DATA PROTECTION

§ 1 General
Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases, storage periods, the following regulations also inform you about your rights and the person responsible for your data processing. This data protection declaration only applies to our websites. If you are forwarded to other pages via links on our pages, please inform yourself there about the respective handling of your data.

§ 2 data processing to fulfill the contract
(1) Purpose of processing
The personal data that you provide to us in the ordering process is required to conclude a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without providing your address. For some payment methods, we need the necessary payment data to pass it on to a payment service provider commissioned by us. The processing of your data entered in the ordering process is therefore carried out for the purpose of fulfilling the contract.
If you send us an inquiry prior to the conclusion of the contract by email, via a contact form, etc., we will process the data received in this way to carry out pre-contractual measures. B. Your questions about our products.
(2) Legal basis
The legal basis for this processing is Art. 6 Para. 1 b) GDPR.
(3) Categories of recipients
Payment service provider, shipping service provider, hosting provider, possibly ERP system, possibly supplier (dropshipping).
(4) storage duration
We store the data required for the execution of the contract until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.
We store the data required by commercial and tax law for the periods specified by law, usually ten years (see § 257 HGB, § 147 AO).
The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and there is clearly no conclusion of a contract.

§ 3 comments
(1) Purpose of processing
It is possible to write a comment. Your data (e.g. name / pseudonym, email address, website) will then only be processed for the purpose of publishing your comment.
(2) Legal basis
The legal basis for this processing is Art. 6 Para. 1 f) GDPR.
(3) legitimate interest
Our legitimate interest is the public exchange of user opinions on certain topics and products. The publication serves among other things for transparency and opinion formation. Your interest in data protection is preserved because you can publish your comment under a pseudonym.
(4) storage duration
A specific storage period is not provided. You can request that your comment be deleted at any time.
(5) RIGHT TO OBJECT
You have the right to object at any time to data processing based on Art. 6 Para. 1 f) GDPR and not for direct advertising, for reasons that arise from your particular situation.
In the case of direct advertising, however, you can object to the processing at any time without giving reasons.

§ 4 shop rating
(1) Purpose of processing
If you decide to rate our service, we process your email address and your order number and date in order to send you a request for rating confirmation and a final rating request as well as to assign your rating and prevent misuse of the rating.
(2) Legal basis
This processing takes place on the basis of our legitimate interests in improving our services and preventing misuse of ratings in accordance with Art. 6 Para. 1 f) GDPR. (3) Receiver
[Google address]
(4) storage duration
Your data will be stored as long as the Google shop rating is displayed on our website.

§ 5 Google Fonts
The script code "Google Fonts" is integrated on this website. Google Fonts is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). This serves to protect our legitimate interests, which predominate in the context of a balance of interests, in a uniform presentation of the content on our website in accordance with Art. 6 Para. 1 lit. f) GDPR. In this context, a connection is established between the browser you are using and the Google servers. As a result, Google gains knowledge that our website has been accessed via your IP address.As far as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Due to this agreement between the USA and the European Commission, the latter has determined an appropriate level of data protection for companies certified under the Privacy Shield. Further information on data processing by Google can be found in Google's data protection information.

§ 6 Use of YouTube
We use the function to embed YouTube videos from YouTube LLC on our website. (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube").
YouTube is a company affiliated with Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos stored on YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video, information about it is transmitted to YouTube and stored there.
You can find more information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy in YouTube's data protection information (https://www.youtube.com/t/privacy).

§ 7 PayPal transactions
Please note that all PayPal transactions are subject to the PayPal privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

§ 8 credit check by Klarna
Please note the following data protection regulations if you choose Klarna's payment services:
http://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

§ 9 web analysis with Google Analytics
(1) Purpose of processing
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the USA and abbreviated there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website and internet use.
(2) Legal basis
The legal basis for this processing is Art. 6 Para. 1a) GDPR.
(3) Categories of recipients
Google and its partner companies.
(4) Transfer to a third country
Google Ireland Limited is a company associated with Google LLC. Google LLC is located in the USA (1600 Amphitheater Parkway, Mountain View, CA 94043) and is certified for the US-European data protection convention “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.
(5) storage duration
26 months
(6) RIGHT TO OBJECT
You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading the browser plug-in available under the following link and install: opt out

You can also prevent the collection by setting an opt-out cookie. If you want to prevent the future collection of your data when you visit this website, click here to deactivate Google Analytics.

§ 10 information about cookies
(1) Purpose of processing
Technically necessary cookies are used on this website. These are small text files that are saved in or by your Internet browser on your computer system. These cookies enable e.g. B. inserting multiple products into a shopping cart.
(2) Legal basis
The legal basis for this processing is Art. 6 Para. 1 f) GDPR.
(3) legitimate interest
Our legitimate interest is the functionality of our website. The user data collected through technically necessary cookies are not used to create user profiles. This will protect your interest in data protection.
(4) storage duration
The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have different lifetimes, from a few minutes to several years.
(5) RIGHT TO OBJECT
If you do not want these cookies to be stored, please deactivate the acceptance of these cookies in your internet browser. However, this can result in a functional restriction of our website. You can also delete permanently stored cookies at any time via your browser.

§ 11 web display service with Google Adsense
(1) Purpose of processing
On these pages, Google Adsense, a web advertising service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is used to place advertisements (text ads, banners, etc.). To do this, your browser stores cookies (small text files) on your hard drive. These cookies are used by Google to personalize content and ads, to offer functions for social media and to analyze the access to our website. Device IDs are used for apps. In addition, information about your use of our website will be shared with social media, advertising and analytics partners. These partners combine this information with other data that you have provided to them or that they have collected as part of your use of the services.
(2) Legal basis
The legal basis for this processing is Art. 6 Para. 1 a) GDPR.
(3) Categories of recipients
Google and its partner companies.
(4) Transfer to a third country
Google Ireland Limited is a company associated with Google LLC. Google LLC is located in the USA (1600 Amphitheater Parkway, Mountain View, CA 94043) and is certified for the US-European data protection convention “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.
(5) storage duration
Your personal data will only be stored as long as you have consented to the processing.
(6) Revocation of Consent
You can withdraw your consent to the person responsible at any time.

§ 12 Newsletter
(1) Purpose of processing
When registering for the newsletter, your email address will be used for advertising purposes, ie in the context of the newsletter we will inform you in particular about products from our range. For statistical purposes, we can evaluate which links are clicked in the newsletter. It is not clear to us which specific person clicked. You have given the following consent separately or, if necessary, explicitly given it during the ordering process: Subscribe.
(2) Legal basis
The legal basis for this processing is Art. 6 Para. 1 a) GDPR.
(3) Categories of recipients
if applicable, newsletter provider
Our e-mail newsletter is sent via the service provider The Rocket Science Group, LLC d / b / a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http: //www.mailchimp. com /), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in using an advertising-effective, safe and user-friendly newsletter system. Please note that your data is usually transferred to a MailChimp server in the USA and stored there.
(4) storage duration
Your email address will only be saved for sending the newsletter for the duration of the desired registration.
(5) Right of withdrawal
You can revoke your consent at any time with future effect. If you no longer wish to receive the newsletter, you can unsubscribe as follows: Via an unsubscribe link in the newsletter

§ 13 data processing when registering a customer account
According to Art. 6 Para. 1 S.1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms.

At your request, your customer account can be deleted at any time. Send us a message to the below email address. Until then, we will save the relevant data without any time limit so that you can access it at any time. We block the data for specific orders when the customer account is deleted after the order has been processed (expiry of the warranty period) and delete it after the statutory retention periods have expired. We also block the data entered as part of an order without a customer account after the order has been processed (expiry of the warranty period) and delete it after the statutory retention periods have expired.

§ 14 Use of a Tidio live chat system
This website uses technologies from Tidio LLC, office at 180 Steuart St, CA 94119, San Francisco, (www.tidio.com), anonymized data for the purpose of web analysis and to operate the live chat system, which is used to answer live support inquiries, collected and stored. Usage profiles can be created from this anonymized data under a pseudonym. Cookies may be used. Cookies are small text files that are stored locally in the cache of the website visitor's Internet browser. Cookies enable recognition of the Internet browser. If the information collected in this way has a personal reference, the processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in effective customer service and the statistical analysis of user behavior for optimization purposes.

The data collected with the Tidio will not be used to personally identify the visitor to this website without the separate consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym. To avoid the storage of tidio.com cookies, you can set your Internet browser so that cookies can no longer be stored on your computer in the future or cookies that have already been stored are deleted. However, switching off all cookies may mean that some functions on our website can no longer be carried out. You can object to the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with effect for the future by sending us your objection informally by email to the email address given in the legal notice.

§ 14 Your rights as a data subject
If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the person responsible:

Right to information
You can request information about your personal data processed by us within the scope of Art. 15 GDPR.

Right to rectification
If the information concerning you is no longer correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request completion.

Right to delete
You can request the deletion of your personal data under the conditions of Art. 17 GDPR.

Right to demand processing restrictions
Within the framework of the provisions of Art. 18 GDPR, you have the right to request that the processing of your data be restricted.

Right to data portability
According to Art. 20 GDPR, you have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible.

Right to revoke the data protection consent declaration
According to Art. 7 Para. 3 GDPR, you have the right to withdraw your declaration of consent under data protection law at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.

Right to complain to a supervisory authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your residence, your place of work or the place of the alleged violation), in accordance with Art. 77 GDPR to.


Please also note your right to object according to Art. 21 GDPR:

a) General: justified objection required
If personal data concerning you is processed
- to protect our overriding legitimate interest (legal basis according to Art. 6 Para. 1 f) GDPR) or
- in the public interest (legal basis according to Art. 6 Para. 1 e) GDPR),
you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.

In the event of an objection, we will no longer process the personal data relating to you, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

b) Special case of direct mail: a simple objection is sufficient
If the personal data relating to you are processed for direct marketing purposes, you have the right to object to this processing at any time and without giving reasons; this also applies to profiling insofar as it is connected to such direct advertising.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.


Responsible for data processing:
Krämer & Waheed GbR
Gießener Str.29a
61118 Bad Vilbel
Mobilephone: +49 151 240 32 000
support@understateman.com