Data protection

Data protection

Privacy policy

Responsible for data processing is:
KAJO-Datenschutz, Jörg Kappestein
Bahnhofstr. 11
87677 Stöttwang
Germany
info@kajo-datenschutz.de

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. access data and hosting

You can visit our websites without providing any personal information. Each time you access a website, the web server automatically stores only a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred and the requesting provider (access data) and documents the request. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our services. This serves to protect our legitimate interests in a correct presentation of our offer according to Art. 6 Para. 1 S. 1 lit. f DSGVO. All access data is deleted at the latest seven days after the end of your visit to the site.

1.1 Hosting

The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data as well as all data collected in designated forms on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

1.2 Content Delivery Network

For the purpose of a shorter loading time, we use a so-called Content Delivery Network ("CDN") for some offers. With this service, content, e.g. large media files, are delivered via regionally distributed servers of external CDN service providers. Therefore, access data is processed on the servers of the service providers. Our service providers work for us within the framework of order processing. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

2. data processing for contract handling, contacting and opening a customer account

We collect personal data if you provide it voluntarily in the context of your order or when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, because in these cases we need the data to process the contract or to process your contact and you can not send the order or contact without their information. Which data is collected can be seen from the respective input forms. We use the data provided by you for the purpose of processing the contract and dealing with your enquiries in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO.
If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO by deciding to open a customer account, we will use your data for the purpose of opening a customer account. For further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, please refer to the following sections of this privacy policy. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law in accordance with Article 6 (1) sentence 1 lit. c DSGVO, unless you have expressly consented to further use of your data in accordance with Article 6 (1) sentence 1 lit. a DSGVO or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account.

We use merchandise management systems of external service providers for order and contract processing. Our service providers work for us within the framework of order processing. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

3. data processing for the purpose of shipment handling

In order to fulfil the contract in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

 Data transfer to shipping service providers for the purpose of shipping notification

If you have given us your express consent to do so during or after your order, we will pass on your e-mail address and telephone number to the selected shipping service provider on the basis of this consent in accordance with Art. 6 (1) sentence 1 lit. a DSGVO, so that the shipping service provider can contact you before delivery for the purpose of delivery notification or coordination.
The consent can be revoked at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany

4. data processing for payment handling

For the processing of payments in our online shop we work together with these partners: technical service providers, credit institutions, payment service providers

4.1 Data processing for transaction processing

Depending on the selected payment method, we pass on the data necessary for the processing of the payment transaction to our technical service providers, who work for us within the framework of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for the processing of the payment. This serves the fulfilment of the contract according to Art. 6 para. 1 p. 1 lit. b DSGVO. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the data protection declaration of the respective payment service provider applies. If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact option described in this privacy policy.

4.2 Data processing for the purpose of fraud prevention and optimisation of our payment processes

If necessary, we provide our service providers with further data, which they use together with the data necessary for the processing of the payment as our order processors for the purpose of fraud prevention and the optimisation of our payment processes (e.g. invoicing, processing of contested payments, accounting support). Pursuant to Art. 6 (1) sentence 1 lit. f DSGVO, this serves to protect our legitimate interests in our protection against fraud or in efficient payment management, which outweigh our interests in the context of a balancing of interests.

4.3 Identity and credit check when selecting Klarna payment services

Klarna Pay now (direct debit), Klarna Pay later (purchase on account), Klarna Slice it (hire purchase)
If you decide to use the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as Klarna), we ask you for your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO that we may transmit the data necessary for the processing of the payment and an identity and credit check to Klarna. In Germany, the credit agencies named in Klarna's privacy policy may be used for the identity and credit check. Klarna uses the information received about the statistical probability of non-payment for a weighed decision on the establishment, implementation or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact option mentioned in this privacy policy. This may result in us no longer being able to offer you certain payment options. You can also revoke your consent to this use of personal data at any time vis-à-vis Klarna.

5. advertising by e-mail

5.1 E-mail newsletter with registration

If you register for our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our e-mail newsletter based on your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO.
Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the list of recipients, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

5.2 Newsletter dispatch

The newsletter may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

5.3 Sending evaluation requests by e-mail

If you have given us your express consent to this during or after your order in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, we will use your e-mail address for the request to submit a rating of your order via the rating system used by us. This consent can be revoked at any time by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the rating request.

The evaluation requests may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

6. cookies and other technologies

 General information

In order to make the visit to our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser the next time you visit us (persistent cookies).
We use such technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping cart function). These technologies collect and process IP address, time of visit, device and browser information as well as information about your use of our website (e.g. information about the contents of the shopping cart). This serves, within the framework of a balancing of interests, overriding legitimate interests in an optimized presentation of our offer in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO.

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™.

7. integration of the Trusted Shops Trustbadge

In order to display our Trusted Shops seal of approval and any ratings collected, as well as to offer Trusted Shops products to buyers after they have placed an order, the Trusted Shops trust badge is integrated on this website.

This serves to protect our legitimate interests in optimal marketing by enabling secure shopping in accordance with Art. 6 (1) p. 1 lit. f DSGVO, which prevail in the context of a balancing of interests. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided by a CDN provider (Content Delivery Network) as part of order processing. Trusted Shops GmbH also uses service providers from the USA. An appropriate level of data protection is ensured. Further information on the data protection of Trusted Shops GmbH can be found here.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. Individual access data are stored in a security database for the analysis of security anomalies. The log files are automatically deleted no later than 90 days after creation.

Further personal data will be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or have already registered to use them. The contractual agreement between you and Trusted Shops applies. For this an automatic collection of personal data from the order data takes place. Whether you as a buyer are already registered for a product use, is checked automatically on the basis a neutral parameter, the email address hashed by cryptological one-way function. The e-mail address is converted into this hash value, which cannot be decrypted by Trusted Shops, before it is transmitted. After checking for a match, the parameter is automatically deleted.

This is necessary for the fulfilment of our and Trusted Shops' overriding legitimate interests in the provision of the buyer protection linked to the specific order and the transactional evaluation services in accordance with Art. 6 (1) sentence 1 lit. f DSGVO. Further details, including the objection, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.

8. social media

8.1 Social Plugins from Facebook, Instagram

Social buttons from social networks are used on our website. These are only integrated into the page as HTML links, so that when you call up our website, no connection is established with the servers of the respective provider. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser There you can, for example, click the Like or Share button.

8.2 Our online presence on Facebook, Instagram

Insofar as you have given your consent to the respective social media operator in accordance with Art. 6 (1) sentence 1 lit. a DSGVO, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media mentioned above, from which usage profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as a contact option and your rights and setting options in this regard to protect your privacy, please refer to the privacy notices of the providers linked below. If you still need help in this regard, you can contact us.

Facebook is an offer of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland") The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is usually transmitted to a server of Facebook, Inc, 1601 Willow Road, Menlo Park, California 94025, USA and stored there. For the USA, there is no adequacy decision of the European Commission. Our cooperation is based on standard data protection clauses of the European Commission. Data processing in the context of a visit to a Facebook Fanpage is based on an agreement between jointly responsible parties in accordance with Art. 26 DSGVO. You can find more information (Insights data information) here.

Instagram is an offer of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland") The information automatically collected by Facebook Ireland about your use of our online presence on Instagram is usually transmitted to a server of Facebook, Inc, 1601 Willow Road, Menlo Park, California 94025, USA and stored there. For the USA, there is no adequacy decision of the European Commission. Our cooperation is based on standard data protection clauses of the European Commission. Data processing in the context of a visit to an Instagram fan page takes place on the basis of an agreement between jointly responsible parties in accordance with Art. 26 DSGVO. You can find more information (Insights data information) here.

9. tools and miscellaneous

9.1 - Google Web Fonts

This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google obtains knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. If your browser does not support web fonts, a standard font will be used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

9.2 Google reCAPTCHA

On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or is abused by machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in determining individual responsibility on the Internet and the prevention of abuse and spam. The use of Google reCAPTCHA may also involve the transmission of personal data to the servers of Google LLC. in the USA.

Further information about Google reCAPTCHA as well as Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

9.3 - Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information. By using this service, you will be shown our location and it will be easier for you to find us.

Already when calling up those sub-pages in which the map of Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also result in a transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and analysis are carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of Google's legitimate interest in the display of personalised advertising, market research and / or the design of Google websites to meet the needs of users. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html, and the additional terms of use for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html.

Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/.

9.4 ShopVote graphics

We have included ShopVote graphics on this website to display our ShopVote seal and the collected and/or aggregated ratings, if any.

This serves to protect our legitimate interests in an optimal marketing of our offer, which prevail in the context of a balancing of interests, in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO. The ShopVote graphics and the services advertised with them are an offer of Blickreif GmbH, Alter Messeplatz 2, 80339 Munich.

When you call up the ShopVote graphics, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the source of the call (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site. Further personal data are not collected or stored by the ShopVote graphics.

10. contact options and your rights

As a data subject, you have the following rights:

  • in accordance with Art. 15 DSGVO the right to request information about your personal data processed by us to the extent specified therein;
  • in accordance with Art. 16 DSGVO the right to demand the immediate correction of incorrect or completion of your personal data stored by us;
  • in accordance with Art. 17 DSGVO the right to demand the deletion of your personal data stored by us, insofar as the further processing is not prohibited.
  • to exercise the right to freedom of expression and information;
  • to fulfil a legal obligation;
  • for reasons of public interest, or
  • is necessary for the assertion, exercise or defence of legal claims;
  • in accordance with Art. 18 DSGVO, the right to demand the restriction of the processing of your personal data, insofar as
  • the accuracy of the data is disputed by you;
  • the processing is unlawful but you object to its erasure;
  • we no longer need the data, but you require them for the assertion, exercise or defence of legal claims, or
  • you have objected to the processing in accordance with Art. 21 DSGVO;
  • in accordance with Art. 20 DSGVO, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
  • In accordance with Art. 77 DSGVO, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of consent given or objection to a certain use of data, please contact us directly using the contact details in our imprint.

Right of objection
Insofar as we process personal data as explained above in order to protect our legitimate interests, which are overriding in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object on grounds relating to your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the establishment, exercise or defence of legal claims.

This does not apply if the processing is for direct marketing purposes. Then we will not further process your personal data for this purpose.