Privacy

        

Data protection disclaimer   

Responsible for data processing:

Gudrun Schön
Amselweg 16
35444
Biebertal
info(at)trollart.de 

We appreciate your interest in our online shop very much. We value your privacy highly and want to hereby inform you about how we process your data.

1. Access data and hosting

Access to our website is possible without signing up and giving particulars about your person. Every access to our website is logged in an automatic server log file, logging for example the name of the requested file, your IP address, date and time of access, amount of data processed, and the enquiring provider (access data) documenting the demand.

All access data is collected exclusively to assure trouble-free operation of the website and improve our offers. In accordance with Art. 6, paragraph 1 S 1 lit f DSGVO, in line with an assessment of our interests this is to preserve our legitimate interests in a correct presentation of our offers. All access data is deleted seven days after the end of your visit of our website, at the latest.

Hosting services through third parties

Within the framework of processing by proxy, third parties provide services relating to hosting and displaying a website for us. In line with an assessment of our interests this is to preserve our legitimate interests in a correct presentation of our offers. All data that is collected while using our website or while using the designated forms in our shop is being processed on their servers. Data processing on different servers only happens in the aforesaid framework.

Our third party service provider has their seat in a country of the European Union or the European Economic Area.

2. Data collection and processing for contract implementation, establishing of contact

We collect personal data if and when you provide said data for us voluntarily when making an order in our shop or when establishing contact with us (e.g. through our contact form or e-mail). Mandatory fields in forms are marked as such when their content is necessary for contract fulfilment or establishing of contact and you cannot make an order or establish contact without them. The type of data collected is apparent within the entry forms. In accordance with Art. 6, paragraph 1 S 1 lit f DSGVO, we use your personal data in order to fulfil and implement our contract and to process your requests. If in accordance with Art. 6, paragraph 1 S 1 lit f DSGVO, you have given your consent to that, by signing up for a customer account with us, your data will be used to open a customer account. After complete fulfilment of contract or after deletion of your customer account your data is restricted in further processing and will be deleted after expiration of tax- and trade law retention periods, unless you have given explicit consent to their further use or we have retained authorisation for their use by law, about which we are informing you in this declaration. A deletion of your customer account is possible at all times and can be performed by contacting us through a message to the below mentioned channels or by using the appropriate function inside the customer account settings.

3. Data forwarding

In order to fulfil our contract we will, in accordance with Art. 6, paragraph 1 S 1 lit f DSGVO, forward personal data to the service provider commissioned and authorised with delivery, insofar as it is necessary for the delivery of ordered items. Depending on which payment provider you have chosen during the order process, we will forward personal payment data to the financial institution and potential other payment providers. Some of these payment providers will collect and process your data as well, if you choose to sign up for an account with them. In that case you will have to log in to their services during the order process. In this respect the data protection declaration of said payment provider comes into effect.

Data forwarding to delivery service providers

If and when, during the order process, you have given consent, in accordance with Art. 6, paragraph 1 S 1 lit f DSGVO, we will forward your e-mail address to your chosen delivery service provider in order to enable them to contact you for delivery announcements and coordination.

Consent to this can be retracted by sending a message to the below mentioned contact methods or by directly contacting the delivery service provider whose addresses are mentioned following this paragraph. After retraction, we will delete all data relevant to this, unless you have given explicit consent to their further use or we have retained authorisation to their further use by law, about which we are informing you in this document.

Sendcloud GmbH

Kanalstraße 10

80538 München

DPD Deutschland GmbH

Wailandtstraße 1

63741 Aschaffenburg

4. E-Mail Newsletter

Advertisement through e-mails by signing up to the newsletter

If and when you sign up to receive our newsletter, we will use the relevant personal data you have provided us in order to inform you regularly through our e-mail newsletter in accordance with Art. 6, paragraph 1 S 1 lit f DSGVO.

Cancelling our newsletter is possible at any time and can be performed by sending a message to any of the below mentioned contact methods or by using the appropriate link within the newsletter e-mail. After cancellation, we will delete your e-mail address, unless you have given explicit consent to their further use or we have retained authorisation to their further use by law, about which we are informing you in this document. 

5. Cookies

In order to create an attractive website and in order to make possible the use of certain functions, to show relevant products, or to do market research, we use cookies on various pages. In accordance with Art. 6, paragraph 1 S 1 lit f DSGVO, in line with an assessment of our interests this is to preserve our legitimate interests in an optimised presentation of our offers. Cookies are small text files which are saved automatically to your end device. Some of the cookies we use are deleted immediately after ending your browser session, in other words after closing your browser (so called session cookies). Other cookies remain on your end device and enable us to recognise your browser again when you return to our website (persistent cookies). The duration of cookie storage can be viewed in the cookie settings of your browser. Your browser can be set to inform you about cookie creation and to let you decide about which cookies to accept and reject or to automatically reject cookies in special cases or in general. Each browser is different in the way of handling cookies. Their prospective methods are elaborated on in the help menu, which will assist you in changing your settings for cookies. These can be found by clicking on the following links appropriate to your browser:

Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Chrome™: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™ : https://help.opera.com/de/latest/web-preferences/#cookies 

In case of rejection of cookies on our website, its functionality may be limited.

Google reCAPTCHA

In order to prevent misuse of our web forms and to protect from spam, within the framework of some forms on our website, we use the Google reCAPTCHA service by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as Google). Through verification of a manual input this service prevents automated software (so called bots) from improper activities on our website. In accordance with Art. 6, paragraph 1 S 1 lit f DSGVO, in line with an assessment of our interests this is to preserve our legitimate interests in a website, protected from misuse as well as a trouble-free presentation of our online presence.

Within the framework of verification, Google reCAPTCHA uses a code programmed into our website, a so called JavaScript which allows the analysis of your use of our website, e.g. cookies. This information about your use of our website, which is gathered automatically and includes your IP address, is typically forwarded to a server owned by Google in USA and saved there. In addition to this, other cookies which have been saved by Google services in your browser are processed by Google reCAPTCHA.

There is no processing or saving of personal data from these entry forms.

Google is certified by the EU-US-privacy shield. An up to date certificate can be viewed HERE.

Due to this agreement between the USA and the European Commission, the latter have ascertained an appropriate level of data protection for companies certified by the Privacy Shield.

You can prevent data collection through the JavaScript and data forwarding, created and relevant to your use of the website by the cookie (including your IP address) to Google as well as their processing of your data by disabling the running of JavaScripts and/or creation of cookies in your browser settings. Please be aware that this may limit the functionality of our web presence for your use.

More information about Google's data protection policy can be found HERE.

Our online presence on facebook, twitter

Our presence in social media and on social platforms is to facilitate a better, active communication with our customers and interested parties. We there inform about our products and ongoing special offers.

By visiting our online presence on social media your data may be collected, saved and used for market research and advertisement automatically. This data may be used to create a user profile using a pseudonym. These may be used for example to place advertisements on and off social media platforms, presumably matching your interests. To this end typically cookies will be saved on your device. These cookies collect information about your behaviour and your interests on websites. In accordance with Art. 6, paragraph 1 S 1 lit f DSGVO, in line with an assessment of our interests this is to preserve our legitimate interests in an optimised presentation of our offers, and to facilitate effective communication with our customers and potential buyers. If and when a social media platform operator asks for your permission (agreement) to process your personal data, for example by ticking a check box, its legal premise for data processing is Art. 6, paragraph 1 S 1 lit a DSGVO. Insofar as the aforementioned social media platforms have their seat in the USA, the following comes into effect: The European Commission has determined the USA to be adequate under the EU-US Privacy Shield. An up-to-date certificate for the appropriate company can be viewed HERE.

In the below mentioned links to the data protection declarations of providers you can obtain detailed information regarding the use and processing of your data on their respective websites, as well as obtain contact information and information regarding your rights and options to change settings in order to protect your privacy, through opt-out options and objections. Should you require assistance despite of this, you can contact us through our contact channels.

Facebook: ://www.facebook.com/about/privacy/

Data processing occurs based on an agreement of all responsible parties in accordance with Article 26 DSGVO, which can be viewed here:

https://www.facebook.com/legal/terms/page_controller_addendum

Twitter: https://twitter.com/de/privacy

Options to reject or opt-out:

Facebook: https://www.facebook.com/settings?tab=ads
Twitter: https://twitter.com/personalization

6. Contact channels and your rights

Concerned parties have the following rights:

  • in accordance with Art 15 DSVGO you may demand disclosure of our processing of your personal data in the stated extend.

  • In accordance with Art. 16 DSVGO you may demand immediate correction of incorrect personal data stored with us as well as completion of incomplete personal data stored with us.

  • In accordance with Art. 17 DSVGO you may demand the deletion of your stored personal data as well as desistence from further processing of said data, as long as said data is not required

    - to exercise ones right to free speech and information;

      - to fulfil a legal duty;

      - as a matter of public interest;

      - to assert, exercise, or defend legal claims.

    • in accordance with Article 18 DSVGO you have to right to demand a limitation in processing your personal data, if and when

      - the accuracy of said data is contested by you;

      - its processing is unlawful, but you oppose its deletion;

      - we do not require your personal data any more, but you require them in order to assert, exercise, or defend legal claims

      - or you have objected to the processing of your data in accordance with Art. 21 DSVGO.

    • In accordance with Art. 20 DSVGO you have the right to demand disclosure of your personal data you have provided us in a structured, established and machine-readable format, or demand their transfer to a responsible third party;

    • In accordance with Art. 77 DSVGO you have the right to lodge a complaint with a regulating authority. Typically, for this you can contact the regulating authority of your residence, your work place, or our company. 

    In case of questions regarding collection, processing, or use of your personal data as well as when requiring information, correction, or deletion of said data, or when wanting to object or opt-out of certain uses of said data, please contact us directly through any of the contact channels provided in our imprint.

    Right of objection

    Insofar as we process your personal data within the framework of preserving our legitimate interests, you can object to said processing for the future. If said processing is used for matters of direct marketing you may exercise that right at any time as stated above. If and when said processing occurs for other reasons, your right to object depends on the existence of special reasons owed to your special situation. After having exercised your right to object we will not use or process your personal data further, unless we can prove imperative reasons worthy of protection that outweigh your interests, rights, and liberties, or if processing of said data is required for assertion, exertion, or defence of legal claims. This is not valid if your personal data is being processed or used for direct marketing in which case we will no longer use your personal data to this end.