Privacy policy of Koko von Knebel Retail GmbH

Thank you for your interest in our company. We take data protection seriously.

In principle, you can use our website without providing any personal data. If a person concerned wishes to use services of our company via our website, it may be necessary to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we always obtain the consent of the person concerned.

The processing of personal data (e.g. name, address, e-mail address or telephone number of a person concerned) is always carried out in accordance with the Basic Data Protection Regulation (DSGVO) and in compliance with the country-specific data protection regulations applicable to us.

With the following data protection declaration, we would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Likewise, affected persons are informed by this data protection declaration about the rights to which they are entitled.

As data controllers, we have implemented numerous technical and organisational measures to ensure the most complete protection possible of the personal data processed via our website. However, data transmissions via the Internet can generally contain security gaps. Therefore, a 100% protection cannot be guaranteed. For this reason, every person concerned can, of course, alternatively provide us with personal data, e.g. by telephone.

1. definitions

This data protection declaration is based on the definitions used by the European legislator for directives and regulations when the DSGVO was issued (Article 4 DSGVO). This data protection declaration should be both easy to read and easy to understand for every person. To ensure this, we would first like to explain the terms used. These definitions are used in this data protection declaration:

"personal data" shall mean
any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
"data subject
any identified or identifiable natural person whose personal data are processed by the controller
"processing" means
any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
"restriction of processing" means
the marking of stored personal data with a view to limiting their processing in the future;
"profiling" means
any operation consisting of the automated processing of personal data whereby personal data are processed in order to evaluate certain personal aspects relating to a natural person, in particular with a view to analysing or predicting aspects relating to the performance of work, the economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movements of that natural person;
"controller
natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or national law, provision may be made for the controller or for the specific criteria for his or her designation in accordance with Union or national law;
"recipient" shall mean
any natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party However, authorities which may receive personal data in the course of a specific investigation, as provided for by Union or Member State law, shall not be considered as recipients; the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules and in accordance with the purposes of the processing;
"third party":
any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process the personal data;
"consent" shall mean an expression of
the data subject's free will, freely given in a specific case, in an informed and unequivocal manner, in the form of a declaration or any other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her

2. name and contact details of the person responsible for processing

This privacy policy applies to data processing by:

Responsible person: Koko von Knebel Retail GmbH, represented by the managing director Mrs. Friederike K. de Jong von Knebel, Hohenbergstraße 4, 24105 Kiel, E-Mail: info@kokovonknebel.com, Phone: +49 (0)431 - 9970875, Fax: +49 (0)431 -9970833 According to § 37 DSGVO there is no obligation for us to appoint a data protection officer.

3. collection and storage of personal data and the nature and purpose of their use

a) When visiting the website

You can use our website without revealing your identity. When you access our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

- IP address of the requesting computer,
- date and time of the access,
- name and URL of the accessed file,
- website from which the access takes place (referrer URL), used browser and if applicable the operating system of your computer as well as the name of your access provider.
The above-mentioned data is processed by us for the following purposes:
- to ensure a smooth connection of the website,
- to ensure a comfortable use of our website,
- to evaluate the system security and stability and
- for other administrative purposes.

The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO. Our legitimate interest follows from the above listed purposes for data collection. Under no
circumstances do we use the data collected for the purpose of drawing conclusions about your person.

Furthermore, we use cookies and analysis services when you visit our website. You will find more detailed information on this under points 5 and 7 of this data protection declaration.

b) When using our contact form

For questions of any kind, we offer you the opportunity to contact us using a form provided on our website. This requires the provision of a valid e-mail address so that we know who the enquiry comes from and can answer it. Further information can be provided voluntarily. It is up to you to decide whether you wish to enter this data in the contact form.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after the completion of your request.

c) For orders via our website

You can either place orders via our website as a guest without registering, or you can register in our shop as a customer for future orders. Registration has the advantage for you that you can log in to our shop directly with your e-mail address and password in the event of a future order without having to enter your contact data again.

Your personal data will be entered into an input mask and transmitted to us and stored. If you place an order via our website, we collect the following data both in the case of a guest order and in the case of a registration in the shop:

- Salutation, first name, surname,
- a valid e-mail address,
- address,
- telephone number (landline and/or mobile phone)
The collection of these data is carried out:
- to be able to identify you as our customer;
- to be able to process, fulfil and settle your order;
- for correspondence with you;
- for invoicing;
- to settle any liability claims that may exist, as well as the assertion of any claims against you;
- to ensure the technical administration of our website;
- to manage our customer data.

During the ordering process, your consent to the processing of this data will be obtained. The minimum age for consent is 16 years, otherwise the consent of your parents is required.

The data processing is carried out on your order and/or registration and is required in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO for the purposes mentioned for the appropriate processing of your order and for the mutual fulfilment of obligations arising from the purchase contract.

The personal data collected by us for the processing of your order will be stored until the expiry of the statutory storage obligation and deleted thereafter, unless we are obliged to store the data for a longer period of time in accordance with Article 6 Paragraph 1 S. 1 lit. c DSGVO due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have consented to storage beyond this in accordance with Article 6 Paragraph 1 S. 1 lit. a DSGVO.

4. disclosure of data

Your personal data will be passed on by us to third parties exclusively to the service partners involved in the execution of the contract, such as the logistics company commissioned with the delivery and the credit institute commissioned with payment matters. In cases where your personal data is passed on to third parties, the scope of the data transmitted is limited to the necessary minimum.

Your personal data will not be transferred to third parties for any other purposes than those mentioned above.

We also only pass on your personal data to third parties if:

- you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO,
- the transfer in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
- in the event that the transfer in accordance with Art. 6 para. 1 sentence 1 lit. c DSGVO, and
- this is legally permissible and is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO.

During the ordering process, you will be asked to give your consent to the transfer of your data to third parties.

5. use of cookies

We use cookies on our website. These are small files that are automatically created by your browser and
stored on your end device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your terminal device, do not contain viruses, Trojans or other malware.

Information is stored in the cookie that is related to the specific terminal device used. This does not mean, however, that we obtain direct knowledge of your identity.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted when you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit our site again to make use of our services, we will automatically recognize that you have already been with us and what entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to record the use of our website statistically and to evaluate it for the purpose of optimising our offer for you (see item 7). These cookies enable us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined time.

The data processed by cookies is required for the above-mentioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

6. links to third party websites

The links published on our website are researched and compiled by us with the greatest possible care. However, we have no influence on the current and future design and content of the linked pages. We are not responsible for the content of the linked pages and expressly do not adopt the content of these pages as our own. For illegal, incorrect or incomplete contents as well as for damages resulting from the use or non-use of the information, only the provider of the linked website is liable. The liability of the person who merely refers to the publication by a link is excluded. We are only responsible for third-party references if we have positive knowledge of them, i.e. also of any illegal or criminal content, and if it is technically possible and reasonable for us to prevent their use.

7. analysis and tracking tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO. With the tracking measures we use, we want to ensure that our website is designed to meet your needs and is continuously optimised. On the other hand, we use the tracking measures to record the use of our website statistically and evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as justified in the sense of the aforementioned regulation.

The respective data processing purposes and data categories can be taken from the corresponding tracking tools.

a) Google Analytics*

For the purpose of designing our pages to meet your needs and continuously optimizing them, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymised user profiles are created and cookies (see section 5) are used. The information generated by the cookie about your use of this website such as

- browser type/version,
- operating system used,
- referrer URL (the previously visited page),
- host name of the accessing computer (IP address),
- time of server request,

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services connected with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are made anonymous, so that an assignment is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially in the case of browsers on mobile devices, you can also prevent Google Analytics from recording the data by clicking on the aforementioned link. An opt-out cookie is set to prevent the future collection of your data when you visit our website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found under the following link in the Google Analytics help: https://support.google.com/analytics/answer/6004245?hl=de

b) Google Adwords Conversion Tracking

In order to record the use of our website statistically and to evaluate it for the purpose of optimizing our website for you, we also use Google Conversion Tracking. Google Adwords sets a cookie (see point 5) on your computer if you have reached our website via a Google ad.

These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the AdWords client's website and the cookie hasn't expired, Google and the client will be able to tell that the user clicked on the ad and was redirected to that page.

Each Adwords client receives a different cookie. As a result, cookies cannot be tracked through the websites of Adwords clients. The information collected through the conversion cookie is used to compile conversion statistics for Adwords clients who have opted for conversion tracking. Adwords advertisers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in the tracking procedure, you can also refuse the necessary setting of a cookie - for example, via browser settings that generally deactivate the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com". Google's privacy policy for conversion tracking can be found under the following link: https://services.google.com/sitestats/de.html

8. rights of data subjects

You have the right:

- to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, and the existence of automated decision making including profiling and, if applicable, meaningful information on the details of the data;

- in accordance with Art. 16 DSGVO, to demand the correction of incorrect or incomplete personal data stored by us without delay;

- pursuant to Art. 17 DSGVO to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

- pursuant to Art. 18 DSGVO, to demand the restriction of the processing of your personal data, if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing pursuant to Art. 21 DSGVO;

- in accordance with Art. 20 DSGVO, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request its transfer to another responsible party;

- We reserve the right to revoke your consent to us at any time in accordance with Art. 7 Para. 3 DSGVO. As a result, we are not allowed to continue the data processing, which was based on this consent, for the future and

- to complain to a supervisory authority (State Commissioner for Data Protection) in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority (State Commissioner for Data Protection) of your usual place of residence or workplace or our company headquarters.

9. right of objection

If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 letter f DSGVO, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO if there are reasons for doing so arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without indicating any special situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to: info@kokovonknebel.com

10. data security

We use the common SSL (Secure Socket Layer) procedure within the website visit in connection with the highest encryption level supported by your browser. As a rule, this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

11th topicality and amendment of this data protection declaration

This privacy policy is currently valid and has the status of May 2018.

It may become necessary to amend this data protection declaration as a result of the further development of our website and offers above or due to changes in legal or official requirements. The current data protection declaration can be called up and printed out at any time on our website under the following link:
https://www.kokovonknebel.com/datenschutz/

*Data protection authorities require the conclusion of a commissioned data processing agreement for the permissible use of Google Analytics. A corresponding template is offered by Google at http://www.google.com/analytics/terms/de.pdf.

Source: Sample data protection declaration prepared by attorney Andreas Gerstel (http://www.anwaltblog24.de/)