Data protection

Privacy policy


Introduction
CCON GmbH (hereinafter referred to as "we"), as the operator of the online service, is responsible for processing the personal data of users of the online service. Our contact details can be found in the imprint of the online offer, the contact persons for questions regarding the processing of personal data are named directly in this data protection declaration.


We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this privacy policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and the national data protection regulations.


With this privacy policy, we would like to inform you to what extent and for what purpose personal data is processed in connection with the use of the online offer.


Personal data
Personal data is information relating to an identified or identifiable natural person. This includes all information about your identity, such as your name, your e-mail address or your postal address. However, information that cannot be linked to your identity (such as statistical data, e.g. the number of users of the online service) is not considered personal information.


In principle, you can use our online offer without disclosing your identity and without providing personal data. We will then only collect general information about your visit to our website. However, personal data is collected from you for some of the services offered. This data is then only processed by us for the purposes of using this online service, in particular for providing the requested information. When collecting personal data, only the data that is absolutely necessary must be provided. In addition, further information may be possible, in which case it is voluntary. We will indicate in each case whether these are mandatory or voluntary fields. We will then provide information on the specific details in the corresponding section of this privacy policy.


Automated decision-making based on your personal data does not take place in connection with the use of our online services.


Processing of personal information
Your data is stored by us on specially protected servers within the European Union. These are protected by technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. Access to your data is only possible for a few authorized persons. These persons are responsible for the technical, commercial or editorial support of the servers. Despite regular checks, however, complete protection against all risks is not possible.


Your personal data is transmitted over the Internet in encrypted form. We use SSL encryption (Secure Socket Layer) for data transmission.


Disclosure of personal data to third parties
We only use your personal information to provide the services you have requested. If external service providers are used by us to provide the service, their access to the data is also exclusively for the purpose of providing the service. We take technical and organizational measures to ensure compliance with data protection regulations and also oblige our external service providers to do the same.


Furthermore, we do not pass on the data to third parties without your express consent, in particular not for advertising purposes. Your personal data will only be passed on if you yourself have consented to the data being passed on or if we are entitled or obliged to do so on the basis of statutory provisions and/or official or court orders. In particular, this may involve providing information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.


Legal basis for data processing
Insofar as we obtain consent for the processing of your personal data, Art. 6 para. 1 lit. a) GDPR serves as the legal basis for data processing.


Insofar as we process your personal data because this is necessary for the performance of a contract or in the context of a quasi-contractual relationship with you, Art. 6 para. 1 lit. b) GDPR serves as the legal basis for data processing.


Insofar as we process your personal data to fulfill a legal obligation, Art. 6 para. 1 lit. c) GDPR serves as the legal basis for data processing.


Art. 6(1)(f) GDPR also serves as the legal basis for data processing if the processing of your personal data is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.


As part of this privacy policy, we always indicate the legal basis on which we base the processing of your personal data.


Data erasure and storage duration
We always delete or block your personal data when the purpose of storage no longer applies. However, data may be stored beyond this if this is provided for by legal requirements to which we are subject, for example with regard to statutory retention and documentation obligations. In such a case, we will delete or block your personal data after the end of the corresponding requirements.


Use of our online offer
Information about your computer
Each time you access our online offering, we collect the following information about your computer, irrespective of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred as part of this request are recorded. We also collect product and version information about the browser used and the computer's operating system. We also record the website from which the online offer was accessed. The IP address of your computer is only stored for the duration of your use of the online service and is then deleted or anonymized by shortening it. The other data is stored for a limited period of time.


We use this data for the operation of the online service, in particular to detect and eliminate errors, to determine the utilization of the online service and to make adjustments or improvements. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR.


Use of cookies
As on many websites, cookies are used for our online offering. Cookies are small text files that are stored on your computer and that store certain settings and data for exchange with our online offering via your browser. A cookie usually contains the name of the domain from which the cookie file was sent as well as information about the age of the cookie and an alphanumeric identifier.


Cookies enable us to recognize your computer and make any pre-settings immediately available. Cookies help us to improve our online offering and to provide you with a better and more personalized service. This is also our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR.


The cookies we use are so-called session cookies, which are automatically deleted at the end of the browser session. In some cases, cookies with a longer storage period may also be used so that your default settings and preferences can still be taken into account the next time you visit our website.


Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent. It is also possible to delete cookies that have already been saved manually via the browser settings. Please note that you may only be able to use our online services to a limited extent or not at all if you reject the storage of cookies or delete necessary cookies.


Google Analytics
We use Google Analytics for statistical evaluations. Google Analytics is a web analysis service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94034, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=de.


Further information on this can be found at http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that on our website Google Analytics has been extended by the code " anonymizeIp();" in order to anonymize the IP addresses, whereby the last octet is deleted.


We are of the opinion that due to the protective measures taken (anonymization and possibility of objection), data processing to optimize our online offer is to be regarded as a legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f) GDPR.


Registration
You can register to use our online service. To do so, you must provide the data requested during registration, such as your name, address and email address. We also record the date and time of registration and the IP address. As part of the registration process, we obtain your consent for the use of the data. The advantage of this is that you do not have to re-enter this data every time you use the website or place an order.


The legal basis for processing the data for registration is Art. 6 para. 1 lit. a) GDPR in the case of consent. If you register with us to fulfill or initiate a contract, the legal basis for the processing of the data is additionally Art. 6 para. 1 lit. b) GDPR.


The information requested as a mandatory field during registration is required to fulfill or initiate a contract with us for certain services. However, you are not obliged to register, but can also order as a guest. In this case, however, you must enter all the data required to process the contract each time you place an order.


When you register, a customer account is created for you. The data in the customer account will be stored by us for as long as there is an active customer relationship. If no more activity can be detected over a period of three years, the status of the customer relationship is set to inactive. You can request the deletion of your customer account at any time.


Order processing
We only use your personal information for orders within our company and affiliated companies as well as with the company commissioned to process orders.


Storage and data transfer for orders
For order processing, we work together with various companies that are responsible for payment processing and logistics. We ensure that our partners also comply with data protection regulations. For example, we pass on your address data (name and address) to the respective transport company that delivers the products you have ordered. The legal basis for this is Art. 6 para. 1 lit. b) GDPR. The processing of your personal data is necessary to fulfill the contract with you.


The data will be stored by us for as long as it is necessary to fulfill the contract. In addition, we store this data to fulfill post-contractual obligations and due to commercial and tax retention periods for the legally prescribed period. This retention period is generally 10 years to the end of the respective calendar year.


Payment processing for orders, PayPal, Amazon Pay
Depending on the selected payment method, payment for orders may be processed by a service provider.


When paying via PayPal, you will be redirected to the PayPal website via a link. Your personal data will be processed in the process. This includes your name, address, e-mail address, telephone number (if applicable) and account or credit card details. Please refer to the General Terms and Conditions, Terms of Use and Privacy Policy of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg on the website www.paypal.com.


When paying via amazon pay, we pass on your payment data to Amazon Payments Europe s.c.a. and Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three located at 5, Rue Plaetis L 2338 Luxembourg (hereinafter: Amazon Payments), as part of the payment processing. For further data protection information, please refer to the Amazon Payments privacy policy: https://pay.amazon.com/de/help/201751600.


The legal basis for payment processing is Art. 6 para. 1 lit. b) GDPR. The processing of your personal data is necessary for the fulfillment of the contract with you, whereby the payment method can be freely chosen by you.


The data will be stored by us for as long as it is necessary to fulfill the contract. In addition, we store this data to fulfill post-contractual obligations and due to commercial and tax retention periods for the legally prescribed period. This retention period is generally 10 years to the end of the respective calendar year.


Credit check
Depending on the selected payment method, it may be necessary to check your creditworthiness. In this case, we use external service providers to whom we transmit your data (name, address, date of birth, order value) if you have given your consent for a credit check. We transmit the data to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden.


The legal basis for the credit check is Art. 6 para. 1 lit. a) GDPR. If you do not wish to give your consent to the credit check, you may have to select a different means of payment.


As part of the credit check, an assessment is obtained as to how high the probability of default is with regard to our claim from the order. For this purpose, we only receive a probability value (score) from our service provider, but no further details. On the basis of this value, we then assess whether the desired payment method can be offered. Once the check has been completed, the score value is deleted by us and not saved as part of the order data. It is therefore not possible for us to subsequently assess why, for example, a certain payment method was not possible.


WeTransfer
You can make files available to us via the WeTransfer service. Clicking on the "Data transfer" link opens the page of the WeTransfer service, to which this privacy policy does not apply. For details of the provisions applicable there, please refer to WeTransfer's privacy policy: https://queence.wetransfer.com/legal/privacy. The use of WeTransfer is voluntary; you can also send us your files in other ways, for example by e-mail.


The files you upload and any other information you provide are stored on WeTransfer servers and can be viewed by us and downloaded to our systems.


The legal basis for the processing of data by us is generally consent pursuant to Art. 6 para. 1 lit. a) GDPR. Insofar as you transmit data to us for the fulfillment or initiation of a contract, the legal basis for the processing of the data is additionally Art. 6 para. 1 lit. b) GDPR.


Communication with us
You can contact us in various ways, including via the contact form on our website. We will also be happy to send you our newsletter by email on a regular basis.


Contact form
If you wish to use the contact form on our website, we collect the personal data that you enter in the contact form, in particular your name and email address. We also store the IP address and the date and time of the request. We process the data transmitted via the contact form solely for the purpose of responding to your inquiry or request.


You can decide for yourself what information you send us via the contact form. The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.


After we have processed the matter, the data will initially be stored in case of any queries. Deletion of the data can be requested at any time, otherwise the data will be deleted after the matter has been fully dealt with; statutory retention obligations remain unaffected in each case.


Newsletter
When you register for our newsletter, your e-mail address will be used for our own advertising purposes until you unsubscribe. You will receive regular information by e-mail on current topics as well as e-mails on special occasions, for example special promotions. The emails may be personalized and individualized based on our information about you.


Unless you have given us your consent in writing, we use the so-called double opt-in procedure to subscribe to our newsletter, i.e. we will only send you a newsletter by e-mail if you have expressly confirmed to us beforehand that we should activate the newsletter dispatch. We will then send you a notification e-mail and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in this e-mail.


The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR if you have expressly registered for the newsletter. Within the framework of the legal requirements, it is also possible that you may receive our newsletter from us without express consent because you have ordered goods or services from us, we have received your e-mail address in this context and you have not objected to receiving information by e-mail. In this case, the legal basis is our legitimate interest in sending direct advertising in accordance with Art. 6 para. 1 lit. f) GDPR.


If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to the further receipt of the newsletter without incurring any costs other than the transmission costs according to the basic rates. Simply use the unsubscribe link contained in every newsletter or send a message to us or our data protection officer.


Social media
In our online offer you will find links to the social networks Facebook, Pinterest and Instagram, the blogging platform Tumblr and the short message service Twitter. You can recognize the links by the respective provider's logo.


Clicking on the links opens the corresponding social media pages, for which this privacy policy does not apply. For details on the provisions applicable there, please refer to the corresponding privacy policies of the individual providers; you can find these at


Facebook: http://www.facebook.com/policy.php


Pinterest: https://policy.pinterest.com/de/privacy-policy


Instagram: https://help.instagram.com/155833707900388


Tumblr: https://www.tumblr.com/privacy/de


Twitter: https://twitter.com/privacy?lang=de


No personal information is transmitted to the respective providers before the corresponding links are called up. Your accessing the linked page is also the basis for data processing by the respective provider.


Your rights and contact
We attach great importance to explaining the processing of your personal data as transparently as possible and to informing you of the rights to which you are entitled. If you would like more information or wish to exercise your rights, you can contact us at any time so that we can take care of your request.


Rights of data subjects
You have extensive rights with regard to the processing of your personal data. First of all, you have a comprehensive right to information and can request the correction and/or deletion or blocking of your personal data if necessary. You can also request a restriction of processing and have the right to object. You also have the right to data portability with regard to the personal data you have provided to us.


If you would like to assert one of your rights and/or receive more information about this, please contact our customer service. Alternatively, you can also contact our data protection officer.


Withdrawal of consent and objection
Once you have given your consent, you can freely withdraw it at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Contact persons for this are also our customer service and our data protection officer.


If the processing of your personal data is not based on consent, but on another legal basis, you can object to this data processing. Your objection will lead to a review and, if necessary, termination of the data processing. You will be informed of the result of the review and - if the data processing is nevertheless to be continued - you will receive more detailed information from us as to why the data processing is permissible.


Data protection officer and contact
We have appointed an external data protection officer who supports us in data protection issues and whom you can also contact directly. Our data protection officer and his team will be happy to answer any questions you may have regarding our handling of personal data or further information on data protection issues:


Aron Burdack


If you would like to contact our data protection officer personally by email, you can also reach him at datenschutz@queence.de.


Complaints
If you are of the opinion that the processing of your personal data by us does not comply with this privacy policy or the applicable data protection regulations, you have the right to lodge a complaint with a supervisory authority. You can lodge a complaint with our data protection officer. The data protection officer will then investigate the matter and inform you of the outcome of the investigation.


Further information and changes
Links to other websites
Our online offer may contain links to other websites. These links are generally identified as such. We have no influence on the extent to which the applicable data protection regulations are complied with on the linked websites. We therefore recommend that you also inform yourself about the data protection declarations of other websites.


Changes to this privacy policy
The status of this privacy policy is indicated by the date (below). We reserve the right to amend this privacy policy at any time with effect for the future. Changes will be made in particular in the event of technical adjustments to the online offer or changes to data protection regulations. The current version of the data protection declaration can always be accessed directly via the online offer. We recommend that you inform yourself regularly about changes to this privacy policy.


Status of this privacy policy: May 2018