Privacy Policy
Please note: This is a non-binding English translation for your convenience. The legally binding version is the German original.
PRIVACY POLICY
We are delighted that you are visiting our online shop. Your privacy is important to us when you use our website, which is why we would like to inform you in this privacy policy about how Windeltortezurgeburt.de handles personal data. As it is necessary to provide some personal data (such as first and last name, delivery and billing address, and email address) in connection with registration, order processing, delivery of the ordered goods, and payment processing, we would like to inform you that your data will not be passed on to third parties without your express consent.
In the case of a purchase contract or a chargeable order, the required personal data (first and last name, delivery address, and email address where applicable) is transmitted to the respective transport service providers so that your ordered goods can be delivered.
When registering with the online shop, you can also subscribe to the newsletter. This only happens with your consent, which you can revoke at any time free of charge by sending us a short email to info@windeltortezurgeburt.de.
Cookies
When you visit our web pages, a “session cookie” is set. A cookie is a text file that is stored on your computer and enables an analysis of your use of the website. A session cookie is only stored for the duration of a browser session. As soon as you close your browser, the cookie is deleted. We use the cookie to optimise the use of our web pages. The information stored in the cookie does not allow any conclusions to be drawn about your identity and is not combined with any other data by us.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal notification by email to us is sufficient for this. The lawfulness of the data processing carried out up until the revocation remains unaffected by the revocation.
Right to lodge a complaint with the competent supervisory authority
In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
SSL and TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Information, blocking, deletion
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to rectification, blocking, or deletion of this data. For this and for further questions on the subject of personal data, you can contact us at any time at the address given in the legal notice.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
•Browser type and browser version
•Operating system used
•Referrer URL
•Host name of the accessing computer
•Time of the server request
•IP address
This data is not merged with other data sources. The basis for the data processing is Art. 6 (1) (f) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
Processing of data (customer and contract data)
We collect, process, and use personal data only insofar as it is necessary for the establishment, content design, or amendment of the contractual relationship (inventory data). This is done on the basis of Art. 6 (1) (b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. We collect, process, and use personal data relating to the use of our web pages (usage data) only insofar as this is necessary to enable the user to use the service or to bill the user. The customer data collected is deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Data transmission upon conclusion of a contract for online shops, retailers, and goods dispatch
We only transmit personal data to third parties if this is necessary within the scope of contract processing, for example to the companies entrusted with the delivery of the goods or to the credit institution commissioned with the payment processing. No further transmission of the data takes place, or only if you have expressly consented to the transmission. Your data is not passed on to third parties without express consent, for example for advertising purposes. The basis for the data processing is Art. 6 (1) (b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
Payment service providers
We work with payment service providers to process your order. When you select a corresponding payment method, the data required for payment processing (in particular first name, last name, address, email address, and order and payment data) is transmitted to the respective service provider and processed there. The legal basis is Art. 6 (1) (b) GDPR (performance of the contract) and Art. 6 (1) (f) GDPR (legitimate interest in secure and efficient payment processing).
PayPal (incl. Apple Pay and Google Pay)
The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Payments via PayPal as well as the Apple Pay and Google Pay wallet payment methods offered in our shop are processed technically via PayPal; in doing so, your payment and order data is transmitted to PayPal. For details, please refer to PayPal's privacy policy.
Apple Pay
When paying with Apple Pay, Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, additionally processes the device and payment information required for the use of Apple Pay. Your full card number is not passed on to us in the process. Further information: Apple Pay & Privacy.
Google Pay
When paying with Google Pay, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland, additionally processes the data required for the use of Google Pay. Further information: Google's privacy policy.