Responsible Website Owner:
Gute Marken Online GmbH Sonnenstraße 20
D-80331 München, Germany
E-mail: email@example.com Phone: +49 89 143 67 152-999
(hereinafter referred to as „We")
Thorsten Höllger (Managing Director)
Data Protection Supervisor:
Tel: 089 143 67 152-521
Gute Marken Online GmbH operates under www.sandwichfashion.co.uk (hereinafter referred to as the „Site") an online shop with products made by Veldhoven International b.v., Gyroscoopweg 86 -88, 1042 AX Amsterdam (hereinafter referred to as the „Manufacturer") and collects personal data. This data protection statement shall advise you to which extent and purposes we collect personal data and which rights you have.
Data subjects’ rights:
It should be noted that the following rights relating to our processing of your personal data can be asserted at any time free of charge:
Right of access Art. 15 GDPR (General Data Protection Regulation)
Right to rectification Art. 16 GDPR
Right to erasure (‘right to be forgotten’) Art. 17 GDPR
Right to restriction of processing Art. 18 GDPR
Right to data portability Art. 20 GDPR
In the event that processing is based on safeguarding justified interests: Right to object Art. 21 GDPR
In the event that processing is based on consent: Right to withdraw consent Art. 7 Para. 3 GDPR
Right of complaint:
It should also be noted that you have a right to lodge a complaint with a data protection authority when you believe that processing of your data violates data protection laws. Such complaints can be lodged, e.g., with the following supervisory authority:
Bavarian Data Protection Supervisory Authority
D-91522 Ansbach, Germany
From this site you can subscribe to our newsletter which informs you about our latest interesting offers.
We use the so-called double opt-in process for subscriptions to our newsletter in which you are sent, after your subscription, an e-mail to the e-mail address you entered and are asked to confirm that you request reception of our newsletter. In addition, we will store the IP address from which the subscription was made and the times of subscription and clicking of the confirmation link. The purpose of this procedure is to document your subscription and prevent any potential abuse of your personal data.
Any further information that we request besides your e-mail address is voluntary data that we use exclusively in order to address you personally.
After your subscription to the newsletter we will use your e-mail address to send you the newsletter for which we will ask your consent during the registration process. You can revoke your consent at any time or unsubscribe the newsletter. We will store your data only until you unsubscribe the newsletter or revoke your consent. You can unsubscribe the newsletter at any time either by sending a message to the above-described contact option or via the relevant link in the newsletter.
Collection, processing and use of personal data:
You can visit our site without entering any personal details. We will only store access details without any personal references, such as the name of our Internet service provider, the site from which you visit us or the name of the requested file. This data is assessed exclusively for the purpose of improving our offers and cannot be traced back to you.
We collect the following data in this process:
- Browser type
- Visited sites in our website
- Operating system
- Anonymized IP address
Please, note: This data is only stored and used in anonymized/pseudonymized form.
We use this data to safeguard our justified interests
- that the website can be displayed on your computer,
- to ensure the functionality of the website,
- to optimize our website,
- to ensure the security of our information technology systems.
The legal basis of our data processing is Art. 6 Para. 1 Lit. f GDPR.
The data will be erased when it is no longer required to achieve the purpose of its collection. Data that we collect for the purpose of providing the site will be erased when the respective session ends.
Use of the online shop:
Personal data is collected when you make such data available to us while ordering goods or opening a customer account. All customer data is stored and processed by us in compliance with applicable data protection laws.
The following data is collected when an order is placed:
- Surname, first name, form of address
- Payment details
- Contact data (E-mail, phone)
- Address and order information
We use the data you make available to us without your separate consent exclusively for the fulfillment and processing of your order. The aforesaid also applies to the disclosure of your data to shipment service providers for the delivery of your order. If required for payment processing we will also make your data available to our principal bank or an external payment service provider. Obligatory data that is necessary for processing an order is marked separately. Further information can be stated on a voluntary basis.
You may create a customer account where we save your data for future purchases. If you create a customer account, the storage of the data provided by you for this purpose is revocable. Your customer account and the relevant data can be deleted at [please, add]. If your data is subject to a legal retention period its processing is restricted and such data is deleted at the end of the legal retention period.
The data will be blocked for further use upon completion of the contractual relationship and deleted as soon as the retention period under commercial or fiscal laws has expired.
Art. 6 Para. 1 Lit. b GDPR is the legal basis for processing such data for handling your order as well as creation and administration of your customer account. The legal basis for storing your data during retention periods under commercial or fiscal laws is Art. 6 Para. 1 Lit. c GDPR.
We will only disclose the data provided by you during the ordering process to the manufacturer when you have given your consent during the ordering process. The manufacturer will use your personal data for its own advertising purposes as well as for market and opinion research. You can revoke your consent completely or partly at any time with effect for the future.
Automated decision making:
Our company regularly checks customers for creditworthiness whenever contracts are concluded; if there is a legitimate interest, we also check existing customers. We therefore collaborate with Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Germany, which provides us with the relevant data. For this purpose, we pass on your name and your contact data to Creditreform Boniversum GmbH. Information about Art. 14 EU General Data Protection Regulation (GDPR) pursuant to which Creditreform Boniversum GmbH processes your data can be found here: www.boniversum.de/EU- GDPR
We conduct a creditworthiness check only when you choose for your order a method of payment where we will bear the payment default risk. In such case we process your personal data in relation to an automated decision whether a purchase contract can be concluded on the basis of your selected means of payment. This decision is exclusively reliant on the automated processing of your personal data during a creditworthiness check. If your creditworthiness check proves positive, you can complete your order with the selected means of payment. Thus, the decision is made without verification of your buying interest or any other impact on the decision-making process by our staff members.
Purpose of the processing is the provision of information on your credit rating. This processing is required in order to conclude a contract with you and safeguard our legitimate interest to avoid payment defaults. Legal basis for this processing is Art. 6 Para.1 Lit. a, f GDPR.
Your personal data is encrypted in the order process 128bit SSL for transmission via the Internet. Credit card details are not stored but acquired directly from our payment service provider and processed. We protect our website and all other systems with technical and organizational measures against loss, destruction, access, manipulation or disclosure of your data by unauthorized persons. Access to your customer account is only possible after input of your personal password. You should always treat your access information confidentially and close the browser window after finalizing communication with us, notably if you use your computer together with third parties.
Use of Google Analytics:
This website uses Google Analytics, a web analyzing service of Google Inc. („Google"). Google Analytics uses so-called „Cookies", these are text files which are saved on your computer and make it possible to analyze your use of the website. The information about your use of the website generated by the cookie is generally transmitted to a server of Google in the USA and stored there. However, if IP anonymization has been activated on this website, your IP address will previously be shortened by Google within the European Union Member States or the other Signatory States of the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be sent to a Google server in the USA and then shortened. Google will use this information on behalf of the operator of this website to analyze your use of the website, to gather reports about the website activities for the website operator and to render further services related to the use of the website and the internet. The IP address transferred from your browser within the framework of Google Analytics will not be merged with other Google data.
You can change the settings of your browser software to keep the cookies from being saved. However, we would like to point out that you may then not be able to use all the functions of this website. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of these data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
This website uses Google Analytics including the „_anonymizelp()‘‘ add-on. The IP addresses are shortened before being further processed; a direct reference to persons can thus be excluded. Hence, any personally identifiable elements in data collected about you are excluded at once and this personal data immediately deleted.
We use Google Analytics in order to analyze use of our website and make continual improvements. We use the generated statistics to improve our offer and make it more interesting for you as a user. For exceptional cases where personal data is transmitted to the USA Google has subjected itself to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. Legal basis for the use of Google Analytics is Art 6 Para. 1 S. 1 Lit. f GDPR.
In addition, this site uses Google Analytics reports in relation to demographic features and interests which save demographic features, such as age and gender, in a cookie. Such data cannot be traced back to a specific person and can be deactivated at any time in the display settings. Further details regarding Google’s terms of service can be found at: www.google.com/intl/de/privacy
If you do not wish to participate in such measurements by Google Analytics you can opt out by clicking the following link: deactivate now
Other web analysis services
• Browser type,
• Operating system,
• Date and time at which a certain banner was delivered.
ADTECH uses this information in order to measure the delivery of banners, such as the number of clicks on a banner or how often a specific banner has been delivered to an individual user.
ADTECH uses this data to generate a report for us and aggregates the data acquired in the individual networks internally for statistical purposes.
If you do not wish to participate in such measurements by ADTECH you can opt out by clicking the following link: deactivate now
We process this data in order to safeguard our legitimate interests of assessing the efficiency of our advertisements, to display banners to you that match your interests and avoid showing the same advertisements repeatedly to you. Legal basis for this processing is Art. 6 Para. 1 Lit. f GDPR.
This website uses Yahoo! Analytics, a service of Oath (EMEA) Limited (previously known as Yahoo! EMEA Limited), 5-7 Point Square, North Wall Quay, Dublin 1, Ireland (hereinafter referred to as "Yahoo!"). Yahoo Web Analytics is a browser-based system used to collect information about visitors to our customers’ websites.
Information collection and use
Yahoo Web Analytics uses web beacons and cookies to collect data about visitors to our customers’ websites. This data is sent to Yahoo by your web browser as part of your interaction with a customers’ website. The data collected commonly includes IP address, time spent on webpages, links clicked, or advertisements viewed on those pages. This data is collected by Yahoo Web Analytics so that Yahoo can report statistical information. Yahoo Web Analytics cookies do not contain personally identifiable information such as name, age, or phone number.
Yahoo! collects this information on our behalf. We can also use only the browser data collected through Yahoo Web Analytics in order to improve our products and services and provide advertisements about goods and services of interest to users.
Your opt-out choices
Most browsers are initially set up to accept cookies. If you would prefer, you can set your browser to reject cookies, or to reject third party cookies only. If you reject cookies, you may not be able to sign in or use other features of websites that rely on cookies.
If you do not wish to have information about your above-described activities collected and processed by Yahoo, you can opt-out here: deactivate now
We use Yahoo! Analytics in order to safeguard our legitimate interests of matching the website to your needs and continually improve it. Legal basis of this data processing is Art. 6 Para. 1 Lit. f GDPR.
The Reach Group
On this website the web analysis service provider The Reach Group GmbH, Am Karlsbad 16, D-10785 Berlin, Germany, collects and stores data from which user profiles are created by using pseudonyms. The required information is stored and processed during your visits to the website. These user profiles are used to analyze visitor behavior for the purpose of improving and customizing our offerings and to deliver personalized advertisements. Reference to your person or your place of residence cannot be made at any time. Even now, such correlation is not possible. With effect for the future you can at any time revoke your consent to the collection and storage of your data for the purpose of web analytics by clicking on the following link: http://hal9000.redintelligence.net/retarqetinqmanaqer.php?c=491296&h=2486ce ac931d
We process this data in order to safeguard our legitimate interests of assessing the efficiency of our advertisements, to display banners to you that match your interests and avoid showing the same advertisements repeatedly to you. Legal basis for this processing is Art. 6 Para. 1 Lit. f GDPR
Legal basis for this processing is Art. 6 Para. 1 Lit. f GDPR.
In the provision of our site we cooperate with the following companies to which we make your personal data available or which may be informed about such personal data:
Alt FineCom Finishing-eCommerce-Logistics GmbH
D-94447 Plattling, Germany
Creditreform Rosenheim Karl & Kollegen KG
P.O. Box 10 01 42
D-83001 Rosenheim, Germany
Frankfurter Str. 57
D-35440 Linden, Germany
D-80807 München, Germany
DHL Paket GmbH
D-53113 Bonn, Germany
D-10179 Berlin, Germany
D-90429 Nürnberg, Germany
Veldhoven International b.v.
Gyroscoopweg 86 – 88
AX-1042 Amsterdam, Netherland
Public authorities which receive data on the basis of legal stipulations (e.g. social insurance providers, fiscal authorities)
Transfer of data to third countries:
There is no data transferred to countries outside of the European Union and such transfer is not planned.
Statutory deadlines for the deletion of data:
- The legislation has imposed a number of data retention terms and periods, most of which make a retention period of ten (10) years mandatory but may also be shorter. In addition, there may deviations due to statutory or contractual retention periods.
- The relevant data is routinely deleted upon the expiry of these data retention periods if it is no longer necessary for contractual fulfillment.
- Any data not affected by the above will be deleted when the purpose ceases to apply.
As at: May 2018