2. Purpose of the processing of personal data

2.1 Data processing for the provision of contractual services

We process personal data in order to handle the contractual relationships and to be able to submit needs-based contractual offers. The data is collected in particular to conclude a contract.

For all forms, we only collect the personal data that is absolutely necessary for processing the contractual relationship or for your request for information. This information is marked with an asterisk. The collection of data that is not absolutely necessary, but in which we have an interest in order to optimize the fulfillment of the purpose, is only optional. In this case, you decide on a voluntary basis whether and which data you wish to provide us with.

For your order we need your correct name, address and payment details. We need your e-mail address and telephone number so that we can confirm receipt of your order and communicate with you in the event of shipping problems. We also use these for your identification (customer login). You will also receive your order and shipping confirmation via your e-mail address.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

2.2 Customer area

On our websites, we offer the option of registering for the customer area by providing personal data. We require the following information for this: First and last name, e-mail address, user name and password. The data in the customer area can be viewed, edited and deleted using your login name and password. In the event that you have forgotten your password for the customer portal, you will find the "Forgotten password" link on the log-in page. You can enter a new password by entering your login name and customer number.

The personal data you enter when using the customer area will only be processed in order to be able to offer you the associated services, which can only be offered to registered users.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures]

2.3 Data processing for communication with you (contact form etc.)

In addition to the contract data, we process your communication data (name, address, telephone number, e-mail address) in order to process your request and/or to be able to contact you. Personal data that you provide to us by e-mail or via the contact form on this website will only be processed for correspondence with you or only for the purpose for which you have provided us with the data.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

2.4 Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The respective content of a newsletter is explained in the respective declaration of consent. If you would like to receive a newsletter offered by us, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. For this purpose, we will send you an e-mail with a confirmation link (double opt-in) to the e-mail address you have provided. If you do not confirm your registration within 72 hours, your information will be blocked and automatically deleted after one month.

The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to address you personally. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data. We do not collect any other data in this context. We use this data exclusively for sending the requested newsletter. If we use a processor to send the newsletter, we will of course comply with the applicable data protection laws.

The data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent to the sending of a newsletter at any time and cancel the respective subscription. You can declare your revocation by clicking on the link provided in each email or by sending us a message using the contact details given in section 1. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

2.5 Cookies

We use so-called cookies on some of our websites, among other things to be able to offer you website-specific services, to recognize you when you return to our website, and/or to adapt our offer to your personal preferences.

Cookies are small text files that are stored on a visitor's computer and contain data about the respective user in order to give them access to various functions. Both session cookies and persistent cookies are used on our website. A session cookie is temporarily stored on the computer you are using while you navigate through the website. A session cookie is deleted as soon as you close your Internet browser or as soon as your session has expired after a certain period of time. A persistent cookie remains on your computer until it is deleted. Storing a cookie ensures that you do not have to repeatedly enter your personal settings and preferences each time you visit. This saves you time and makes using our website more convenient for you.

You can delete permanently installed cookies via your browser settings. Most browsers accept cookies automatically - so if you want to suppress the use of cookies, you may have to actively delete or block cookies or prevent the storage of cookies by setting your browser software. Please note, however, that if you refuse the use of cookies, you may still be able to visit our website, but some functions may not work properly.

The use of the aforementioned cookies is in the interest of a uniform presentation and functionality of our websites. The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

2.6 Data processing for applications

You can send us applications for positions in our company via our websites and the contact details provided there. If you submit personal data to us in this way or in any other way when applying, we will process your data for the purpose of reviewing, processing and responding to your application and, if necessary, preparing the employment relationship.

The basis for data processing is Art. 6 para. 2 GDPR, § 26 para. 1 BDSG (new) which permits the processing of data for the decision on the establishment, for the establishment and for the implementation of employment relationships.

2.7 Data processing for the protection of legitimate interests

We also process your data if it is necessary to protect our legitimate interests or those of third parties. This may be the case in particular to ensure IT security and IT operations, especially in the case of support requests, to be able to trace and prove facts in the event of legal disputes, for market and opinion surveys, to statistically evaluate the use of our website, to advertise other products from us or our cooperation partners.

The basis for data processing is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the data processing listed above.

2.8 Data processing for advertising purposes

If your data is used for advertising purposes for our products and for other products of our cooperation partners, we may obtain your consent. The data processing then takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation. In addition, we use your email address for product recommendations if you have already ordered something from us. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. In this way, we want to send you information about products from our range that may be of interest to you based on your recent purchases from us. In doing so, we adhere strictly to the legal requirements. If you no longer wish to receive product recommendations or advertising messages from us, you can object to this at any time. A message in text form to the contact details mentioned under point 1 (e.g. e-mail, fax, letter) is sufficient for this.

The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data to safeguard the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.

2.9 Data processing for market and opinion research

We also use your data for market and opinion research. Of course, we only use this data anonymously for statistical purposes and only for one-off purposes. Your answers to surveys will not be passed on to third parties or published.

The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data to safeguard the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.

2.10 Log files

Each time our websites are accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The stored data records contain the following data: Browser type and browser version, operating system used, referrer URL, time of server request, IP address. The IP addresses of the users are deleted or anonymized after the end of use.

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data to safeguard the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail.

2.11 Data processing for processing payments via PayPal

On our website we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.

The transmission of your data to PayPal is based on Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

2.12 Data processing for the BONTABILITY CHECK

We give our customers the opportunity to purchase services and goods using insecure payment methods (e.g. purchase on account). Companies that grant their customers insecure payment methods have a legitimate interest in protecting themselves as well as possible against the occurrence of payment defaults. In the event of non-payment, unizell will carry out a credit check. As part of this check, we are entitled to obtain creditworthiness information from an external credit agency. For this purpose, we transmit the required personal data (first name and surname, your address and, if applicable, your date of birth) to our credit rating service provider. In addition, the credit check serves your and our security, as it prevents fraud and other criminal offenses.

The processing of your data as part of the credit check is based on the legal basis in Art. 6 para. 1 lit. b GDPR or the legal basis in Art. 6 para. 1 lit. f GDPR. In principle, we have a legitimate interest in carrying out a credit check in the event of non-payment.

2.13 Use of data for fraud prevention purposes

The data you provide when placing an order may be used by us to check whether an atypical order transaction has taken place.

In principle, we have a legitimate interest in carrying out such a review. The data is processed on the legal basis of Art. 6 para. 1 lit. f GDPR.

2.14 Data processing for the fulfillment of legal obligations

In addition, we process your data to fulfill legal obligations (e.g. regulatory requirements, commercial and tax law retention and verification obligations).

The basis for data processing is Art. 6 para. 1 lit. c GDPR, which permits processing to fulfill a legal obligation.

2.15 Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, since IP anonymization is activated on our website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your anonymized IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Google Analytics cookies are set on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.

Use of Google Ads and Google Conversion Tracking

Our website uses Google Ads. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.

Ads is an online advertising program. As part of the online advertising program, we work with conversion tracking. If you have clicked on an ad placed by Google, a cookie is set for conversion tracking. The cookie allows Google and us to recognize that you have clicked on an ad and have been redirected to our website. The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in analyzing user behavior in order to optimize our website and our advertising.

Cookies are small text files that your web browser stores on your end device. They lose their validity after 30 days and are not used to personally identify users.

Google Ads customers receive different cookies; these cannot be tracked via the websites of Ads customers. Conversion cookies are used to generate conversion statistics for Ads customers who use conversion tracking. Ads customers find out how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, Ads customers do not receive any information that allows users to be personally identified. If you do not wish to participate in tracking, you can object to its use. In this case, the conversion cookie must be deactivated in the user settings of the browser. This will also prevent your data from being included in the conversion tracking statistics.

Further details on Google Ads and Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy?gl=de .

You have the option under https://www.google.com/settings/ads/onweb/ to monitor, restrict or prevent the setting of cookies. Deactivating cookies can lead to limited functionality of our website.

Google Tag Manager

Type and scope of processing

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and enables us to control the precise integration of services on our website. This allows us to flexibly integrate additional services in order to evaluate user access to our website.

Purpose and legal basis

We process data with the help of the Google Tag Manager for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

The recipient of the data is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, as part of order processing. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider. The basis for data processing in the USA is your consent given via the cookie consent banner (Art. 49 para. 1 lit. a) GDPR). In the USA, there is no level of data protection comparable to the requirements of the GDPR. It is possible that government agencies may access personal data without us or you being aware of this. Enforcement of your rights is probably not possible in the USA. You can revoke your consent at any time with effect for the future by clicking on the button. 

Google Ads

Type and scope of processing

We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behaviour and recognize users. Google Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider. If you are registered with a Google Ireland Limited service, Google Ads can assign the visit to your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identification features. In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis

We process your data with the help of Google Ads for the purpose of optimizing our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy. The recipient of the data is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, as part of order processing. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider. The basis for data processing in the USA is your consent given via the cookie consent banner (Art. 49 para. 1 lit. a) GDPR). In the USA, there is no level of data protection comparable to the requirements of the GDPR. It is possible that government agencies may access personal data without us or you being aware of this. Enforcement of your rights is probably not possible in the USA. You can revoke your consent at any time with effect for the future by clicking on the button. 

Facebook Pixel

Type and scope of processing

We use Facebook Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to create so-called Custom Audiences, i.e. to segment visitor groups of our online offer, determine conversion rates and subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with Meta Platforms Ireland Limited.

Purpose and legal basis

We process your data with the help of Facebook Pixel for the purpose of optimizing our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Meta Platforms Ireland Limited. Further information can be found in the privacy policy for Facebook Pixel: https://www.facebook.com/privacy/explanation.

2.16 Marketing platform

We use Sendinblue as our marketing platform. When you use the live chat or fill out and submit the newsletter registration form, you confirm that the information you provide will be transferred to Sendinblue for processing in accordance with the terms of use.

3. Categories of recipients of the personal data

Your personal data will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract processing or billing or if you have given your prior consent or if there is a legal basis for the transfer. As part of order processing, for example, the service providers we use here (such as carriers, logistics companies, banks) receive the necessary data for order and order processing. The data passed on in this way may only be used by our service providers to fulfill their task.

As described above, your data will also be transmitted to a credit rating service provider in the event of non-payment.

Insofar as we use the services of third parties to carry out and handle processing operations, the provisions of the General Data Protection Regulation are complied with. Service providers who support us in providing our services to you are hosting providers, IT service providers and email service providers.

4. Duration of data storage

In principle, we delete your data as soon as it is no longer required for the above-mentioned purposes, unless temporary storage is still necessary. For example, we store your data due to legal obligations to provide evidence and retain data, which arise from the German Commercial Code and the German Fiscal Code, among others. The storage periods are up to ten full years. We also store your data for the period in which claims can be asserted against our company (statutory limitation period of three or up to thirty years).

5. Data security

Your personal data is transmitted securely through encryption. We use the SSL (Secure Socket Layer) coding system. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. We also use technical and organizational measures to protect our websites and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons

6. Rights of data subjects

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time. You can contact us at any time using the contact details provided in section 1 if you have any further questions on the subject of personal data. You may also have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, commonly used and machine-readable format. If you have given us your consent to process personal data for specific purposes, you can withdraw your consent at any time with effect for the future. If we process your data to protect legitimate interests, you can object to this processing on grounds relating to your particular situation. You also have the option of contacting a data protection supervisory authority (right to lodge a complaint). The authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
Postfach 71 16
24171 Kiel