Privacy and Data Protection
| Privacy Policy Thank you for visiting our hubauer-shop.de webpage and your interest in our company. The protection of your personal data, e.g. date of birth, name, telephone number, address etc., is important to us. The purpose of this Privacy Policy is to inform you about the processing of your personal data we collect from you when you visit the site. Our data protection practices are in line with the legal regulations of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The Privacy Policy below serves to meet the information duties resulting from the GDPR. These are set forth, for example, in Art. 13 and Art. 14 et seqq. of the GDPR. 01. Controller Controller in terms of Art. 4(7) of the GDPR is the one who, alone or jointly with others, determines the purposes and means of the processing of personal data. The controller with regard to our webpage is: Hubauer GmbH Ingolstädter Str. 19 84030 Landshut Germany E-mail: mail@hubauer-shop.de Tel.: +49 871 20667331 We have appointed a data protection officer under Art. 37 of the GDPR. You can reach our data protection officer using the following contact data: Mr Jürgen Riederer Bergiusstraße 26 Concept-BR e.K. 84130 Dingolfing Germany E-mail: datenschutz@hubauer-shop.de Each time you visit our webpage, our system automatically captures data and information from the respective accessing device (e.g. computer, mobile phone, tablet, etc.). What personal data is collected and to what extent is it processed? (1) information about the browser type and the version used; (2) operating system of the accessing device; (3) host name of the accessing computer; (4) IP address of the accessing device; (5) date and time of access; (6) websites and resources (images, files, other page contents) accessed on our webpage; (7) websites from which the user’s system accessed our webpage (referrer tracking); (8) message as to whether the access was successful; (9) volume of data transferred This data is retained in the logfiles of our system. It is not stored together with personal data of a specific user, so that individual site visitors are not identified. Legal basis for personal data processing Point (f) of Art. 6(1) of the GDPR (legitimate interest). Our legitimate interest is to ensure the achievement of the purpose set out below. Purpose of data processing The temporary (automated) saving and retention of the data is necessary for the proper operation of a website visit to enable delivery of the website. Moreover, the personal data is also saved, retained and processed to maintain the compatibility of our webpage for as many visitors as possible as well as to combat misuse and remedy malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer in order to respond to display errors, attacks on our IT systems and/or errors in the functionality of our webpage as early as possible. In addition, we use the data to optimise the website and to generally ensure the security of our information technology systems. Duration of retention The technical data set out above is erased once it is no longer required to ensure the compatibility of the webpage for all visitors, but no later than 3 months after our webpage was accessed. Objection and erasure option You may object to the processing at any time under Art. 21 of the GDPR and request an erasure of data under Art. 17 of the GDPR. To find out what rights you have and how to exercise them, please refer to the bottom part of this Privacy Policy. Our site offers you various functions, the use of which involves the collection, processing and storage of personal data by us. Below, we explain what happens with this data: Purchase order form
Rating function
Call-back service
Comment function
Contact form(s)
Live chat function
Login area/registration
If you want to enter into a contract with us, we reserve the right to subject your personal data to exclusively automated processing to check your creditworthiness. We are also entitled to such automated decision-making under point (a) of Art. 22(2) of the GDPR. Whether the contract can be concluded or not depends on the result of the automated credit check. A credit check serves to calculate statistical probabilities of a payment default. The credit report may contain probability values (‘score values’) calculated on the basis of scientifically recognised mathematical-statistical methods. In this process, a variety of characteristics, such as income, address data, occupation, marital status and previous payment behaviour, is used to infer the customer's future risk of non-payment. The result is expressed in the form of a payment value (‘score’). The information obtained in this way forms the basis of our decision on the establishment, implementation or termination of a contractual relationship. If you believe that you have been unjustly excluded from entering into a contract based on the credit check, you are welcome to explain your point of view to us by e-mail. We will then review the automated decision under Art. 22(3) of the GDPR in the specific individual case. In order to perform the credit check, we may save, store and process your personal data under point (b) of Art. 6(1) of the GDPR. We transfer your data to the following provider(s) on the basis of the initiating contract in the cases listed below:
The credit agencies are the following companies:
We collect, process and retain the following data when you access this webpage or individual files on the webpage: IP address, webpage from which the file was retrieved, name of the file, date and time of the retrieval, amount of data transferred and report on the successful retrieval (‘web log’). We use this access data exclusively in a non-personalised form to continuously improve our web offering and for statistical purposes. We also use the following web trackers to evaluate visits to this webpage:
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The Microsoft Advertising service, as part of Microsoft Advertising, is a service that allows for pay-per-click advertising on both Bing and Yahoo! search engines and collects data on our site. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Statement at https://privacy.microsoft.com/en-us/privacystatement.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is used to control an advertising network. It thus serves us to display advertising of any kind. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://pubmatic.com/legal/privacy-policy/. In addition, the provider offers an opt-out option at https://pubmatic.com/legal/opt-out/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. This service is an analysis tool that allows us to monitor the surfing behaviour on our site. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://twitter.com/en/privacy. In addition, the provider offers an opt-out option at https://twitter.com/en/privacy.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. This service is an analysis tool that allows us to monitor the surfing behaviour on our site. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://site.adform.com/privacy-center/overview/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is used to control an advertising network. It thus serves us to display advertising of any kind. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://www.stroeer.de/en/data-protection/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is used to control an advertising network. It thus serves us to display advertising of any kind. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at http://privacy.aol.com.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. Google Ads is an advertising system we use to place ads primarily guided by search results obtained when using the company’s own services. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://policies.google.com/privacy?hl=en-GB. In addition, the provider offers an opt-out option at https://policies.google.com/privacy?hl=en-GB.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is used to control an advertising network. It thus serves us to display advertising of any kind. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://www.improvedigital.com/privacy-policy/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. OpenX is used to display advertising from the OpenX advertising network on our website. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://www.openx.com/legal/privacy-policy/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service allows us to collect and evaluate data from you on the site in order to show you personalised advertising. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://smartadserver.com/en/corporate-privacy-policy/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service collects information about your user behaviour on our site and processes it for us as part of a technical analysis of user behaviour. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at http://privacy.aol.com.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service collects information about your user behaviour on our site and processes it for us as part of a technical analysis of user behaviour. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at http://www.yieldlab.de/meta-navigation/datenschutz/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is a plugin we need in order to show you all contents of our website. The service may also be used for tracking and/or advertising integration. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://www.rhythmone.com/privacy-policy. In addition, the provider offers an opt-out option at https://www.rhythmone.com/opt-out.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. Facebook Connect allows users to use their Facebook profile to simplify logging into other web services. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://www.facebook.com/about/privacy. In addition, the provider offers an opt-out option at https://www.facebook.com/about/privacy.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. Facebook Custom Audience is an advertising tool of Facebook that can be used to target advertising campaigns to page visitors. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://www.facebook.com/about/privacy. In addition, the provider offers an opt-out option at https://www.facebook.com/about/privacy.
The data collected is anonymous to us as the owners of this website; we cannot draw any conclusions as to the identity of the users. However, the data is saved and processed by Facebook, so that a connection can be established to the respective user profile and Facebook can use the data for its own advertising purposes in line with the Facebook Data Policy. This allows Facebook to place ads on Facebook pages and outside Facebook. Such use of this data cannot be influenced by us as site operators. The use of the Facebook Pixel is based on point (f) of Art. 6(1) of the GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a relevant consent has been requested (e.g. consent to the placement of cookies), data is processed exclusively on the basis of point (a) of Art. 6(1) of the GDPR; the consent can be withdrawn at any time. The data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://facebook.com/help/566994660333381. Insofar as personal data is captured on our website using the tool described here and forwarded to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers of such data processing (Art. 26 of the GDPR). The joint controllership is limited exclusively to the capture of the data and its forwarding to Facebook. Any processing by Facebook after such forwarding is not part of the joint controllership. The obligations incumbent on us jointly have been set out in a joint processing agreement. You can find the text of the agreement at https://www.facebook.com/legal/controller_addendum. According to this agreement, we have the obligation to provide the privacy information when the Facebook tool is used and are responsible for the implementation of the tool on our website in a manner that is secure in terms of data protection law. Facebook bears the responsibility for data security of the Facebook products. You can assert data subject rights (e.g. requests for access to information) regarding the data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook. You can find more information on the protection of your privacy in the Facebook Data Policy: https://facebook.com/about/privacy/. You can also disable the ‘Custom Audiences’ remarketing function in the ad settings screen at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you need to be logged into Facebook. If you do not have a Facebook account, you can disable use-based Facebook advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is a plugin that allows us to display personalised advertisement on our WordPress site. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://automattic.com/privacy/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is used to control an advertising network. It thus serves us to display advertising of any kind. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://admixer.net/privacy_site. In addition, the provider offers an opt-out option at https://admixer.net/cookies.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is a plugin we need in order to show you all contents of our website. The service may also be used for tracking and/or advertising integration. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at http://no.information/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service helps us and our partners display advertising campaigns on our site and analyse how users engage with our advertising and our site. This allows us to individualise and optimise offers. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://www.connectadrealtime.com/privacy. In addition, the provider offers an opt-out option at https://www.connectadrealtime.com/privacy. We use active contents from external providers on our webpage, called ‘web services’. When you access our webpage, these external providers may receive personal information about your visit to our webpage. This may involve data processing outside the EU. You can prevent this by installing an appropriate browser plugin or by disabling the execution of scripts in your browser. This may result in functional restrictions on webpages you visit. We use the following external web services:
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. Data from our Amazon account is reloaded on our website via the Amazon REST API. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Notice at https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&language=en_GB&nodeId=201909010.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service allows us to collect and evaluate data from you on the site in order to show you personalised advertising. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at http://www.bidswitch.com/privacy-policy/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is used to control an advertising network. It thus serves us to display advertising of any kind. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at http://casalemedia.com/. In addition, the provider offers an opt-out option at http://casalemedia.com/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. DoubleClick is a service from Google which serves to offer and send digital advertising on the Internet. It can be used to display individual advertising to the site users. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://policies.google.com/privacy?hl=en-GB. Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. We use Google in order to reload further services from Google on the webpage. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://policies.google.com/privacy?hl=en-GB.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The Google Fonts service is used to reload fonts on our site in order to show you the site in a visually improved version. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://policies.google.com/privacy?hl=en-GB.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. We use Google APIs in order to reload further services from Google on the webpage. Google APIs is a collection of interfaces for communication between the various Google services used on our website. The following data is collected by the service or us for the processing itself: IP address You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://policies.google.com/privacy?hl=en-GB.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. Gstatic is a service used by Google to retrieve static contents to reduce bandwidth usage and to already preload required catalogue files in advance. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://policies.google.com/privacy?hl=en-GB.
Legal basis for the transmission of the personal data is the contract already concluded or still to be concluded between you and us under point (b) of Art. 6(1) of the GDPR. The service is integrated by us in order to display the PayPal button on every subpage in our online shop so that you know what payment method you can use to shop with us. To find out what rights you have with regard to the processing, please see the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Statement at https://www.paypal.com/uk/webapps/mpp/ua/privacy-full?locale.x=en_GB.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. Rubicon is an advertising network we use in order to show you personalised advertising. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://rubiconproject.com/privacy/. In addition, the provider offers an opt-out option at https://rubiconproject.com/privacy/consumer-online-profile-and-opt-out.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is a plugin we need in order to show you all contents of our website. The plugin improves the attractiveness of and user experience on our website. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://www.smaato.com/privacy/. In addition, the provider offers an opt-out option at https://www.smaato.com/privacy/.
Legal basis for the transmission of the personal data is our legitimate interest in the processing under point (f) of Art. 6(1) of the GDPR. Our legitimate interest is to achieve the purpose set out hereinafter. When using Trusted-Shops, reviews or ratings from other buyers or the Trusted-Shop seal is displayed on our site. You have the right to object to such processing as set out in Art. 21 of the GDPR. More detailed information can be found at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://www.trustedshops.co.uk/imprint/. In addition, the provider offers an opt-out option at https://www.trustedshops.co.uk/imprint/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is a plugin we need in order to show you all contents of our website. The service may also be used for tracking and/or advertising integration. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://unruly.co/privacy/. In addition, the provider offers an opt-out option at https://unruly.co/privacy/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. Videos from the YouTube platform are integrated on our website via the YouTube service. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://policies.google.com/privacy?hl=en-GB.
Legal basis for the transmission of the personal data is our legitimate interest in the processing under point (f) of Art. 6(1) of the GDPR. Our legitimate interest is to achieve the purpose set out hereinafter. The script of Website-Check GmbH is the technical integration of the Website-Check seal. This seal serves to show that we take the issue of data protection very seriously. As a result of the integration of the Website-Check test seal, non-personal data is transferred to Website-Check GmbH as the publisher of the test seal so that they can ensure its technical provision. You have the right to object to such processing as set out in Art. 21 of the GDPR. More detailed information can be found at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://www.website-check.de/datenschutzerklaerung/.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. By using specific characteristics and analysing the page behaviour, the service recognises whether the inputs made are automated inputs by a programme (‘bot’) or a human being. The service has three different levels. Either the service automatically recognises that the input is not automated by a bot or it has the user select a captcha checkbox. A third possibility is to show small picture or spoken language tasks/text tasks to be solved by the page visitor. Google reCAPTCHA is a captcha service that is used on our website for security reasons to prevent bots (robot programmes) from being able to interact on our website. Google reCAPTCHA verifies on our behalf that only human beings and not bots can use our webpage. This allows us to protect, in particular, the special functions of our website (e.g. contact forms or other input options, such as the login area) from access for malicious purposes. The following data is collected by the service or us for the processing itself: user behaviour (e.g. mouse movements or input behaviour), IP address, browser data, computer information. If you want to use the Google reCAPTCHA-protected input options of our website, you must allow the use of Google reCAPTCHA and, where appropriate, solve the corresponding captchas. You can use the form protected by the captcha only if you fill in the captcha or allow the use of Google reCAPTCHA. Alternatively, you can always use our other contact options (e.g. mail or e-mail). You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://policies.google.com/privacy?hl=en-GB.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service collects information about your user behaviour on our site and processes it for us as part of a technical analysis of user behaviour. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://policies.yahoo.com/us/en/yahoo/privacy/index.htm.
Legal basis for transferring the personal data is your consent given by you on our webpage under point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR. The service is a plugin we need in order to show you all contents of our website. The service may also be used for tracking and/or advertising integration. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy. Further information on how the transferred data is handled is available in the provider’s Privacy Policy at https://www.livezilla.net/disclaimer/de/.
Scope of personal data processing We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. ‘Cookies’ are small text files that your browser can save and store on your access device. These text files contain a characteristic character string to uniquely identify the browser when you return to our website. The process of saving a cookie file is also called ‘setting a cookie’. Cookies can be set both by the website itself and by external web services. Legal basis for personal data processing Point (f) of Art. 6(1) of the GDPR (legitimate interest) or point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR (consent). The relevant legal basis can be seen from the cookie table set out further below in this clause. Where cookies are set on the basis of a legitimate interest, our legitimate interest is, in general, to ensure the functionality of our website and the services integrated on it (technically necessary cookies). In addition, the cookies may increase its user-friendliness and enable a more individualised approach. We have weighed up your interests against ours in this regard. Using the cookie technology, we can only identify, analyse and track individual website visitors if the website visitor has consented to the use of the cookie under point (a) of Art. 6(1) of the GDPR. Purpose of data processing The cookies are set by our website or the external web services to maintain the full functionality of our website, to improve user friendliness or to pursue the purpose stated with your consent. The cookie technology also allows us to recognise individual visitors by pseudonyms, e.g. a unique or random ID, so that we can offer more personalised services. Details are set out in the following table. Duration of retention The cookies are stored in your browser until they are deleted or, in the case of a session cookie, until the session has expired. Details can be found in the cookie settings. Objection option, withdrawal of consent and erasure If you wish to, you can set your browser so that the setting of cookies is generally prevented. You can then decide on a case-by-case basis whether to accept cookies or accept cookies in principle. Cookies can be used for a variety of different purposes, e.g. to recognise that your access device is already connected to our website (permanent cookies) or to store recently viewed offers (session cookies). If you have expressly given your consent to the processing of your personal data, you can withdraw this consent at any time. Please note that the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Your personal data is protected by technical and organisational measures during collection, storage and processing so that it cannot be accessed by third parties. Where e-mail communication is unencrypted, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or mailing via post for information requiring a high level of confidentiality. Right of access You have the right to obtain from us confirmation as to whether personal data concerning you is being processed by us. Where that is the case, you have a right of access to the information set out in Art. 15(1) of the GDPR, unless this affects the rights and freedoms of others (cf. Art. 15(4) of the GDPR). We will also be happy to provide you with a copy of the data. Right to rectification You have the right under Art. 16 of the GDPR to obtain from us the rectification of any inaccurate personal data stored with us (e.g. address, name, etc.) at any time. You also have the right to have incomplete data stored by us completed. Such adaptation is performed without delay. Right to erasure You have the right under Art. 17(1) of the GDPR to obtain from us the erasure of the personal data we collected about you if
In individual cases, you have the right under Art. 18(1) of the GDPR to obtain from us restriction of processing of your personal data. This is the case where
If you have given us an express consent to the processing of your personal data (point (a) of Art. 6(1) of the GDPR or point (a) of Art. 9(2) of the GDPR), you may withdraw such consent at any time. Please note that the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Right to object You have the right under Art. 21 of the GDPR to object at any time to the processing of personal data concerning you and collected based on point (f) of Art. 6(1) of the GDPR (as part of a legitimate interest). You only have this right where special circumstances exists which speak against the retention and processing. How can you exercise your rights? You can exercise your rights at any time by contacting us using the following contact details: Hubauer GmbH Ingolstädter Str. 19 84030 Landshut Germany E-mail: mail@hubauer-shop.de Tel.: +49 871 20667331 You have the right under Art. 20 of the GDPR to have the personal data concerning you transferred. We provide the data in a structured, commonly used and machine-readable format. In this case, the data can be sent either to you or to another controller named by you. We provide you with the following data upon request pursuant to Art. 20(1) of the GDPR:
If you suspect that your data is being processed unlawfully on our site, you may, of course, initiate a judicial clarification of the issue at any time. In addition, every other legal option is open to you. Irrespective of this, you have the option of contacting a supervisory authority under Art. 77(1) of the GDPR. You have the right to lodge a complaint pursuant to Art. 77 of the GDPR in the EU Member State of your place of residence, place of work and/or place of the alleged infringement, i.e. you can choose the supervisory authority you contact from the locations above. The supervisory authority with which the complaint was lodged will then advise you of the status and outcomes of your submission, including the possibility of a judicial remedy pursuant to Art. 78 of the GDPR. Data processing by social networks We have publicly accessible profiles in social networks. You can find details about the social networks used by us below. Social networks such as Facebook, Twitter etc. can usually analyse your user behaviour comprehensively if you visit their website or a website with integrated social media contents (e.g. ‘Like’ buttons or advertising banners). When our social media presences are visited, numerous processing operations are triggered that are relevant to data protection. In detail: If you are logged into your social media account and you visit our social media presence, the operator of the social media portal can allocate this visit to your user account. However, your personal data may also be collected if you are not logged in or if you do not have an account with the respective social media portal. In this case, your data may be collected, for instance, via cookies stored on your terminal device or by capturing your IP address. Using the data captured in this way, the social media portal operators can create user profiles in which your preferences and interests are stored. This enables the display of interest-related advertising to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-related advertising can be shown on all devices where you are or have been logged in. Please also note that we do not know about all processing steps on the social medial portals. Depending on the provider, further processing operations may therefore be carried out by the social media portal operators. You can find more details in the terms of use and privacy statements of the relevant social media portals. Legal basis Our social media presence is intended to guarantee the most extensive web presence possible. This is a legitimate interest in terms of point (f) of Art. 6(1) of the GDPR. The analysis processes initiated by the social networks may be based on deviating legal bases that need to be stated by the social network operators (e.g. consent in terms of point (a) of Art. 6(1) of the GDPR). Controller and assertion of rights If you visit any of our social media channels (e.g. Facebook), we and the social media platform operator are joint controllers for the data processing operations triggered by this visit. You can generally invoke your rights (access, rectification, erasure, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. towards Facebook). Please note that, despite our joint controllership with the social media portal operators, we cannot fully influence the data processing operations performed by the social media portals. Our options significantly depend on the corporate policy of the respective provider. Retention period The data directly collected by us via the social media presence is erased by our systems as soon as you request us to erase it, you revoke your consent to its retention or the purpose for the data retention no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions, in particular mandatory retention periods, remain unaffected. We have no influence on the retention period of your data retained by the social network operators for their own purposes. You can obtain more details directly from the social network operators (e.g. in their privacy statement, see below). Social networks in detail
Created by: © DURY LEGAL Rechtsanwälte – www.dury.de © Website-Check GmbH – www.website-check.de |