PRIVACY POLICY

1. Introduction

We are delighted that you are interested in our services and want to make sure that you feel you have come to the right place – including when it comes to how we handle your personal data. We take protecting your personal data very seriously. We want you to know when we collect data, what data we collect and how we use it. Below, you will find details on the type of personal data we collect, on the extent of the collected data, on the reasons why we do so and what we use the collected data for. You can check back to these details on our website at any time.

To ensure that your personal data remains safe, we ensure that your data is protected from access by unauthorised parties and from unauthorised disclosure. Your data will not be supplied to third parties without authorisation.

If you have any questions or suggestions regarding this data policy, or concerning data protection in general, please feel free to get in touch with our (external) data protection officer under the contact details below.

2. Name and address of controller

The controller as defined in the General Data Protection Regulation and other data protection laws nationally applicable in the EU member states or other regulations related to data protection is:

DACHAPU Manufaktur,
Inh. Daniela Beesé,
Kobestraße 1,
20457 Hamburg

If you have any questions regarding this topic please contact us via email: info@dachapu.de.

3. Extent of personal data processing
We process our users’ personal data only to the extent required for providing a functional website and supplying our content and services. We process our users’ personal data regularly only if the respective users have given their consent. The only exception to this is where it is actually impossible for us to obtain prior consent and processing of the data is legally allowed.

Legal basis for processing personal data
Where we obtain the corresponding data subjects’ consent for processing their personal data, art. 6 paragraph 1 point a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

Where we need to process personal data for the purposes of fulfilling a contract, and the data subject is party to the contract, art. 6 paragraph 1 point b of the GDPR serves as the legal basis. This also applies to processing necessary to accommodate preparations for entering into a contract.

Where processing of personal data is necessary for our company to fulfil a legal obligation, art. 6 paragraph 1 point c of the GDPR serves as the legal basis.

Where processing of personal data is necessary for protecting the vital interests of the data subject, or those of another individual, art. 6 paragraph 1 point d of the GDPR serves as the legal basis.

Where processing is necessary to protect our company's or a third party’s legitimate interests, and such interests are not overridden by the interests, fundamental rights and freedoms of the data subject, art. 6 paragraph 1 point f of the GDPR serves as the legal basis.

Deletion of data and data storage period
The data subject’s personal data will be deleted or blocked as soon as the purpose for which it has been collected has been fulfilled. Data may remain on record beyond this period if such is specified in European or national legislation from European Union Regulations, laws or other provisions to which the controller is subject. Data will also be deleted if a storage period specified in the above standards expires unless conclusion or fulfilment of a contract requires the data to remain on record further.

4. Provision of website and creation of log files

Details and extent of data processing
Any time our website is accessed, our system automatically records data and information concerning the accessing computer.

The following data is recorded:

  • Information on the browser type and version used

  • The user’s operating system

  • The user’s Internet service provider

  • The user’s IP address

  • Date and time of access

  • Websites from which the user’s system reaches our website

  • Websites the user’s system accesses from our website

This data is also recorded in our system’s log files. This data is not stored together with any of the user’s other personal data.

Legal basis for data processing
The legal basis for temporary recording of this data in our log files is art. 6 paragraph 1 point f GDPR.

Purpose of data processing
Our system needs to temporarily record the IP address in order to provide the website to the user’s computer. This also requires that the user’s IP address remains logged throughout the session.

Recording the data in log files is necessary to ensure that the website operates correctly. The data further helps us optimise the website and ensure that our computer systems remain secure. No data is processed for marketing purposes in this context.

The above purposes also constitute our legitimate interests in data processing under art. 6 paragraph 1 point f GDPR.

Data storage period
The data is deleted as soon as it is no longer required for achieving the purpose for which it was recorded. With respect to data being recorded in order to provide the website, the data is no longer required as soon as the respective session ends.

 

With respect to data being recorded in log files, the data is no longer required after fourteen days at the latest. Data may remain on record for longer. If so, the users’ IP addresses are deleted or rendered untraceable to make identification of the accessing client impossible.

Right to object and options for avoidance

The website cannot be provided without recording the data and the operation of the site in the Internet is impossible without storing the data in log files. There is correspondingly no option for the user to object.

 

5. Use of cookies

Details and extent of data processing
Our website uses cookies. Cookies are text files saved in the Internet browser or by the Internet browser on the user’s computer. When a user accesses a website, a cookie may be stored in the user’s operating system. This cookie contains a unique character string that allows the website to identify the browser when it accesses the website again.

We use cookies to improve the user experience when accessing our website. Some of our website’s elements need to be able to identify the accessing browser even after it has left the site.

The following data is recorded and transferred in the cookies:

  • Availability of JavaScript in the browser

Our website further employs cookies that facilitate analysis of the users’ web-surfing behaviour.

This can entail transfer of the following data:

  • Randomly generated user ID

  • Time of first access

  • Time of last access

  • Number of visits

User data recorded this way is pseudonymised through technical measures. It cannot be used to identify the accessing user. This data is not stored together with any of the user’s other personal data.

Legal basis for data processing
The legal basis for using cookies to process personal data is art. 6 paragraph 1 point f GDPR.

Purpose of data processing
The purpose of using technically necessary cookies is to make using our website easier for users. Several of our website’s functions will not work without using cookies. These functions require the browser to be recognised again after leaving and returning to our website.

The following functions require cookies:

  • Detection of JavaScript support

The user data recorded in technically necessary cookies is not used to create user profiles.

We use analysis cookies to improve the quality of our website and its contents. The analysis cookies tell us how the website is being used and this way allow us to keep on improving it.

For further details on the analysis cookies used, refer to the section on web analysis by Matomo below.

The above purposes also constitute our legitimate interests in processing personal data under art. 6 paragraph 1 point f GDPR.

Data storage period, right to object and options for avoidance
Cookies are stored on the user’s computer and transferred to us by that computer. As the user, you therefore have complete control over the use of cookies. You can restrict or prevent your computer from sending cookies by adjusting your Internet browser’s settings. You can delete any saved cookies at any time. You can even automate deletion. If you disable cookies for our website, you may no longer be able to use the site’s full range of functions.

Encryption
To keep your data secure during transmission, we use the latest state of the art in encryption technology (e.g. TLS/SSL) via HTTPS.

6. Newsletter

Details and extent of data processing
Our website offers you the option of subscribing to our free newsletter. When you register a subscription, the data you enter in the input screen is sent to us.

We also record the following data as part of registration:

  • The IP address of the computer accessing our website

  • Date and time of registration

During the registration process, we will ask you to give your consent to our processing the data and will point you towards this data policy.

No data will be forwarded to third parties as part of data processing when supplying the newsletter. The data will be used solely for supplying the newsletter.

Legal basis for data processing
The legal basis for processing data after newsletter subscription and with the user’s consent is art. 6 paragraph 1 point a GDPR.

Purpose of data processing
We record the user’s email address to allow us to send out the newsletter.

We collect the other data as part of subscription registration to prevent our services from being used inappropriately and to prevent the email address from being fraudulently used. The data also helps us provide tailored information

Data storage period
The data is deleted as soon as it is no longer required for achieving the purpose for which it was recorded. We therefore keep the user’s email address on record for as long as the user remains subscribed to the newsletter.

The other personal data collected during registration will also be deleted when the user unsubscribes from the newsletter.

Right to object and options for avoidance
Users can unsubscribe from the newsletter at any time. The newsletter itself includes a corresponding link.

 

This also allows users to withdraw their consent regarding our storing of the personal data collected during registration.

7. Contact form and contact by email

Details and extent of data processing
You have the option to contact us under the email address provided. If you do so, we will store the personal user data included in the email.

We will not give this data to anybody else. The data will be used solely for handling our conversation.

Legal basis for data processing
The legal basis for processing data with the user’s consent is art. 6 paragraph 1 point a GDPR.

The legal basis for processing data received as part of email communication is art. 6 paragraph 1 point f GDPR. If email communication pursues conclusion of a contract, the legal basis shall further be art. 6 paragraph 1 point b GDPR.

Purpose of data processing
We process the personal data obtained from users contacting us via email solely for the purposes of handling contact.solely for the purposes of handling contact.

Data storage period
The data is deleted as soon as it is no longer required for achieving the purpose for which it was recorded. In terms of a contact received by email, this applies when the respective conversation with the user has concluded. The conversation has concluded when the circumstances indicate that the respective subject has been fully resolved.

The additional personal data collected during transmission will be deleted after seven days at the latest.

Right to object and options for avoidance
All users can at any time withdraw their consent to our processing their personal data. If a user contacts us by email, they can object at any time to our storing their personal data. If they do so, the conversation cannot be pursued further.

You can withdraw your consent and object to our storing data by phone (name and address of controller) or by sending an email to info@dachapu.de.

If you do so, we will delete all personal data recorded as part of our contact.

8. Processing of Data for the Purpose of Order Handling

Details and extent of data processing

Description and scope of data processing

If you order goods (and any related services) through our website, the collection, storage and processing of personal data to conduct the contract is essential. When ordering goods, the following data is collected:


•          First name, surname
•           Telephone number
•           Address ("Address")
•           Email-Adress
If you specify a billing address other than the delivery address, the following additional data will be collected:

•           First name, surname
•           Telephone number
•           Address ("Address")
•           Email-Adress


Furthermore, we collect the desired payment method in the course of the order process. Insofar as you have selected a payment service provider for the payment method, a direct forwarding to the website of the respective payment service provider takes place as part of the payment process. We will not collect, process or store the data you enter on the page of the called payment service provider. In that regard, only the privacy policies of the respective payment service provider apply.

To prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted using SSL technology.

Purpose of data processing
We need the data collected during the ordering process for the following purposes:
•           for your identification as a customer
•           to carry out your order
•           To contact you, if you have any queries, clarify any discrepancies or other information about your order
•           for invoicing
•          for any warranty and liability issues as well as for any assertion of claims against you
•           to manage our customer data

Data storage period
The personal data collected by us will be stored until expiry of the statutory retention obligation and thereafter deleted, unless, in accordance with Article 6 para. 1 sentence 1 lit. c DSGVO a longer storage obligation is provided for due to tax / commercial law retention and documentation obligations or you are entitled to further storage in accordance with Article 6 paragraph 1 sentence 1 lit. a DSGVO have agreed.

Legal basis for data processing
By confirming this Privacy Policy as part of the ordering process, you have consented to the processing of the data.The processing of your data is also based on Article 6 paragraph 1 sentence 1 lit. b DSGVO for the stated purposes for the proper processing of your order.

Transfer of data to third parties
A transfer of the personal data collected from you in the course of the ordering process to third parties takes place exclusively in the context of the requirements of the contract. The transfer of your personal data to third parties is limited to the necessary minimum.

Therefore, a transfer of your personal data to third parties will not take place. However, we reserve the right to share your information with third parties in the following cases:

•           Insofar as you comply with Article 6 para. 1 sentence lit. a DSGVO have given an explicit consent.
•           The disclosure is necessary for the assertion of or defense against legal claims (Article 6 (1) sentence 1
              lit. f DSGVO).
•           We are subject to a statutory disclosure obligation in accordance with Article 6 para. 1 sentence 1 lit. c  
             DSGVO.
•           For the fulfillment of contractual and pre-contractual obligations (Article 6 (1) sentence 1 (b) GDPR).

 

9. Use of Google Analytics for web analysis

Details and extent of data processing
If you have given your consent, Google Analytics, a web analysis service of Google Inc. (“Google”) is used on this website. The use includes the “Universal Analytics” operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze a user’s activities across devices.

 

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users interact with the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. We would like to point out that on this website Google Analytics has been extended to include IP anonymisation in order to ensure anonymous collection of IP addresses (so-called IP masking). The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/gb.html  or https://policies.google.com/?hl=en.

Legal basis for data processing
The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Purposes of the Processing
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website and Internet use.

Recipients or Categories of Recipients and information about the Recipients
The recipient of the collected data is Google.
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Nutzerbedingungen: http://www.google.com/analytics/terms/de.html, Übersicht zum Datenschutz: http://www.google.com/intl/de/analytics/learn/privacy.html, sowie die Datenschutzerklärung: http://www.google.de/intl/de/policies/privacy.

Transfer to Third Countries
Personal data will be transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission’s adequacy decision. You can download the certificate here.

Duration of Data Storage
The data sent by us and linked to cookies, user-identifiers (e.g. User-IDs) or advertising-identifiers are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

Rights of the Persons affected
You can revoke your consent at any time with effect for the future by blocking the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functionalities of this website to their full extent.

 

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the Browser Add-on. Opt-out cookies will prevent future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt-out on all systems used. http://tools.google.com/dlpage/gaoptout?hl=de

10. Social Media

Use of Facebook, Twitter and Instagram Plugins

We maintain an online presence in social media and platforms to communicate with the prospects and users active there and to keep them up-to-date on our services. When accessing social media networks and platforms, the respective operators’ terms and conditions and data policies will apply.

On our website, so-called social plugins (“plugins”) of the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) are used. The plugins are marked with a Facebook logo or the addition “Social plug-in of Facebook” or “Facebook Social Plugin”. An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/plugins

When you visit a page of our website that contains such a plugin, your browser connects directly to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page. Through this integration, Facebook is given the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not logged into Facebook. This information (including your IP address) is sent directly from your browser to a Facebook server and stored there.

If you are logged into Facebook, Facebook can directly assign our website to your Facebook profile. If you interact with the plugins, for example, press the “Like” button or make a comment, this information is also sent directly to a Facebook server and stored there. The information is also published to your Facebook profile and displayed to your Facebook friends.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights and settings for the protection of your privacy, please refer to the Privacy Policy of Facebook: https://www.facebook.com/policy.php

If you do not want Facebook to map the data collected through our website directly to your Facebook profile, you must log out to Facebook before you visit our website. You can also completely prevent loading the Facebook plugins with add-ons for your browser, e.g. With the “Facebook Blocker” (https://webgraph.com/resources/facebookblocker/) or the script blocker “NoScript” (https://noscript.net/).

By using Twitter and its re-tweet function, the websites you visit are linked to your Twitter account and communicated to other users. This also transmits data to Twitter.

Please note that we as the provider of our sites are not informed of the data transmitted or of how Twitter uses the data. For more information, see Twitter’s data policy at https://twitter.com/privacy.

On our website, so-called social plugins (“plugins”) are used by Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example, in the form of an “Instagram camera”. An overview of the Instagram plugins and their appearance can be found here: https://blog.instagram.com/post/36222022872/introducing-instagram-badges

When you view a page of our website that contains such a plugin, your browser connects directly to the Instagram servers. The content of the plugin is sent directly to your browser and integrated into the page. Through this integration, Instagram gets the information that your browser has called the corresponding page of our website, even if you do not have an Instagram profile or have just logged into Instagram. This information (including your IP address) is sent directly from your browser to an Instagram server and stored there. If you are logged into Instagram, Instagram can directly assign the visit of our website to your Instagram account. When you interact with the plugins, for example, press the “Instagram” button, this information is also sent directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts.

 

Purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights and settings for the protection of your privacy, please refer to the Instagram Privacy Policy: https://help.instagram.com/155833707900388/

 

If you do not want Instagram to map the data collected through our website directly to your Instagram account, you must log out before you visit our website at Instagram. You can also use the script blocker “NoScript” (https://noscript.net/ ) to completely block the loading of the Instagram plugins with add-ons for your browser.

 

11. Embedded YouTube videos

We embed YouTube videos on some of our websites. These plug-ins are operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you access a web page with the YouTube plug-in and click the video, you will be connected to YouTube’s servers. When this happens, YouTube receives information on the sites you are visiting. If you are logged in to your YouTube account, YouTube will be able to trace your surfing behaviour. You can prevent this by logging out of your YouTube account beforehand.

When you start a YouTube video, the provider uses cookies that collect data on user behaviour.

If you have disabled cookies for the Google Ad program, these YouTube cookies will also be disabled. However, YouTube stores further, non-personal user data in other cookies. If you want to prevent this, you will need to disable cookies in your browser settings.

For more information on data protection and YouTube, refer to the provider’s data policy here: https://www.google.com/intl/en/policies/privacy/

12. Right of access

You are entitled to request information from the controller on whether we are processing any personal data related to yourself.

You are entitled to request information on whether the personal data relating to yourself will be transmitted to a non-EU member state or international organisation. You are entitled in this context to request information on suitable safeguards according to art. 46 GDPR related to the transmission.

You are entitled to request that the controller corrects and/or completes the personal data relating to yourself if this data is incorrect or incomplete. The controller is obliged to do so without delay.

 

13. Changes to our data policy

We reserve the right to amend this data policy to keep it in line with the latest legal requirements or to adjust it to reflect changes to our services, e.g. if we introduce new services. The latest version of our data policy will apply to any further visits.

 

Latest version: 20. Dezember 2018