Data protection
Data protection information according to the EU General Data Protection Regulation (GDPR)
Contents:
1. Name and contact details of the responsible body
2. Collection and storage of personal data; Type, purpose and use
3. Disclosure of data to third parties
4. Your rights as a data subject
5. Your right to object
6. Data processing via our website
1. Name and contact details of the responsible body
This data protection notice applies to us,
OPOSSUM design Heike Sinnig
Weitisberga 63 / 73,
07343 Wurzbach
Tel.: 036652 20010
Email: info@opossum-design.com
as the responsible body.
2. Collection and storage of personal data; Type, purpose and use
The legal basis for the processing of personal data is Article 6 Paragraph 1 GDPR.
We collect personal data if you voluntarily provide it to us when contacting us (e.g. via contact form or email), placing an order or opening a customer account. The list below and the respective input forms show which data is collected. The data you provide will only be used by us to process the contract and process your inquiries. After the contract has been fully processed or your customer account has been deleted, your data will be blocked for further use and deleted after the tax and commercial law retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this is permitted by law and about which we will inform you below. Your customer account can be deleted at any time and can be done either by sending a message to the contact option described above or using a function provided for this purpose in the customer account.
2.1. Collection and storage of personal data as part of an order and/or opening a customer account
As part of an order and/or opening a customer account, the following information will be collected from you. Without this data, an order in our online shop is not possible.
- Salutation, title, first name, last name
- Address
- E-mail address
- if applicable, telephone number (landline and/or mobile phone)
- Type of payment method used (PayPal, advance payment, cash on delivery)
- Type of desired shipping service provider
- for companies, additionally company name, company form, owner/managing director, position/department in the company, fax number if applicable, website(s) if applicable, sales tax identification number
In addition, all information that is necessary for the fulfillment of the contract with you is collected.
The collection of personal data takes place
- to be able to identify you as a customer
- to be able to give you appropriate advice
- in order to be able to fulfill our contractual obligations towards you
- to be able to comply with our legal obligations
- to correspond with you;
- for invoicing or, if necessary, as part of the dunning process
- for permitted direct advertising purposes
- to assert any claims against you.
As part of a refund using the advance payment method, additional information about your bank details will be stored so that the refund can be carried out. After the refund has been made, these will be deleted.
The processing of personal data takes place on the occasion of your request/order from us and is necessary for the stated purposes for processing your order and for the fulfillment of obligations from the underlying contract.
The personal data collected will be stored until the end of the statutory retention period for merchants (10 years after the end of the calendar year in which the contractual relationship was terminated) and then deleted. In exceptional cases, this does not apply if we are obliged to store the data for a longer period of time due to tax or commercial retention obligations (according to the German Commercial Code (HGB), StGB or AO) or if you have consented to further storage.
2.2. Collection and storage of personal data when using our contact form and email contact
There is a contact form on our website that can be used to contact us electronically. If you take advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data is:
- First name, last name, if you provide us with this information
- E-mail address
- Zip code and/or place of residence, if you provide us with this information
- Your message
Your consent will be obtained for the processing of the data as part of the sending process and reference will be made to this data protection declaration.
Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be stored.
In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with you has ended. The conversation ends when it can be seen from the circumstances that the matter in question has been finally clarified.
2.3. Collection and storage of personal data when using our company Facebook page
Artikel 6 Absatz 1 f)
For further details and how to exercise your rights, please see Facebook's data policy and the Facebook page for details on Page Insights data
According to Article 26 GDPR, there is a joint responsibility between Facebook and us as the site operator. Further information can be found on Facebook in the Page Controller Addendum.
Artikel 6 Absatz 1 f) DSGVO GDPR serves as the legal basis for the processing of Facebook Insights data. As part of your visit to our Facebook page, we can access statistical data in different categories:
Total number of page views, "likes", page activities, post interactions, video views, post reach, comments, shared content, replies, proportion of men and women, origin based on country and city, language, views and clicks in the shop, clicks on route planner and Clicks on phone numbers.
We may use this data to make the contributions on the site more attractive and/or to find the right time for publication.
For further details and how to exercise your rights, please see Facebook's data policy and the Facebook page for details on Page Insights date
According to Article 26 GDPR, there is a joint responsibility between Facebook and us as the site operator. Further information can be found on Facebook in the Page Controller Addendum.
2.4. Embedded videos from YouTube
Google’s privacy policy applies to all YouTube videos embedded on our website.
3. Disclosure of data to third parties
3.1. Transfer of your personal data to third parties
In principle, your personal data will not be transmitted to third parties. Exceptions to this only apply to the extent that this is necessary for the processing of contractual relationships with you. This includes, in particular, the transfer to service providers commissioned by us (so-called processors) or other third parties whose activities are necessary for the execution of the contract. This concerns:
- for shipping processing, the transfer of your data to the shipping company
- for payment processing, the transfer of your data to the payment service provider PayPal or to the banking company. The data passed on may only be used by these third parties for the stated purposes.
3.2.Use of social media plugins
We use social media plugins from Facebook, Pinterst, Instagram, Twitter on our website. When using these plugins, your personal data will only be forwarded to the providers of the respective social networks as part of the “two-click solution” after your prior consent. The legal basis for processing the data after your consent is Article 6 (1) (a) GDPR.
After accessing the website, you can freely decide whether your data should be transferred to the social networks through the plug-ins or not.
3.3. Links to other websites
From time to time we refer to third-party websites. Even if we carefully select the websites to which we refer, we cannot assume any liability or guarantee for the accuracy or completeness of the content or the data security of third-party websites. This data protection declaration also does not apply to linked third-party websites.
3.4. Integration of third-party services and content
As part of this online presence, third-party content may be integrated, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites (so-called “third-party providers”). The prerequisite here is always that the providers of this content recognize the user's IP address, since without this IP address their content cannot reach your browser. We strive to only use content whose third-party providers only use the IP address to deliver the content. However, we have no influence on third-party providers recording your IP address for statistical purposes.
4. Your rights as a data subject
As a person affected by data processing, you have various rights:
- Right of revocation: You can revoke your consent to us at any time. Data processing based on the revoked consent may then no longer be continued in the future.
- Right to information: You can request information about your personal data processed by us. This applies in particular to the purposes of data processing, the categories of personal data, the categories of recipients, if applicable, the storage period, the origin of your data, if applicable, and, if applicable, the existence of automated decision-making including profiling and, if necessary, meaningful information about their details .
- Right to rectification: You can request the correction of incorrect or the completion of your personal data stored by us.
- Right to deletion: You can request the deletion of your personal data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is.
- Right to restriction of processing: You can request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful, but you refuse its deletion. You also have this right if we no longer need the data, but you need it to assert, exercise or defend legal claims. In addition, you have this right if you have objected to the processing of your personal data;
- Right to data portability: You can request that we send you the personal data you have provided to us in a structured, commonly used and machine-readable format. Alternatively, you can request that the personal data you have provided to us be transmitted directly to another person responsible, if this is possible.
- Right to complain: You can complain to the supervisory authority responsible for us, e.g. if you believe that we are processing your personal data unlawfully. The authority responsible for us is:
Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI)
Dr. Lutz Hasse, Häßlerstraße 8, 99096 Erfurt,
Telephone: 03 61/37 71 900, fax: 03 61/37 71 904
Email: poststelle@datenschutz.thueringen.de (PGP Key)
Homepage: http://www.tlfdi.de/tlfdi/
5. Your right to object
If we process your personal data based on a legitimate interest, you have the right to object to this processing. If you would like to exercise your right to object, a notification in text form is sufficient. You are welcome to write to us, send us a fax or contact us by email. You can find our contact details under point 1 of this data protection notice.
6. Data processing online
6.1. Storage of access data in server log files
You can visit our websites without providing any personal information. We do not store any access data in so-called server log files, such as the name of the requested file, date and time of retrieval, amount of data transferred and the requesting provider. When you place an order, only the data required for order processing is stored.
6.2. Use of cookies
We don't use cookies.
6.2. Google Analytics
We do not use Google Analytics to analyze our website.