Data protection

Data protection
Unless otherwise stated below, the provision of your personal data is neither statutory nor
contractually required, nor required for the conclusion of a contract. You are not obliged to provide the data. One
Non-provision has no consequences. This only applies if no other information is given in the subsequent processing operations
is made.
"Personal data" means any information relating to an identified or identifiable natural person.
server log files
You can visit our website without providing any personal information.
Every time you access our website, usage data is sent to us or our web host / IT service provider by your Internet browser
transmitted and stored in log data (so-called server log files). These stored data include, for example, the name of the
accessed page, date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our overriding legitimate interest in the
Guaranteeing trouble-free operation of our website and improving our offer.
Your data will be transmitted to Canada, among other places. For data transfers to Canada, there is an adequacy decision by the EU
Commission before.
Contact
Responsible
Contact us if you wish. Responsible for data processing is: Andre Matthis, front valley
11, 77716 fisherman stream Germany, 0165141917705, klan-holzdesign@web.de
Customer contact via e-mail
If you initiate business contact with us by e-mail, we collect your personal data (name, e-mail address,
message text) only to the extent provided by you. The data processing is used for processing and answering
your contact request.
If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer).
or a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 Para. 1
lit. b GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Art. 6 (1) lit. f GDPR
our overriding legitimate interest in processing and responding to your request. In this case you have the right
for reasons that arise from your particular situation, at any time based on Article 6 (1) (f) GDPR
to object to the processing of your personal data.
We only use your e-mail address to process your request. Your data will then be processed in compliance with legal requirements
Retention periods deleted unless you have consented to further processing and use.
orders
Collection, processing and disclosure of personal data when placing orders
When ordering, we only collect and process your personal data to the extent that this is necessary to fulfill and process your order
order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. One
Non-provision means that no contract can be concluded. The processing takes place on the basis of Art. 6 Para. 1 lit.
b GDPR and is required to fulfill a contract with you.
Your data will be passed on, for example, to the shipping companies and dropshipping providers you have selected,
Payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the legal regulations
Requirements. The amount of data transmission is limited to a minimum.
Your data will be transmitted to Canada, among other places. For data transfers to Canada, there is an adequacy decision by the EU
Commission before.
payment service provider
Using PayPal Check Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard
Royal L-2449, Luxembourg; "PayPal"). The purpose of data processing is to offer you payment via the payment service
can. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal
the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you with the selected payment method
to be able to This processing takes place on the basis of Article 6 Paragraph 1 Letter b GDPR.
Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal
PayPal reserves the right to do so for individual payment methods such as credit card via PayPal, direct debit via PayPal or "pay later" via PayPal
The right to obtain a credit check on the basis of mathematical-statistical procedures using credit bureaus.
For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the
received information about the statistical probability of default for a balanced decision on the
Establishment, implementation or termination of the contractual relationship. The credit check can contain probability values ​​(score
Values) that are calculated on the basis of scientifically recognized mathematical-statistical methods and in their
Calculation, among other things, include address data. Your interests worthy of protection are protected in accordance with the statutory provisions
taken into account. The data processing serves the purpose of a credit check for the initiation of a contract. The processing takes place on
Based on Art. 6 Para. 1 lit. f GDPR from our overriding legitimate interest in protection against non-payment if PayPal
in advance.
You have the right to object to this at any time for reasons that arise from your particular situation on Art. 6 Para. 1 lit. f
DSGVO-based processing of personal data concerning you by notifying PayPal to object. The
Provision of the data is required for the conclusion of the contract with the payment method you require. A non-provision has to
As a result, the contract cannot be concluded with the payment method you have chosen.
Third party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal.
This processing takes place on the basis of Article 6 Paragraph 1 Letter b GDPR. To carry out this payment method, the data may be
then passed on to the respective provider by PayPal. This processing takes place on the basis of Article 6 Paragraph 1 Letter b GDPR.
Examples of local third-party providers can be:
Immediately (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
Purchase on account via PayPal
When paying via the purchase on account payment method, the data required for payment processing is first sent to PayPal
transmitted. In order to carry out this payment method, PayPal will then send the data to Ratepay GmbH (Franklinstraße 28-29,
10587 Berlin; "Ratepay") in order to be able to fulfill the contract with you with the selected payment method. This processing takes place on
Based on Art. 6 (1) (b) GDPR. Ratepay may provide a credit report based on mathematical and statistical methods
(Probability or score values) using credit bureaus through the process already described above. The
Data processing serves the purpose of a credit check for the initiation of a contract. The processing takes place on the basis of Art. 6
Para. 1 lit. f GDPR from our overriding legitimate interest in protection against non-payment if Ratepay pays in advance.
Further information on data protection and which credit agencies use Ratpay can be found at https://www.ratepay.com/legal-
payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/ .
More information on data processing when using PayPal can be found in the associated data protection declaration
https://www.paypal.com/de/webapps/mpp/ua/privacy-full .
Data subject rights and storage period
Duration of storage
After the contract has been fully processed, the data will first be used for the duration of the warranty period, then under consideration
legal, in particular tax and commercial law retention periods and then deleted after the deadline, if
you have not consented to further processing and use.
rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information
Correction, deletion, restriction of processing, data portability.
In addition, according to Art. 21 Para. 1 GDPR, you have the right to object to the processing based on Art. 6 Para. 1 f GDPR
are based, as well as against processing for the purpose of direct advertising.
Right of appeal to the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the
processing of your personal data is not lawful.
You can lodge a complaint, among other things, with the supervisory authority responsible for us, which you can contact under the following contact details
to reach:
State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Koenigstrasse 10 a
70173 Stuttgart
Phone: +49 711 6155410
Fax: +49 711 61554115
Email: poststelle@lfdi.bwl.de
Right to object
Are the personal data processing listed here based on our legitimate interest according to Art. 6 para.
1 lit. f GDPR, you have the right to cooperate with this processing at any time for reasons that arise from your particular situation
object to future effect.
After the objection has been made, the processing of the data concerned will be terminated unless we can compellingly protect it
demonstrate grounds for processing that outweigh your interests, rights and freedoms, or if the processing of
Asserting, exercising or defending legal claims.
last update: 29.11.2022