1) Introduction and Contact Information of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we will inform you about how we handle your personal data when using our website. Personal data refers to any data that can personally identify you.
1.2 The controller for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is Mohammad Abboud, DASSiGNAL, Moritzstr 7, 65185 Wiesbaden, Germany, Tel.: 01634855555, Email: m.abboud@dassignal.de. The controller for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
2) Data Collection when Visiting Our Website
2.1 When using our website for informational purposes only, meaning you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. Data will not be transferred or otherwise used. However, we reserve the right to check server log files retrospectively if there are specific indications of illegal use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.
3) Cookies
In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your end device. Some of the cookies we use are automatically deleted after you close your browser (so-called session cookies), while others remain on your end device and allow us to save your settings for future visits (so-called persistent cookies). In the latter case, you can find the duration of storage in the overview in your web browser’s cookie settings.
If personal data is also processed by individual cookies set by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either to execute the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in case of consent granted, or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can configure your browser to inform you about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contact
In the context of contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.
5) Data Processing when Opening a Customer Account
In accordance with Art. 6 Para. 1 lit. b GDPR, personal data is collected and processed to the extent necessary when you open a customer account. You can find out which data is required for opening an account by referring to the input mask of the respective form on our website.
You can delete your customer account at any time, and this can be done by sending a message to the address of the controller mentioned above. After deletion of your customer account, your data will be deleted, provided that all contracts concluded with you have been completely processed, there are no legal retention obligations to the contrary, and there is no legitimate interest on our part in continuing to store the data.
6) Use of Customer Data for Direct Advertising
Cart Reminder via Email
In case you abandon your purchase with us before completing the order, you have the option to be reminded of the contents of your virtual shopping cart via email.
The mandatory information for sending this reminder is solely your email address. Providing additional data is voluntary and may be used to address you personally. For sending emails, we use the double opt-in procedure, ensuring that you will only receive a notification if you have expressly confirmed your consent by clicking on a verification link sent to the email address you provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR for sending a cart reminder. We store your IP address as well as the date and time of registration by your Internet service provider (ISP) to prevent any potential misuse of your email address at a later time. The data collected during the registration for our email notification service is used exclusively for the purpose stated here.
You can unsubscribe from cart reminders at any time by sending a corresponding message to the controller mentioned above. After unsubscribing, your email address will be promptly deleted from our distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond what is legally permitted, about which we will inform you in this statement.
7) Data Processing for Order Processing
To the extent necessary for the execution of contracts, the personal data collected by us will be passed on to the transport company commissioned with the delivery and, if necessary, to the bank commissioned with the payment.
If we owe you updates for products with digital elements or for digital products based on a corresponding contract, we will process the contact data you provided during the order (name, address, email address) to inform you personally about upcoming updates within the legally specified period by suitable means of communication (e.g., by mail or email). Your contact details will be used strictly for sending updates and will be processed by us only to the extent necessary for this purpose.
We also work with the following service provider(s) to process your order, who assist us in performing contracts that have been concluded, either in whole or in part. Certain personal data will be transmitted to these service providers in accordance with the following information.
8) Online Marketing
YITH Woocommerce
We participate in the affiliate program of the following provider: Your Inspiration Solutions S.L.U., Calle Valentin Sanz 37, 38002, Santa Cruz de Tenerife, Spain.
In this context, we have placed links on our website leading to offers on the provider’s or third-party websites (“partner sites”). To measure the success of an affiliate link, to evaluate orders generated through such a link, and to settle corresponding commission payments, the provider uses cookies and/or similar technologies that are generally set on partner sites, and for which we are not responsible from a data protection perspective. The provider regularly processes the IP address and, if necessary, other device information.
All of the aforementioned processes, especially the reading or storage of information on the end device you use, only take place if you have expressly consented to this in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management options on the partner sites.
9) Web Analysis Services
9.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.
By default, Google (Universal) Analytics sets cookies when you visit the website, which are small text blocks that are stored on your end device and collect certain information. This includes your IP address, which is, however, truncated by Google to exclude direct personal reference.
The information is transmitted to Google’s servers and processed there. Transmissions to Google LLC in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services related to website use and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Data collected in the context of using Google (Universal) Analytics is stored for a period of two months and then deleted.
All of the aforementioned processes, especially the setting of cookies on the end device used, only occur if you have given your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without your consent, the use of Google (Universal) Analytics will be suspended during your visit to the site. You can revoke your consent at any time in the future. To exercise your right of revocation, please deactivate this service via the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of data of our website visitors and prohibits unauthorized disclosure to third parties.
Further legal notices regarding Google (Universal) Analytics can be found at https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites.
Demographic Features Google (Universal) Analytics uses the special feature “demographic features” and can create statistics about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. However, the collected data cannot be attributed to any specific individual and is deleted after a storage period of two months.
Google Signals As an extension to Google (Universal) Analytics, Google Signals may be used on this website to create cross-device reports. If you have enabled personalized advertising and linked your devices to your Google account, Google may, subject to your consent to use Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, analyze your cross-device usage behavior and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the “Personalized Advertising” function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en For more information about Google Signals, please visit the following link: https://support.google.com/analytics/answer/7532985?hl=en.
User IDs As an extension to Google (Universal) Analytics, the “User IDs” function may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, have set up an account on this website, and have logged into this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield, which ensures compliance with European data protection standards.
9.2 Google Optimize
This website uses “Google Optimize,” a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Based on “Google Analytics,” the service enables a statistical evaluation of the use of new features and content on the website by playing test variants to specific user groups. This allows us to track which variants are preferred by users in the interest of improving the attractiveness of our presence.
Google Optimize uses cookies for this purpose, which are small text files that are stored on your end device and allow an analysis of your use of a website. The information collected by cookies about your use of the website is generally transmitted to and stored on a Google server and processed there. This may also involve the transmission of information to the servers of Google LLC in the USA, where further processing of the information may occur.
All of the aforementioned processes, especially the setting and reading of information on the end device you use for website access, only occur if you have given your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without your consent, Google Optimize will not be used during your use of the website. You can revoke your consent at any time in the future. To exercise your right of revocation, please deactivate this service via the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of data of our website visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield, which ensures compliance with European data protection standards.
10) Site Functionality
10.1 Google Maps
This website utilizes an online mapping service provided by the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is a web service for displaying interactive (land) maps to visually represent geographical information. Using this service, our location is displayed to you, making it easier for you to find directions.
When you access the subpages that contain Google Maps, information about your use of our website (such as your IP address) is transmitted to Google’s servers and stored there. This may also result in data being transferred to Google LLC’s servers in the United States. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not wish for this association with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.
The collection, storage, and evaluation are carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on Google’s legitimate interest in displaying personalized advertisements, conducting market research, and/or customizing Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree with the future transmission of your data to Google while using Google Maps, you also have the option to completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps, and thus the map display on this website, cannot be used in this case.
If legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with future effect. To exercise your revocation, please follow the above-mentioned option to object.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection levels based on an adequacy decision by the European Commission.
10.2 Google Maps API
To enable real-time verification of certain entries in the address form of our webshop’s ordering process for input errors, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data can also be transmitted to: Google LLC., USA.
The provider validates the entered address, verifies the spelling, and adds missing data if necessary. In the case of non-unique addresses, correct alternative suggestions are displayed. For this purpose, the address data entered by you is transmitted to the provider, stored there, and evaluated.
This processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in correctly capturing the customer’s address data for the diligent fulfillment of our contractual delivery obligations and to prevent contract execution problems.
The provider processes the data in question separately and does not combine it with other data sets and deletes it as soon as its status or correctness has been confirmed, but no later than after 30 days.
For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection levels.
10.3 FontAwesome
This page uses web fonts from the following provider for the consistent display of fonts: Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA.
When you access a page, your browser loads the required web fonts into its browser cache to display text and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider.
Processing of personal data in connection with establishing a connection to the font provider is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service using the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a default font from your computer will be used.
For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection levels.
10.4 Google Web Fonts
This page uses web fonts from the following provider for the consistent display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
When you access a page, your browser loads the required web fonts into its browser cache to display text and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider.
Data can also be transmitted to: Google LLC, USA.
Processing of personal data in connection with establishing a connection to the font provider is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service using the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a default font from your computer will be used.
For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection levels.
10.5 Google reCAPTCHA
This website uses the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data can also be transmitted to: Google LLC, USA. For the visual design of the Captcha window, the provider uses “Google Fonts,” which are fonts loaded from the internet by Google. There is no processing of additional information beyond what is already transferred to Google through the functionality of reCaptcha.
The service checks whether an entry is made by a natural person or is carried out abusively by automated and automated processing, and it blocks spam, DDoS attacks, and similar automated malicious access attempts. To ensure that an action is taken by a human and not an automated bot, Cloudflare Turnstile collects the IP address of the device used, detection data of the browser and operating system type used, as well as the date and duration of the visit and transmits this data to the provider for evaluation.
The legal basis is our legitimate interest in determining individual responsibility on the internet and preventing misuse and spam in accordance with Art. 6 Para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection levels.
11) Rights of the Data Subject
11.1 The applicable data protection law grants you, as the data subject, the following rights with respect to the processing of your personal data by the controller, with reference to the specified legal basis for exercising each right:
- Right to information pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent granted pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
11.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST PURSUANT TO A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING AT ANY TIME. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.
12) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, additionally by the respective statutory retention period (e.g., commercial and tax retention periods).
When processing personal data based on explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR, the data in question is stored until you revoke your consent.
If there are legal retention periods for data that is processed in the context of legal transactions or similar obligations based on Art. 6 Para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer necessary for contract fulfillment or contract initiation, and if there is no longer a legitimate interest in its continued storage on our part.
When processing personal data based on Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 Para. 2 GDPR.
Unless otherwise indicated in the specific processing situations in this declaration, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
