DATA PROTECTION INFORMATION FROM EDITION NAAM GMBH(As of: 25.05.2018)
When you visit our website, in certain circumstances we collect data that are linked or can be linked to your profile. In some cases, these data are already visible to us when you view the page, in other cases we record this information when you share it with us. In the following we want to inform you among other things about the purpose for which we collect these data and how we handle them.
What are personal data?Personal data are all data that are relatable to you personally, such as your name, address, email address, telephone number and user behaviour.
When is processing of personal data permitted by law?Under Art. 6 of the EU General Data Protection Regulation (EU GDPR) processing of personal data is legally permitted in the following cases, among others:
I. Controller(1) Controller as defined in Art. 4 (7) EU GDPR is:
Edition NAAM GmbH
Managing Director: Inge Hagen
Tel.: 08121-250 7255
Fax: 08121-250 7257
II. Data collection when you visit our website
1. Data collection when you access our website(1) If you access our website only to obtain information (in other words, you do not register or provide us with data in another way, e.g. through entries in a form), we collect only the personal data that your browser transmits to our server. If you want to view our website, we collect data that are necessary for us from a technical aspect in order to be able to show you the website and guarantee its stability and security. These are:
(2) Temporary storage of the IP address by our system is necessary to improve the website's stability and functionality, as well as for troubleshooting where required. The legal basis for this is Art. 6 (1) point (f) EU GDPR.
(3) The above-mentioned data are erased as soon as their storage is no longer required to achieve the purpose. In the case of making the website available, this is after the end of the visit to the page. Log files are erased after a maximum of 30 days.
III. Data collection when you contact us(1) When you contact us by email or through a contact form that we make available, we store the data that you provide here (your email address and, where applicable, your name and address) in order to process your requests and where applicable to answer any questions you asked.
(2) The legal basis for this is Art. 6 (1) point (f) EU GDPR. If the objective of contacting us is to enter into a contract with us, the legal basis is in addition Art. 6 (1) point (b) EU GDPR.
(3) We erase the accrued data once storage is no longer necessary, or we restrict processing if there are any statutory obligations to retain data.
IV. Data collection when you subscribe to a newsletter, or if a newsletter is sent after you subscribe(1) You can subscribe via our website to a free newsletter that informs you about our offers, news and our current activities.
(2) Your email address (mandatory field) is transmitted to us in the framework of the registration.
(3) After we have received your registration, we will send an email to the email address you indicated with a request for you to confirm that you want to receive the newsletter (this is known as a double opt-in procedure). If you fail to confirm the registration within 48 hours, we block your information and erase it automatically after one month. In addition to this, we store your IP addresses and the times of the registration and confirmation. We do this so that we are able to verify your registration and clear up any misuse of your personal data.
(4) After you have confirmed the subscription to the newsletter, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) point (a) EU GDPR.
(5) You can withdraw your consent to receiving the newsletter at any time with effect for the future and unsubscribe the newsletter. You can declare your withdrawal by clicking the link provided in each newsletter or by sending an email to us at email@example.com.
(6) We store your email address for the period in which you have not objected to its use for the purpose of sending the newsletter and we send you our newsletter regularly.
V. Right to object(1) You have the right to object at any time to the processing of your personal data for purposes of direct marketing or data analysis.
(2) If we process your data to safeguard legitimate interests, you can object to this processing if grounds arise from your particular situation that militate against processing of the data.
VI. Data collection if you order from our online shop(1) We request specific personal data when you order from our online shop. Some fields in the order screen are identified as mandatory fields and these must be completed to conclude an order and to implement a contract. Such mandatory details are your first and last name, your address (and an address for invoices or deliveries, where applicable), your email address, and data that accrue in the framework of the payment method that you choose (bank data). All other details are voluntary and are intended to personalise our communication with you.
(2) When you order from the online shop you open a customer account with the above-mentioned data, whereby the following data are stored:
Title, first name, last name, date of birth, email address, address, postcode, town, country, telephone number. You can place further orders using these data. In your customer account we store all orders you place through this account together with the order number, order date, number of items, total and order status. In addition, the following order information: address for shipment, invoice address, shipping method, payment method, order history.
(3) To carry out the order we forward your name and your address (or your delivery address) to the company we commission to carry out the shipment.
(4) The purpose of data collection is to execute your order. The legal basis is Art. 6 (1) point (b) EU GDPR.
VII. Data processing by external service providersIn some cases we use external service provides to process your data. We selected and commissioned these providers carefully, and they are bound by our instructions and are checked regularly.
VIII. Payment service provider
PayPalOn our website we offer, among other methods, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (referred to below as “PayPal”).
If you choose to pay by PayPal, the payment data that you entered will be transmitted to PayPal.
Transmission of your data to PayPal takes place on the basis of Art. 6 (1) point (a) GDPR (consent) and Art. 6 (1) point (b) GDPR (processing for the performance of a contract). You have the possibility of withdrawing your consent to data processing at any time. Withdrawal does not affect the validity of data processing activities that took place in the past.
IX. Other recipients of personal dataWe can transmit your personal data to other recipients, for example to authorities in order to comply with statutory duties to notify (e.g. tax authorities, social security providers or law enforcement agencies).
X. Your data protection rights(1) You can request information on stored data concerning you at the address shown above in section I. In addition, you can request the rectification of data if we have stored incorrect personal data about you. You also have the right, taking the purpose of processing into account, to request the completion of data concerning you if we have stored incomplete data. You can also request the erasure of your data in certain circumstances. You may also have a right to restriction of processing of your data, as well as a right to receive the data you provided in a structured, commonly used and machine-readable format.
(2) You have the right to lodge a complaint with the data protection authority. https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
XI. Duration of data storage; reference to retention obligations under tax and commercial law(1) Unless indicated separately in this data protection information, we will erase your personal data as soon as they are no longer required for the aforesaid purposes.
(2) It may be the case that we retain data for the period in which claims against us can be asserted (limitation periods of up to three years). The legal basis for this is Art. 6 (1) point (f) EU GDPR.
(3) In addition, we store your personal data insofar as we are obliged by law to do this. Such burdens of proof and data retention obligations arise, among others, from the German Commercial Code (Handelsgesetzbuch) or the provisions of tax law, and provide for periods of up to ten years. The legal basis for this is Art. 6 (1) point (c) EU GDPR.
XII. Declarations of consentYou have expressly consented to the following, where applicable: "I consent to receiving the newsletter of Edition NAAM GmbH. I can withdraw my consent at any time with effect for the future by sending a notification to firstname.lastname@example.org (or: by clicking the link "Unsubscribe" at the end of the newsletter). I have read the data protection information."