for Hobby-Wohnwagenwerk Ing. Harald Striewski GmbH

Information about the collection of personal data and contact details of the controller

This Data Protection Policy explains the type, scope and purpose of processing personal data (hereinafter referred to as “data”) in the context of the provision of our services as well as within our online service and the associated websites, functions and content as well as external online presences, such as our Social Media Profile (hereinafter jointly referred to as “online service”). With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Controller

Hobby-Wohnwagenwerk
Ing. Harald Striewski GmbH
Harald-Striewski-Straße 15
24787 Fockbek
+49 (0)4331 - 6060

info[at]hobby-caravan.de
Impressum: https://www.hobby-caravan.de/legal-information/

 

Data Protection Officer

Frank Berns
Konzept 17 GmbH
Westring 3
24850 Schuby
Telefon: +49 4621 530 40 50
E-Mail: mail[at]konzept17.de  

 

Data collected when visiting our website

If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we will only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website for you:

  • Website visited
  • Date and time of access
  • Volume of data sent in bytes
  • Source/link, from which website you accessed the page
  • Browser used
  • Operating system used
  • IP address used (in anonymised form, where applicable)

The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

 

Contacting us

Upon contacting us (e.g. by means of contact form, e-mail, telephone or social media), the information provided by the user will be used in order to process the enquiry in accordance with Art. 6(1)(b) (in the context of contractual/pre-contractual relationships) and Art. 6(1)(f) (other enquiries) GDPR. The legitimate interest here is the complete processing and answering of the enquiry. The information provided by the user may be stored in a Customer Relationship Management system (“CRM system”) or in a comparable enquiry management system.

We delete enquiries insofar as these are no longer required. Furthermore, this policy is subject to statutory archiving obligations.

Hosting and e-mail dispatch

The hosting services we use allow us to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services as well as technical maintenance services, which we use for the purpose of operating this website.

In this respect, we or our hosting provider process the inventory data, contact data, content data, contractual data, usage data, the meta and communication data of customers, interested parties and visitors to this website on the basis of our legitimate interests in the efficient and secure provision of this website in accordance with Art. 6(1)(f) GDPR.

 

MAP SYSTEMS

Google Maps

On our website, we use Google Maps (API) from Google Ltd., Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service that provides interactive maps to display geographic information visually. Using this service shows you our location and makes it easier for you to find us.

When accessing subpages of our website in which Google Maps is embedded, information about your use of our website (such as your IP address) will be transmitted to and stored by Google on a server in the USA. This occurs regardless of whether Google provides a user account that you are logged in to, or if there is no user account. If you are logged in to Google, your data will be directly linked to your account. If you do not want the data to be linked to your Google profile, you should log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates this. In particular, your data is evaluated in accordance with Art. 6(1)(f) GDPR based on the legitimate interest of Google in inserting customised advertising, market surveys and/or tailoring the design of its website to your needs. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.

Google LLC is based in the USA and is certified under the EU-US “Privacy Shield” data protection agreement, which guarantees that the level of data protection complies with that in force in the EU.

If you do not agree to the future transmission of your data to Google when you use Google Maps, you may also deactivate the Google Maps web service completely by disabling the JavaScript application in your browser. As a result, it will no longer be possible to use Google Maps or view the maps on this website.

You can view Google’s Terms of Service at https://www.google.de/intl/de/policies/terms/regional.html, and the additional Terms of Service for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html.

Detailed information about privacy in connection with the use of Google Maps is also available on the Google website (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy.

Embedding of OpenStreetMap

This website uses the OpenStreetMap API (programming interface) to display geographic information visually. OpenStreetMap is provided by the OpenStreetMap Foundation based on the Open Data Commons Open Database License (ODbL).

Additional information regarding data processing by OSM and their privacy policy can be found here: https://wiki.openstreetmap.org/wiki/Privacy_Policy 

 

WEB ANALYTICS SERVICES

Use of external services  

Our website makes use of external services. External services are services from third-party providers that are used on our website. There are various reasons for this, such as embedding videos or ensuring the security of the website. During use of these services, personal data also gets forwarded to the respective providers of these external services. If we do not have a legitimate interest in using these services, we will obtain your consent as a visitor to our website before making use of them (Article 6(1)(a) GDPR); this consent can be withdrawn at any time.  

Analytics 

In order to analyse user behaviour, we process personal data of visitors to our website. Analysis of the data obtained enables us to compile information about the use of the individual components that make up our website. In turn, this allows us to make our website more user-friendly. The analytics tools employed might, for example, be used to create user profiles for the purpose of showing targeted or interest-based advertising messages; recognising repeat visitors when they next visit our website; measuring their click/scrolling behaviour; measuring their downloads; creating heatmaps; identifying page views; measuring the length of visit or bounce rates; and tracing the origin of website visitors (town/city, country, the page that referred the visitor). The analytics tools help us to improve our market research and marketing activities.  

This type of data processing will only take place if you consent to it (via the consent banner on our website). The legal basis for this processing is that of consent (Article 6(1)(a) GDPR). The data will not be processed in the manner described above without your consent. If you withdraw your consent (e.g. by using the consent banner or other options provided on this website) we will cease this data processing. This does not affect the lawfulness of the processing that has taken place prior to the withdrawal of consent.  

Google Analytics 4 

We use the Google Analytics service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.  

The use of this service can result in data being transferred to a third country (the USA). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.  Further information can be found in the provider’s data privacy information at the following URL address:  https://policies.google.com/privacy.  

The service uses the following cookies on our website:  

Name Storage periodTypePurpose
_ga400 days1st-party cookieContains a randomly generated user ID. On the basis of this ID, Google Analytics is able to recognise repeat users of this website and combine data from previous visits.
_ga_123454400 days1st-party cookieCollects data on how often a visitor has visited a website and data relating to the first and last visit.

In addition, we have concluded a data processing agreement with Google on the use of Google Analytics. By means of this agreement, Google provides an assurance that it will process the data in accordance with the General Data Protection Regulation and ensure that the rights of the data subject are protected.  

Google Signals 

We use the Google Signals service on our website as an add-on to Google Analytics 4. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.  

Your user behaviour will only be analysed across devices after you have given your express consent in accordance with Article 6(1)(a) GDPR. This applies, in particular, if you have enabled personalised ads and have linked your devices to your Google account. We only receive statistical information from Google and do not receive any personal data. If you wish to stop cross-device analytics, you can do this by disabling the “Personalized ads” feature in your Google Account settings. 
The use of this service can result in data being transferred to a third country (the USA). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.  Further information can be found in the provider’s data privacy information at the following URL address: https://policies.google.com/privacy.  

Google Tag Manager

We use the Google Tag Manager service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.  

The use of this service can result in data being transferred to a third country (the USA). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.  Further information can be found in the provider’s data privacy information at the following URL address: https://policies.google.com/privacy.  
 

etracker (https://www.etracker.com/):

The host of this website relies on the services of etracker GmbH in Hamburg, Germany (etracker.com) for the purposes of analysing usage data. This involves the use of cookies, which make it possible to perform a statistical analysis of how visitors use this website and to display user-oriented content or advertising. Cookies are small files that are stored by the Internet browser on the user’s device. etracker cookies do not contain any information that could be used to identify a user.

The data produced by etracker is processed and stored exclusively in Germany on behalf of the provider of this website by etracker and is therefore subject to the strict German and European data protection laws and standards. To this effect, etracker has been independently tested, certified and awarded the data protection privacy seal ePrivacyseal.

Data processing is performed on the legal basis of Art. 6(1)(f) (legitimate interest) of the EU General Data Protection Regulation (GDPR). Our legitimate interest consists of the optimisation of our online service and our web presence. Since the privacy of our visitors is extremely important to us, the IP address is anonymised at the earliest available opportunity by etracker and the login or device identification converted by etracker into a clear, but not personally attributed, code. etracker will not make any other use of the data, integrate it with other data or transfer it to third parties.

You may object to the above-mentioned data processing at any time, to the extent that it is performed on a personalised basis. Your objection will not have any adverse effects. Additional information regarding etracker’s privacy policy can be found here.

OTHER GOOGLE SERVICES

 

Online shop

 

 

Data processing when opening a customer account and for contract processing purposes

In accordance with Art. 6(1)(b) GDPR, personal data will be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time and this can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract processing purposes. After completion of the contract or deletion of your customer account, your data will be blocked in consideration of tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of the data has been reserved by our site. Please see below for further information in this regard.

Data collection during the ordering process

If you would like to order something from our online shop, you have the choice of either providing the data that is required for the order only once (guest) or creating a customer account where your data will be saved for future purchases. When you register or make a purchase as a guest, and enter any other data in our online shop, you do so on a voluntary basis. Furthermore, all of the data that we require to fulfil and process your orders will be requested when you register or make a purchase as a guest. To register, you will also need to select a user name and password. Both will make it easier for you to log in without having to re-enter all of your data. We will only save your data to create your customer account, which we will use to record, fulfil and process your orders. We will store your data for future orders, but you have the option to withdraw your consent. You can delete your customer account at any time. If you do not create a customer account, we will save your data for the purpose of contract performance and will delete it as soon as we are no longer obliged to retain it by law.

We have appointed the company OK Logistics GmbH & Co.KG, Itzehoer Straße 31-33, 24594 Hohenwestedt as the processor to handle our orders and logistics. To ensure that your personal data is handled in a way that complies with data protection guidelines, we have entered into a processing contract in accordance with Article 28 GDPR.

Transfer of personal data to shipping service providers

DHL

If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we shall forward your e-mail address to DHL prior to delivery of the goods in accordance with Art. 6(1)(a) GDPR for the purpose of agreeing a delivery date or for notification of delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only forward the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6(1)(b) GDPR. The transfer shall only take place to the extent necessary for the delivery of the goods. In this case, it will not be possible to agree the delivery date with DHL in advance or provide notification of delivery. Consent can be withdrawn at any time with effect for the future vis-à-vis the above-mentioned controller or vis-à-vis the transport service provider DHL.

UPS

If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland S.à r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we shall forward your e-mail address to UPS prior to delivery of the goods in accordance with Art. 6(1)(a) GDPR for the purpose of agreeing a delivery date or for notification of delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only forward the name of the recipient and the delivery address to UPS for the purpose of delivery in accordance with Art. 6(1)(b) GDPR. The transfer shall only take place to the extent necessary for the delivery of the goods. In this case, it will not be possible to agree the delivery date with UPS in advance or provide notification of delivery. Consent can be withdrawn at any time with effect for the future vis-à-vis the above-mentioned controller or vis-à-vis the transport service provider UPS.

GLS

If the goods are delivered by the transport service provider GLS (General Logistics Systems, Germany GmbH & Co. OHG, GLS Germany-Straße 1 - 7, 36286 Neuenstein), we shall forward your e-mail address to GLS prior to delivery of the goods in accordance with Art. 6(1)(a) GDPR for the purpose of agreeing a delivery date or for notification of delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only forward the name of the recipient and the delivery address to GLS for the purpose of delivery in accordance with Art. 6(1)(b) GDPR. The transfer shall only take place to the extent necessary for the delivery of the goods. In this case, it will not be possible to agree the delivery date with GLS in advance or provide notification of delivery. Consent can be withdrawn at any time with effect for the future vis-à-vis the above-mentioned controller or vis-à-vis the transport service provider GLS.

External payment service providers

We use the external payment service providers below, whose platforms enable users and us to conduct payment transactions.

PayPal (Europe) S.à r.l. et Cie, S.C.A.

22-24 Boulevard Royal
L-2449 Luxembourg
E-mail: impressum[at]paypal.com
Commercial register number: R.C.S. Luxembourg B 118 349
Privacy Statement available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Purpose of processing

In accordance with Art. 6(1)(a) GDPR – Consent of the data subject
In accordance with Art. 6(1)(b) GDPR – Performance of contracts, taking steps prior to entering into a contract
In accordance with Art. 6(1)(f) GDPR – Legitimate interest (effective and secure payment method)

Type of data processed by payment service providers

  • Inventory data, e.g. name and address
  • Bank details, e.g. account number, credit card numbers, passwords, TANs and checksums, information related to the recipient

This information is required to enable the transaction to be conducted, and will only be collected and stored by the payment service providers.
We do not receive any information regarding your account or your credit card. We only receive a confirmation as to whether the payment has been processed or rejected.

In certain circumstances, the payment service providers will pass on the data to credit agencies for the purpose of identity and credit checks. The general terms and conditions and privacy policies of the payment service providers apply in these cases.

For the payment transactions, the general terms and conditions and privacy policies of the payment service providers apply. These also contain further information regarding the assertion of withdrawal, access and other data subject rights.

Flockler

To display social media content on our website, we use the Flockler service provided by Flockler Oy Rautatienkatu 26 B 32, 33100, Tampere, Finland, which aggregates relevant social media channels and displays them on our website. The privacy policy and further information about this service provider can be found at: https://flockler.com/privacy-policy.

 

SOCIAL NETWORKS / SOCIAL MEDIA

Facebook

On the basis of our legitimate interests in the analysis, optimisation and commercial operation of our online service as laid down in Art. 6(1)(f) GDPR, we use social plug-ins (“plug-ins”) provided by the social network facebook.com, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Rand Canal Harbour, Dublin 2, Irland (“Meta Platforms Ireland”). This may include content, such as images, videos or texts and buttons that enable users to share content from this online service within Facebook. The list and appearance of Facebook plugins can be viewed here: https://developers.facebook.com/docs/plugins.

When a user invokes a feature of this online service that contains such a plugin, their device establishes a direct connection to Meta Platforms Ireland servers. The content of the plugin is transmitted by Meta Platforms Ireland directly to the user’s device and integrated into the online service from there. During this process, user profiles can be created from the processed data. We have no influence on the amount of data that Facebook collects with the help of this plugin and we are therefore informing users accordingly.

By incorporating the plugin, Meta Platforms Irelandis able to receive information that a user has accessed the corresponding page of the online service. If the user is logged in to Facebook, Meta Platforms Ireland can link the visit to his or her Facebook account. If users interact with the plugins, for example, by clicking the Like button or writing a comment, the corresponding information is directly transmitted from your device to Meta Platforms Ireland and stored there. If a user is not a member of Facebook, there is still a possibility that Meta Platforms Ireland will find out his or her IP address and store it. According to Meta Platforms Ireland, only anonymised IP addresses are stored in Germany.

The purpose and scope of the data collection and additional processing and use of the data by Meta Platforms Ireland as well as the corresponding rights and configuration options for protecting the privacy of users can be found in Meta Platforms Ireland Data Policy: https://www.facebook.com/about/privacy

If a user is a Meta Platforms Ireland member and does not want Meta Platforms Ireland to collect data about him or her via this online service and link it to his or her membership data stored on Meta Platforms Ireland, he or she must log out of Facebook and delete his or her cookies before using our online service. More settings and ways to withdraw your consent to the use of your data for advertising purposes are available within Facebook profile settings:
https://www.facebook.com/settings?tab=ads or via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings apply across all platforms, i.e. they are applied to all devices, such as desktop computers or mobile devices.

YouTube

This website uses the YouTube embedding function to display and play videos from the “YouTube” platform provided by Google Ltd., Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The extended data protection mode is used, which, according to the provider, does not initiate the storage of user information until the video(s) is/are played. If the playback of embedded YouTube videos is started, the provider uses “YouTube” cookies to collect information about user behaviour. According to “YouTube”, these serve, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive practices. If you are logged in to Google, your data will be directly linked to your account when you click on a video. If you do not want the data to be linked to your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates this. In particular, your data is evaluated in accordance with Art. 6(1)(f) GDPR based on the legitimate interest of Google in inserting customised advertising, market surveys and/or tailoring the design of its website to your needs. You have the right to object to the creation of these user profiles, but you must contact YouTube to exercise this right.

Regardless of the playback of the embedded videos, every time this website is accessed, a connection to the Google network “DoubleClick” is established, which can trigger further data processing operations without our influence.

Additional information regarding the privacy policy of “YouTube” can be found at: https://www.google.de/intl/de/policies/privacy

Facebook and Instagram fan page

For the information services offered on Facebook and Instagram, Hobby-Wohnwagenwerk Ing. Harald Striewski GmbH relies on the technical platform and services provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Rand Canal Harbour, Dublin 2, Irland.

Please note that you alone are responsible for your use of these fan pages and their features. This applies in particular to the use of interactive features (e.g. comment, share, rate). Alternatively, you can also access the information and content offered on these pages on our own website at www.hobby-caravan.de.

When you visit our fan pages, Meta Platforms Ireland records your IP address and other information, which is stored on your PC in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about how the pages are used. Meta Platforms Ireland provides more information about this at the following link: http://de-de.facebook.com/help/pages/insights

The data collected about you in connection with this is processed by Meta Platforms Ireland and may be transmitted to countries outside the European Union in the process. Meta Platforms Ireland data policy describes in general terms the information that it obtains and how it is used. Here you will also find information about options for contacting Meta Platforms Ireland as well as options for advertising settings. The data policy is available at the following link: http://de-de.facebook.com/about/privacy

Meta Platforms Ireland full data use policy can be found here:

https://de-de.facebook.com/full_data_use_policy

Instagram’s full data use policy can be found here:

https://help.instagram.com/519522125107875

Meta Platforms Ireland does not conclusively and clearly state and we do not know how Meta Platforms Ireland uses the data from visits to Facebook and Instagram pages for its own purposes, to what extent activities on the pages are linked to individual users, how long Meta Platforms Ireland stores this data and whether data from a visit to the page will be passed on to third parties.

When you access a Facebook or Instagram page, the IP address assigned to your device is transmitted to Meta Platforms Ireland. According to information from Meta Platforms Ireland, this IP address is anonymized (applies to “German” IP addresses) and is deleted after 90 days. Meta Platforms Ireland also stores information about the devices of its users (e.g. in the context of the “Login notification” feature); Meta Platforms Ireland may be able to use this to assign IP addresses to individual users.

If you are currently logged into Facebook as a user, there is a cookie with your ID on your device. This enables Meta Platforms Ireland to tell that you have searched for this page and how you used it. This applies to all other Facebook and Instagram pages as well. Like buttons embedded in websites allow Meta Platforms Ireland to record your visits to these websites and link them to your profile. Based on this data, content or advertising can be tailored to you.

If you want to avoid this, you should log out of Facebook or Instagram, deactivate the “Keep me logged in” feature, delete the existing cookies on your device and close and relaunch your browser. This is how Facebook information that enables you to be directly identified is deleted. This enables you to use our page without your ID being revealed. When you access interactive page features (like, comment, share, message, etc.) a Facebook login screen will appear. After logging in, Meta Platforms Ireland will be able to recognise you as a specific user again.

Information about how you can manage or delete existing information about you can be found on the following Facebook Support pages: https://de-de.facebook.com/about/privacy. As an information service provider, we do not collect or process any data from your use of our service.

If you have any questions about the information we provide, you can contact us at info[at]hobby-caravan.de.

You can also find more information about Meta Platforms Ireland and other social networks, as well as how to protect your data at www.youngdata.de

 

USE OF YOUR DATA FOR DIRECT MARKETING

Subscribing to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The disclosure of any other data is voluntary and will be used to enable us to address you personally. We use the so-called double opt-in process for sending the newsletter. This means that we will only ever send you an e-mail newsletter if you have expressly confirmed to us that you agree to the sending of newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later time. The data collected by us when you register for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter. You also have the option to directly edit your settings in our members’ area or to unsubscribe from the newsletter using the form that can be found there. Once you have unsubscribed, your e-mail address will immediately be deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this policy.

Use of the e-mail marketing service “CleverReach”

This website uses CleverReach to send newsletters. The supplier is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that enables us to organise and analyse the distribution of newsletters. The data you provide (e.g. email address) for the purpose of subscribing to our newsletter will be stored on CleverReach servers in Germany or Ireland.

Sending our newsletters with CleverReach enables us to analyse the behaviour of newsletter recipients. Among other things, we can analyse how many recipients have opened the newsletter message and how often various links contained in the newsletter have been clicked. With the help of so-called conversion tracking, we can also analyse whether a predefined action (such as the purchase of a product on our website) takes place after clicking on the link in the newsletter. For more information on how data is analysed by CleverReach, please visit:https://www.cleverreach.com/de/funktionen/reporting-und-tracking

The data is processed on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time by unsubscribing from the newsletter. Withdrawing your consent does not affect the legality of the data processing that has already taken place beforehand.

If you do not want CleverReach to analyse your behaviour, please unsubscribe from the newsletter. To do this, we provide a corresponding link in every newsletter message. You can also unsubscribe as a recipient directly on our website.

The data you provided for the purpose of subscribing to the newsletter will be stored by us until your removal from the newsletter mailing list and will be deleted both from our servers and the servers of CleverReach when you have unsubscribed from the newsletter. This will not affect any data we have stored for other purposes (e.g. e-mail addresses for the members’ area).

For more information, refer to the privacy policy of CleverReach at: https://www.cleverreach.com/de/datenschutz

We have entered into an agreement with CleverReach for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using CleverReach.

Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services from our range by e-mail. In accordance with Section 7(3) of the German Act against Unfair Competition, we do not need to obtain separate consent from you to do this. In this respect, data processing takes place solely on the basis of our legitimate interest in personalised direct marketing in accordance with Art. 6(1)(f) GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the use of your e-mail address for the advertising purpose described above at any time with effect for the future by sending a message to the controller named above. In this regard, the only costs you will incur will be the basic cost of transmission. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.

Postal advertising

On the basis of our legitimate interest in personalised direct marketing, we reserve the right to store your first and last name, your postal address and – if we have received this additional information from you within the framework of the contractual relationship – your title, academic degree, job title, industry or business name in accordance with Art. 6(1)(f) GDPR and to use this information to send you interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending an appropriate message to the controller.

Members’ area

You have the option to register for our members’ area. For your registration, we process personal data (surname, first name, title, date of birth, e-mail address) on the basis of Article 6(1)(b) GDPR for the performance of the resulting contractual relationship and to clearly identify who you are.

In the members’ area, you have the option to subscribe to our magazine “Hobby Heute”, which is published regularly. To manage the subscription and to enable us to send you the magazine, we process your address data on the basis of Article 6(1)(b) GDPR and pass on this data to our service provider Möller Druck und Verlag GmbH.

If desired, you can verify who your local dealer is in the members’ area and provide them with your contact details in order to receive offers and information that is tailored to you. The data will only be passed on based on the consent you give here in accordance with Article 6(1)(a) GDPR. You may also withdraw your consent here at any time with effect for the future.

Rights of the data subject

The applicable data protection legislation grants you extensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, which we inform you of below:

  • Right of access in accordance with Art. 15 GDPR: In particular, you have the right of access to the personal data concerning you that we are processing, the purposes of the processing, the categories of personal data being processed, the recipients or categories of recipient to whom your personal data has been or will be disclosed, the envisaged retention period or the criteria used to determine the retention period, the existence of the right to request rectification, erasure or restriction of processing, to object to processing, the right to lodge a complaint with a supervisory authority, the source of your data if we have not collected it from you, the existence of automated decision-making, including profiling and, where applicable, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing, as well as your right to be informed about the safeguards that exist pursuant to Art. 46 GDPR relating to the transfer of your data to third countries;
  • Right to rectification in accordance with Art. 16 GDPR: You have the right for inaccurate data concerning you to be rectified without undue delay and/or for any incomplete data we store relating to you to be completed;
  • Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions in Art. 17(1) GDPR are met. However, this right shall not exist in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of processing of your personal data provided that the accuracy of the data you are contesting is being verified, if you oppose the erasure of your data as the data processing is unlawful and request the restriction of the processing of your data instead, if you require your data for the establishment, exercise or defence of legal claims once we no longer need this data after it has served its purpose, if you have objected to processing on grounds relating to your particular situation pending the verification whether our legitimate grounds override yours;
  • Right to be informed in accordance with Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, they are obliged to communicate the rectification or erasure of data or restriction of processing to each recipient to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
  • Right to data portability in accordance with Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request its transmission to another controller, where technically feasible;
  • Right to withdraw your consent in accordance with Art. 7(3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event that you withdraw your consent, we will immediately delete the data concerned, unless further processing can be justified on a legal basis for processing without consent. Withdrawing your consent does not affect the legality of the processing that has taken place on the basis of the consent prior to its withdrawal;
  • Right to object in accordance with Art. 21 GDPR: If, within the framework of a consideration of interests, we process your personal data on the basis of our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation. You can send us your objection using the contact methods detailed above.

If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to further processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves to establish, exercise or defend legal claims.

If we process your personal data for direct marketing purposes, you have the right to object to the processing of your personal data for such marketing purposes at any time. You may exercise your objection as described above.
If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

  • Right to lodge a complaint in accordance with Art. 77 GDPR: If you consider that the processing of your personal data infringes the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, for example:
    Independent Centre for Privacy Protection Schleswig-Holstein
    Holstenstraße 98, 24103 Kiel; 0431/988-1200; mail@datenschutzzentrum.de

 

Last updated: 13/05/2020