privacy statement

Personal data (hereinafter mostly referred to as “data”) is processed by us only within the scope of necessity and for the purpose of providing a functional and user-friendly Internet presence, including its contents and the services offered there.

Pursuant to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the Basic Data Protection Regulation (hereinafter referred to as “DSGVO”), “processing” shall mean any operation or series of operations carried out with or without the aid of automated processes relating to personal data, such as the collection, recording, organisation, arrangement, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, dissemination or otherwise making available, comparison or linkage, restriction, erasure or destruction, such as any such operation or series of operations carried out with or without the aid of automated processes, such as the collection, recording, organisation, storage, adaptation or alteration, retrieval, retrieval, disclosure by transmission, dissemination or otherwise making available, comparing or linking, deleting or destroying, such as restriction, deletion or destruction, or any other form of data processing.

With the following data protection declaration we inform you in particular about type, extent, purpose, duration and legal basis of the processing of personal data, as far as we decide either alone or together with others about the purposes and means of the processing. In addition, we will inform you below about the third-party components used by us for optimisation purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.

Our data protection declaration is structured as follows:

I. Information about us as responsible persons
II. rights of users and data subjects
III. Information on data processing
I. Information about us as responsible persons

Responsible provider of this website in the sense of data protection:

Aylin Freund
Papenhuder Str. 10
22087 Hamburg
Germany (German)

E-mail: shop@aylinkoenig.com

data protection officer at the provider:

Aylin Freund

II. rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right to

confirmation as to whether data relating to them will be processed, information on the data processed, further information on the data processing and copies of the data (cf. also Art. 15 DSGVO);
the rectification or completion of inaccurate or incomplete data (cf. also Art. 16 DSGVO);
to the immediate deletion of the data concerning them (cf. also Art. 17 DSGVO) or, alternatively, if further processing is required pursuant to Art. 17 para. 3 DSGVO, to the restriction of processing pursuant to Art. 18 DSGVO;
to receive the data concerning them and provided by them and to transfer these data to other providers/responsibles (cf. also Art. 20 DSGVO);
upon complaint to the supervisory authority if they are of the opinion that the data concerning them are being processed by the provider in violation of data protection provisions (cf. also Art. 77 DSGVO).

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or deletion of data or the restriction of processing which takes place pursuant to Articles 16, 17 (1) and 18 DSGVO. However, this obligation does not apply if such notification is impossible or involves disproportionate effort. Notwithstanding the foregoing, the User shall have the right to obtain information about such recipients.

Users and data subjects also have the right under Art. 21 DSGVO to object to the future processing of data concerning them, provided that the data are processed by the provider in accordance with Art. 6 para. 1 lit. f) DSGVO. In particular, an objection to data processing for the purpose of direct marketing is admissible.

III. Information on data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data is not opposed by any legal storage obligations and no other information on individual processing methods is subsequently provided.
Server data

For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted to us or to our web space provider via your Internet browser. With these so-called server log files, the type and version of your Internet browser, the operating system, the website from which you switched to our Internet presence (referrer URL), the website(s) of our Internet presence that you visit, the date and time of the respective access and the IP address of the Internet connection from which the use of our Internet presence is made are collected.

This data will be stored temporarily, but not together with other data from you.
This storage takes place on the legal basis of Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the improvement, stability, functionality and security of our Internet presence.

The data will be deleted after seven days at the latest, unless further storage is necessary for evidence purposes. Otherwise, the data shall be completely or partially excluded from deletion until the final clarification of an incident.

Cookies
a) Session cookies/session cookies
We use so-called cookies with our Internet presence. Cookies are small text files or other storage technologies that are stored on your terminal device by the Internet browser you use. These cookies are used to process certain information from you to an individual extent, such as your browser or location data or your IP address.

This processing makes our Internet presence more user-friendly, more effective and safer, as the processing makes it possible, for example, to reproduce our Internet presence in different languages or to offer a shopping basket function.

The legal basis for this processing is Art. 6 Para. 1 lit. b.) DSGVO, insofar as these cookies are used to process data for contract initiation or contract execution.

If the processing does not serve the contract initiation or contract execution, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 para. 1 lit. f) DSGVO.

These session cookies are deleted when you close your Internet browser.

b) Third party cookies

If necessary, cookies from partner companies with whom we cooperate for the purpose of advertising, analysis or the functionalities of our Internet presence may also be used with our Internet presence.

Please refer to the following information for details, in particular on the purposes and legal basis for processing such third-party cookies.

c) Possibility of disposal

You can prevent or restrict the installation of cookies by setting your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the Flash Player you are using. If you have any questions, please also use the help function or documentation of your Flash Player or contact the manufacturer or user support.
Should you prevent or restrict the installation of cookies, this may, however, result in not all functions of our website being fully usable.
Contract processing

The data transmitted by you to make use of our range of goods and/or services will be processed by us for the purpose of processing the contract and are necessary in this respect. Contract conclusion and contract processing are not possible without the provision of your data.

The legal basis for the processing is Art. 6 Para. 1 lit. b) DSGVO.

We delete the data with complete contract processing, but must observe the tax and commercial retention periods.
Within the framework of contract processing, we pass on your data to the transport company commissioned with the delivery of the goods or to the financial service provider, insofar as the transfer is necessary for the delivery of the goods or for payment purposes.

The legal basis for the passing on of the data is then Art. 6 Para. 1 lit. b) DSGVO.
Customer account / registration function

If you create a customer account with us via our Internet presence, we will collect and store the data entered by you during registration (e.g. your name, address or e-mail address) exclusively for pre-contractual services, for contract performance or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called memo function). At the same time we store the IP address and the date of your registration together with the time. Of course, this data will not be passed on to third parties.

As part of the further registration process, your consent to this processing will be obtained and reference made to this data protection declaration. The data collected by us will be used exclusively for the provision of the customer account.

If you consent to this processing, Art. 6 para. 1 lit. a) DSGVO is the legal basis for the processing.

If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 para. 1 lit. b) DSGVO.

You may revoke the consent given to us to open and maintain the customer account at any time with effect for the future in accordance with Art. 7 para. 3 DSGVO. All you have to do is inform us of your revocation.

The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must comply with tax and commercial retention periods.
Newsletter

Content of the newsletter: We send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter “newsletter”) only with the consent of the recipient or a legal permission. If the contents of the newsletter are specifically described within the scope of registration, they are decisive for the consent of the user. In addition, our newsletters contain information about our services and us.

Double-Opt-In and logging: The registration to our newsletter takes place in a so-called Double-Opt-In procedure. I.e. after registration you will receive an e-mail in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with external e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Likewise the changes of your data stored with the Versanddienstleister are logged.

Registration data: To subscribe to the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to enter a name in the newsletter for the purpose of addressing you personally.

The dispatch of the newsletter and the performance measurement associated with it are based on the consent of the recipients in accordance with Art. 6 Para. 1 lit. a, Art. 7 DSGVO in conjunction with § 7 Para. 2 No. 3 UWG or, if consent is not required, on our legitimate interests in direct marketing in accordance with Art. 6 Para. 1 lt. f. DSGVO in connection with § 7 Abs. 3 UWG.
The registration procedure is recorded on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f DSGVO. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of the users and furthermore allows us to provide evidence of consent.

Cancellation/revocation – You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to provide evidence of a previously given consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time.

Newsletter – Mailchimp

The newsletters are sent by the mail service “MailChimp”, a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the shipping service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to
comply with the European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is responsible for the delivery of our products on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f. DSGVO and an order processing contract in accordance with Art. 28 Para. 3 S. 1 DSGVO.

The dispatch service provider can use the recipient’s data in pseudonymous form, i.e. without allocation to a user, to optimise or improve its own services, e.g. for technical optimisation of dispatch and the presentation of the newsletter or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

PayPal

Our website allows payment via PayPal. The payment service provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg If you pay with PayPal, the payment data you have entered will be transferred to PayPal. Your data will be transferred to PayPal on the basis of Art. 6 Para. 1 lit. a DSGVO (consent) and Art. 6 Para. 1 lit. b DSGVO (processing to fulfil a contract). A revocation of your already given consent is possible at any time. Data processing operations in the past remain effective in the event of revocation.

Google Analytics

We use Google Analytics on our website. This is a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

Through the certification according to the EU-US data protection shield (“EU-US Privacy Shield”)

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the data protection requirements of the EU will also be complied with when processing data in the USA.
The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 Para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

Usage and user-related information, such as IP address, location, time or frequency of the visit to our website, is transferred to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. Through this function, Google shortens the IP address already within the EU or EEA.

The data collected in this way is in turn used by Google to provide us with an evaluation of the visit to our website and the usage activities there. This data may also be used to provide other services relating to the use of our website and the Internet.

Google states that it does not link your IP address with other data. In addition, Google keeps under

https://www.google.com/intl/de/policies/privacy/partners

will provide you with further data protection information, e.g. on the possibilities of preventing the use of data.

In addition, Google offers

https://tools.google.com/dlpage/gaoptout?hl=de

a so-called deactivation add-on together with further information. This add-on can be installed with standard Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information on visits to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. If and which other web analysis services are used by us, you will of course also find out in this data protection declaration.

Google Fonts

On our website we use Google Fonts to display external fonts. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

Through the certification according to the EU-US data protection shield (“EU-US Privacy Shield”)

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the data protection requirements of the EU will also be complied with when processing data in the USA.

In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.

The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the optimisation and economic operation of our Internet presence.
Through the connection to Google established when calling up our website, Google can determine from which website your enquiry was sent and to which IP address the representation of the font is to be transmitted.

Google offers the following

https://adssettings.google.com/authenticated
https://policies.google.com/privacy

Further information, in particular on the possibilities of preventing the use of data.
Google AdWords with conversion tracking

In our internet presence we use the advertising component Google AdWords and the so-called conversion tracking. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

Through the certification according to the EU-US data protection shield (“EU-US Privacy Shield”)

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the data protection requirements of the EU will also be complied with when processing data in the USA.

We use conversion tracking for targeted advertising of our services. The legal basis is Art. 6 Para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

If you click on an advertisement placed by Google, the conversion tracking we use saves a cookie on your terminal device. These so-called conversion cookies lose their validity after 30 days and do not serve your personal identification.

If the cookie is still valid and you visit a certain page of our website, both we and Google can evaluate that you have clicked on one of our ads placed with Google and that you have subsequently been forwarded to our website.

Google uses the information collected in this way to compile statistics about your visit to our website. It also provides us with information about the number of users who clicked on our ad(s) and the pages of our website that were subsequently accessed. However, neither we nor third parties who also use Google AdWords are able to identify you in this way.

You can also prevent or restrict the installation of cookies by making the appropriate settings in your Internet browser. At the same time, you can delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the type of Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.

Google also offers the following services under

https://services.google.com/sitestats/de.html

http://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/

offers further information on this topic and in particular on the possibilities of preventing the use of data.

Sample data protection declaration of the law firm Weiß & Partner