Privacy Policy

Controller for data processing: HandelsKontor Colonia GSP UG (limited liability)
Lindenstr. 73
50674 Cologne
Germany
info@handelskontorcolonia.com

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we inform you in detail about the handling of your data.

1. Access Data and Hosting

You can visit our websites without providing personal information. Each time a website is accessed, the web server automatically saves only a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the retrieval. This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our offerings. This serves to protect our legitimate interests in the correct presentation of our offerings in accordance with Art. 6 (1) lit. f GDPR. All access data is deleted no later than seven days after your visit to the site.

Hosting

The services for hosting and displaying the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise explained within this privacy policy, all access data and all data collected in forms provided on this website are processed on their servers. For questions regarding our service providers and the basis of our cooperation with them, please refer to the contact options described in this privacy policy.

Our service providers are located in these countries: USA. For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on these guarantees: approved certification mechanism.

2. Data Processing for Contract Execution, Contact, and Account Opening

We collect personal data if you voluntarily provide it to us as part of your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such, as we require these data to process the contract or handle your contact, and you cannot send the order or contact without them. The data collected is visible in the respective input forms. We use the data you provide to process the contract and your inquiries in accordance with Art. 6 (1) lit. b GDPR.

If you have given your consent according to Art. 6 (1) lit. a GDPR by deciding to open a customer account, we use your data for this purpose. More information about the processing of your data, especially regarding the transfer to our service providers for order processing, payment, and shipping, can be found in the subsequent sections of this privacy policy. After full contract execution or deletion of your customer account, your data will be restricted for further processing and deleted after the expiration of tax and commercial retention periods, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) lit. a GDPR or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this policy. You can delete your customer account at any time, either by sending a message to the contact option described in this privacy policy or through a designated function in the customer account.

3. Data Processing for Shipping Purposes

To fulfill the contract in accordance with Art. 6 (1) lit. b GDPR, we forward your data to the shipping service provider tasked with delivery, as far as this is necessary for the delivery of ordered goods.

This also applies to the transfer of data to our manufacturers or wholesalers in cases where they handle the shipping for us (drop shipping). They are considered shipping service providers within the meaning of this privacy policy.

Data Transfer to Shipping Providers for Shipment Notification

If you have given your explicit consent during or after your order, we will forward your email address to the selected shipping provider based on this consent in accordance with Art. 6 (1) lit. a GDPR so that they can contact you for delivery notification or coordination.

You can revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping provider at the contact address below. After revocation, we delete the data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this policy.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany

4. Data Processing for Payment Processing

In processing payments in our online shop, we collaborate with these partners: technical service providers, credit institutions, payment service providers.

4.1 Data Processing for Transaction Handling

Depending on the selected payment method, we forward the data necessary for the payment transaction to our technical service providers, who work for us as part of order processing, or to the commissioned credit institutions or the selected payment service provider, as far as this is necessary for payment processing. This serves the fulfillment of the contract in accordance with Art. 6 (1) lit. b GDPR. In some cases, the payment service providers collect the necessary data themselves, e.g., on their own website or through technical integration in the order process. In this case, the privacy policy of the respective payment service provider applies.

For questions regarding our partners for payment processing and the basis of our cooperation with them, please refer to the contact options described in this privacy policy.

4.2 Data Processing for Fraud Prevention and Payment Process Optimization

We may also provide additional data to our service providers, which they use together with the necessary payment data as our processors for fraud prevention and payment process optimization (e.g., invoicing, handling of contested payments, support of accounting). This serves to protect our legitimate interests in securing against fraud or in efficient payment management in accordance with Art. 6 (1) lit. f GDPR.

5. Email Marketing

5.1 Email Newsletter with Subscription

If you subscribe to our newsletter, we use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 (1) lit. a GDPR.

You can unsubscribe from the newsletter at any time by sending a message to the contact option described in this privacy policy or through a designated link in the newsletter. After unsubscribing, we delete your email address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this policy.

5.2 Newsletter Dispatch

The newsletter may also be sent by our service providers as part of processing on our behalf. For questions regarding our service providers and the basis of our cooperation with them, please refer to the contact options described in this privacy policy.

Our service providers are located in these countries: USA. For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on these guarantees: approved certification mechanism.

6. Cookies and Other Technologies

General Information

To make our website attractive and to enable the use of certain functions, we use various technologies including so-called cookies on several pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the browser session ends, i.e., after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies).

We use such technologies that are necessary for the use of certain functions of our website (e.g., shopping cart function). Through these technologies, IP address, time of visit, device and browser information, and information about your use of our website (e.g., information about the contents of the shopping cart) are collected and processed. This serves to protect our legitimate interests in an optimized presentation of our offerings in accordance with Art. 6 (1) lit. f GDPR.

We also use technologies to fulfill the legal obligations we are subject to (e.g., to be able to prove consents to the processing of your personal data) as well as for web analysis and online marketing. More information about this, including the legal basis for data processing, can be found in the subsequent sections of this privacy policy.

The cookie settings for your browser can be found at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of the technologies in accordance with Art. 6 (1) lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the privacy policy.

7. Use of Cookies and Other Technologies for Web Analysis and Advertising Purposes

If you have given your consent according to Art. 6 (1) lit. a GDPR, we use the following cookies and other technologies from third-party providers on our website. The data collected in this context is deleted after the purpose ceases and the use of the respective technology by us ends. You can revoke your consent at any time with future effect. More information about your revocation options can be found in the section “Cookies and Other Technologies.” More information, including the basis of our cooperation with individual providers, can be found with the individual technologies. For questions regarding the providers and the basis of our cooperation with them, please refer to the contact options described in this privacy policy.

7.1 Use of Google Services

We use the following technologies from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information about your use of our website collected automatically by Google technologies is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. For the USA, there is no adequacy decision by the European Commission. Our cooperation is based on these guarantees: approved certification mechanism.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address will generally be truncated within the EU or EEA before transmission to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. We have no influence on this data processing. The data processing is based on our agreement on joint processing in accordance with Art. 26 GDPR.

Google Ads

For advertising purposes in the Google search results and on third-party websites, the so-called Google remarketing cookie is set when visiting our website. This allows interest-based advertising by automatically collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website) and using a pseudonymous CookieID. Further data processing only takes place if you have activated the “personalized advertising” setting in your Google account. If you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behavior when you reach our website through an ad from Google Ads. This serves to protect our legitimate interests in optimal marketing of our offerings in accordance with Art. 6 (1) lit. f GDPR.

Google Tag Manager

We use the Google Tag Manager to manage the tools integrated via Google services and other services on our website. This serves to protect our legitimate interests in an optimized presentation of our offerings in accordance with Art. 6 (1) lit. f GDPR. The Tag Manager itself does not process any personal data.

8. Social Media

Social Media Plugins

Use of Social Plugins from Facebook, Instagram, Pinterest

Social buttons from social networks are used on our website. This serves to protect our legitimate interests in optimal marketing of our offerings in accordance with Art. 6 (1) lit. f GDPR.

To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins but only using an HTML link. This integration ensures that no connection with the servers of the respective social network providers is established when calling up a page of our website containing such buttons. Clicking on one of the buttons opens a new window in your browser and calls up the page of the respective social network provider, where you can (if necessary, after entering your login data) e.g., press the Like or Share button.

For the purpose and scope of data collection and further processing and use of data by the providers on their pages, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policies of the providers.

Instagram.com

Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”)

9. Contact Options and Your Rights

As a data subject, you have the following rights:

  • pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent described therein;
  • pursuant to Art. 16 GDPR, the right to request the correction of inaccurate or complete incomplete personal data stored by us without undue delay;
  • pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is required:
    • to exercise the right of freedom of expression and information;
    • to comply with a legal obligation;
    • for reasons of public interest; or
    • for the establishment, exercise or defense of legal claims;
  • pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as:
    • the accuracy of the data is contested by you;
    • the processing is unlawful, but you oppose its erasure;
    • we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or
    • you have objected to processing in accordance with Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request its transmission to another controller;
  • pursuant to Art. 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence or place of work or our company headquarters.

Right to Object

Insofar as we process personal data as described above to protect our legitimate interests, which predominate within the framework of a balancing of interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. Insofar as processing is for other purposes, you only have a right to object on grounds relating to your particular situation.

After you have exercised your right to object, we will not continue to process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

This does not apply if the processing is for direct marketing purposes. Then we will not process your personal data for this purpose.

Contact Options

If you have any questions about the collection, processing, or use of your personal data, information, correction, restriction or deletion of data, as well as the revocation of given consents or objection to a specific use of data, please contact us directly using the contact details in our imprint.

This privacy policy was created with the privacy policy generator of Trusted Shops.