Privacy Notice

Privacy Policy

Thank you for your interest in our website. As a member of the Association of Safe and Serious Internet Shop Operators e. V., the protection of your personal data is taken very serious by us. In the following we will inform you, transparently and in understandable language, about the data collection and its extent, your data and what rights you have.

You have the right to receive information about the origin, the recipient(s) and the purpose of your stored personal data free of charge at any time. You also have the right to request the correction, restriction or deletion as well as the transfer of this data. If you have any questions about this or about data protection, you can contact the person responsible for data processing at any time. The person responsible for data processing is named under point 1 of this data protection declaration. Furthermore, you are entitled to a right of appeal to the competent supervisory authority. Your rights in detail and detailed explanations can be found under point 6 of this data protection declaration.

Your data will be collected, stored and processed in compliance with the relevant legal regulations. Personal data are all types of data with which you can be identified as a person.

1.) Who is responsible for data processing?

In terms of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations, the responsible body, is a natural or legal person who alone or jointly with others, determines the purposes and the means of processing personal data (names, contact details etc.).

Responsible for data processing on this website is:

Oliver Becker
Zum Haarstrauch 14
63546 Hammersbach
Germany
Phone: +49 (0) 6048-238880
E-Mail: info@farbtoner.com

2.) Which data is recorded and processed on our website?

2.1 Automated collection of data:

Every time our website is called up, our system automatically records data and information from the computer system of the calling computer, in so-called server log files. Some of this data is technically necessary to display our website to you. It will not be merged with data from other sources. The following data is collected:
•    The webpages called up
•    Used browser type and -version.
•    The operating system used by the accessing system
•    The website from which an accessing system reaches our site
•    The date and time the page was accessed
•    The Internet service provider of the accessing computer
•    The Internet protocol address (IP address) used

The legal basis for data processing is Article 6 paragraph 1 lit. f of the General Data Protection Regulation (GDPR), which enables us to process the data in the event of a legitimate interest. In this case, our legitimate interest is the reliable and error-free functioning of our website. This data is not processed in any other way.

2.2 Collection of personal data

2.2.1 Data collection and processing when opening a customer account and when processing contracts

If you open a customer account on our website, this is done voluntarily. Registration is not a requirement for concluding a contract. Data is only collected to the minimum required; the mandatory information can be recognized by the correspondingly marked input fields. The deletion of the customer account is possible at any time and free of charge. If you wish to delete your data, please contact the person responsible for data processing. This is mentioned under point 1 of this data protection declaration.

We only use your data for the purpose for which you have registered or to process the contract. The legal basis for data processing is Article 6 paragraph 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary for the fulfillment of a contract with you or to carry out pre-contractual measures.

The customer data collected will be blocked after completion of the order, after the end of the business relationship or after deletion of your customer account and deleted after expiry of tax and commercial retention periods, unless you have consented to further use of your data.

2.2.2 Data collection and processing when using our email address or contact function

In the case of emails or messages via the contact form, we will save your data until your message has been processed. The mandatory information in the mask of the contact form can be recognized by the correspondingly marked input fields. The data will only be used to process your request, after processing your data will be deleted. The legal basis for data processing is Article 6 paragraph 1 lit. f of the General Data Protection Regulation (GDPR), which enables us to process the data in the event of a legitimate interest. In this case, our legitimate interest is to answer your message or to process your request.
For emails or messages via the contact form (if available) aimed at the initiation of a contract, the commercial and tax retention periods of 10 years apply from the end of the calendar year in which the data was collected. After the deadlines have expired, the data is regularly deleted, unless it is still required for the initiation or the fulfillment of the contract or we have a legitimate interest in continuing the storage. The legal basis for data processing is Article 6 paragraph 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary for the performance of a contract with you or for the implementation of a pre-contractual measure.

2.2.3 Newsletter function, data processing and possibility of contradiction

2.2.3.1 You have signed up for our newsletter subscription:

If you subscribe to our free newsletter, data from the registration mask will be transmitted to us. The mandatory information can be recognized by the appropriately marked input fields and is limited to the required minimum (email address). Consent is obtained for the processing of your data during the registration process and reference is made to this data protection declaration. The legal basis for data processing is Article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing.

The data will not be passed on to third parties, but will only be used to send newsletters. You can revoke your subscription to the newsletter (with your consent) at any time for the future. To revoke your consent, there is a link in every newsletter to unsubscribe from the newsletter, but you can also unsubscribe directly via our website. The request to unsubscribe from the newsletter can of course also be sent directly to the person responsible for data processing. This is mentioned under point 1 of this data protection declaration. After unsubscribing from the newsletter, the data will be deleted unless you have consented to further use or we reserve the right to further use (as explained below under 2.2.3.2), which is legally permitted.

2.2.3.2 When we send newsletters to our existing customers

If you have purchased goods or services on our website and have saved your email address, we can use this to send you a newsletter, provided you have not objected to this. In such a case, only direct advertising for similar goods or services from our range will be sent via the newsletter. The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 Abs. 3 UWG. The legal basis for data processing is Article 6 paragraph 1 lit. f of the General Data Protection Regulation (GDPR), which enables us to process the data in the event of a legitimate interest. In this case, our legitimate interest is to send you personalized advertising. You can object to the use of your data for this purpose at any time with future effect. To object, please contact the person responsible for data processing. This is mentioned under point 1 of this data protection declaration.

2.3 Passing on data to third parties to fulfill the contract

2.3.1 Forwarding data to general shipping service providers and credit institutes

For payment transactions and, if necessary, for the delivery of goods, we pass on the minimum personal data required to service providers (third parties), if this is necessary for the execution of the contract.

If we pass on your data to a shipping service provider (such as DHL, DPD, UPS Hermes or GLS), the legal basis for this is Article 6 paragraph 1 lit. b of the General Data Protection Regulation (GDPR), which allows us to process the data if this is necessary for the fulfillment of a contract with you or for the implementation of a pre-contractual measure.

If we pass on your payment data to the commissioned bank, the legal basis for this is Article 6 paragraph 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary for the fulfillment of a contract with you or for the implementation of a pre-contractual measure.

2.3.2 Forwarding of email address and / or telephone number to shipping service providers

On our website, you have the choice of forwarding your email address and / or telephone number to enable the selected shipping service provider to announce the delivery or to discuss it with you. In the following, we will inform you about which data is passed on to which shipping service provider and on the basis of which legal situation this happens:

2.3.2.1 DHL

If your goods are delivered by the shipping service provider DHL and you have expressly consented to your email address being passed on during the ordering process, this will be sent to DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn) to announce the delivery or the agreement of the delivery date to be passed on. The legal basis for data processing is Article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing. If you do not agree to the forwarding of the email address, delivery will be made in accordance with the conditions of section 2.3.1 of this data protection declaration. An announcement of the delivery or an agreement of the delivery date by DHL is not possible then.

A given consent to the use of data can be cancelled at any time for the future. For this purpose, please contact the person responsible for data processing (this is mentioned under point 1 of this data protection declaration), or the shipping service provider directly.

2.3.2.2 UPS

If your goods are delivered by the shipping service provider UPS and you have expressly consented to your email address being passed on during the ordering process, this will be sent to UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss) to announce the delivery or for the agreement of the delivery date to be passed on. The legal basis for data processing is Article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing. If you do not agree to the forwarding of the email address, the delivery will be made in accordance with the conditions of section 2.3.1 of this data protection declaration. An announcement of the delivery or an agreement of the delivery date by UPS is not possible then.

A given consent to the use of data can be cancelled at any time for the future. For this purpose, please contact the person responsible for data processing (this is mentioned under point 1 of this data protection declaration), or the shipping service provider directly.

2.3.2.3 GLS

If your goods are delivered by the shipping service provider GLS and you have expressly consented to your email address being passed on during the ordering process, this will be sent to GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein) to announce the delivery or for the agreement of the delivery date to be passed on. The legal basis for data processing is Article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing. If you do not agree to the forwarding of the email address, the delivery will be made in accordance with the conditions of section 2.3.1 of this data protection declaration. An announcement of the delivery or an agreement of the delivery date by UPS is not possible then.

A given consent to the use of data can be cancelled at any time for the future. For this purpose, please contact the person responsible for data processing (this is mentioned under point 1 of this data protection declaration), or the shipping service provider directly.

2.3.3 Payment service provider

On our website, you can choose from various payment service providers. In the following we will inform you about which data is passed on and based on which legal situation this happens:

2.3.3.1 PayPal/PayPal Plus

If you choose this payment service provider, the data required for payment will be passed on to PayPal (PayPal Europe, S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). The legal basis for this is Article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing and Article 6 paragraph 1 lit. (GDPR), which enables us to process the data if this is necessary to fulfill a contract with you or to carry out a pre-contractual measure. You have the right to withdraw your declaration of consent at any time. Cancelling your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of cancellation.

If you choose the PayPal Plus payment methods “credit card”, “invoice”, “direct debit” or “PayPal deferred payment”, PayPal reserves the right to obtain credit information about you. A credit report can contain scoring values (= probability values). The so-called scoring values are based on a scientifically recognized mathematical-statistical procedure. Your address details are also (but not exclusively) included in the calculation of the score values.
The legal basis for data processing is Article 6 paragraph 1 lit. f of the General Data Protection Regulation (GDPR), which enables data to be processed in the event of a legitimate interest.

You can cancel to the processing of your personal data at any time. However, PayPal may still be entitled to process, use and transmit the personal data if this is necessary for contractual payment processing by PayPal, is legally required, or is required by a court or an authority.
If you want to cancel the use of your data or if you want to inform us about changes to the stored data, you can contact PayPal directly. You can also find more information about PayPal's data protection provisions at the following Internet address:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

2.3.3.2 Sofort Payment (Immediate transfer)

If you choose this payment service provider, the payment-relevant data and your personal data will be passed on to Sofort GmbH (Sofort GmbH, Theresienhöhe 12, 80339 Munich). Your personal data is your first name, last name, address, telephone number, email address and IP address. This data transfer is necessary to establish your identity beyond any doubt and thus to prevent possible attempts of fraud. In addition, you transmit your PIN and a TAN to Sofort GmbH, which uses them to log into your bank account and make a transfer to us. After the Sofort GmbH log in, the account turnover, the amount of the overdraft facility and the existence of other accounts and their status are automatically checked. After the transfer has been carried out, we will be informed of the successful payment.

The legal basis for this is is Article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing, and Article 6 paragraph 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary for the fulfillment of a contract with you or to carry out a pre-contractual measure. If you would like to cancel the use of your data or if you want to inform us about changes to the stored data, you can contact Sofort GmbH directly. At the following internet address you will find further information about the data protection regulations of Sofort GmbH; the cancellation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation:
https://www.sofort.de/datenschutz.html oder https://www.klarna.com/sofort/datenschutz/

3.) What are cookies and what data is processed?

3.1 Cookies that are used by our website

Our website uses so-called cookies. Cookies are text files that are stored in the internet browser or by the internet browser on your computer. We use cookies to make our website more user-friendly for you. Some elements of our website require that the calling browser can also be identified after changing pages, for example, to save and transmit the items in your shopping cart or your login information. Most of the cookies we use are so-called "session cookies", which are automatically deleted when the browser is closed. Some cookies remain stored on your device and enable recognition the next time you visit the website (so-called persistent cookies). These are automatically deleted after a specified period. You can find more detailed information on individual cookies in your browser settings.

The legal basis for data processing is either Article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing, or Article 6 paragraph 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary for the performance of a contract with you or to carry out a pre-contractual measure, or Article 6 paragraph 1 lit. f of the General Data Protection Regulation ( GDPR), which enables us to process the data in the event of a legitimate interest. In this case, our legitimate interest is to offer you a technically error-free and function-optimized website.

If we store other cookies (for example from partner companies or to analyze your surfing behavior) on your device, we will inform you in detail below.
You can set your browser so that you are informed about the setting of cookies and then only allow these cookies in individual cases. You can also generally exclude the acceptance of cookies or only accept them in certain cases. You can also set your browser so that cookies are deleted after you close the browser window. The setting options differ depending on the browser. You can find help on the possible settings (for the most common browsers) under the following links:
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Opera: https://help.opera.com/de/latest/web-preferences/#cookies   
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Please note that if you do not accept cookies, the functionality of our website may be significantly restricted.

3.2 Comment function on our website

For this function, your comment, (if specified) your username (nickname), the time your comment was created, your IP address and your email address are saved. Your data will be stored until the content you commented on has been completely deleted (or had to be deleted for legal reasons). We reserve the right to delete comments that third parties have complained about as being illegal.

The legal basis for the storage and processing of your comment, the user name and the time at which the comment was created is Article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data, if you have given consent to this. You have the right to withdraw your declaration of consent under data protection law at any time. Cancelling your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of cancellation.

The legal basis for the data processing of your IP address and your email address is Article 6 paragraph 1 lit. f of the General Data Protection Regulation (GDPR), which enables us to process the data in the event of a legitimate interest. In this case, our legitimate interest is to be able to take action against you in the event of legal violations such as insults or propaganda. We need the email address in order to get in contact with you if your comment should be objected to as illegal by a third party.

3.3 Web analysis / Marketing

3.3.1 Google Analytics

We use the Google Analytics analysis tool on our website. Provider of this analysis tool is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". Cookies are small text files that are stored on your computer and thus enable your use of the website to be analyzed. This analysis data is usually transferred to a Google server in the USA and stored there.

The legal basis for data processing is Article 6 paragraph 1 lit. f of the General Data Protection Regulation (GDPR), which enables us to process the data in the event of a legitimate interest. In this case, our legitimate interest is to analyze user behavior in order to optimize our offer and our advertising.
We would like to point out that on this website, Google Analytics has been expanded to include the code "gat._anonymizeIp ();" in order to ensure the anonymized collection of IP addresses (so-called IP masking). By activating the IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.

The IP address transmitted by your internet browser as part of Google Analytics will not be merged with other Google data.
You can prevent cookies from being saved by setting your Internet browser accordingly. However, we would like to expressly point out that in this case you may not be able to use all functions of this website to their full extent.

You can prevent data collection by Google Analytics by clicking the link below and downloading the tool offered there:
https://tools.google.com/dlpage/gaoptout?hl=de
You can also prevent data collection by Google Analytics by clicking on the link below, which sets an optout cookie that prevents the collection of your data on future visits to this website: Google Analytics deaktivieren.
You can also obtain further information about Google's data protection provisions at the following Internet address:
https://support.google.com/analytics/answer/6004245?hl=de

3.4 Social Media/Plugins

Not used.

4.) How is he data saved?

The transmission of personal data is exclusively encrypted via an SSL or a TLS connection. This applies to messages via our contact function as well as to data on your order and payment transactions. Encryption prevents your sensitive personal data from being intercepted and viewed by unauthorized third parties. You can recognize an encrypted connection by the fact that the address line of the browser begins with "https: //" (and the lock symbol in the browser line).

The data stored in the systems of our website are protected by passwords and cannot be viewed by unauthorized third parties.

The transmission of data on the Internet, for example when sending an email, is not 100% secure and in some cases can have security gaps.

5.) How long is personal data stored?

How long your personal data is stored by us depends on the legal retention period. In the case of messages via our contact function and / or via our email address, your data will be deleted after processing has been completed, unless we have a legitimate interest in continuing the storage.

The retention periods under commercial and tax law are 10 years from the end of the calendar year in which the data was collected. After the deadlines have expired, the data is regularly deleted, unless it is still required for the initiation or for the fulfillment of the contract or we have a legitimate interest in continuing the storage.

6.) What rights do you have against the person responsible for data processing?

In the following, we list the rights that you have against the person responsible for data processing under the General Data Protection Regulation (GDPR). The person responsible is named under point 1 of this data protection declaration. If your personal data is processed, you are “data subject” within the meaning of the General Data Protection Regulation (GDPR).

6.1 Your right of information in accordance with Art. 15 General Data Protection Regulations (GDPR)

You can request information from the person responsible for data processing as to whether your personal data is being processed. If such processing is available, you can also request information about the purposes for which this personal data is processed; the categories of personal data being processed; the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed; the planned storage duration of your personal data or, if no specific information is available, the criteria for determining the storage duration; the existence of a right to correction or deletion of your personal data, the existence of a right to restrict processing by the person responsible for data processing or a right to object to this processing; the existence of a right to lodge a complaint with a supervisory authority (the data protection officer of the federal state in which we are based is responsible - you can find addresses and links here); all available information about the origin of the data if the personal data is not collected from the data subject (i.e. you); the existence of automated decision-making including profiling in accordance with Article 22 paragraph 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information about whether your personal data is being transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with Article 46 of the General Data Protection Regulation (GDPR) in connection with the transmission.

6.2 Your right of correction according to Art. 16 General Data Protection Regulations (GDPR)

You have the right to immediate correction and / or completion against the person responsible for data processing, provided that the processed personal data concerning you are incorrect or incomplete.

6.3 Your right to deletion according to Art. 17 General Data Protection Regulations (GDPR)

You can have the right to request from the person responsible for data processing to delete the personal data concerning you immediately and he is obliged to delete this personal data immediately if one of the reasons from Article 17 paragraph 1 GDPR applies.

The right to deletion does not exist if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims.

You have the right to demand that the person responsible for data processing restricts processing as long as the correctness of the personal data relating to you is checked, you refuse to delete the personal data and instead demand that the use of the personal data be restricted, the person responsible for the personal data is no longer required for the purposes of processing, but you need them to assert, exercise or defend legal claims, or if you have objected to processing in accordance with Article 21 paragraph 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons

6.5 Your right to be informed according to Art. 19 General Data Protection Regulations (GDPR)

If you have claimed your right to correction, deletion or restriction of processing against the person responsible for data processing, he is obliged to notify all recipients to whom the personal data relating to you has been disclosed of this correction or deletion of the data or restriction of processing, whether that be because this turns out to be impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the person responsible

6.6 Your right to data portability according to Art. 20 General Data Protection Regulations (GDPR)

You have the right to receive the personal data concerning you, which you have provided to the person responsible for data processing, in a structured, common and machine-readable format and you have the right to transfer this data to another person responsible without hindrance from the person responsible for data processing, to which the personal data was provided, to the extent that this is technically possible.

This right to data portability does not apply to processing that is necessary for the performance of a task that is in the public interest or that takes place in the exercise of official authority that has been assigned to the person responsible for data processing.

The right to data portability is not allowed to affect the rights and freedoms of other people.

6.7 Your right to cancel your declaration of consent according to Art. 77 General Data Protection Regulations (GDPR)

You have the right to cancel your data protection declaration of consent at any time with effect for the future. In the event of a cancellation, the data concerned will be deleted immediately, unless there is a legal basis for processing that does not require consent. Cancelling your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of cancellation.

6.8 The automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effect on you or which significantly affects you in a similar manner. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and the person responsible, it is permissible on the basis of legal provisions of the European Union or the member states to which the person responsible is subject and these legal provisions take appropriate measures to safeguard your rights, contain freedoms and your legitimate interests or with your express consent.

However, these decisions are not allowed to be based on special categories of personal data according to Article 9 paragraph 1 GDPR, unless Article 9 paragraph 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

Regarding the cases mentioned in 6.8.1 and 6.8.3, the person responsible for data processing takes appropriate measures to safeguard the rights and freedoms and your legitimate interests, including at least the right to obtain intervention by the person responsible, to state his own standpoint and to contest the decisions.

6.9 Your right to complain to a supervisory authority according to Art. 77 General Data Protection Regulations (GDPR)

Without causing damage to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data violates the GDPR.

The supervisory authority to which the complaint was lodged, informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy in accordance with Article 78 of the General Data Protection Regulation (GDPR).

+++++++++++++++++++++++++++++

6.10 RIGHT TO OBJECT

For reasons that are caused from your particular situation, you have the right to object at any time to the processing of your personal data, which is based on Article 6 paragraph 1 lit. e or f GDPR, with effect for the future; this also applies to profiling based on these provisions.

The person responsible for data processing will no longer process the personal data concerning you unless he can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed in order to operate direct mail, you have the right to object to the processing of the personal data concerning you for the purpose of such advertising at any time; this also applies to profiling insofar as it is connected to such direct advertising.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Regardless of guideline 2002/58 / EC of the Electronic Communications Privacy Policy, you have the option, in connection with the use of information society services, to exercise your right of objection by means of automated procedures that use technical specifications.

+++++++++++++++++++++++++++++