Privacy Policy
1. Information on the Collection of Personal Data and Contact Details of the Data Controller
2. Data Collection When Visiting Our Website
3. Contacting Us
4. Cookies
5. Data Processing for Order Fulfillment
6. Data Processing When Opening a Customer Account and for Contract Fulfillment
7. Use of Your Data for Direct Marketing
8. Online Marketing
9. Rights of the Data Subject
10. Duration of Storage of Personal Data
1. Information on the Collection of Personal Data and Contact Details of the
Data Controller
1.1 Thank you for visiting our website. Below, we would like to inform you about how we handle your
personal data when you use our website. Personal data is, in principle, any data that can be used to personally identify you.
1.2 The data controller responsible for processing data on our website within the meaning of the General Data Protection Regulation (GDPR) is:
Martina Stonke
Hornstr. 22
10963 Berlin
Germany
Tel.: +49-30-21750922
Fax: +49-30-21750926
E-mail: post@laufendumdiewelt.com
1.3 To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL or TLS) via HTTPS.
2. Data Collection When You Visit Our Website
Each time you access our website, our system automatically collects data and information that your browser transmits to our server (so-called "server log files"). The following data, which is technically necessary for us, is collected:
- The website you visited
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed the page
- Operating system used
- Browser used
- IP address used (possibly anonymized)
The legal basis for processing this data is Article 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer.
For this purpose, the user's IP address must be stored for the duration of the session.
We reserve the right to subsequently review the server log files should there be concrete indications of unlawful use. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is
the case when the respective session ends.
In the case of data storage in log files, this is the case after a maximum of seven days.
Storage beyond this period is possible. In this case, the users' IP addresses are deleted or
anonymized so that it is no longer possible to identify the requesting client. The collection of data for the
provision of the website and the storage of data in log files is
essential for the operation of the website. Consequently, there is no option for the user to object.
3. Contacting Us
If you contact us via the contact form, the data entered in the input fields will be
transmitted to us and stored. The data collected can be found in the respective input fields. When
contacting us by email, only the data you enter there will be
transmitted to us.
The data will be used exclusively for processing the conversation and your request.
The legal basis for processing the data, if the user has given consent, is Article 6(1)(a) GDPR. The legal basis for processing data transmitted in the course of sending an email is Article 6(1)(f) GDPR. If the email contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. The data will be deleted as soon as it is no longer necessary for achieving the purpose for which it was collected and provided that no statutory retention obligations exist. For personal data from the input mask of the contact form and those transmitted by email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved. The user has the option to withdraw their consent to the processing of their personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
4. Cookies
Our website uses cookies.
Cookies are text files that are stored on the user's device. When a user visits a website, a cookie can be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. This requires that the browser is recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. Our legitimate interest in processing personal data pursuant to Art. 6 para. 1 lit. f) GDPR also lies in the aforementioned purposes.
In addition, our website may use cookies that enable an analysis of users' browsing behavior (so-called third-party cookies). You can find more information about the scope, purpose, legal basis, and options for objecting in the respective sections of this privacy policy.
As a user, you have full control over the use of cookies. You can disable, restrict, or delete the transmission of cookies by changing the
settings in your internet browser. If you disable cookies for our website, you may no longer be able to fully use all of its functions. You can prevent the transmission of Flash cookies by changing the settings of the Flash Player.
You can disable the transmission of Flash cookies by changing the settings of the Flash Player. Help with cookie settings can be found in your browser's help menu or at the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Some of the cookies used here are deleted after you close your browser (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When
cookies are set, they collect and process certain user information, such as browser and location data, as well as IP addresses, to varying degrees. Persistent cookies are automatically deleted after a predetermined period, which can vary depending on the cookie.
5. Data Processing for Order Fulfillment
5.1 If you wish to place an order in our online shop, it is necessary for the conclusion of the contract that you provide your personal data, which we require to process your order. We process the data you provide to fulfill your order.
In some cases, we work with external service providers to process your order. For this purpose, we must transfer the necessary personal data.
If we commission transport companies to deliver your goods, we will forward your data required for the delivery of the goods to the respective transport company. For payment processing, we will forward your data to the commissioned credit institution as necessary. If we use payment service providers, you will also be informed about this below.
The legal basis for the transfer of your data is Article 6(1)(b) GDPR.
5.2 Transfer of your personal data to shipping service providers
- DHL
If the goods are delivered to you by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will only transfer the recipient's name and delivery address to DHL for the purpose of delivery and to the extent necessary in accordance with Article 6(1)(b) GDPR. Only if you have given your express consent during the ordering process will we transfer your email address to DHL before delivery for the purpose of coordinating a delivery date or for delivery notification, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or the transport service provider DHL.
5.3 Use of payment service providers
5.4 Apple Pay
When selecting "Apple Pay" as your payment method (a service of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), payment processing is handled via the "Apple Pay" function of your iOS, watchOS, or macOS device by charging a payment card you have stored with "Apple Pay."
Your transaction is protected by the security features of your device's hardware and software. To authorize a payment, you must enter a code and verify it using your device's Face ID or Touch ID.
The information you provide during the ordering process, along with information about your order, is transmitted to Apple in encrypted form for payment processing. This data is then re-encrypted by Apple and transmitted to the payment service provider of the payment card stored in Apple Pay to complete the payment. Encryption ensures that only the website where the order was placed can access the payment data.
After payment, Apple sends the device account number and a transaction-specific, dynamic security code to the shop's website to confirm the payment.
Personal data may be processed during these steps. In this case, it is done for the purpose of payment processing in accordance with Article 6(1)(b) GDPR.
When using Apple Pay on your iPhone or Apple Watch to complete a purchase you made via Safari on your Mac, the Mac and the authorizing device communicate via an encrypted channel on Apple's servers. Apple may process or store data in this process. However, this is done in a format that cannot identify you personally.
Information on Apple Pay's privacy policy can be found here:
https://support.apple.com/de-de/HT203027
5.5 bancontact
When paying via "bancontact" through PayPal Checkout, payment processing is handled by the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: "PayPal").
Further information on PayPal Checkout can be found in the corresponding section below.
5.6 blik
When paying via "blik" through PayPal Checkout, payment processing is handled by the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: "PayPal").
Further information on PayPal Checkout can be found in the corresponding section below. 5.7 mybank
When paying via "mybank" through PayPal Checkout, payment processing is handled by the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: "PayPal").
Further information on PayPal Checkout can be found in the corresponding section below.
- Mollie
When selecting a payment method from the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE
Amsterdam (hereinafter referred to as "Mollie"), payment processing is handled by Mollie. We will forward your
personal data along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) to Mollie in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary
to Mollie.
- PayPal
When selecting the payment method PayPal, credit card via PayPal, direct debit via PayPal, or – if offered –
"Purchase on account" via PayPal, payment processing is handled by PayPal (Europe) S.a.r.l. et Cie,
S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").
We transfer your personal data to PayPal in accordance with Art. 6 para. 1 lit. b GDPR to the extent necessary
to the extent necessary. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal,
direct debit via PayPal, or – if offered – "Purchase on account" via PayPal.
For this purpose, your payment data may be transferred to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your creditworthiness. The result of the credit check regarding the statistical probability of payment default is used by PayPal to decide whether to offer the respective payment method.
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is among the data used to calculate the score values, but is not the only data used.
What other data PayPal collects is detailed in PayPal's privacy policy. This can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by contacting PayPal.
However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
5.8 PayPal Checkout
We use PayPal Checkout on this website (PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal")).
PayPal Checkout is an online payment solution from PayPal that supports both PayPal payment methods and local payment methods from third-party providers.
If you select the payment methods PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal (where offered), we will forward your necessary payment data to PayPal for the purpose of payment processing. This transfer is permitted in accordance with Art. 6 Para. 1 lit. b GDPR.
For the payment methods credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, PayPal may forward your necessary payment data to credit agencies. The processing is carried out on Legal basis of Art.
6 para. 1 lit. f GDPR. PayPal has a legitimate interest in verifying your creditworthiness. You
can object to this processing of your data at any time by sending a message to PayPal, whereby further processing of your personal data by PayPal may still be justified if it is necessary for the contractual processing of payments.
If you select PayPal invoice as your payment method, we will initially transmit your payment data to PayPal in accordance with Art. 6 para. 1 lit. b GDPR. PayPal then forwards your data to Ratepay GmbH, Ritterstr. 12-14, 10969 Berlin, for processing the payment. RatePay then conducts an identity and credit check on its own behalf. The legal basis for this is Art. 6 para. 1 lit. f GDPR, the legitimate interest in determining creditworthiness. For this purpose, RatePay forwards your payment data to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR.
Ratepay may access the following credit agencies: https://www.ratepay.com/legal-payment-creditagencies/
If you select a payment method from a local third-party provider, we will initially forward your payment data to PayPal in accordance with Art. 6 para. 1 lit. b GDPR. PayPal will then forward your payment data to your selected provider for processing the payment (Art. 6 para. 1 lit. b GDPR):
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- blik (Polski Standard Płatnočci sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
- MyBank (PRETA S.A.S., 40 Rue de Courcelles, F-75008 Paris, France)
Further information can be found in PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
6. Data Processing When Opening a Customer Account and for Contract Processing
When you open a customer account with us, personal data is collected and processed in accordance with Art. 6 Para. 1 lit. b GDPR.
The scope of the data is evident from the input form.
The data you enter will be stored and used by us for contract processing.
You can delete your customer account at any time. This can be done by sending a message to the address of the
controller or, if offered, directly in your customer account. In this case, we will also block your data
in accordance with tax and commercial law retention periods and delete it after these periods have expired. This can only be prevented by your consent to permanent storage or by further use of your data by us that is permitted by law.
7. Use of your data for direct marketing
7.1 Newsletter
On our website, you have the option of subscribing to a free newsletter. When you subscribe to the newsletter, the data from the input form is transmitted to us. The only mandatory field is your email address. If you provide further voluntary information, this will only be used for personalizing the newsletter.
The legal basis for processing your data after subscribing to the newsletter is, if the user has given their consent, Article 6 Paragraph 1 Letter a GDPR. We obtain this consent by sending you a confirmation email after subscribing to the newsletter, which contains a confirmation link. By clicking this link, you simultaneously consent to receive the newsletter.
When you submit your newsletter subscription, we store your IP address as well as the date and time of registration. This information is stored to enable us to trace any potential misuse of your email address.
We use the data we collect when you subscribe to the newsletter exclusively for the purpose of sending the newsletter.
You can unsubscribe from the newsletter at any time. A corresponding link is included in every newsletter for this purpose. This link also allows you to revoke your consent to the storage of the personal data collected during the registration process.
7.2 Newsletter for Existing Customers
If you purchase goods or services on our website and provide your email address, we may subsequently use it to send you a newsletter. In such a case, the newsletter will only contain direct advertising for our own similar goods or services.
The legal basis for sending the newsletter following the sale of goods or services is Section 7 Paragraph 3 of the German Unfair Competition Act (UWG) and Article 6 Paragraph 1 Letter f of the GDPR. Data processing is based solely on our legitimate interest in personalized direct marketing.
If you have already objected to the use of your email address for direct marketing purposes, you will not receive this newsletter. However, you also have the option to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying us. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.
7.3 CleverReach
We send our newsletter via the service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede (hereinafter referred to as "CleverReach"). We forward the data you provide when subscribing to the newsletter to CleverReach. This transfer is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in using a secure, user-friendly, and effective newsletter system.
The data entered when subscribing to the newsletter (e.g., email address) is stored on CleverReach's servers in Germany or Ireland. CleverReach uses your data to send and statistically analyze the newsletters on our behalf. For this purpose, the newsletter emails contain web beacons or tracking pixels, which are single-pixel image files stored on our website. This allows us to track whether a newsletter email has been opened and which links within it have been clicked. This conversion tracking also allows us to track whether an action (such as purchasing an item from our shop) was taken after opening a link in the newsletter. Technical information is also collected (e.g., the time of access, your IP address, browser type, and/or operating system). This data is collected exclusively in pseudonymized form and is not linked to your other personal data.
If you do not wish to have your data analyzed as described here, you must unsubscribe from the newsletter. We have a data processing agreement with CleverReach.
Further information on CleverReach's data analysis can be found here:
https://www.cleverreach.com/de/funktionen/reporting-und-tracking/
CleverReach's privacy policy can be found here:
https://www.cleverreach.com/de/datenschutz/
CleverReach's privacy policy is available here:
https://www.cleverreach.com/de/datenschutz/
... 7.4 Advertising by Postal Mail
If you have provided us with your first and last name, postal address, and possibly other personal data when placing an order, we reserve the right to store this data and send you our offers by postal mail in order to protect our legitimate interest in personalized direct marketing in accordance with Article 6(1)(f) GDPR.
You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the data controller.
8. Online Marketing
Use of Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, within the framework of Google Ads, the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
This involves advertising our offers on external websites using advertising materials (so-called Google AdWords). Our legitimate interest lies in displaying advertising that is relevant to you and in achieving a fair calculation of advertising costs. The legal basis is Art. 6 para. 1 lit. f GDPR.
Google Ads uses cookies for conversion tracking, which are set when you click on an AdWords ad placed by Google.
These cookies typically expire after 30 days and are not used for personal identification. Each Google Ads customer receives a different cookie; therefore, cookies cannot be tracked across the websites of different Ads customers. The information obtained in this way is used to generate conversion statistics for ad customers about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag.
You cannot be personally identified using this information.
If you wish to prevent tracking, you can disable the Google Conversion Tracking cookie in your internet browser's user settings.
Google LLC, based in the USA, is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU. You can find further information about Google's privacy policy at the following web address:
http://www.google.de/policies/privacy/
Further information on Google's privacy policy can be found here: https://business.safety.google/privacy/
You can permanently disable conversion cookies by adjusting your browser settings accordingly
or by downloading and installing the browser plug-in available at the following link:
http://www.google.com/settings/ads/plugin?hl=de
In this case, certain functions of this website may not be available or may be limited.
Further information on Google's privacy policy can be found here: https://business.safety.google/privacy/
9. Data Subject Rights
9.1 Applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data, which we inform you about below:
- Right of access pursuant to Article 15 GDPR:
You can request confirmation from the controller as to whether personal data concerning you is being processed by the controller. Furthermore, you have the right to information about the purpose, categories of personal data, recipients, planned duration of storage, and the existence of other rights such as rectification of the data or the existence of a right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and the envisaged consequences of such processing for you, as well as your right to be informed about the safeguards pursuant to Article 46 GDPR in the event of the transfer of your data to third countries;
- Right to rectification pursuant to Article 16 GDPR:
You have the right to the immediate rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data stored by us; the rectification or completion must be carried out without undue delay.
- Right to restriction of processing pursuant to Article 18 GDPR:
You have the right to request the restriction of processing of your personal data if:
the accuracy of your data is contested by you while it is being verified; you object to the erasure of your data due to unlawful processing and request the restriction of processing of your data instead; you require your data for the establishment, exercise, or defense of legal claims after we no longer need this data for the purposes for which it was collected; or you have objected to processing on grounds relating to your particular situation, pending the verification whether our legitimate grounds override yours.
``` If the processing of your personal data has been restricted, this data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been imposed, you will be informed by the controller before the restriction is lifted.
- Right to erasure pursuant to Article 17 GDPR:
You have the right to the immediate erasure of your personal data if the conditions of Article 17(1) GDPR are met. This right to erasure does not exist, however,
in particular – but not exclusively – if the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
- Right to information pursuant to Article 19 GDPR:
If you have exercised your right to rectification, erasure, or restriction of processing, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to all recipients to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.
- Right to data portability pursuant to Article 20 GDPR:
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller, insofar as this is technically feasible.
``` - Right to withdraw consent pursuant to Article 7(3) GDPR:
You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
You also have the right to withdraw your consent to data processing at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint pursuant to Article 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
9.2 Right to object
You have the right to object to the processing of your data at any time with effect for the future if we process your data based on our overriding legitimate interest after a balancing of interests.
If you exercise this right to object, we will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is necessary for the establishment, exercise or defense of legal claims.
10. Duration of storage of personal data
The duration of storage of personal data depends on the respective statutory retention periods. After this period, we routinely delete the data if it is no longer required for the performance or initiation of the contract and/or we no longer have a legitimate interest in its continued storage.