DATA PROTECTION DECLARATION
1) Information on the collection of personal data and contact details of the controller
1.2 The controller in charge for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Zoeppritz GmbH, Lindwurmstr. 125, 80337 München, Deutschland, Tel.: +49 (0) 89 94 39 736 0, Fax: +49 (0) 89 94 39 736 36, E-Mail: firstname.lastname@example.org. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data collection when you visit our website
Our visited website
Date and time at the moment of access
Amount of data sent in bytes
Source/reference from which you came to the page
Operating system used
IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the content of a virtual shopping basket for a later visit to the website). If personal data are also processed by individual cookies set by us, the processing is carried out in accordance with Art. 6 (1) point b GDPR either for the execution of the contract or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
We work together with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). You will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following sections.
Please note that you can set your browser in such a way that you are informed about the setting of cookies and you can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for the respective browsers under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Please note that the functionality of our website may be limited if cookies are not accepted.
5) Data processing when opening a customer account and for contract processing
6) Use of your data for direct advertising
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) point a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later time. The data collected by us when registering for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the responsible person named above. After your cancellation, your e-mail address will immediately be deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this declaration
7) Processing of data for the purpose of order handling
7.2 Use of Payment Service Providers
When paying by credit card via Heidelpay, payment is processed by the payment service provider Heidelberger Payment GmbH, Vangerowstraße 18, 69115 Heidelberg (hereinafter „Heidelpay“), to whom we pass on your data provided during the ordering process exclusively for the purpose of payment processing in accordance with Art. 6 (1) point b GDPR. The data will only be passed on if it is necessary for payment processing. To the extent necessary, Heidelpay will then transmit your data to HUELLEMANN & STRAUSS ONLINESERVICES S.A., 1, Place du Marché, 6755 Grevenmacher, Luxembourg, in accordance with Art. 6 (1) point b GDPR.
If you choose the payment method „Purchase invoice via Heidelpay“ or „Direct debit via Heidelplay“, you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address and telephone number) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, we will forward this data to Heidelberger Payment GmbH, Vangerowstr. 18, 69115 Heidelberg (hereinafter „Heidelpay“) for the purpose of a credit assessment in accordance with Art. 6 (1) point f GDPR. Based on your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), Heidelpay will check whether the payment option you have selected can be granted with regard to payment and/or default risks. In order to decide on the establishment or implementation of a contractual relationship, identity or creditworthiness, information from the following credit agencies may also be included pursuant to Article 6 (1) point f GDPR:
- SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
- CRIF Bürgel GmbH, Gasstraße 18, 22761 Hamburg
- Arvato Infoscore GmbH, Rheinstraße 99, 76532 Baden-Baden
- Deltavista GmbH, Kaiserstraße 217, 76133 Karlsruhe
- UNIVERSUM Business GmbH, Hugo-Junkers-Straße 3, 60386 Frankfurt am Main
- Bisnode International Group, Robert-Bosch-Straße 11, 64293 Darmstadt
- Regis24 GmbH, Wallstraße 58, 10179 Berlin
- Creditreform AG, Hellersbergstraße 12, 41460 Neuss
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 (1) point b GDPR and only insofar as this is necessary for payment processing.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
8) Use of Social Media
Instagram as Standard-Plugin
If you do not want Instagram to associate the information collected through our website directly with your Instagram account, you must log out of Instagram before visiting our website. You can also prevent the loading of the Instagram plugins and thus the data processing procedures described above with add-ons for your browser for the future, e.g. with the script blocker „NoScript“. Instagram LLC., based in the United States, is certified for the US-European data protection agreement „Privacy Shield“, which guarantees compliance with the data protection level applicable in the EU.
9) Web analysis services
Google (Universal) Analytics
This website uses Google Analytics exclusively with the extension „_anonymizeIp()“, which ensures an anonymization of the IP address by shortening it and excludes a direct personal relationship. As a result of the extension, your IP address will previously be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA and shortened there. In these exceptional cases, processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
This website also uses Google Analytics for a device-independent analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under „My data“, „Personal data“.
9.2 Mouseflow (Mouseflow ApS)
This website uses Mouseflow, a web analysis tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark for the purpose of recording randomly selected individual visits (with pseudonymized IP address only). This results in a record of mouse movements and clicks in order to play back certain website visits on a random basis and to derive potential improvements for the benefit of the website from those records. If personal data is also processed, this is done inaccordance with Art. 6 Para. (1) point f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization purposes.
10) Tools and miscellaneous
When you access the sub-pages that contain the Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored by Google on servers in the United States. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place according to Art. 6 (1) point f GDPR on the basis of the legitimate interests of Google in the insertion of personalized advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles. If you want to do so, you must contact Google to exercise this right.
Google LLC, based in the United States, is certified for the US-European data protection agreement „Privacy Shield“, which guarantees compliance with the data protection level applicable in the EU.
11) Rights of the data subject
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.