Privacy

Privacy

1. information on the collection of personal data and contact details of the person responsible

 2. data collection when visiting our website

 3. cookies

 4. data processing for order processing

 5. data processing when opening a customer account and for contract processing

 6. contacting

 7. use of your data for direct advertising

 8. use of social media: social plugins

9. web analysis services

 10. rights of the data subject

 11. duration of the storage of personal data

1. information on the collection of personal data and contact details of the person responsible

1.1 Thank you for visiting our website. In the following, we would like to inform you about how we handle your personal data when you use our website. Personal data are basically all data with which you can be personally identified.

1.2 The person responsible for the processing of data on our website within the meaning of the Basic Data Protection Regulation (DSGVO):

Luxonum GmbH

In the Buchwald 65

70186 Stuttgart

Germany

Phone: +49 (0)711 912 714 20

e-mail: shop”at”luxonum.com

1.3 To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL or TSL) via HTTPS.

2. data acquisition when visiting our website

Whenever you visit our website, our system automatically records data and information that your browser sends to our server (so-called “server log files”). The following data, which is technically necessary for us, is collected:

Our visited website

Date and time of access

Quantity of data sent in bytes

Source/reference from which you accessed the site

Operating system used

Used Browser

IP address used (possibly: in anonymised form

The legal basis for the processing is Art. 6 para. 1 lit. f DSGVO due to our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be passed on or used in any other way. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

We reserve the right to subsequently check the server log files if there are concrete indications of illegal use. The data will be deleted as soon as they are no longer required for the purpose of their collection. In the case of the collection of data for the purpose of providing the website, this is the case when the respective session has ended. 

In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on the part of the user. 

3. cookies

Our website uses cookies. 

Cookies are text files that are stored on the user’s end device. If a user calls up a website, a cookie can be stored on the user’s operating system. Some functions of our website cannot be offered without the use of cookies. This requires the browser to be recognised even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. In the above-mentioned purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 Para. 1 lit. f) DSGVO.

In addition, our website uses cookies which enable an analysis of the surfing behaviour of the users (so-called third party cookies). More detailed information on the scope, purpose, legal basis and objection possibilities can be found in the respective sections of the relevant chapter of this data protection declaration.

You as a user have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate, restrict or delete the transmission of cookies. If you deactivate cookies for our website, it may no longer be possible to use all the functions of the website to their full extent. You can prevent the transmission of flash cookies by changing the settings of the flash player.

Help on the settings can be found in the respective help menu of your browser under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Some of the cookies used here are deleted again after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.

4. data processing for order processing

4.1 If you wish to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. We process the data you provide to process your order. 

In some cases we work together with external service providers to process your order. For this purpose we have to pass on the personal data required for this purpose.

If we commission transport companies with the delivery of your goods, we pass on the data required for the delivery of the goods to the respective transport company. For the processing of payments, we will pass on your data to the commissioned credit institute as necessary. If we use payment service providers, you will also be informed about this in the following. 

The legal basis for the passing on of your data is Art. 6 para. 1 lit. b DSGVO.

4.2 Transfer of your personal data to shipping service providers

– DHL

If the goods are delivered to you by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery and within the scope of what is required under Art. 6 Para. 1 letter b DSGVO. Only if you have given your express consent during the ordering process do we pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 letter a DSGVO before the goods are delivered for the purpose of coordinating a delivery date or for the purpose of announcing delivery. Your consent can be revoked at any time with future effect vis-à-vis the above-mentioned responsible party or the transport service provider DHL.

– UPS

If the goods are delivered to you by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany), we will only pass on the name of the recipient and the delivery address to UPS for the purpose of delivery and within the scope of what is necessary in accordance with Art. 6 Para. 1 letter b DSGVO. Only if you have given your express consent during the ordering process do we pass on your e-mail address to UPS in accordance with Art. 6 Para. 1 letter a DSGVO before delivery of the goods for the purpose of coordinating a delivery date or for the purpose of announcing delivery. Your consent can be revoked at any time with future effect vis-à-vis the person responsible as described above or vis-à-vis the transport service provider UPS.

4.3 Use of payment service providers

– Paypal

If you choose the payment method PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal, payment will be processed by PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).

In accordance with Art. 6 para. 1 lit. b DSGVO, we will pass on your personal data to PayPal as necessary. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal. 

For this purpose, your payment data may be passed on to credit agencies pursuant to Art. 6 para. 1 lit. f DSGVO due to PayPal’s justified interest in determining your solvency. PayPal uses the result of the credit assessment with regard to the statistical probability of non-payment to decide on the provision of the respective payment method. 

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the creditworthiness information, these are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data are included in the calculation of the score values. 

Which further data is collected by PayPal can be found in the respective PayPal privacy policy. This can be found under: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary to process payments in accordance with the contract.

– Stripe

If a payment method of the payment service provider Stripe is selected, the payment transaction will be processed by Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland (hereinafter referred to as “stripe”).

In accordance with Art. 6 para. 1 lit. b DSGVO we will pass on your personal data together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) to stripe in accordance with Art. 6 para. 1 lit. b DSGVO exclusively for the purpose of payment processing and only to the extent necessary.

5. data processing when opening a customer account and for contract processing

If you open a customer account with us, personal data will be collected and processed in accordance with Art. 6 para. 1 lit. b DGSVO. The scope of the data can be seen from the input form. The data entered by you will be stored and used by us for the purpose of contract processing. 

You can delete your customer account at any time. This can be done by sending a message to the address of the person responsible or, if offered, directly in the customer account. In this case, we will also block your data with regard to tax and commercial law retention periods and delete it after these periods have expired. This can only be opposed by your consent to permanent storage or legally permitted further use of your data on our part.

6. contacting us

If you contact us via contact form, the data entered in the input mask will be transmitted to us and stored. The collected data can be taken from the respective input mask. If you contact us by e-mail, only the data you enter there will be transmitted to us.

The data will be used exclusively for processing the conversation and your request. The legal basis for the processing of the data is Art. 6 Para. 1 lit. a) DSGVO if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) DSGVO. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b) DSGVO. The data will be deleted as soon as they are no longer required for the purpose for which they were collected and provided that there are no statutory retention obligations to the contrary. For personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be concluded from the circumstances that the matter in question has been conclusively clarified. The user has the possibility at any time to withdraw his consent to the processing of the data.In such a case the conversation cannot continue.

7. use of your data for direct advertising

Newsletter

On our website you can subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. Only your email address is mandatory. If you make further voluntary entries, these will only be used for personal contact.

The legal basis for the processing of your data after registration for the newsletter is Art. 6 Para. 1 lit. a DSGVO if the user has given his consent. We obtain this by sending you a confirmation e-mail after registering for the newsletter, which contains a confirmation link. When you click on this link, you also give your consent to receive the newsletter.

When you send your registration for the newsletter, we save your IP address as well as the date and time of your registration. This storage serves the purpose of tracing a possible misuse of your e-mail address. 

We use the data we collect when you register for the newsletter exclusively for the purpose of sending the newsletter. 

You can cancel your subscription to the newsletter at any time. For this purpose there is a corresponding link in every newsletter. This also enables you to revoke your consent to the storage of personal data collected during the registration process. 

8. use of social media: social plugins

8.1 Facebook as default plugin

We use our website social plugins (“Plugins”) used by the social network Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA) (hereinafter referred to as “Facebook”).

You can usually recognise the plugins by the Facebook logo, usually a white “f” on a blue background. You can view other versions of the Facebook plugin here:

https://developers.facebook.com/docs/plugins

When you call up one of our websites in which such a plugin is integrated, your browser establishes a direct connection to the Facebook servers and transmits the content of the plugin directly to your browser, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.

If you are logged in to Facebook at the relevant time, Facebook can immediately assign your visit to our website to your Facebook profile. If you interact with a plugin (e.g. click on the “Like” button or comment on something), this information is also transmitted directly to a Facebook server and stored there. The actions can be published on your Facebook profile and displayed to your Facebook friends.

Our legitimate interest lies in the display of personalised advertising and the utilisation of the full financial potential of our website. The legal basis is Art. 6 para. 1 lit. f DSGVO.

The legitimate interest of Facebook lies in the insertion of personalised advertising and in the design of the service in line with requirements. The legal basis is Art. 6 para. 1 lit. f DSGVO.

If you do not wish the data collected via our website to be assigned to your Facebook profile, you must log out of Facebook before visiting our website. You can also prevent the loading of the Facebook plugins with add-ons for your browser, e.g. with the script blocker “NoScript” (http://noscript.net/).

You can find further information in the Facebook data protection information:

http://www.facebook.com/policy.php

8.2 Instagram as default plugin

We use our website social plugins (“Plugins”) used by the social network Instagram (Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA) (hereinafter “Instagram”).

You can usually recognise the plugins by the “Instagram camera” . Other versions of the Instagram plugin can be viewed here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.

When you call up one of our web pages in which such a plugin is integrated, your browser establishes a direct connection to the Instagram servers and transmits the content of the plugin directly to your browser, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the United States and stored there.

If you are logged in to Instagram at the relevant time, Instagram can immediately associate your visit to our website with your Instagram profile. When you interact with a plug-in (e.g., click the “Instagram” button or comment on something), this information is also transmitted directly to an Instagram server and stored there. The actions can be published on your Instagram profile and displayed to your Instagram friends.

Our legitimate interest is to display personalized advertising and to help you realize the full financial potential of our website. The legal basis is Art. 6 para. 1 lit. f DSGVO.

Instagram’s legitimate interest lies in the insertion of personalised advertising to meet the requirements of the service. The legal basis is Art. 6 para. 1 lit. f DSGVO.

If you do not wish the data collected via our website to be assigned to your Instagram profile, you must log out of Instagram before visiting our website. You can also prevent the Instagram plugins from loading by using add-ons for your browser, e.g. the script blocker “NoScript” (http://noscript.net/).

Instagram’s privacy policy: https://help.instagram.com/155833707900388/

9. web analysis services

Google Analytics

We use the web analytics service Google Analytics ( Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) for this website.

Google Analytics uses “cookies”. These are text files which are stored on your computer and which enable an analysis of your use of the website.

The information thus generated about your use of this website (including the abbreviated IP address) is transferred to a Google server and stored there, whereby a transfer to the USA is possible.

We use Google Analytics with the extension “_anonymizeIp()”, which ensures anonymisation of the IP address by shortening it and excludes a direct personal reference. Your IP address is therefore shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. In exceptional cases, the full IP address is transferred to a Google server, including in the USA, and only shortened there. 

In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 letter a DSGVO, namely with your express consent.

Google uses this information on our behalf to evaluate your use of the website, to create reports on website activities and to provide us with further services associated with the use of the website and the Internet. There is no consolidation of your IP address collected in this context with other Google data.

You can prevent the storage of cookies by changing the settings of your browser accordingly. 

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the following browser plug-in:

http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can set an out-out cookie:

Disable Google Analytics

This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will have to click on this link again.

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “personal data”.

Privacy policy of Google:

https://support.google.com/analytics/answer/6004245?hl=de

10. rights of the data subject

10.1 The applicable data protection law grants you comprehensive data protection rights (rights of access and intervention) vis-à-vis the person responsible for processing your personal data, about which we inform you below:

– Right of information in accordance with Art. 15 DSGVO:

You may request confirmation from the data controller as to whether personal data concerning you are being processed by the data controller. In addition, you have the right to be informed about the purpose, the categories of personal data, the recipients, the planned duration of the storage and about the existence of other rights such as correction of the data or the existence of a right of appeal to a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed about the guarantees that apply pursuant to Art. 46 DSGVO when your data is transferred to third countries;

– the right of rectification under Art. 16 DSGVO:

You have the right to rectify without delay any inaccurate data relating to you and/or to complete any incomplete data held by us; the rectification or completion must be carried out without delay.

– Right to limit processing in accordance with Art. 18 DSGVO:

You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data which you dispute is verified, if you refuse to have your data deleted due to unlawful data processing and demand instead the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims, after we no longer require these data after the purpose has been achieved, or if you have lodged an objection for reasons relating to your particular situation, as long as it has not yet been established whether our justified reasons outweigh the objection;

if the processing of personal data relating to you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the purpose of pursuing, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or of a Member State If the restriction on processing is restricted, you will be informed by the controller before the restriction is lifted.

– Right of erasure under Article 17 of the DPA:

You have the right to obtain the immediate deletion of your personal data if the conditions of Art. 17, para. 1 DSGVO are fulfilled. However, this right of erasure does not apply in particular – not conclusively – if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims

– Right to information in accordance with Art. 19 DSGVO:

If you have exercised your right to rectification, erasure or limitation of processing, the controller is obliged to notify all recipients to whom your personal data have been disclosed of this rectification, erasure or limitation of processing, unless this is impossible or involves a disproportionate effort. You also have the right to be informed of these recipients.

– Right to data transferability in accordance with Art. 20 DSGVO:

You have the right to receive your personal data communicated to us in a structured, common and machine-readable format or to request that it be transferred to another person responsible, insofar as this is technically possible;

– the right of revocation in accordance with Art. 7, para. 3 DSGVO:

You have the right to object at any time to the processing of personal data concerning you which is carried out pursuant to Art. 6, paragraph 1, letter e) or f) of the DPA; this also applies to profiling based on these provisions.

You also have the right to revoke your declaration of consent under data protection law at any time with effect for the future. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

– Right of appeal in accordance with Art. 77 DSGVO:

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, in which you work or in which the suspected infringement occurs, if you consider that the processing of personal data concerning you is in breach of the DPA.

10.2 Right of objection

You have the right to object to the processing of your data at any time with effect for the future, if we process your data on the basis of our predominant legitimate interest after weighing up the interests.

If you exercise this right of objection, we will stop processing your data unless there are demonstrably compelling reasons for termination worthy of protection or if further processing serves the exercise or defence of legal claims.

11. duration of the storage of personal data

The duration of the storage of personal data depends in each case on statutory retention periods. After these periods have expired, we routinely delete the data if they are no longer required for the fulfilment or initiation of the contract and/or if we have no legitimate interest in the continued storage.