PRIVACY POLICY
§ 1 General
Your personal data (for example form of address, name, postal address, e-mail address, telephone number, bank details, credit card number) is processed by us solely in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you about the purposes of processing, the recipients, the legal bases and the storage periods, and also about your rights and the controller responsible for processing your data. This privacy policy relates only to our websites. If links on our pages take you to other sites, please inform yourself there about how your data is handled.
§ 2 Data processing for the performance of the contract
(1) Purpose of processing
The personal data you provide to us during the ordering process is necessary in order to conclude a contract with us. You are under no obligation to provide your personal data. Without being told your address, however, we cannot send you the goods. For some payment methods we need the relevant payment data in order to pass it on to a payment service provider engaged by us. The data you enter during the ordering process is therefore processed for the purpose of performing the contract.
If you send us an enquiry before a contract is concluded, by e-mail, through a contact form or similar, we process the data received in this way in order to carry out pre-contractual measures, for example to answer your questions about our products.
If a customer account is opened, your data (in particular name, address, payment method, e-mail and password) is processed in order to register you and set up a customer login. The stored data lets you shop with us more quickly and view your previous orders at any time. You can remove the account again by sending us a message or by using a deletion function.
(2) Legal basis
The legal basis for this processing is Article 6(1)(b) GDPR.
(3) Categories of recipients
Payment service providers, shipping service providers, hosting providers, where applicable a merchandise management system, where applicable suppliers (drop shipping).
(4) Storage period
We store the data required to process the contract until the statutory warranty periods and any contractual guarantee periods have expired.
We retain the data required under commercial and tax law for the periods laid down by law, as a rule ten years (see § 257 of the German Commercial Code and § 147 of the German Fiscal Code).
Data processed in order to carry out pre-contractual measures is deleted as soon as those measures have been carried out and it is clear that no contract will be concluded.
§ 3 Comments
(1) Purpose of processing
There is an option to write a comment. Your data (for example name or pseudonym, e-mail address, website) is then processed solely for the purpose of publishing your comment.
(2) Legal basis
The legal basis for this processing is Article 6(1)(f) GDPR.
(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on particular topics and products. Publication serves, among other things, transparency and the forming of opinion. Your interest in data protection is safeguarded, as you can publish your comment under a pseudonym.
(4) Storage period
No particular storage period is provided for. You may request the deletion of your comment at any time.
(5) RIGHT TO OBJECT
You have the right to object at any time, on grounds relating to your particular situation, to processing that is carried out on the basis of Article 6(1)(f) GDPR and that does not serve direct marketing.
In the case of direct marketing, by contrast, you may object to the processing at any time without giving reasons.
§ 4 PayPal transactions
Please note that all PayPal transactions are subject to the PayPal privacy policy: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
§ 5 Information about cookies
(1) Purpose of processing
Technically necessary cookies are used on this website. These are small text files stored in or by your internet browser on your computer system. These cookies make it possible, for example, to place several products in one shopping basket.
(2) Legal basis
The legal basis for this processing is Article 6(1)(f) GDPR.
(3) Legitimate interest
Our legitimate interest is that our website functions properly. The user data collected by technically necessary cookies is not used to create user profiles. Your interest in data protection is thereby safeguarded.
(4) Storage period
Technically necessary cookies are as a rule deleted when the browser is closed. Permanently stored cookies have lifetimes of varying length, from a few minutes to several years.
(5) RIGHT TO OBJECT
If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your internet browser. This may, however, limit the functionality of our website. You can also delete permanently stored cookies at any time through your browser.
§ 6 Your rights as a data subject
If personal data relating to you is processed, you are a data subject within the meaning of the GDPR and you have the following rights in relation to us as the controller:
1. Right of access
Under Article 15 GDPR you may request access to the personal data concerning you that we process.
2. Right to rectification
Should the information concerning you be inaccurate or no longer accurate, you may request rectification under Article 16 GDPR. Should your data be incomplete, you may request that it be completed.
3. Right to erasure
Under the conditions of Article 17 GDPR you may request the erasure of your personal data.
4. Right to restriction of processing
Within the framework of Article 18 GDPR you have the right to request a restriction of the processing of data concerning you.
5. Right to data portability
Under Article 20 GDPR you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller.
6. Right to withdraw consent under data protection law
Under Article 7(3) GDPR you have the right to withdraw your consent under data protection law at any time. This does not affect the lawfulness of processing carried out on the basis of the consent up to the point of withdrawal.
7. Right to lodge a complaint with a supervisory authority
If you consider that the processing of personal data relating to you infringes the GDPR, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement.
Please also note your right to object under Article 21 GDPR:
a) In general: a reasoned objection is required
Where personal data concerning you is processed
– in order to safeguard our overriding legitimate interest (legal basis under Article 6(1)(f) GDPR), or
– in the public interest (legal basis under Article 6(1)(e) GDPR),
you have the right to object at any time, on grounds relating to your particular situation, to that processing; this also applies to profiling based on the provisions of the GDPR.
In the event of an objection we will no longer process the personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
b) Special case of direct marketing: a simple objection is sufficient
Where personal data concerning you is processed for direct marketing purposes, you have the right to object to that processing at any time and without giving reasons; this also applies to profiling in so far as it is connected with such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for those purposes.
Controller responsible for data processing:
Bernhard Zimmermann
Alter Goebricher Weg 51
75177 Pforzheim, Germany
Phone: +49 7231 106744
zimmermann@akkord.de
This is a translation provided for information. The German version of this privacy policy is the legally binding one.