Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Non-provision of the data has no consequences. This applies only insofar as no other information is given in the following processing procedures.
"Personal data" means all information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without giving any personal information.
Whenever you access our website, usage data is transmitted to us or our web host / IT service provider by your Internet browser and stored in log files (so-called server log files). These stored data include, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 para. 1 lit. f DSGVO out of our predominant legitimate interest in ensuring the trouble-free operation of our website and to improve our offer.
Customer account orders
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying the order processing. The processing is based on Art. 6 para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.
Collection, processing and forwarding of personal data in connection with orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to deal with your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is based on Art. 6 para. 1 lit. b DSGVO and is necessary for the fulfilment of a contract with you.
Your data will be passed on, for example, to the mail-order companies and dropshipping providers you have chosen, payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the legal requirements. The extent of the data transfer is limited to a minimum.
Collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, e-mail address, message text) to the extent that you have provided it. The data processing serves the purpose of establishing contact. By sending your message you agree to the processing of the transmitted data. The processing is based on Art. 6 para. 1 lit. a DSGVO with your consent.
You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until revocation. We will only use your e-mail address to process your request. Your data will then be deleted, unless you have agreed to further processing and use.
Dispatch service provider merchandise management
Forwarding of the e-mail address to shipping companies for information on the shipping status
We pass on your e-mail address to the transport company within the framework of the contract processing, provided that you have expressly agreed to this in the ordering process. The forwarding serves the purpose of informing you by e-mail about the shipping status. The processing takes place on the basis of Art. 6 para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the legality of the processing carried out on the basis of the consent until revocation.
Use of an external merchandise management system
We use a merchandise management system for contract processing within the framework of order processing. For this purpose, your personal data collected in the context of the order are sent to
Haufe-Lexware GmbH & Co. KG Haufe Service Center GmbH Munzinger Str. 9 79111 Freiburg
Payment service provider
Using PayPal Express
We use on our website the payment service PayPal Express of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The purpose of the data processing is to be able to offer you payment via the payment service PayPal Express. In order to integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. The cookies enable your browser to be recognised.
This data processing, in particular the setting of cookies, is based on Art. 6 para. 1 lit. f DSGVO from our predominant legitimate interest in a customer-oriented offer of different payment methods. You have the right to object to the processing of your personal data based on Art. 6 para. 1 letter f DSGVO at any time for reasons arising from your particular situation.
Under the following links you can find out how you can manage the cookies of the most important browsers (including deactivating them):
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Technically necessary cookies
The processing is carried out on the basis of Art. 6 para. 1 lit. f DSGVO out of our predominantly justified interest in guaranteeing the optimal functionality of the website as well as a user-friendly and effective design of our offer.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you on the basis of Art. 6 para. 1 letter f DSGVO.
Use of Google Analytics
We use the web analysis service Google Analytics of Google LLC on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Insofar as you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google which is responsible for processing your data and for ensuring compliance with the applicable data protection laws.
The data processing is used for the purpose of analysing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide further services to the website operator in connection with website and internet use. The following information, among others, may be collected: IP address, date and time of the page call, click path, information about the browser and the device used by you, pages visited, referrer URL (website from which you accessed our website), location data, purchasing activities, etc. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Google Analytics uses technologies such as cookies, web memory in the browser and counting pixels, which enable an analysis of the use of the website by you. The information thus generated about your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymisation is activated on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
Google has certified itself under the US-EU Privacy Shield Agreement and is thus committed to complying with the European data protection guidelines.
The data processing, in particular the setting of cookies, is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO out of our overwhelmingly justified interest in the needs-based and targeted design of the website. For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data relating to you on the basis of Art. 6 para. 1 lit. f DSGVO.
You can prevent the collection of data generated by Google Analytics and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
To prevent data collection and storage by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when you visit this website. You must opt-out on all systems and devices in use to be fully effective. If you delete the opt-out cookie, requests will again be sent to Google. If you click here, the opt-out cookie will be set: Disable Google Analytics.
Use of etracker
We use technologies from etracker GmbH (Erste Brunnenstraße 1, 20459 Hamburg, "etracker") on our website.
The data processing serves the purpose of analysing this website and its visitors. For this purpose data is collected and stored. Cookies may be used for this purpose, which enable the recognition of the Internet browser.
The following information, among others, can be collected: IP address, information about the browser and operating system you use, date and time of your visit, time zone, referrer URL (website from which you accessed our website).
This data can be used to create user profiles under a pseudonym. The data collected using etracker technologies will not be used to personally identify the visitor to this website and will not be merged with personal data about the bearer of the pseudonym without the separately granted consent of the person concerned.
Data processing, in particular the setting of cookies, is carried out on the basis of Art. 6 Para. 1 letter f DSGVO out of our overriding legitimate interest in the needs-based and targeted design of the website. For reasons arising from your particular situation, you have the right to object at any time to the processing of your personal data based on Art. 6 Para. 1 letter f DSGVO.
To prevent data collection and storage by etracker across devices, you can set an opt-out cookie here. Opt-out cookies prevent the future collection of your data when you visit this website. You must opt-out on all systems and devices in use to be fully effective. If you delete the opt-out cookie, requests will again be sent to etracker.
You can find more information about the function and data protection at etracker here.
Rights of data subjects and storage period
Duration of storage
After complete contract implementation, the data will be stored initially for the duration of the warranty period, thereafter taking into account statutory, in particular tax and commercial law retention periods, and then deleted after expiry of the period, unless you have consented to further processing and use.
Rights of the person concerned
If the legal requirements are met, you are entitled to the following rights in accordance with Art. 15 to 20 DSGVO: right to information, to correction, to deletion, to restriction of processing, to data transferability.
Furthermore, according to Art. 21 para. 1 DSGVO, you have the right to object to processing based on Art. 6 para. 1 f DSGVO as well as to processing for the purpose of direct advertising.
Please contact us on request. The contact details can be found in our imprint.
Right of appeal to the supervisory authority
Under Art. 77 of the DPA, you have the right to complain to the supervisory authority if you believe that your personal data are being processed unlawfully.
Right of objection
If the personal data processing activities listed here are based on our legitimate interest pursuant to Art. 6 Par. 1 letter f DSGVO, you have the right to object to these processing activities at any time with effect for the future for reasons arising from your particular situation.
After the objection has been made, the processing of the data concerned will be terminated unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.
If personal data are processed for the purposes of direct advertising, you can object to this processing at any time by notifying us. Once you have done so, we will stop processing the data concerned for the purpose of direct marketing.
last update: 23.10.2019