When you use our services, you’re trusting us with your information. We understand this is a big responsibility and work hard to protect your information and put you in control.
The Retailer named in is the responsible data controller for any personal data collected and processed in connection with payment process.If you have any questions on privacy or this Privacy Notice, or would like to exercise any of your rights (see 5. below), please contact us using one of the contact details specified in our website.
We collect and process the categories of personal data about and obtained from you as specified in payment process.
Your personal data is processed for purposes of performing the contract concluded with you by payment.
We rely on Art. 6 (1) b) of the EU General Data Protection Regulation (GDPR) (performance of a contract to which the data subject is party) as the legal basis for such processing activities.
We may transfer your personal data for the respective purposes to the following recipients and categories of recipients:
(a) Private third parties, i.e. affiliated or unaffiliated private bodies other than us.
(b) Service providers, acting as processors, in order to provide IT and other administrative support (e.g., service providers who provide account payable support or IT hosting and maintenance support); those service providers may have access to your personal data to the extent necessary to provide such services. The service providers will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the personal data and to process the personal data only as instructed.
(c) Governmental authorities, courts, external advisors, and similar third parties as required or permitted by applicable law. Any access to your personal data by us is restricted to those individuals that have a need to know in order to fulfill their job responsibilities.
Some of the recipients of your personal data will be located or may have relevant operations outside of the EU, such as in the People’s Republic of China, where the data protection laws may provide a different level of protection compared to EU data protection legislation. Where necessary, we ensure (e.g. by entering into appropriate contracts) that the recipients provide for an adequate level of data protection comparable to that in the EU. A copy of the respective safeguards we have taken is available via our data protection officer, if applicable (see 1. above).
We aim to process and store your personal data for the time necessary to achieve the processing purposes stated herein (see 2. above). If we no longer need your personal data, we erase and/or anonymize them. This does not apply where we are obliged to keep the data longer, in particular to comply with legal obligations including statutory retention requirements to which we are subject. E.g., personal data contained in contracts, notifications or business letters may need to be kept for up to 10 years. In all other respects, we delete your personal data 3 years after the execution of the contract on the basis of which we carried out the Refund.
Pursuant to applicable data protection law you have – in addition to the right to lodge a complaint with the competent data protection authority – the following rights. To exercise your rights you may contact us at any time (see 1. above).
(a) Right of access: You have the right to obtain from us confirmation as to whether or not your personal data is processed, and, where that is the case, to request access to the personal data. The access information includes, inter alia, processing purposes, categories of personal data concerned, and recipients or categories of recipients to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access. The right of access may be limited by Sec. 34 of the German Federal Data Protection Act.
(b) Right to rectification: You have the right to obtain from us the rectification of your inaccurate personal data. Depending on the processing purposes, you have the right to have incomplete personal data completed, including by means of an supplementary statement.
(c) Right to erasure (“right to be forgotten”): Under certain circumstances, you may have the right to obtain from us the erasure of your personal data and we may be obliged to erase such personal data.
(d) Right to restriction of processing: Under certain circumstances, you may have the right to obtain from us restriction of processing your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes.
(e) Right to data portability: Under certain circumstances, you have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another entity without hindrance from us.
(f) Right to object: Under certain circumstances, you have the right to object, on grounds relating to your particular situation, or where personal data are processed for direct marketing purposes at any time to the processing of your personal data by us and we can be required to no longer process your personal data.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your personal data will no longer be processed for such purposes by us.