data protection

§ 1. General

Your personal data (e.g. title, name, address, email address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases, storage periods, the following regulations also inform you about your rights and the person responsible for your data processing. This data protection declaration only applies to our websites. If you are redirected to other sites via links on our pages, please inform yourself there about how your data is handled.

§ 2 Data processing for contract fulfillment

(1) Purpose of processing

The personal data you provide to us during the ordering process is required to conclude a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without providing your address. For some payment methods, we require the necessary payment data in order to pass it on to a payment service provider commissioned by us. The data entered in the ordering process will be processed for the purpose of fulfilling the contract.

If you send us an inquiry by email, via a contact form, etc. before concluding a contract, we will process the data received in this way to carry out pre-contractual measures and, for example, answer your questions about our products.

(2) Legal basis

The legal basis for this processing is Article 6 Paragraph 1 b) GDPR.

(3) Recipient categories

Payment service providers, shipping service providers, hosting providers, if applicable merchandise management system, if necessary suppliers (dropshipping).

(4) Storage period

We store the data required to process the contract until the statutory warranty and, if applicable, contractual guarantee periods expire.

We retain the data required by commercial and tax law for the legally specified periods, usually ten years (see Section 257 HGB, Section 147 AO).

The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and it is clear that a contract will not be concluded.

§ 3 Shop rating

(1) Purpose of processing

If you decide to rate our service, we will process your email address as well as your order number and date in order to send you a review confirmation request and a final review request, as well as to assign your review and prevent review abuse.

(2) Legal basis

This processing is carried out on the basis of our legitimate interests in improving our services and preventing evaluation abuse in accordance with Art. 6 Para. 1 f) GDPR.

(3) Receiver

[ TrustedShops ]

(4) Storage period

Your data will be stored as long as the shop rating is displayed on our website.

§ 4 Further information

Your data will be passed on to our shipping service provider DHL. These are saved. You can of course request that the data be deleted, and we will then forward this to DHL.

§ 5 PayPal transactions

Please note that all PayPal transactions are subject to the PayPal Privacy Policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

§ 6 Credit check by Klarna

Please note the following data protection regulations if you choose Klarna's payment services:

http://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

§ 7 Web analysis with Google Analytics

(1) Purpose of processing

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

(2) Legal basis

The legal basis for this processing is Article 6 Paragraph 1a) GDPR.

(3) Recipient categories

Google and its partner companies.

(4) Transfer to a third country

Google Ireland Limited is an affiliated company of Google LLC. Google LLC is based in the USA (1600 Amphitheater Parkway, Mountain View, CA 94043).

(5) Storage period

Unlimited

(6) RIGHT TO OBJECT

You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: opt out

You can also prevent data collection by setting an opt-out cookie. If you would like to prevent future collection of your information when you visit this website, please click here: Deactivate Google Analytics

§ 8 Information about cookies

(1) Purpose of processing

Technically necessary cookies are used on this website. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable, for example, the insertion of several products into a shopping cart.

(2) Legal basis

The legal basis for this processing is Article 6 Paragraph 1 f) GDPR.

(3) Legitimate interest

Our legitimate interest is the functionality of our website. The user data collected through technically necessary cookies is not used to create user profiles. This protects your interest in data protection.

(4) Storage period

The technically necessary cookies are usually deleted when you close the browser. Permanently stored cookies have a varying lifespan, from a few minutes to several years.

(5) RIGHT TO OBJECT

If you do not want these cookies to be stored, please deactivate the acceptance of these cookies in your internet browser. However, this may result in a functional restriction on our website. Permanently You can also delete stored cookies at any time via your browser.

§ 9 Social Plugins from Facebook

We use social plugins from facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. The plugins can be recognized by the Facebook logo or the addition “ Facebook Social Plugin ”. For example, if you click the " Like " button or leave a comment, the corresponding information will be transmitted directly from your browser to Facebook and stored there. Facebook also makes your preferences public to your Facebook friends. If you are logged in to Facebook, Facebook can assign your access to our site directly to your Facebook account. Even if you are not logged in or do not have a Facebook account, your browser transmits information (e.g. which website you visited, your IP address) that is stored by Facebook. For details on how Facebook handles your personal data and your rights in this regard, please see the data protection information Facebook . If you do not want Facebook to assign the data collected about you via our websites to your Facebook account, you must log out of Facebook before visiting our websites. You can also completely prevent the Facebook plugins from loading with add-ons for your browser, e.g. with the “ Facebook Blocker ” (Facebook)

§ 10 Newsletter

(1) Purpose of processing

When you register for the newsletter, your email address will be used for advertising purposes, meaning that as part of the newsletter we will inform you in particular about products from our range. For statistical purposes, we can evaluate which links in the newsletter are clicked. We cannot see which specific person clicked. You have given the following consent separately or, if necessary, expressly during the ordering process: Subscribe to the newsletter.

(2) Legal basis

The legal basis for this processing is Article 6 Paragraph 1 a) GDPR.

(3) Recipient categories

If necessary, newsletter delivery provider

(4) Storage period

Your email address will only be saved for the newsletter dispatch for the duration of the desired registration.

(5) Right of withdrawal

You can revoke your consent at any time with future effect. If you no longer wish to receive the newsletter, you can unsubscribe as follows: Using an unsubscribe link in the newsletter

§ 11 Your rights as a data subject

If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights towards us as the person responsible:

1. Right to information

You can request information about your personal data processed by us within the scope of Article 15 GDPR.

2. Right to rectification

If the information concerning you is no longer accurate, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

3. Right to deletion

You can request the deletion of your personal data under the conditions of Art. 17 GDPR.

4. Right to restriction of processing

Within the framework of the provisions of Article 18 GDPR, you have the right to request a restriction on the processing of the data concerning you.

5. Right to data portability

According to Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.

6. Right to revoke the declaration of consent under data protection law

According to Art. 7 Para. 3 GDPR, you have the right to revoke your data protection declaration of consent at any time. This does not affect the lawfulness of the processing carried out based on consent until its revocation.

7. Right to complain to a supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the member state of your place of residence, your place of work or the place of the alleged violation) in accordance with Article 77 of the GDPR. to.

Please also note your right to object according to Art. 21 GDPR:

a) General: justified objection required

Personal data concerning you is processed

- to protect our overriding legitimate interest (legal basis according to Art. 6 Para. 1 f) GDPR) or

- in the public interest (legal basis according to Art. 6 Para. 1 e) GDPR),

you have the right to object to processing at any time for reasons relating to your particular situation; This also applies to profiling based on the provisions of the GDPR.

In the event of an objection, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

b) Special case of direct advertising: a simple objection is sufficient

If your personal data is processed for the purpose of direct advertising, you have the right to object to this processing at any time and without giving reasons; This also applies to profiling insofar as it is connected to such direct advertising.

If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes.

Person responsible for data processing:
Birgit Möller
Galgenberg 14a
39576 Stendal
Telephone: 03931-4104989
welcome@bmcolours.com