Overview
We are pleased about your visit to our website einfachshop24.de and your interest in our company.
The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit our website. Our data protection practices are in line with the legal provisions of the Swiss Federal Data Protection Act (DSG) and the EU General Data Protection Regulation (GDPR). The following privacy policy serves to fulfill the information obligations under the DSG and the GDPR. These can be found, for example, in Art. 19 ff. DSG and Art. 13 ff. of the GDPR.
The controller within the meaning of Art. 5(j) DSG or Art. 4 No. 7 GDPR is the person who alone or jointly with others decides on the purposes and means of processing personal data. The controller according to Art. 4 No. 7 GDPR is also the recipient of the personal data within the meaning of Art. 4 No. 9 GDPR. Any third-party recipient is identified separately.
With regard to our website, the owner or person responsible is:
ZAHA GLOBAL UG
Adolfstr 32
52134 Herzogenrath
Germany
E-Mail: info@einfachshop24.de
Tel.: +49 176 123456789
Provision of the website and creation of log files
Each time our website is accessed, our system automatically records data and information from the device used to access it (e.g. computer, mobile phone, tablet, etc.).
Which personal data is collected and to what extent is it processed?
(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Host name of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user’s system accessed our website (referrer tracking);
(8) Notification as to whether the retrieval was successful;
(9) Amount of data transferred
This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, so that individual site visitors cannot be identified.
Legal basis for the processing of personal data
The processing of personal data is carried out in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest).
purpose of data processing
The temporary (automated) storage of data is necessary for the process of a website visit in order to enable the website to be delivered. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat misuse and eliminate faults. For this purpose, it is necessary to log the technical data of the retrieving computer in order to be able to react as quickly as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, the data helps us to optimize the website and to generally ensure the security of our information technology systems.
duration of storage
The aforementioned technical data will be deleted as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.
right to restriction, objection, correction and deletion
You can request the restriction of processing in accordance with Art. 18 GDPR or object to processing in accordance with Art. 21 GDPR at any time, as well as request the correction or deletion of data in accordance with Art. 16 or 17 GDPR. You can find out what rights you are entitled to and how you can assert them at the bottom of this data protection declaration.
Special features of the website
Our site offers you various functions, and when you use them we collect, process and store personal data. Below we explain what happens to this data:
order form
- Which personal data is collected and to what extent is it processed?
The data you enter in the form fields, such as address, surname, first name, etc., is processed by us to fulfill the purpose stated below. - Legal basis for the processing of personal data
The processing of personal data is carried out in accordance with the principle of legality (Art. 6 Para. 1 DSG) and the principle of good faith (Art. 6 Para. 2 DSG or Art. 2 ZGB) as well as Art. 6 Para. 1 Letter b GDPR (implementation of (pre)contractual measures). - Purpose of data processing
The purpose of data processing is to process your order so that we can fulfil or initiate the contract concluded with you. - Duration of storage
The data will be deleted as soon as it is no longer required to process the order and there are no longer any legal retention periods. As a rule, the law stipulates a retention period of 10 years. - Opportunity to object, edit, correct and delete
You can restrict processing in accordance with Art. 18 GDPR at any time, object to processing in accordance with Art. 21 GDPR and request correction or deletion of data in accordance with Art. 16 or 17 GDPR. You can find out what rights you are entitled to and how you can assert them at the bottom of this data protection declaration. - Necessity of providing personal data
The information in the order form is necessary to conclude a contract. If you do not fill in the mandatory fields or do not fill them in completely, the order you wish to place cannot be processed.
contact form(s)
- Which personal data is collected and to what extent is it processed?
The data you enter in our contact forms, which you have entered in the input mask of the contact form. - Legal basis for the processing of personal data
The processing of personal data is carried out in accordance with the principle of legality (Art. 6 Para. 1 DSG) and the requirement of good faith (Art. 6 Para. 2 DSG or Art. 2 ZGB) as well as Art. 6 Para. 1 lit. a GDPR (consent through a clear confirming action or behavior). - Purpose of data processing
We will only use the data collected via our contact form or forms to process the specific contact request received through the contact form. Please note that in order to fulfill your contact request, we may also send you emails to the address provided. The purpose of this is to enable you to receive confirmation from us that your request has been correctly forwarded to us. However, sending this confirmation email is not mandatory for us and is only for your information. - Duration of storage
After processing your request, the data collected will be deleted immediately, unless there are statutory retention periods. - Restriction, objection, correction and deletion options
You can request the restriction of processing in accordance with Art. 18 GDPR or object to processing in accordance with Art. 21 GDPR at any time, as well as request correction or deletion of data in accordance with Art. 16 or 17 GDPR. You can find out what rights you are entitled to and how you can assert them at the bottom of this data protection declaration. - Necessity of providing personal data
The use of the contact forms is voluntary. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our website. If you want to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the necessary information on the contact form, you will either not be able to send the request or we will not be able to process your request due to insufficient information.
Disclosure of information to third parties
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB).
The transfer of information to third parties depends on the scope of the activities or offers of our website or our business model described below.
As a general rule, we only keep your information for as long as necessary and treat it confidentially. This does not include the transfer of personal data to debt collection service providers, to public bodies and authorities, and to private individuals who are entitled to it due to legal provisions, court decisions or official orders, as well as the transfer to authorities for the purpose of initiating legal proceedings or for law enforcement purposes if our legally protected rights are attacked.
Statistical evaluation of visits to this website – Webtracker
When you access this website or individual files on the website, we collect, process and store the following data: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and notification of the success of the access (so-called web log). We use this access data exclusively in a non-personalized form for the continuous improvement of our internet offering and for statistical purposes.
Any personal data will be processed in accordance with the principle of legality (Art. 6 Para. 1 DSG) and in accordance with the principle of good faith (Art. 6 Para. 2 DSG or Art. 2 ZGB). We also use the following web trackers to evaluate visits to this website:
- Google
We use the Google service on our website provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ . According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transmission.
The legal basis for the transmission of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.
We use Google to be able to load additional Google services onto the website. The service is used to be able to provide additional Google services, such as the data processing required when providing streams and fonts and relevant Google search content. It is technically required in order to be able to exchange the information about the site visitor that Google already has between the Google services and to be able to provide the site visitor with individual content tailored to their Google account.
For the processing itself, the service or we collect the following data: Background data stored in the Google user account or in other Google services about the site visitor, background data for the provision of Google services such as streaming data or advertising data, data about the site user’s use of Google search, information on the device used, the user’s IP address and browser and other data from Google services for the provision of Google services related to our website.
If the service is activated on our website, our website establishes a connection to the servers of the company Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transferred to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Doubleclick, Google Cloud, and Google Ads and Google Fonts in accordance with the Google privacy policy. You can access the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list .
You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy .
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de . - Google Maps
We use the Google Maps service on our website from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ . According to the assessment of the Swiss authorities, the data is processed in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transmission.
The legal basis for the transmission of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.
On our behalf, Google will use the information obtained via Google Maps to show you the map. Using Google Maps, you can find us faster and more accurately than with a simple non-interactive route map. The corresponding data is also used to assign the page visitors who view our Google Maps map, if necessary with the help of the Google advertising ID, and to link them with physical visits and calls to other contact information listed on Google. In this way, Google can make an estimate of the expected flow of visitors.
For the processing itself, the service or we collect the following data: Data required to visualize and display location data in the form of a map, such as IP address, information from Google background services such as Google APIs, search terms, IP address, coordinates, starting point and destination when using the route planner, location data, Google advertising ID, Android advertising ID.
We have concluded a joint processing agreement with Google with regard to Google Maps. The content can be found at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/. If the service is activated on our website, our website establishes a connection to the servers of the company Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transferred to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When the Google service is used on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be processed by the Google services Google Apis, Google Cloud and Google Fonts in accordance with the Google privacy policy under Google’s data protection responsibility. You can access the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list .
You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy .
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de . - Gstatic
We use the Gstatic service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ . According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transmission.
The legal basis for the transmission of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.
Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and to pre-load required catalog files. In particular, the service loads background data for Google Fonts and Google Maps.
As part of the order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. The provider’s certification within the framework of the EU-US Data Privacy Framework can be found at https://www.dataprivacyframework.gov/list .
You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy . The provider also offers an opt-out option
at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de .
Integration of external web services and processing of data outside the EU
We use active content from external providers, so-called web services, on our website. When you access our website, these external providers may receive personal information about your visit to our website. This may involve data processing outside of Switzerland and the EU. You can prevent this by installing a corresponding browser plug-in or by deactivating the execution of scripts in your browser. This may result in functional restrictions on the websites you visit.
We use the following external web services:
- Google Cloud APIs
We use the Google Cloud APIs service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ . According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transmission.
The legal basis for the transmission of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.
We use Google APIs to be able to load additional Google services onto the website. Google APIs is a collection of interfaces for communication between the various Google services used on your website. The service is used in particular to display Google Fonts and to provide the Google Maps map.
For processing itself, the service or we collect the following data: IP address
If the service is active on our website, our website establishes a connection to the servers of the company Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Cloud, Google Maps, Google Ads and Google Fonts in accordance with the Google privacy policy under Google’s data protection responsibility. The provider’s certification under the EU-US Data Privacy Framework can be found at https://www.dataprivacyframework.gov/list .
You can revoke your consent at any time. You can find more information about revoking your consent either in the consent itself or at the end of this privacy policy. You
can find more information about how the transferred data is handled in the provider’s privacy policy at https://policies.google.com/privacy .
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de . - Google Fonts
We use the Google Fonts service on our website from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ . According to the assessment of the Swiss authorities, the processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transmission.
The legal basis for the transmission of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.
We use the Google Fonts service to be able to integrate attractive fonts on our site in order to be able to show you a visually better version of our website. The service may also be used on our website if other Google services are loaded on our website that require Google Fonts to run. This is the case, for example, if our website uses Google services that absolutely require Google Fonts to run.
For processing itself, the service or we collect the following data: data on fonts, IP address of the site visitor, statistics on the use of fonts and other data from Google services related to our website.
If the service is activated on our website, our website establishes a connection to the servers of the company Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transferred to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Google Cloud and Google Ads in accordance with the Google privacy policy. You can access the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list .
You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy .
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de . - Gravatar
We use the Gravatar service from Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, D02 AY86 Dublin, Ireland, email: privacypolicyupdates@automattic.com, website: https://de.gravatar.com/ . According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer.
The legal basis for the transfer of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.
Gravatar is a service for providing avatars across websites.
You can view the certification of the parent company Automattic Inc. under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list .
You can revoke your consent at any time. You can find more information about revoking your consent either in the consent itself or at the end of this privacy policy.
You can find more information about handling the transferred data in the provider’s privacy policy at https://automattic.com/privacy/ . The provider also offers an opt-out option
at https://automattic.com/privacy/ . - Legally ok legal text snippet and modules
We use the Legally ok legal text snippet and modules service from Legally ok GmbH, Schochenmühlestrasse 6, 6340 Baar, Switzerland, email: hello@legally-ok.com, website: https://www.legally-ok.com/ on our website . Processing takes place exclusively in Switzerland in accordance with the data protection legislation applicable there. Processing also takes place in a third country outside the EU. There is an adequacy decision by the Commission for this third country. You can find a current list of all adequacy decisions on the EU Commission website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de ).
The legal basis for transmission and processing is Art. 31 Para. 1 DSG and Art. 6 Para. 1 lit. c GDPR. The use of the service helps us to comply with our legal obligations.
The service is used to reload the content of our legal texts on our website. The latest legal texts are reloaded via the integration on our site. This integration can also be used to reload other technical modules with regard to the legal texts or legally required elements.
You can find out what rights you have with regard to processing at the end of this data protection declaration.
You can find more information on how the transferred data is handled in the provider’s data protection declaration at https://www.legally-ok.com/datenschutz/ . - PayPal
We use the PayPal service from PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg on our website. According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . The transmission and processing of personal data takes place exclusively on servers in the European Union.
The legal basis for the transmission of personal data is the contract already concluded or still to be concluded between you and us in accordance with Art. 31 Para. 2 Letter a DSG and Art. 6 Para. 1 Letter b GDPR.
We integrate the service so that we can show you the PayPal button on every subpage of our online shop so that you know which payment method you can use to shop with us.
Due to the contract concluded between you and PayPal, if you pay using PayPal, data may be transferred to companies affiliated with PayPal. These companies may also be based in the USA, which is why it cannot be ruled out that US authorities may access your data.
You can find out what rights you have with regard to processing at the end of this privacy policy.
You can find more information about how the transferred data is handled in the provider’s privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE . - cookieyes
We use the cookieyes service from CookieYes Limited, Warren Park, 3 Warren Yard, Wolverton Mill, Wolverton, MK12 5NW Milton Keynes , United Kingdom, email: support@cookieyes.com, website: https://www.cookieyes.com/de/ . According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Processing also takes place in a third country outside the EU. There is an adequacy decision by the Commission for this third country. On the EU Commission website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de ) you will find a current list of all adequacy decisions.
The legal basis for the transmission and processing is Art. 31 Para. 1 DSG and Art. 6 Para. 1 lit. c GDPR. The use of the service helps us to comply with our legal obligations.
The Cookieyes service is used both to create and implement data protection declarations, as well as to integrate a cookie banner that stores and implements the individual settings of the website visitor.
You can find out which rights you are entitled to with regard to processing at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider’s data protection declaration at https://www.cookieyes.com/privacy-policy/ .
Information on the use of cookies
scope of processing of personal data
We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. So-called “cookies” are small text files that your browser can save on your access device. These text files contain a characteristic character string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also known as “setting a cookie”. Cookies can be set both by the website itself and by external web services.
Legal basis for the processing of personal data
Relevant are Art. 6 ff. DSG (principles) as well as Art. 6 Para. 1 lit. f GDPR (legitimate interest) or Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR (consent).
The applicable legal basis is determined from the cookie table listed later in this section.
In general, when cookies are collected based on a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated into it (technically necessary cookies). In addition, the cookies may increase its user-friendliness and enable a more personalized approach. Here we have weighed up your interests against our interests.
With the help of cookie technology, we can only identify, analyze and track individual website visitors if the website visitor has consented to the use of cookies in accordance with Art. 6 (6) DSG or Art. 6 (1) lit. a GDPR.
purpose of data processing
The cookies are set by our website or the external web services to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose specified with your consent. Cookie technology also enables us to recognize individual visitors using pseudonyms, e.g. an individual or random ID, so that we can offer more personalized services. Details are listed in the table below.
duration of storage
The cookies listed below are stored in your browser until they are deleted or, in the case of a session cookie, until the session has expired. Details are provided in the table below:
cookie name | server | Provider | Purpose | legal basis | storage period | type |
cookieyes-consent | einfachshop24.de | website operator | The cookie stores the settings of the cookie banner and the site user’s decision regarding cookies. | fulfillment of legal obligations | about 12 months | cookie banner |
sbjs_current | .fachshop24.de | website operator | This cookie is set as part of the WooCommerce plug-in. It is used to identify the previously visited website and to store information about user actions. | consent | meeting | Analytics |
sbjs_current_add | .fachshop24.de | website operator | This cookie is set as part of the WooCommerce plug-in. It is used to identify the previously visited website and to store information about user actions. | consent | meeting | Analytics |
sbjs_first | .fachshop24.de | website operator | This cookie is set as part of the WooCommerce plug-in. It is used to identify the previously visited website and to store information about user actions. | consent | meeting | Analytics |
sbjs_first_add | .fachshop24.de | website operator | This cookie is set as part of the WooCommerce plug-in. It is used to identify the previously visited website and to store information about user actions. | consent | meeting | Analytics |
sbjs_migrations | .fachshop24.de | website operator | This cookie is set as part of the WooCommerce plug-in. It is used to identify the previously visited website and to store information about user actions. | consent | meeting | Analytics |
sbjs_session | .fachshop24.de | website operator | This cookie is set as part of the WooCommerce plug-in. It is used to identify the previously visited website and to store information about user actions. | consent | about 31 minutes | Analytics |
sbjs_udata | .fachshop24.de | website operator | This cookie is set as part of the WooCommerce plug-in. It is used to identify the previously visited website and to store information about user actions. | consent | meeting | Analytics |
shop_display | einfachshop24.de | cookieyes | This cookie allows us to save individual comfort settings you have selected and keep them for your current and future visits to the site. | consent | meeting | configuration |
woocommerce_cart_hash | einfachshop24.de | website operator | This cookie is used for the shopping cart functionality on the website. The products in the shopping cart are stored using the cookie. | contract fulfillment | meeting | Basic functionality |
woocommerce_items_in_cart | einfachshop24.de | WordPress (Automattic Inc., 60 29th Street #343, CA 94110 San Francisco, United States) | The cookie controls the shopping cart of the shop system and is necessary for placing goods in the shopping cart. | contract fulfillment | meeting | configuration |
wp_woocommerce_session_ | einfachshop24.de | website operator | This cookie assigns a unique ID to the site visitor. This cookie stores the visitor’s actions on the shopping cart and maintains the state of the shopping cart across all page requests. | consent | about 2 days | configuration |
If cookies have been set based on your consent, you can revoke your consent at any time in the cookie settings of the cookie banner. You can adjust the cookie settings here.
Possibility of objection, revocation of consent and deletion
You can set your browser to generally prevent cookies from being placed. You can then decide on a case-by-case basis whether to accept cookies or to accept cookies in general. Cookies can be used for various purposes, e.g. to recognise that your access device is already connected to our website (permanent cookies) or to save the last offers you viewed (session cookies). If you have given us express permission to process your personal data, you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Data security and data protection, communication via email
Your personal data is protected by technical and organizational measures during collection, storage and processing so that it is not accessible to third parties. If you communicate unencrypted by email, we cannot guarantee complete data security during transmission to our IT systems, so we recommend encrypted communication or sending information that requires a high level of confidentiality by post.
Duration of data storage and rights of the data subject
duration of storage
We only store personal data to the extent and for as long as this is necessary to fulfil the purposes for which the personal data was collected, we have a legitimate overriding interest in storing the data or we are legally obliged to do so.
right to information
You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to information about the information specified in Sections 25 et seq. DSG or Art. 15 Para. 1 GDPR, provided that the information cannot be refused, restricted or postponed by the owner of the data collection (cf. Art. 26 et seq. DSG or Art. 15 Para. 4 GDPR). We would also be happy to provide you with a copy of the data.
right to rectification
According to Art. 32 Para. 1 DSG or Art. 16 GDPR, you have the right to request that incorrectly stored personal data (such as address, name, etc.) be corrected, provided that this claim does not conflict with any legal obligation. You can also request that the data stored by us be completed at any time. The corresponding adjustment will be made immediately.
right to erasure
According to Art. 17 para. 1 GDPR, you have the right to have us delete the personal data collected about you if
- the data is either no longer needed;
- due to the withdrawal of your consent, the legal basis for processing no longer applies;
- there are no longer any legitimate reasons for processing;
- your data is processed unlawfully;
- a legal obligation requires it.
According to Art. 17 para. 3 GDPR, this right does not exist if
- the processing is necessary for the exercise of the right to freedom of expression and information;
- your data has been collected based on a legal obligation;
- the processing is necessary for reasons of public interest;
- the data are necessary to assert, exercise or defend legal claims.
right to restriction of processing
According to Art. 18 Para. 1 GDPR, you have the right in individual cases to request that the processing of your personal data be restricted.
This is the case when
- you contest the accuracy of the personal data;
- the processing is unlawful and you do not consent to deletion;
- the data are no longer required for the purpose of processing, but the data collected serve to assert, exercise or defend legal claims;
- an objection to the processing has been lodged in accordance with Art. 21 Para. 1 GDPR and it is still unclear which interests prevail.
right of withdrawal
If you have given us your express consent to process your personal data (Art. 6 Para. 6 DSG and Art. 31 Para. 1 DSG; Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR), you can revoke this at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation. Information that we are legally obliged to retain will be deleted after the deadline has expired.
right to object
According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6 Paragraph 1 Letter f GDPR (within the scope of a legitimate interest). If you have given us your express consent to process your personal data (Art. 6 Paragraph 6 DSG and Art. 31 Paragraph 1 DSG), you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation. You only have this right if there are special circumstances that speak against the storage and processing. Information that we are legally obliged to retain will be deleted after the deadline has expired.
How do you exercise your rights?
You can exercise your rights at any time by contacting the contact details below:
ZAHA GLOBAL UG
Adolfstr 32
52134 Herzogenrath
Germany
E-Mail: info@einfachshop24.de
Tel.: +49 176 123456789
right to data portability
According to Art. 20 GDPR, you have the right to have the personal data concerning you transmitted to us. We will provide the data in a structured, common and machine-readable format. The data can be sent either to you or to a person responsible named by you.
We will provide you with the following data upon request:
- Data collected on the basis of consent (Article 31 paragraph 1 DSG and Article 6 paragraph 1 letter a GDPR);
- Data that we have received from you within the framework of existing contracts (Art. 31 para. 2 letter a DSG as well as Art. 6 para. 1 letter b GDPR and Art. 9 para. 2 letter a GDPR);
- Data that has been processed as part of an automated procedure.
We will transfer the personal data directly to a responsible party of your choice, provided this is technically feasible. Please note that we are not permitted to transfer data that interferes with the overriding interests of third parties, or are only permitted to do so to a limited extent, in accordance with Art. 26 Para. 1 Letter b of the Data Protection Act or Art. 20 Para. 4 of the GDPR.
Notifications to the FDPIC and possibility of legal action
According to Art. 49 DSG, affected persons can file a complaint with the supervisory authority if there are sufficient indications that data processing could violate data protection regulations. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
For further information, please refer to the contact form of the FDPIC: https://www.edoeb.admin.ch/edoeb/de/home/deredoeb/kontakt.html
If you suspect that your data is being processed unlawfully on our website, you can seek judicial clarification of the issue in accordance with Art. 32 DSG. As a rule, this can be done by filing a lawsuit in accordance with Art. 28 ff. of the Swiss Civil Code. If you are affected by the processing of your data by federal bodies, the procedure is governed by Art. 41 DSG. In this case, too, you can contact the FDPIC (see reference to the contact form above).
Right to lodge a complaint with the supervisory authority pursuant to Art. 77 Para. 1 GDPR
If you suspect that your data is being processed unlawfully on our website, you can of course seek judicial clarification of the issue at any time. In addition, any other legal option is open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 Paragraph 1 GDPR. You have the right to lodge a complaint in accordance with Art. 77 GDPR in the EU member state of your residence, your place of work and/or the place of the alleged violation, i.e. you can choose the supervisory authority to contact from the locations mentioned above. The supervisory authority to which the complaint was submitted will then inform you of the status and results of your submission, including the possibility of a legal remedy in accordance with Art. 78 GDPR.