection Regulation (hereinafter referred to as: GDPR) and the country-specific data protection regulations. “Processing” is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data such as the collection, recording, organization, ordering, storage, adaptation or modification, reading, querying, the Use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction;
In the following, we will inform you about the processing of your data, in particular about the type, scope and purpose of the collection and use of your personal data when you visit our website and use our offers and services as well as the corresponding legal bases for the individual processing operations. In addition, we explain to you in our data protection declaration which rights you have with regard to data processing.
“Personal data” is all information that relates to an identified or identifiable natural person; A natural person is regarded as identifiable who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express the physical , physiological, genetic, psychological, economic, cultural or social identity of this natural person.
2. Responsible body for data processing
As the provider of our internet services, we are the body responsible for data processing. You can reach us at the following contact details: Deadstock GmbH, Halenseering 9i, 22149 Hamburg, Germany, Tel: +49 (0) 160 90 10 17 54, Email: email@example.com.
3. Processing of your data
The type, scope and purpose of the processing of your data differ depending on whether you only visit our website or use the services and / or services offered by us:
a) Visiting our website
When you visit our website, the server stores data in so-called server log files that your internet browser automatically transmits to the server, in particular:
- Date and time of access to one of our websites
- Your browser type and the respective version of the browser
- the operating system used
- the page you last visited (so-called referrer URL)
- the amount of data transferred and the access status (file transferred, file not found etc.) and
- Your IP address and the requesting provider.
This data is processed in order to enable the use of the Internet pages you have accessed at all, for statistical purposes, to improve our Internet offering and to protect against illegal cyber attacks and to exercise, assert or defend against legal claims. Your IP address is only stored for as long as it is necessary to exercise, assert or defend against legal claims, to defend possible cyber attacks and to provide the law enforcement authorities with the information necessary for prosecution.
The data given above will be processed separately from all personal data that you provide to us when visiting our website and / or using a service and will not be merged under any circumstances.
As of May 25, 2018, this data processing described above has its legal basis in Article 6 (1) (b) GDPR to carry out the necessary pre-contractual measures to enable you to use the websites you have accessed. Insofar as the above data is processed for statistical purposes, to improve our website, to protect against illegal cyber attacks, or to exercise, assert or defend against legal claims, this will be done from May 25, 2018 on the legal basis of Art. 6 Paragraph 1 Letter f) of the GDPR. Our legitimate interest in this data processing lies in the evaluation of the data to improve our website, in order to exercise, assert or defend against legal claims and in
b) Processing of personal data when using the services and / or services offered by us:
We only process personal data if this is permitted by law or if you consent to the processing of your personal data.
If you want to use the services we offer on our website, such as ordering goods, rendering services, ordering vouchers or newsletters, you must provide additional personal data. We process your personal data for the above purposes from May 25th, 2018 on the legal basis of Article 6 Paragraph 1 Letter b) GDPR in order to fulfill a contract with you or to carry out necessary pre-contractual measures, which take place on your request. The purpose of processing your personal data is, for example, to process inquiries, deliver the goods you have ordered, to provide the desired service, to process a voucher order or to send you the newsletter you require or to enable you to use our blog and comment functions. Without providing your personal data, we cannot conclude the contract with you and we cannot provide the services offered.
In addition, we process your data for the purpose of being able to exercise, assert or defend against legal claims arising from the contractual relationship and, if necessary, to enable the criminal prosecution authorities to prosecute. The above data processing will take place from May 25, 2018 on the legal basis of Art. 6 Paragraph 1 Letter f) GDPR or, in part, Article 6 Paragraph 1 Letter c) GDPR in order to comply with a legal obligation to which we are subject. Our legitimate interest in this data processing is to be able to exercise, assert or defend against legal claims from the contractual relationship and, if necessary, to enable the law enforcement authorities to prosecute.
We also process your personal data for the purpose of meeting our statutory retention requirements. The legal basis for the fulfillment of our statutory retention requirements has been standardized in Article 6 Paragraph 1 Letter c) GDPR from May 25, 2018.
Your data will be passed on to service providers who support us, which we have of course carefully selected, in order to fulfill the contract or to carry out necessary pre-contractual measures, which take place on your request. This can be a technical service provider or a service provider who supports us with shipping or payment processing or accounting. Your personal data will be passed on to service providers who support us from 25.05.2018 either on the legal basis of Article 6 Paragraph 1 b) GDPR to fulfill a contract to which the data subject is a party, or to carry out pre-contractual measures or on a proper contract processing on behalf of which the requirements of Article 28 GDPR are met.
We also reserve the right to include external content from third parties on our website (e.g. YouTube videos, external map services, external graphics, etc.).
If you call up and use this third-party content on our website, your IP address (also from May 25, 2018 on the legal basis of Article 6 (1) (b) GDPR) will be forwarded to the third-party provider so that the third-party provider can use the content you have called up can be sent to your browser. The transmission of your IP address to these third party providers is therefore absolutely necessary in order to send the requested content to the browser of your terminal device. The processing of your data by the provider of the third-party content is subject to their data protection regulations. Without your express consent, we do not use any third-party tools that use so-called “tracking mechanisms”. “Tracking mechanisms” are technologies
Your personal data will only be passed on to other third parties if we are legally obliged to do so (e.g. to authorities to investigate cyber attacks and any criminal offenses committed or to tax offices to comply with tax obligations or to courts in the event of legal disputes) from May 25, 2018 the legal basis of Article 6 Paragraph 1 Letter c) GDPR and, if applicable, to lawyers and tax advisors on the legal basis of Article 6 Paragraph 1 Letter c) GDPR or Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest in forwarding your data to lawyers is to exercise, assert or defend against legal claims. Our legitimate interest in passing on your data to external tax consultants is
The data we absolutely need can be seen in the input mask during the registration or ordering process. You can provide further information that is not absolutely necessary for the above purposes; they are marked accordingly by us when collecting the data as part of the registration or ordering process.
In addition, we do not pass on your personal data to third parties without your express consent.
The data we absolutely need can be seen in the input mask during the registration or ordering process. You can provide further information that is not absolutely necessary for the purposes described above; they are marked accordingly by us when collecting the data as part of the registration or ordering process.
In addition, we reserve the right to use so-called “permanent cookies” so that you can use our website more effectively. Permanent cookies enable us to recognize your device when you visit our website again and to save information about your last visit (e.g. your preferred language or other settings). We only use permanent cookies, which are automatically deleted after 12 months at the latest.
The cookies named above can also be used by third-party providers of tools that we use on our website, in particular for statistical and analytical purposes. We will only use third-party tools with privacy-friendly settings. Without your prior express consent, we will therefore not use so-called “targeting cookies” on our website, which make the behavior of data subjects on the Internet traceable and enable the creation of user profiles. If we use tools from third-party providers, we will inform you about their use, functionality and further details of the respective tools under point 15 of this data protection declaration.
The cookies described above will be used from May 25, 2018 on the legal basis of Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest in the use of these cookies is to enable our customers and the users of our website to use our services more effectively and to analyze and improve our website.
You can determine whether cookies can be set and retrieved using the settings in your browser. For example, you can deactivate the storage of cookies altogether in your browser, limit it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for your permission. You can also set your browser so that cookies are automatically deleted when you close the browser. Finally, you can activate a Do-Not-Track function (“DNT”) in your browser so that you are not automatically recorded by a web analysis tool that may be used. Information about the configuration of your browser settings can be found in the help function of your respective internet browser.
5. Storage and deletion periods for personal data
If the processing purpose for your required personal data no longer applies, your personal data processed by us will be routinely deleted or blocked, unless you have consented to permanent storage of your personal data.
If individual data have to be kept after the processing purposes have ceased to exist due to legal retention periods (e.g. tax and commercial retention regulations), the data will be blocked instead of being deleted. The data to be stored may then be processed on the legal basis of Article 6 Paragraph 1 Letter c) GDPR exclusively for the aforementioned purposes.
6. Your rights as a data subject
You always have the rights described below:
- Right to confirmation and information about the personal data processed by us in accordance with Article 15 GDPR
- Right to correct your personal data in accordance with Article 16 GDPR
- Right to deletion of your personal data (“right to be forgotten”) according to Article 17 GDPR
- Right to restriction of the processing of your personal data in accordance with Article 18 GDPR
- Right to data portability of your personal data in accordance with Article 20 GDPR
- According to Article 22 GDPR, you have the right not to be subjected to a decision based solely on automated processing – including profiling – which has legal effects on you or which significantly affects you in a similar manner.
Please send us your request to the contact details given in section 2 of this data protection declaration.
Right to object You have the right, for reasons that arise from your particular situation, to object at any time to the processing of personal data relating to you, which takes place as of May 25, 2018 on the basis of Article 6 Paragraph 1 Letter e or f GDPR; this also applies to profiling based on these provisions.
In this case, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If personal data are processed in order to operate direct mail, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is connected to such direct advertising.
You also have the right, for reasons that arise from your particular situation, to object to the processing of personal data relating to you that is carried out for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, be it because the processing is necessary to fulfill a task in the public interest. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
8. Right to withdraw consent
You can revoke your express consent under data protection law at any time with effect for the future. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.
9. Complaint about data protection violations to the supervisory authorities
If you are of the opinion that your data protection rights have been violated, you can contact the supervisory authority of your state or the state of our company headquarters. If a complaint concerns a company that is based in another federal state, the supervisory authority forwards the complaint to the supervisory authority responsible there.
10. Duty to notify in connection with the correction or deletion of personal data or the restriction of processing
We notify all recipients to whom personal data has been disclosed of any correction or deletion of personal data or a restriction on processing in accordance with Article 16, Article 17 Paragraph 1 and Article 18 GDPR, unless this proves impossible or is with a disproportionate effort involved. We will also inform you about these recipients if you request this.
11. Legal or contractual provisions for the provision of personal data as well as information about the necessity for the conclusion of the contract as well as the obligation of the data subject to provide the personal data and possible consequences of failure to provide it:
As already described above, we collect and process your personal data in particular for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures that take place at the request of the data subject. The provision of personal data is therefore contractually stipulated for this purpose. In some cases, the provision of personal data when concluding contracts (e.g. for invoices) is also required by law due to tax and / or commercial law regulations. If you do not provide us with any personal data, this means that we cannot conclude a contract with you and / or cannot answer your inquiries.
As far as we process your personal data on the basis of a legitimate interest in accordance with Art. 6 Paragraph 1 Letter f) of the GDPR, the provision of your data for these purposes is neither contractually nor legally required. The details of data processing on the basis of a legitimate interest can be found in the above information at the respective points. If you do not provide us with personal data for these purposes, this may result in you not being able to use our website or not being able to use it to the full extent.
12. Automated decisions in individual cases including profiling
We do not use any automated decision-making – including profiling in accordance with Article 22 Paragraphs 1 and 4 of the GDPR.
13. Data security
We use technical and organizational security measures to protect the processing of personal data, especially against accidental or intentional manipulation, loss, destruction or against attacks by unauthorized persons. Our security measures are continuously improved in line with technological developments.
14. Questions / comments
You are welcome to send any questions or comments about this data protection declaration or data protection in general to our contact details, which you can find in section 2 of this data protection declaration.
15. Use of third party tools and content
If we use tools (programs) and content from third-party providers on our website that use permanent cookies for statistical or analytical purposes and / or process your IP address and / or other personal data, you will find information about these tools and content below about how they work:
Notes on Google Analytics:
It is important to us to design our website as optimally as possible and thus to make it attractive for our visitors. To do this, we need to know which parts of our website are popular with our visitors.
For this purpose, we use the web analysis service Google Analytics, a web analysis service provided by Google Inc. (“Google”), on our website. Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We use Google Analytics on this website with activation of IP anonymization, ie your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly. Information about the configuration of your browser settings can be found in the help function of your respective internet browser. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
In addition, you can prevent the collection of data by a browser plug-in. This plugin sets an opt-out cookie and thus prevents the future collection and processing of your data by Google Analytics. You can download and install a browser plug-in from the link http://tools.google.com/dlpage/gaoptout?hl=de .
You can also prevent Google Analytics from collecting data by clicking on the following link to “Deactivate Google Analytics”. An opt-out cookie is set that prevents the future collection of your data when you visit this website: Deactivating Google Analytics.
Status of the data protection declaration: 16.09.2018