Privacy Policy | Marlin Online Shop
The responsible body within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Ingo Vollmer e.K., Ettlinger Straße 67, 76337 Waldbronn
Your rights as a person affected
You can exercise the following rights at any time under the contact details of our Data Protection Officer:
- Information about your data stored by us and its processing (Art. 15 GDPR),
- rectification of inaccurate personal data (Art. 16 GDPR),
- deletion of your data stored by us (Art. 17 GDPR),
- Restriction of data processing, provided that we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data with us (Art. 21 GDPR) and
- Data portability, provided that you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you can revoke it at any time with effect for the future.
You can complain to a supervisory authority at any time, e.g. to the competent supervisory authority of the state of your domicile or to the competent authority for us as the responsible authority.
A list of supervisory authorities (for the non-public sector) with address is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collecting general information when visiting our website
Type and purpose of processing:
When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.
In particular, they are processed for the following purposes:
- Ensuring a smooth connection of the website,
- Ensuring the smooth use of our website,
- Evaluation of system security and stability as well as
- for other administrative purposes.
We do not use your information to draw conclusions about you. Information of this kind may be provided by us. statistically evaluated in order to optimize our website and the technology behind it.
Legal basis:
The processing is carried out in accordance with Article 6(6) of the 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage time:
The data will be deleted as soon as it is no longer necessary for the purpose of the collection. This is generally the case for the data used to provide the website when the respective session is finished.
Provision required or required:
The provision of the aforementioned personal data is not required by law or contract. Without the IP address, however, the service and functionality of our website is not guaranteed. In addition, individual services and services may not be available or restricted. For this reason, an objection is excluded.
Registration on our website
Type and purpose of processing:
When registering for the use of our personalised services, some personal data are collected, such as name, address, contact and communication data (e.g. telephone number and e-mail address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided at any time when registering. Of course, we also provide you with information about the personal data we store about you at any time.
Legal basis:
The data entered during registration is processed on the basis of the user’s consent (Art. 6 sec. 1 lit. a GDPR).
If the registration is for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures, the additional legal basis for the processing of the data shall be Article 6(4) of the 1 lit. b GDPR.
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage time:
Data will only be processed in this context as long as the corresponding consent has been given. Thereafter, they will be deleted, unless there are statutory retention obligations. To contact us in this connection, please use the contact details provided at the end of this privacy policy.
Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Without the provision of your personal data, we cannot grant you access to the content and services we offer.
Provision of paid services
Type and purpose of processing:
In order to provide paid services, we are asked for additional data, such as payment details, in order to be able to execute your order.
Legal basis:
The processing of the data required for the conclusion of the contract is based on Article 6(4) of the 1 lit. b GDPR.
Recipient:
Recipients of the data may be processors.
Storage time:
We store this data in our systems until the legal retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax requirements.
Provision required or required:
Your personal data will be provided voluntarily. Without the provision of your personal data, we cannot grant you access to the content and services we offer.
Newsletter
Type and purpose of processing:
Your data will only be used to send you the subscribed newsletter by e-mail. Your name will be provided in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data-affected person.
To receive the newsletter, it is sufficient to provide your e-mail address. When you register to receive our newsletter, the data you provide will only be used for this purpose. Subscribers may also be informed by e-mail about circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances).
For effective registration, we need a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the “double opt-in” procedure. For this purpose, we log the order of the newsletter, the sending of a confirmation e-mail and the receipt of the requested response. No further data will be collected. The data will only be used for sending the newsletter and will not be passed on to third parties.
Legal basis:
On the basis of your explicit consent (Art. 6 sec. 1 lit. a GDPR), we regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. In each newsletter you will find a corresponding link. In addition, you can also unsubscribe directly from this website at any time or inform us of your withdrawal via the contact option provided at the end of this data protection notice.
Recipient:
Recipients of the data may be processors.
Storage time:
The data will only be processed in this context as long as the corresponding consent has been given. After that, they will be deleted.
Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, we cannot send you our newsletter without existing consent.
Contact
Type and purpose of processing:
The data you enter will be stored for the purpose of individual communication with you. This requires a valid e-mail address and your name. This is used to assign the request and then answer it. Specifying additional data is optional.
Legal basis:
The data entered in the contact form are processed on the basis of a legitimate interest (Art. 6 sec. 1 lit. f GDPR).
By providing the contact form, we would like to enable you to contact us in an uncomplicated manner. Your information will be stored for the purpose of processing the request as well as for possible follow-up questions.
If you contact us to request an offer, the data entered in the contact form will be processed for the implementation of pre-contractual measures (Art. 6 sec. 1 lit. b GDPR).
Recipient:
Recipients of the data may be processors.
Storage time:
Data will be deleted no later than 6 months after processing the request.
Insofar as a contractual relationship arises, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after the expiry of these periods.
Provision required or required:
Your personal data will be provided voluntarily. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.
Using Google Analytics
Type and purpose of processing:
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as “Google”). Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compile reports on website activity and other services relating to website activity and internet usage. to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google.
The purposes of data processing lie in the evaluation of the use of the website and in the compilation of reports on activities on the website. On the basis of the use of the website and the Internet, other related services will then be provided.
Legal basis:
The processing of the data is carried out on the basis of the consent of the user (Art. 6 sec. 1 lit. a GDPR).
Recipient:
The recipient of the data is Google as a processor. For this purpose, we have concluded the corresponding order processing contract with Google.
Storage time:
The data will be deleted as soon as they are no longer necessary for our recording purposes.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional limitations on the website.
Withdrawal of consent:
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to the full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by using the data available at the following link. Download and install browser plugin: Browser Add On to disable Google Analytics.
In addition to or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. An opt-out cookie is installed on your device. This prevents the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.
Profiling:
With the help of the tracking tool Google Analytics, the behaviour of visitors to the website can be evaluated and the interests analyzed. For this purpose, we create a pseudonymous user profile.
Using Script Libraries (Google Webfonts)
Type and purpose of processing:
In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) for displaying fonts on this website.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/
Legal basis:
The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 sec. 1 lit. a GDPR).
Recipient:
Calling script libraries or font libraries automatically triggers a connection to the library operator. In theory, it is theoretically possible – but currently also unclear if and, if so, for what purposes – that the operator collects Google data in this case.
Storage time:
We do not collect any personal data through the integration of Google Webfonts.
For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and Google’s Privacy Policy: https://www.google.com/policies/privacy/.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision required or required:
The provision of personal data is not required by law or contract. However, it is not possible to display the contents of standard fonts correctly.
Withdrawal of consent:
The JavaScript programming language is regularly used to represent the content. You can therefore object to data processing by disabling the execution of JavaScript in your browser or by installing an integration JavaScript blocker. Please note that this may result in functional limitations on the website.
Embedded YouTube videos
Type and purpose of processing:
On some of our websites, we embed YouTube videos. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection is made to YouTube servers. YouTube will be told which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your browsing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider uses cookies that collect information about user behavior.
Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the provider’s privacy policy, where you will also receive further information on your rights in this regard and setting options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework
Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 sec. 1 lit. a GDPR).
Recipient:
Calling YouTube automatically triggers a connection to Google.
Storage period and revocation of consent:
Those who have deactivated the storage of cookies for the Google ad program will not have to expect such cookies when watching YouTube videos. However, YouTube also provides non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.
For more information on data protection at YouTube, please refer to the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional limitations on the website.
Google AdWords
Type and purpose of processing:
Our website uses Google Conversion tracking. The operating company of the services of Google AdWords is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an ad posted by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.
If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot be tracked through AdWords customers’ websites. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers will find out the total number of users who clicked on their ad and have been redirected to a page tagged with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users.
Legal basis:
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 sec. 1 lit. a GDPR).
Recipient:
Every time you visit our website, personal data, including your IP address, will be transferred to Google in the United States. This personal data is stored by Google. Google may pass on this personal data collected via the technical procedure to third parties.
Our company does not contain any information from Google that could be used to identify the data subject.
Storage time:
These cookies expire after 30 days and are not used for personal identification.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Withdrawal of consent:
If you do not wish to participate in the tracking, you can refuse the setting of a cookie required for this purpose – for example, by means of a browser setting, which generally disables the automatic setting of cookies or set your browser so that cookies from the domain ” googleleadservices.com” are blocked.
Please note that you may not delete the opt-out cookies as long as you do not want to record measurement data. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.
Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional limitations on the website.
SSL encryption
In order to protect the security of your data during transmission, we use the state-of-the-art encryption method (e.g. SSL) over HTTPS.
Appointed contract processors
The following organisations, companies or persons have been commissioned by the operator of this website to process data:
Timo Krämer, Silke Müller
Changing our privacy policy
We reserve the right to amend this Privacy Policy to ensure that it always complies with current legal requirements or to implement changes to our services in the Privacy Policy, e.g. when introducing new services. The new data protection declaration will apply to your new visit.
Questions to the Data Protection Supervisor
If you have any questions about data protection, please send us an e-mail or contact the data protection officer in our organization directly:
info@marlin.de
The data protection declaration was created with the privacy declaration generator of activeMind AG (version 2018-09-24).
