A.Responsibility for data processing
The responsibility for the processing of personal data for this online site according to the rules of the Privacy Protection Act of Germany (DSGVO) is the firm:
bambach GbR,
Peter-Spring-Str. 18,
65366 Geisenheim
Germany
Tel.: 06722-972168
Web: www.blumat-shop.de
Mail: info@bambachgbr.de
With this Privacy Declaration, we hereby inform you of the extent to which your personal data are processed (referred to henceforth simply as “data”.)
B.Data Processing
We process data as part of the operation of our website. The processing of the data also includes disclosure through transmission.
There is an existing EU-Commission implementation regulating the transmission of data to the USA, the EU-US Privacy Shield. With this regulation, the commission certifies that the transfer of data to the USA occurs upon the basis of the EU-US Privacy Shield, guaranteeing the same standards for data protection as accorded by the EU. Insofar as the transfer of data to the USA is necessary, the participation of our service providers in the EU-US Privacy Shield will be disclosed.
Details regarding the affected data, processing purposes, legal basis, recipient and transmission to third countries are listed below:
a)Data Log
We make a protocol of your visit to our website. The following data are thereby processed: name of the particular website page retrieved, date and time of the retrieval, the volume of data transferred, the type of browser and version, the operating system being used by you, the URL of the referrer site (the website visited prior to ours), your IP-address and that of the requesting provider. This is necessary in order to ensure the security of the website. The data is processed in accordance with our justified interests in keeping with Article 1 Paragraph 1f) DSGVO of the German Privacy Protection Act. The log file is erased after seven days, except when the data is required for the purpose of clarification or as evidence in specific cases of legal infringement when such instances are recognized within the retention period.
b)Hosting
All processed data in relation to the operation of this website in the context of Hosting are recorded. This is necessary in order to operate the website. The data is processed in accordance with our justified interests in keeping with Article 1 Paragraph 1f) DSGVO of the German Privacy Protection Act. We use the services of webhosting providers in order to make our online presence available; for this purpose, the data listed above are transferred to such providers.
c)Contact
If you contact us, we will process the data you provide (name, contact information) and your message only for the purposes of processing and settling your request. These data are processed in accordance with Article 1 Paragraph 1b) DSGVO or of Paragraph 1 f) DSGVO of the German Privacy Protection Act in order to fulfil your request.
d)Customer Account
By opening a customer account, you are agreeing to the recording of your inventory data (name, address, email address, banking information) as well as your user data (user name, password). This allows us to identify you as a customer and gives you the possibility to manage your order. For this purpose, we require the following consent:
„[ ] I would like to create a customer account. Please record my data for this purpose. I can revoke this consent at any time by sending an email to info@bambachgbr.de.“
Your data are processed in accordance with Article 1 Paragraph 1f) DSGVO.
e)Purchase Procedure
We process your ordering data for the purpose of completion of the purchase agreement. The data are processed in accordance with Article 1 Paragraph 1f) DSGVO.
We transmit your address information to the company contracted to provide delivery services. Insofar as necessary for the completion of the purchase agreement, we will provide said company with your email address or your telephone number for the purpose of coordination of a delivery time (notification). We transfer your transaction data (name, date of order, payment method, shipment and/or date of delivery, payment amount and payee, and, where applicable, banking information or credit card data) to the payment service company contracted to process the payment.
f)Cookies
In order to make the use of certain functions possible, it is necessary for us to use so-called “cookies”. These are small text datasets which are saved on the user device and are shared with other service providers. Some of the cookies set by us are deleted at the end of the browser session, when the browser is closed (i.e. “session cookies”). Other cookies remain on your device and enable us to recognize your browser by a return visit (persistent cookies).
You can delete all cookies saved on your device and set typical browsers to disable the setting of cookies.
In this case, you will have to reset certain choices by each visit to the website and will have to accept impairments of some functions.
Personal data will be retained only as long as is necessary to fulfil the purpose for which the said data was collected or when your agreement to the retention of your data is retracted by you. When required by trade and tax regulations for recordkeeping, certain data may be kept for up to 10 years, regardless of the purpose for which retained.
D.Your Personal Rights
a)Disclosure
Upon request, you will be sent, free of charge, a disclosure as to all personal data retained by us.
b)Correction, Deletion, Limitation to Data Processing (Stop), Appeal
Should you no longer agree to the retention of your personal data or should the data no longer be correct, upon demand, we will have your data deleted or blocked or will make the desired corrections (insofar possible under compliance with current laws). The same applies in respect to any future limitations to our processing of data.
c)Data Transfer
Upon request, we will provide your data to you in a conventional, structured and machine readable format, thus allowing you to send the data, when so desired, to other responsible persons.
d)Right to Appeal
The right to appeal can be fulfilled through the responsible regulatory authority:
(https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).
e)Revocation of Consent with Impact on the Future
Authorized consent can be revoked at any time, also in respect to the future. Up to the point of your revocation of consent, the legality of the processing of data remains unaffected.
f)Limitations
Data which can not be identified as belonging to a particular person, for example, when the data has been anonymized for purposes of analysis, are not included in the rights as presented here. The disclosure, deletion, blocking, correction or transfer to another company of such data may be possible, when you provide us with additional information enabling an identification of the data.
g)Exercising your Personal Rights
For questions regarding the processing of your personal data, for disclosure information, corrections, blocking of data, revocation or deletion of data or when a transfer of data to another company is desired, please contact us at info@bambachgbr.de.