Data Protection.

Provision of the website and creation of log files

 

Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer. These data include:

·       Information about the browser type and the version used

·       The user's operating system

·       The internet service provider of the user

·       The IP address of the user

·       Date and time of access

·       Websites from which the user’s system accesses our website

·       Websites accessed by the user's system through our website

In addition, the following data are stored in a web server log file:

Domain, IP, requests, user agent, timestamp, status code.

The aforementioned data are received and stored exclusively by our technical service provider, Host Europe GmbH, where the website is hosted. We do not have access to the data ourselves.

The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f Basic EU Data Protection Regulation (DSGVO). The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session. These purposes also include our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSGVO.

The data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The web server log files are stored for three days.

The collection of data for the provision of the website and the storage of data in log files is required for the operation of the website. 

 

Communication via contact form

 

We process all personal data that is communicated to us and that is necessary for the processing of your request. The legal basis for the processing of the data transmitted in the course of contacting us is in principle Art. 6 para. 1 lit. f DSGVO. The legitimate interest consists of the execution of the communication. If the purpose of establishing contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

When contacting us by e-mail, additional e-mail log files are created by our e-mail provider, Host Europe GmbH, and are stored for seven days. These e-mail log files contain the following metadata (sender, recipient, time, IP, size). We do not have access to these files ourselves. The legal basis is Art. 6 para. 1 lit. f DSGVO. The legitimate interest rests in the defence against illegal e-mails and prosecution. In this respect, there is no provision for objection.

All data are deleted as soon as they are no longer required for the purpose for which they were collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been conclusively clarified. Deviations thereof apply in that we may be obliged to a longer storage of up to 10 years due to commercial and tax retention periods (in particular § 147 of the German Tax Code and § 257 of the German Commercial Code).

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO, to transfer data in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO for the assertion, exercise or defence of legal claims and if there is no reason to believe that you have an overriding legitimate interest in not passing on your data in the event that there is a legal obligation to do so in accordance with Art. 6 para. 1 sentence 1 lit. c DSGVO, as well as that this is legally permissible and necessary according to Art. 6 para. 1 sentence 1 lit. b DSGVO for the execution of contractual relationships with you.

 

Orders in the online shop

We offer website users the opportunity to buy products in our online shop. The following mandatory information is required for an online purchase: title, forename, surname, address, e-mail address. You can voluntarily indicate your company, which may be used for communication with you for contract processing or invoicing. You also have the option of specifying a delivery address that differs from the billing address or of creating a customer account with the specified data.

For the payment process, we forward you to the page of our certified payment service provider Payone, a service of BS Payone GmbH, Lyoner Straße 9, 60528 Frankfurt am Main. The payment service provider is responsible for payment processing.

For shipping purposes, the commissioned shipping company receives your address and in the case of cash on delivery payment, the necessary payment data.

If you have ordered a book personalisation, we will forward the order data to 1Buch GmbH, Hohenzollernstraße 11, 33330 Gütersloh, where the book will then be personalised and dispatched. Between us and 1Buch GmbH there is an order processing contract in accordance with Art. 28 DSGVO.

The legal basis for the processing of the registered data is Art. 6 para. 1 lit. b DSGVO (fulfilment of a contract). The processing of the data entered during the ordering process is used to conclude and execute the purchase contract.

We store the data collected for the execution of the contract for the duration of the contract and until the expiry of the statutory or possible contractual warranty and guarantee rights. After this period has expired, we will retain the information of the contractual relationship required by commercial and tax law for the periods specified by law. For these periods, the data will be reprocessed solely in the event of verification by the tax authorities.

If you have created a customer account in the course of the order, this will remain until you initiate the deletion.

 

Rights of the data subject

 

You are entitled to the following rights if the statutory requirements are met:

·       Right to information about the personal data concerning you (Art. 15 DSGVO)

·       Right to the correction of incorrectly stored personal data concerning you (Art. 16 DSGVO)

·       Right to the deletion of personal data (Art. 17 DSGVO)

·       Right to limit the processing of personal data (Art. 18 DSGVO)

·       Right to object to the processing of personal data (Art. 21 DSGVO)

·       Right to data transferability (Art. 20 DSGVO)

Right of complaint to a supervisory authority

In addition, you have the right to complain to a supervisory authority if you are of the opinion that the processing of your personal data violates the DSGVO.

 

Google Analytics

 

Due to our legitimate interests to optimise and analyse our online services within the meaning of Art. 6 Para. 1 lit. f. DSGVO, this website uses the service "Google Analytics", which is provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The service (Google Analytics) uses "cookies" – text files that are stored on your terminal. The information collected by the cookies is usually sent to a Google server in the USA and stored there. Google LLC complies with European privacy laws and is certified under the Privacy-Shield Agreement: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

 

This website uses IP anonymisation. The IP address of the users is shortened within the member states of the EU and the European Economic Area and in the other contracting states of the agreement. Only in individual cases is the IP address initially transmitted unabbreviated to a Google server in the USA and then shortened there. Through this shortening, the personal reference of your IP address is omitted. The IP address of the user transmitted by the browser is not combined with other data stored by Google.

As part of the agreement on commissioned data processing, which we as a website operator have concluded with Google Inc., the latter uses the collected information to evaluate website use and activity and delivers services associated with internet use.

The data collected by Google on our behalf is used to evaluate the use of our online services by individual users, for example to create reports on website activity to improve our online services.

 

You have the option of preventing cookies from being stored on your device by changing the appropriate settings in your browser. It is not guaranteed that you can access all functions of this website without restrictions if your browser does not allow cookies. You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link guides you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=en

 

Here you will find further information on the use of data by Google Inc.: https://policies.google.com/privacy/partners?hl=en (data collected by GooglePartners)

https://adssettings.google.de/authenticated (Settings about advertising that is displayed to you)

https://policies.google.com/technologies/ads?hl=en (Use of cookies in advertisements)

 

 

Necessity for data processing

The supplying of personal data is neither required by law nor by contract, but in some cases – as described above – is technically necessary. The contact data (at least first and last name and address) are required for the conclusion of a contract. You are not obliged to provide us with these personal data. Without the provision of personal data, however, it is not possible to access the website, contact us by e-mail or contact form and conclude a contract.

No automated decision making or profiling

Such algorithms are not used.