GDPR - General Data Protection Regulation

Privacy policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide this will have no consequences. This only applies if no other information is provided in the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Server log files
You can visit our websites without providing any personal information.
Each time you access our website, usage data is transmitted to us or our web host / IT service provider by your Internet browser and stored in log data (so-called server log files). This stored data includes, for example.B the name of the page accessed, date and time of retrieval, the IP address, the amount of data transmitted and the requesting provider. The processing takes place on the basis of Art. 6 para. 1 lit. f GDPR for our overriding legitimate interest in ensuring the trouble-free operation of our website and to improve our offer.
 


Customer Account Orders

Account
When opening a customer account, we collect your personal data to the extent specified therein. The purpose of data processing is to improve your shopping experience and to simplify order processing. The processing takes place on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.

Collection, processing and disclosure of personal data when placing orders
When ordering, we collect and process your personal data only to the extent necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide this provision means that no contract can be concluded. The processing takes place on the basis of Art. 6 para. 1 lit.b GDPR and is necessary for the performance of a contract with you.
Your data will be passed on, for example, to the shipping companies and dropshipping providers selected by you, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.
 


Contact Newsletter

Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact. By sending your message, you consent to the processing of the transmitted data. The processing takes place on the basis of Art. 6 para. 1 lit. a GDPR with your consent.
You can revoke your consent at any time by notifying us without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. We only use your e-mail address to process your request. Your data will then be deleted if you have not consented to further processing and use.

Use of the e-mail address for the sending of newsletters
We use your e-mail address regardless of the contract processing exclusively for our own advertising purposes for sending newsletters, provided that you have expressly consented to this. The processing takes place on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the mailing list.


Enterprise resource planning

Use of an external merchandise management system
We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected in the context of the order will be sent to
Billbee GmbH, Paulinenstrasse 54, 32756 Detmold
transmitted.


Payment

Use of PayPal
All PayPal transactions are subject to the PayPal Privacy Policy. These can be found under https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Using Amazon Payments
We use the Amazon Payments payment service of Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; "Amazon Payments").
In order to integrate this payment service, it is necessary that Amazon Payments collects, stores and analyzes data (e.B IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. The cookies enable the recognition of your browser. The purpose of data processing is to be able to offer you payment via the Amazon Payments payment service.
This data processing takes place on the basis of Art. 6 para. 1 lit. f GDPR for our overriding legitimate interest in a customer-oriented offer of various payment methods.
With the selection and use of "Amazon Payments", the data required for payment processing will be transmitted to Amazon Payments in order to be able to fulfil the contract with you with the selected payment method. This processing takes place on the basis of Art. 6 para. 1 lit.b GDPR.
Further information on data processing when using the Amazon Payments payment service can be found in the corresponding data protection declaration here: https://pay.amazon.com/de/help/201212490
 

Cookies
 
Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is called up again.
We use these cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
The processing takes place on the basis of Art. 6 para. 1 lit. f GDPR for our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide on the acceptance individually as well as prevent the storage of cookies and transmission of the data contained. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.
Under the following links you can find out how to manage cookies on the most important browsers (including deactivating them):


Plug-ins

Use of GoogleMaps
On our website, we use the function for embedding GoogleMaps maps from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws.
The function enables the visual representation of geographical information and interactive maps. Google also collects, processes and uses data from visitors to the websites when accessing the pages in which GoogleMaps maps are integrated.
Your data may also be transmitted to the USA. Google has certified itself according to the US-EU data protection agreement "Privacy Shield" and thus committed to comply with the European data protection guidelines.
The processing takes place on the basis of Art. 6 para. 1 lit. f GDPR for the legitimate interest in the needs-based and targeted design of our website.
Further information on the collection and use of data by Google can be found in Google's privacy policy under https://www.google.com/privacypolicy.html. There you also have the possibility to change your settings in the data protection center, so that you can manage and protect your data processed by Google.
 
Use of Google reCAPTCHA
We use the reCAPTCHA service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws. The purpose of the query is to distinguish the input by a human or by automated, machine processing. For this purpose, your input will be transmitted to Google and reused there. In addition, the IP address and, if applicable, other data required by Google for the reCAPTCHA service will be transmitted to Google. This data is processed by Google within the European Union and, if necessary, also transmitted to the USA. Google has certified itself according to the US-EU data protection agreement "Privacy Shield" and thus committed to comply with the European data protection guidelines.
The processing takes place on the basis of Art. 6 para. 1 lit. f GDPR for the legitimate interest of protecting our website from automated spying, misuse and SPAM.
Further information on Google reCAPTCHA and the associated data protection declaration can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.
 



Rights of data subjects and storage period

Duration of storage
After completion of the contract, the data will first be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial retention periods and then deleted after expiry of the period, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.
In addition, pursuant to Article 21 (1) GDPR, you have the right to object to processing based on Article 6 (1) (f) GDPR and to processing for direct marketing purposes.

Contact us on request. The contact details can be found in our imprint.

You can reach our data protection officer directly at: support@auto-dress.de

Right to lodge a complaint with the supervisory authority
In accordance with Article 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

Right to object
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.
Following the objection, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If the personal data processing is carried out for direct marketing purposes, you can object to this processing at any time by notifying us. After the objection has been made, we will terminate the processing of the data concerned for the purpose of direct marketing.

last updated: 19/11/2018