Privacy Policy

Marc Gebauer Lifestyle GmbH, Erkrather Straße 401, 40233 Düsseldorf

As of: November 22, 2021

1. Subject of this data protection information

• This data protection declaration informs you about what personal data we collect when you visit our website and when you purchase goods and how we process it. We will also inform you about the rights you are entitled to.
• Personal data is all data that can be related to you personally, such as your name, address, email address, data about your device or your usage behavior on our website.
• This data protection declaration is currently valid. Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current version on our website at any time.

2. Person responsible for data processing

• Responsible within the meaning of Article 4 No. 7 of the General Data Protection Regulation (GDPR) is:

Marc Gebauer Lifestyle GmbH

Erkrather Straße 401

40233 Düsseldorf

Germany

Tel:  +49 2181 8182030

Email: info@marcgebauer.com

 

• Please direct any questions or comments about this data protection declaration to the following email address: info@marcgebauer.com

3. Data collection and data processing

• The scope of data processing differs depending on whether you only use our website to access information (“informational use”) or whether you also purchase goods.
• When you use our website for informational purposes, we collect data that your internet browser automatically transmits to us, such as date and time, browser type, browser setting, operating system, last website visited, amount of data transferred and access status as well as your IP address. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. When providing the website, this is the case when the respective session has ended. The log files are kept directly and only accessible to administrators for a maximum of 24 hours. The IP address is only stored for the duration of your visit. In addition, we store the data exclusively in anonymized form for logging purposes by shortening the IP address so that assignment is no longer possible. Data processing is necessary to protect our legitimate interests in optimally displaying our website and is therefore carried out on the legal basis of Article 6 Paragraph 1 Sentence 1 Letter f) GDPR.
• If you purchase goods in the online shop, you will be required to provide personal information, such as name, address, email address, telephone number and payment details. Necessary mandatory information is specially marked; all other information is voluntary. You also have the option of creating a customer account in which your data will be saved for later use. You can delete this data and the customer account at any time. The legal basis for data processing is Article 6 Paragraph 1 Letter b) GDPR. The processing of your data is necessary for the fulfillment of a contract or to carry out pre-contractual measures.

4. Newsletter

• If you subscribe to our newsletter, we will regularly send you current information and offers about our products or services by email. To register for our email newsletter, in addition to your consent, we only need your name for personal contact and your email address to which the newsletter should be sent.
• For security reasons, we use the so-called double opt-in procedure to register for our email newsletter: After registering for our newsletter, you will receive an activation email to the email address you provided. Only when you have confirmed your registration by clicking on a link contained there will you subsequently receive the desired email newsletter. If you do not confirm your registration within the specified period after receiving the activation email, your newsletter registration will be automatically deleted for security reasons. If you no longer wish to receive email newsletters from us, you can unsubscribe from our newsletter at any time by either clicking on the unsubscribe link at the end of each newsletter email or by sending us an informal email.
• Data processing when you order our newsletter is carried out on the legal basis of Article 6 Paragraph 1 Sentence 1 Letter a) GDPR in conjunction with your consent to receive the newsletter. We store your consent for verification and documentation purposes for up to three years to the end of the year after the last newsletter was sent to you or your declaration of revocation of your consent.

5. Transfer of data to third parties

• We work with payment service providers through which payments for your purchases are processed. When paying, the payment service provider collects and processes personal data that is necessary for the payment method you have chosen. The data protection regulations of the payment service provider you have chosen also apply. When we receive a payment, we process the data that the payment service provider sends to us. The processing of payments via service providers is based on Article 6 Paragraph 1 Letter b) GDPR. In addition, we have a legitimate interest i. S.d. Art. 6 Para. 1 lit. f.) GDPR to offer our customers the use of suitable and secure payment options. We store payment data until all mutual claims arising from the respective contractual relationship with you have been fulfilled and the retention periods applicable to us under commercial and tax law have expired.
• If you select the payment method “purchase on account”, we will transmit your data to the payment service provider Klarna. Klarna checks and evaluates your information and exchanges data with other companies and credit reporting agencies (credit check). If your creditworthiness is not guaranteed, Klarna can refuse the chosen payment method. Your personal information will be treated by Klarna in accordance with data protection laws and will not be passed on to third parties for advertising purposes. Further information can be found in Klarna's data protection regulations.
• We transmit the delivery address you provided as well as your email address and telephone number to the respective shipping company for the purpose of the delivery of goods and their announcement. The legal basis is Art. 6 Para. 1 Sentence 1 Letter b) GDPR, since by shipping we fulfill our delivery obligation under the contract, and Art. 6 Para. 1 Sentence 1 Letter f) GDPR, as we have a legitimate interest in making shipping as uncomplicated as possible for our customers.
• We also pass on data for billing and accounting purposes to third parties who are either subject to a professional obligation of confidentiality (e.g. tax advisors) or with whom we have concluded an order processing agreement.

6. Tracking & Analysis

• We use tracking tools from Facebook. These tools enable us to display individually tailored and interest-based advertising on Facebook to certain groups of pseudonymized visitors to our website who also use Facebook.
• We use Google Analytics to evaluate the user behavior of visitors to our website and thereby improve the user experience on our website. Data is sent to Google, evaluated and made available to us in the form of reports.
• The setting of so-called cookies is necessary for tracking and analysis. Cookies are small text files that are sent from our web server to your browser and stored on your device for later retrieval. You can determine for yourself whether or which cookies we set when you visit our website by making settings in the so-called consent banner. The legal basis is therefore your consent in accordance with Art. 6 Para. 1 lit a) GDPR.

7. Embedding videos

• We embed external videos from YouTube on our website.
  YouTube is a video portal that belongs to Google. YouTube or Google collects data from users in order to, among other things, personalize advertising.
• The videos are embedded using the “extended data protection mode” option provided by YouTube. If you access one of our pages with an embedded YouTube video, a connection is established to the YouTube servers in the USA. Data, in particular which of our pages you have previously visited and device-specific information including the IP address, will only be transmitted to YouTube when you start the video.
• If you are logged into your Google account when using our website, the data collected will be assigned to your Google account. You can prevent this by logging out of your Google account before visiting our website. Alternatively, you can make settings in your Google account to increase data protection.
• The processing of personal data by Google is based on the standard data protection clauses of the European Commission in accordance with Art. 46 Para. 2c) GDPR. Google has also implemented extensive technical and organizational measures to protect personal data from accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access by third parties. These measures from Google are certified according to the ISO/IEC 27001:2013 standard. Further information on data protection in connection with
  YouTube can be found in Google's data protection regulations.
• The embedding of YouTube videos on our website is based on Art. 6 Para. 1 lit. f GDPR, as we have a legitimate interest in supporting our business model through videos and offering our users valuable topic-related information from third-party sources.

8. Transfer to third countries

• We use the Shopify shop system for our shop. Shopify is a Canadian provider.
• The EU has passed an adequacy decision for data transfers to Canada. There is an order processing agreement between us and Shopify, which stipulates that Shopify may not use the data for its own purposes.

9. Your rights

• You have the right to request information at any time about whether and which of your data we process, for what purpose, and to whom and on what basis it is passed on (Art. 15 GDPR). This also includes your right to receive copies. If the data is large, users may be asked to specify the information on certain types of data. The information must be provided immediately and under no circumstances may it take longer than one month.
• You also have the right to have incorrectly collected personal data corrected or incompletely collected data completed (Art. 16 GDPR).
• You also have the right to request that we restrict the processing of your data, provided that the legal requirements for this are met (Art. 18 GDPR).
• You also have the so-called “right to be forgotten”, i.e. you can request that we delete your personal data, provided that the legal requirements for this are met (Art. 17 GDPR). Regardless of this, your personal data will be automatically deleted by us if the purpose of data collection no longer applies or the data processing is carried out unlawfully.
• You have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request that it be transmitted to another person responsible (Art. 20 GDPR).
• According to Art. 7 Para. 3 GDPR, you have the right to revoke your consent to us at any time. This means that we are no longer allowed to continue data processing based on this consent in the future.
• You also have the right to object to the processing of your personal data at any time, provided a right to object is provided for by law. In the event of an effective objection, your personal data will also be automatically deleted by us (Art. 21 GDPR).
• If you would like to exercise your right of revocation or objection, a notification by email is sufficient.

10. Right of appeal

• Without prejudice to any other administrative or judicial remedy in accordance with Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you violates the GDPR.
• The supervisory authority responsible for us is, among others, the State Commissioner for Data Protection.

11. Use of telephone numbers

• In particular, in accordance with Art. 6 Paragraph 1 lit. To use the messenger service, an active account with the respective provider is required.

• I am also aware that Marc Gebauer uses chatarmin.com GmbH, A-3400 Klosterneuburg, as a technical service provider and processor to provide this service.

• My consent to the processing of personal data can always be freely revoked; For this purpose, a corresponding notification to Marc Gebauer or Chatarmin is sufficient. Further information can be found in the respective data protection guidelines of Marc Gebauer and the messenger services of chatarmin.com GmbH.