Privacy policy - Solt un Peper

I. Name and address of the person responsible 

 

The person responsible within the meaning of the General Data Protection Regulation and other national 

Data protection laws of the member states as well as other data protection laws 

Provisions is:

 

Magdalena lion
SOLT UN PEPER

Himmelstrasse 9

22299 Hamburg

 

Contact details of the data protection contact person: see above mail@soltunpeper.com

 

II. General information on data processing

  1. Extent of processing of personal data

We only collect and use personal data of our users insofar as this is necessary to provide a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies in those cases in which prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law. The types of data processed are:

 

- Inventory data (e.g., names, addresses).

- Contact details (e.g., email, phone numbers).

- Content data (e.g., text input, photographs, videos).

- Usage data (eg, visited websites, interest in content, access times).
- Meta / communication data (e.g. device information, IP addresses).

  1. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 Para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the first-mentioned interest, Article 6 (1) lit. f GDPR as the legal basis for processing. 

  1. Data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

4. Provision of contractual services

 

We process stock data (eg, names and addresses as well as contact data of users), contract data (eg, used services, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. Art. 6 para. 1 lit b. DSGVO. The entries marked as obligatory in online forms are required for the conclusion of the contract.


As part of the use of our online services, we store the IP address and the time of each user action. The storage is based on our legitimate interests, as well as the user's protection against misuse and other unauthorized use. A transfer of these data to third parties does not take place, unless it is necessary for the prosecution of our claims or there is a legal obligation in accordance with. Art. 6 para. 1 lit. c DSGVO.


We process usage data (e.g. the websites of our online offer visited, interest in our products) and content data (e.g., entries in the contact form such as name, telephone, e-mail) in order to offer the user, for example, contract offers.


The data will be deleted after the expiry of statutory warranty and comparable obligations. In the case of the statutory archiving obligations, the deletion takes place after their expiry. Information in any customer account remains until it is deleted.

 

 

5. Transfers to third countries

 

If we process data in a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. DSGVO. This means, for example, that the processing takes place on the basis of special guarantees, such as the officially recognized level of data protection (eg for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses"). 

 

6. Klarna payment options

 

In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. This enables Klarna to assess whether you can use the payment options offered by Klarna and adapt the payment options to your needs. You can get general information about Klarna here., Your personal data will be processed by Klarna in accordance with the applicable data protection regulations and according to the information in Klarnas Privacy Policy Germany/ Austria treated.

 

 

III. Provision of the website and creation of log files

  1. Description and scope of data processing

When you visit our website, our system automatically collects data and information from the computer system of the calling computer. 

 

The following data is collected for a limited time:

  1. Information about the browser type and version used

  2. The operating system of the user

  3. The Internet service provider of the user

  4. The IP address of the user

  5. Date and time of access

  6. Websites from which the system of the user comes to our website 

The data is stored in the log files of our system. This data is only required to analyze any malfunctions and is deleted within seven days at the latest. The legal basis for the temporary storage of the data and the log files is Art. 6 Para. 1 lit. f GDPR. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To do this, the user's IP address must be saved for the duration of the session. The storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context and no conclusions are drawn about your person. Our legitimate interest in data processing in accordance with Art. 6 Paragraph 1 lit. f GDPR. The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection on the part of the user. 

 

2. Use of cookies 

 

Our website uses so-called session or flash cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is accessed again. The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f GDPR. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages. In addition, if you allow this, we also use so-called persistent cookies, which are used beyond the session ("cross-session cookies"). These cookies in particular are used to make the website user-friendly, more effective and safer and are required, for example, for the shopping cart in an online shop. The user data collected by technically necessary cookies are not used to determine your identity. We need cookies for the following applications:

  1. Shopping cart, payment services and possibly (re-) download

  2. Acceptance of language settings or similar

  3. Remembering search terms, etc.

The user data collected by technically necessary cookies are not used to create user profiles. The processing of personal data is in accordance with Art. 6 Para. 1 lit. f GDPR necessary to safeguard our legitimate interests. Cookies are stored on the user's computer and transmitted to our website from there. As a user, you therefore have full control over the use of cookies and these cookies are deleted when you close the browser. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated, it is possible that not all functions of the website can be used. 

 

IV. Contact

 

When contacting us (eg via contact form, e-mail, telephone or via social media), the information provided by the user to process the contact request and its processing acc. Art. 6 para. 1 lit. b) DSGVO processed. User information can be stored in a Customer Relationship Management System ("CRM System") or comparable request organization.


We delete the inquiries if they are no longer required. We review the necessity every year; The statutory archiving obligations also apply.

 

 

V. Web analysis with Google Analytics

 

Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. fg. DSGVO), we use Google Analytics, a web analytics service provided by Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the users are usually transmitted to a Google server in the USA and stored there.


Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services related to the use of this online offer and the internet usage. In this case, pseudonymous usage profiles of the users can be created from the processed data.


We only use Google Analytics with activated IP anonymization. This means that the IP address of the users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.


The IP address submitted by the user's browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly; Users may also prevent the collection by Google of the data generated by the cookie and related to their use of the online offer and the processing of such data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.


You can find further information on the use of data by Google, setting and objection options on the Google website: https://www.google.com/intl/de/policies/privacy/partners ( "How Google uses data when you use websites or apps of our partners"), http://www.google.com/policies/technologies/ads ( "Use of data for advertising purposes"), http://www.google.de/settings/ads ("Managing information that Google uses to show you advertising").

Demographic data collection by Google Analytics

This website uses Google Analytics' demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section "Refusal of data collection".

Google Analytics Remarketing

Our websites use the features of Google Analytics Remarketing combined with the cross-device capabilities of Google AdWords and DoubleClick. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

his feature makes it possible to link target audiences for promotional marketing created with Google Analytics Remarketing to the cross-device capabilities of Google AdWords and Google DoubleClick. This allows advertising to be displayed based on your personal interests, identified based on your previous usage and surfing behavior on one device (e.g. your mobile phone), on other devices (such as a tablet or computer).

Once you have given your consent, Google will associate your web and app browsing history with your Google Account for this purpose. That way, any device that signs in to your Google Account can use the same personalized promotional messaging.

To support this feature, Google Analytics collects Google-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad promotion.

You can permanently opt out of cross-device remarketing/targeting by turning off personalized advertising in your Google Account; follow this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the data collected in your Google Account data is based solely on your consent, which you may give or withdraw from Google per Art. 6 (1) (a) DSGVO. For data collection operations not merged into your Google Account (for example, because you do not have a Google Account or have objected to the merge), the collection of data is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing anonymous user behavior for promotional purposes.

For more information and the Google Privacy Policy, go to: https://www.google.com/policies/technologies/ads/.

 

 

VI. Online presence in social media and use of Facebook Connect or Facebook Custom Audiences

 

Use of Facebook Connect

 

On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. GDPR), we use the Facebook Connect service of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook"). With Connect, Facebook users can make their account information and friends available to other websites or desktop applications. The settings made on Facebook to protect your own privacy are also retained on other pages.


Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When a user invokes a feature of this online offering that includes such a plugin, their device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the device of the user and incorporated by him into the online offer. In the process, user profiles can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and therefore informs users according to our level of knowledge.


By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example, press the Like button or leave a comment, the information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and save their IP address. According to Facebook, only an anonymous IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the related rights and setting options to protect the privacy of users, these can be found in the privacy policy of Facebook: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about him through this online offer and associate it with his member data stored on Facebook, he must log out of Facebook and delete his cookies before using our online offer. Other settings and inconsistencies regarding the use of data for promotional purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads  or via the US side http://www.aboutads.info/choices/  or the EU side http://www.youronlinechoices.com/, The settings are platform-independent, ie they are adopted for all devices, such as desktop computers or mobile devices.

 

Use of the Facebook pixel for Facebook Custom Audiences


With the help of the Facebook pixel, it is on the one hand possible for Facebook to determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads we have been sent only to those Facebook users who have shown an interest in our online offer or who have certain features (eg interests in certain topics or products visited by them) Web pages determined), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to make sure that our Facebook ads are in line with the potential interest of users and are not annoying. With the help of the Facebook pixel we can also understand the effectiveness of the Facebook ads for statistical and market research purposes, in which we see whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").


The processing of the data by Facebook is part of Facebook's data usage policy. Accordingly, general notes on the presentation of Facebook Ads, in the data usage policy of Facebook: https://www.facebook.com/policy.php, Special information and details about the Facebook pixel and how it works can be found in the Help section of Facebook: https://www.facebook.com/business/help/651294705016616.


You may object to the capture by the Facebook Pixel and use of your data to display Facebook Ads. To set which types of ads you see within Facebook, you can go to the page set up by Facebook and follow the instructions on the usage-based advertising settings:

https://www.facebook.com/settings?tab=ads, The settings are platform-independent, ie they are adopted for all devices, such as desktop computers or mobile devices.


You may also opt out of the use of cookies for distance measurement and promotional purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and also the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/

 

Online presence in social media

 

We maintain online presence within social networks and platforms in order to communicate with customers, prospects and users active there and to inform them about our services. 

 

Facebook

We have accordingly to the Facebook company, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook"), set a link. When calling up the respective networks and platforms, the terms and conditions and the data processing guidelines of Facebook apply (see above). Unless otherwise stated in our privacy policy, we process the data of the users as long as they communicate with us within the social networks and platforms, e.g. write posts on our online presence or send us messages.

 

Tumblr

Functions and contents of the Tumblr service are integrated into our online offer, offered by Tumblr Inc., 770 Broadway, New York, NY 10003, USA. This may include, for example, content such as images, videos or texts and buttons with which users can express their favor with regard to the content, subscribe to the authors of the content or our contributions. If the users are members of the Tumblr platform, Tumblr can assign the above content and functions to the profiles of the users there. You can find Tumblr's privacy policy at: www.tumblr.com/privacy.

 

 

Instagram.

Within our online offer, functions and contents of the Instagram service are integrated, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. This can include, for example, content such as images, videos or texts and buttons with which users can express their liking for the content, subscribe to the authors of the content or our contributions. If the users are members of the Instagram platform, Instagram can assign the above-mentioned content and functions to the profiles of the users there. Instagram privacy policy: http://instagram.com/about/legal/privacy/

 

Pinterest

Functions and contents of the Pinterest service, offered by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA, are integrated into our online offer. This can include, for example, content such as images, videos or texts and buttons with which users can express their liking for the content, subscribe to the authors of the content or our contributions. If the users are members of the Pinterest platform, Pinterest can assign the access to the above-mentioned content and functions to the profiles of the users there. Pinterest privacy policy: 

https://about.pinterest.com/de/privacy-policy

 

 

VII. Rights of the data subject

If personal data is processed by you, you are the person concerned within the meaning of the DSGVO and you have the following rights towards the responsible person:

  1. Right to information

You may ask the person in charge to confirm if personal data concerning you is processed by us. 

If such processing is available, you can request information from the person responsible about the following information:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data that are processed;

(3) the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;

(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the storage duration;

(5) the existence of a right to correct or delete your personal data, a right to restrict processing by the person responsible or a right to object to this processing; 

(6) the right to lodge a complaint with a supervisory authority;

(7) all available information on the origin of the data if the personal data are not collected from the data subject;

(8) You have the right to request information about whether the personal data relating to you is being transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with. Art. 46 GDPR to be informed in connection with the transfer.

 2. Right to rectification 

You have a right to rectification and / or completion to the controller, provided the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.

3. Right to restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:

(1) if you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;

(3) the person responsible no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or

(4) if you have objected to the processing in accordance with Art. 21 Paragraph 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.

If the restriction on processing has been restricted in accordance with the above conditions, the person responsible will inform you before the restriction is lifted.

4. Right to delete

  1. deletion obligations

You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent on which the processing was based in accordance with. Art. 6 para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and there is no other legal basis for the processing. 

(3) According to 21 para. 1 GDPR objection to the processing and there are no overriding legitimate reasons for the processing, or you object acc. Art. 21 para. 2 GDPR objection to the processing. 

(4) The personal data concerning you have been processed unlawfully. 

(5) The deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject. 

(6) The personal data relating to you were collected in relation to the information society services offered in accordance with Art. 8 Paragraph 1 GDPR.

  1. Information to third parties

If the person responsible has made the personal data concerning you public and is acc. According to Art. 17 Para. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you are the data subject You have requested that you delete all links to this personal data or copies or replications of this personal data. 

  1. exceptions

The right to erasure does not exist if the processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) To fulfill a legal obligation that requires processing under the law of the Union or of the member states to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority that is transferred to the person responsible has been;

(3) for reasons of public interest in the area of ​​public health in accordance with Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR;

(4) for the establishment, exercise or defense of legal claims.

5. Right to information

If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.

You have a right to the person responsible to be informed about these recipients.

6. Right to data portability

You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that

(1) the processing is based on consent in accordance with. Art. 6 para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract according to. Art. 6 para. 1 lit. b GDPR is based and

(2) the processing is carried out using automated procedures.

In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

7. right to

You have the right, for reasons that arise from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 Para. 1 lit. e or f DSGVO takes place to object; this also applies to profiling based on these provisions. 

The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

In connection with the use of information society services - regardless of Directive 2002/58 / EC - you have the option of exercising your right of objection by means of automated processes that use technical specifications. You can send an email to our data protection officer.

8. Right to revoke the data protection consent declaration

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

9. Automated decision on an individual basis including profiling

You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision 

(1) is necessary for the conclusion or performance of a contract between you and the person responsible,

(2) is permissible on the basis of legal provisions of the Union or of the member states to which the person responsible is subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms and your legitimate interests or

(3) takes place with your express consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With respect to the cases referred to in (1) and (3), the controller shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and heard on challenge of the decision.

10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the DSGVO violates. 

The supervisory authority to which the complaint was submitted informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy according to Art. 78 GDPR.