DATA PROTECTION DECLARATION
Responsible party for the data processing is:
CEDOUBLÉ
Griesert und Moenkediek GbR
Werner-von-Siemens-Strasse 19
49124 Georgsmarienhütte
Germany
connect@cedouble.com
Thank you for your interest in our online shop. The protection of your privacy is very important to us. Therefore, we inform you in detail about the handling of your personal data below.
1. Access data and hosting
Access data
You can visit our website without providing any personal information. Every time you access a website, the web server only automatically saves a so-called server log file which contains the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data) for example. Also, the access is documented. These access data are evaluated solely for the purpose of ensuring trouble-free operation of the site and improving our services. This serves to protect our legitimate interests in the balancing of interests to ensure a correct presentation of our offer in accordance with sec. 6 para. 1 sentence 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your visit.
Hosting
The services for hosting and displaying the website are partly provided by our service partners who process the data on our behalf. Unless otherwise explained in this Data Protection Declaration, all access data and all data collected in designated forms on this website are processed on their servers. If you have any questions about our service providers and the basis of our collaboration with them, please contact us using any of the contact methods described in this Data Protection Declaration.
Our service providers are located and/or use servers in the following countries for which the European Commission has determined that they provide an adequate level of data protection: Canada.
Our service providers are located and/or use servers in the United States and in other countries outside the EU and the EEA. For these countries, there is no adequacy decision issued by the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.
2. Data processing for contract execution, contacting and opening a customer account
We collect personal data if you provide it voluntarily in the context of your order or when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such. In these cases, we need the data to process the contract or to handle your requests. Otherwise, you will not be able to complete the order or contact us. Which data is collected can be seen from the respective input forms. We use the data you provide for contract execution and processing your inquiries in accordance with se. 6 para. 1 p. 1 lit. b GDPR.
Insofar as you have given your consent to this in accordance with sec. 6 para. 1 p. 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account. Further information on the processing of your data, in particular on its transfer to our service providers for the purpose of processing orders, payment and shipping, can be found in the following sections of this Data Protection Declaration. After complete contract fulfillment or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law in accordance with sec. 6 para. 1 p. 1 lit. c GDPR unless you have expressly consented to further use of your data in accordance with sec. 6 para. 1 p. 1 lit. a GDPR or we reserve the right to use data, permitted by law and about which we inform you in this statement, beyond this. The deletion of your customer account is possible at any time. To do so, please use this contact form or send an email to connect@cedouble.com
3. Data handling during the shipment process
In order to fulfill the contract in accordance with sec. 6 para. 1 p. 1 lit. b GDPR we are forwarding your personal data to the designated shipping service provider insofar this is necessary to ship the order.
Data Transfer to the shipping service provider for shipment notification
Insofar you explicitly agree during or after your order placement we will pass on your email address to the designated shipping service provider based on sec. 6 para. 1 p. 1 lit. a GDPR so that you can be contacted regarding any shipment-related issues.
This consent can be withdrawn at any time by contacting us using any of the contact possibilities named in this Data Protection Declaration or by contacting the shipping service provider directly using the following contact address:
DHL Paket GmbH
Straeßchensweg 10
53113 Bonn
Germany
After the withdrawal of your consent we are going to delete your data insofar you have not explicitly agreed to its further use or we reserve a use of data that exceeds the former, is permitted by law and which we are going to inform you about in this declaration.
4. Data handling for payment processing
In order to process payments in our online shop we are working with following partners: Technical service providers, banking institutions, payment service providers.
4.1 Data handling for transaction processing
Depending on the chosen method of payment we are forwarding the necessary data to process the payment to our technical service providers, the authorized banking institutions or the authorized payment service providers. This serves the purpose to fulfill the contract in accordance with sec. 6 para. 1 p. 1 lit. b GDPR. Partly, the payment service providers collect the data necessary to process payments themselves, e.g. on their own websites or through technical integration into the ordering process. Insofar the data protection of the respective payment service provider is valid. If you have any questions regarding our partners responsible for the payment processing and the basis on which we collaborate with them please reach out via one of the contact options named in this Data Protection Declaration.
4.2 Data handling for fraud protection and optimization of our payment processes
If necessary, we supply our service providers with further data which they utilize in addition to the necessary data to process the payment for fraud protection and optimization of our payment processes (e.g. invoicing, processing of payment cancellations, accounting support). Aligned with sec. 6 para. 1 p. 1 lit. f GDPR this serves the protection of our legitimate interests in the balancing of interests in the protection against fraud or an efficient payment management.
4.3 Identity and credit worthiness check when choosing Klarna payment options
Purchase on Klarna invoice
When you opt for payment services by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter ‚Klarna’) we kindly ask you for your consent in accordance with sec. 6 para. 1 p. 1 lit. a GDPR that we may pass on the necessary data for payment processing as well as for an identity and credit worthiness check. In Germany, for the identity and credit worthiness check the named credit inquiry agencies in the declaration of data protection of Klarna can be used. The contained information regarding the statistical probability of a payment default is used by Klarna for a considered decision about the justification, transit or termination of the contract. You may withdraw your consent at any time via one of the contact options named in this data protection declaration. The consequence may be that we will then not be able to offer you certain payment options. You may withdraw your consent regarding the use of your personal data also against Klarna directly at any time.
5. E-Mail Advertisement
E-Mail Advertisement
When you sign up to our newsletter, we are using the necessary or separately communicated data by you in order to send you our email newsletter on a regular basis based on your consent in accordance with sec. 6 para. 1 p. 1 lit. a GDPR. To unsubscribe from this newsletter, you may use any of the mentioned contact possibilities or use the dedicated link in the newsletter. After unsubscribing, we will delete your email address from the list of recipients insofar you do not explicitly consent to a further use of your data in accordance with sec. 6 para. 1 p. 1 lit. a GDPR or we reserve a use of data that is permitted by law and which we are going to inform you about in this declaration.
5.2 Newsletter distribution
If you have any questions regarding our partners and the basis on which we collaborate with them please reach out via one of the contact options
6. Cookies and further technologies
General information
To create a pleasant experience on our websites and enable the use of certain functions we are using technologies on various sites including so-called cookies. Cookies are small text files that are saved automatically on your device. Some of the cookies used by us will be deleted when the browser session is ended / when the browser is closed (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser next time (persistent cookies).
We use technologies that are mandatory for the use of certain functions of our websites (e.g. shopping cart functions). Through these technologies, IP address, time of the visit, device and browser information as well as information about your use of our websites (e.g. information regarding the content of your shopping bag) will be collected and processed.
This serves to protect our legitimate interests in the balancing of interests to ensure an optimized presentation of our offer in accordance with sec. 6 para. 1 p. 1 lit. f GDPR.
When you visit our online shop for the first time, on the bottom of the screen a pop-up window will open up with different options to choose from. Insofar you do not agree to the use of marketing and analytics cookies (either by clicking the ‚accept all’ button or by choosing these cookies under ‚preferences’), we will not collect this data. You don’t have to agree to all cookies collectively but can make your choice selectively under ‚preferences’. Also, you have the option to close the window with the ‚close’ button. In this case we will only use the necessary (functionality) cookies so you can use all functions of our online shops.
In addition, we use technologies to fulfill any legal obligations (e.g. to prove consent to the handling of your personal data) as well as for web analysis and for online marketing. Further information regarding the respective legal basis for the processing of the data you can find in the following paragraphs of this declaration of data protection.
The cookie settings for your browser you can find using following links Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
Insofar you have agreed to the use of technologies in accordance with sec. 6 para. 1 p. 1 lit. a GDPR, you can withdraw your consent at any time using any of the mentioned contact possibilities.
7. Use of Cookies and other technologies for web analysis and marketing purposes
Insofar you have given your consent according to sec. 6 para. 1 p. 1 lit. a GDPR, we are using the following cookies and other technologies by third parties on our website. After the purpose has ceased to exist and the technology is no longer in use we will delete any data that had been collected in this context. You may withdraw your consent at any time with effect for the future. Further information regarding your withdrawal options you can find in the paragraph ‚cookies and further technologies’. Further information including the basis for the collaboration with the respective providers you can find under the individual technologies. In case of any questions regarding the providers and the basis for our collaboration with them please reach out via any of the contact options named in this data protection declaration.
7.1 Use of Google services
We are using the following portrayed technologies by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland („Google“). The automatically collected information regarding your use of our websites generally will be forwarded to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and saved there as well. For the USA no adequacy decision of the European Commission exists. Our collaboration with them is based on standard data protection clauses of the European Commission. If your IP-address is collected through Google technologies, it will be shortened through the activation of the IP-anonymization before it is saved on the Google servers. Only in exceptional cases will the complete IP address transferred to a Google server and shortened there. Unless otherwise stated the processing of data is based on an agreement between jointly responsible parties for the respective technology according to sec. 26 GDPR. Further information regarding the data handling by Google you can find in the data protection notice by Google.
Google Analytics
For website analysis, Google Analytics automatically collects and saves data (IP address, time of visit, device and browser information as well as information regarding the use of our websites) from which anonymous user profiles using pseudonyms will be created. For that purpose, cookies can be used. Your IP address will generally not be merged with other data from Google. The data processing is based on an agreement regarding the order processing through Google.
Google Fonts
For a coherent display of the contents on our website data (IP address, time of the visit, device and browser information) will be collected through the script code „Google Fonts“, forwarded to Google and then processed by Google. We have no influence on this subsequent data processing.
7.2 Use of Facebook Services
Use of Facebook Pixel
We are using the Facebook Pixel as part of the subsequent displayed technologies of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Irland („Facebook“). With Facebook Pixel data (IP address, time of the visit, device and browser information as well as information regarding your use of our websites based on events predetermined by us such as visit of a website or newsletter subscription) from which anonymous user profiles using pseudonyms are created will automatically be collected and saved. For that purpose, during the visit of our website, Facebook Pixel will place a cookie which enables a recognition of your browser when visiting other websites automatically through a pseudonymous cookie ID. Facebook will merge this information with further data retrieved from your Facebook account and use this to create reports about the website activities and deliver further services connected with the website use, particularly personalized and group-based marketing.
The information that has been automatically collected through the use of Facebook technologies will generally be forwarded to a server of the Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and saved there. For the USA, no adequacy decision of the European Commission exists. If we are responsible for the data transmission into the USA our collaboration with them is based on standard data protection clauses of the European Commission. Further information regarding the data processing by Facebook you can find in its data protection notice.
Facebook Ads
Through Facebook Ads we promote this website on Facebook as well as on other platforms. We set the parameters regarding the respective marketing campaigns. Regarding the exact execution, especially the decision about the ad placement with certain users, Facebook is responsible. Unless otherwise stated by the respective technologies the data is handled on the basis of an agreement between jointly responsible parties according to sec. 26 GDPR. The shared responsibility is limited to the collection of the data and their transmission to Facebook Ireland. It does not pertain to the subsequent data handling by Facebook Ireland.
On the basis of the statistics that have been created through Facebook Pixel about visitor activities on our website we practice group-based marketing through Facebook Custom Audience by determining the characteristics of the respective target group.
On the basis of the pseudonymous Cookie-ID set by Facebook Pixel and the collected data about your user behavior on our website we execute personalized marketing through Facebook Pixel Remarketing.
Trough Facebook Pixel Conversions we measure your subsequent user behavior for web analysis and event tracking if you came to our website through an ad by Facebook Ads. The data processing is based on an agreement regarding the order processing through Facebook.
7.3. Further providers of web analysis and online marketing services
Use of Adobe Fonts to display contents
For a coherent display of the contents on our website data (IP address, time of the visit, device and browser information) will be collected through the script code „Adobe Fonts“ of the Adobe, Inc., 345 Park Avenue San Jose, CA 95110-2704, USA („Adobe“) passed on to Adobe and subsequently processed by Adobe. We have no influence on the subsequent data processing by Adobe.
For the USA no adequacy decision of the European Commission exists. Our collaboration with them is based on standard data protection clauses of the European Commission.
The data processing is based on an agreement between jointly responsible parties according to sec. 26 GDPR.
Shopify Live-Chat-Tool
If you use the Shopify Live-Chat-Tool in order to contact us, the data communicated voluntarily by you (name, email address, message) according to sec. 6 para. 1 p. 1 lit. b GDPR will be processed by us in order to be able to answer the request as part of the contract processing. Moreover, the use of this tool serves to protect our legitimate interest in the balancing of interests for an effective and improved customer communication in accordance with sec. 6 para. 1 p. 1 lit. f GDPR. All data will be deleted afterwards. The Live-Chat-Tool is provided by Shopify. Further information on the data processing through Shopify you can find in the data protection notice of Shopify. In case of specific questions, you may contact Shopify directly:
Shopify International Ltd.
Attn: Data Protection Officer
c/o Intertrust Ireland
2nd Floor 1-2 Victoria Buildings
Haddington Road
Dublin 4, D04 XN32
Ireland
8. Social Media
8.1 Social Plugins from Facebook and Instagram
Social buttons from social networks are used on our website. These are only integrated into the page as HTML links, so if you call up our website, no connection is established with the servers of the respective provider. When you click on one of the buttons, the website of the respective social network opens in a new window of your browser. There you can click the Like or Share button, for example.
8.2. Our online presence on Facebook, Instagram, YouTube and Pinterest
Insofar as you have given your consent to the respective social media operator in accordance with sec. 6 para. 1 p. 1 lit. a GDPR, when visiting our online presences under the above-mentioned social media, your data, from which user profiles are created under the use of pseudonyms, will be acollected automatically and saved for market research and advertising purposes. These data can be used, for example, to display advertisements that presumably correspond to your interests within and outside the platforms. Cookies are generally used for this purpose. For detailed information on the processing and use of your data by the respective social media operator, your rights in this regard as well as setting options for protecting your privacy, please refer to the privacy notices of the providers linked below. You will also find a contact option there. If you still need assistance, please feel free to contact us at any time.
Facebook is an application of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Irland („Facebook Ireland“). The information about your use of our online presence on Facebook automatically collected by Facebook Ireland is usually transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and saved there. For the USA, there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission. Data processing in the context of a visit to a Facebook Fanpage is based on an agreement between jointly responsible parties in accordance with sec. 26 GDPR. More information about Insights data can be found here.
Instagram is an application of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Irland („Facebook Ireland“). The information about your use of our online presence on Instagram automatically collected by Facebook Ireland is usually transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and saved there. For the USA, there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission. Data processing in the context of a visit to an Instagram Fanpage is based on an agreement between jointly responsible parties in accordance with sec. 26 GDPR. More information about Insights data can be found here.
YouTube is an application of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland („Google“). The information about your use of our online presence on YouTube automatically collected by Facebook Ireland is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and saved there. For the USA, there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.
Pinterest is an application of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Irland („Pinterest“). The information about your use of our online presence on Pinterest automatically collected by Pinterest is usually transmitted to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA and saved there. For the USA, there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.
9. Contact possibilities and your rights
As an affected person you have the following rights:
- In accordance with sec. 15 GDPR you have the right to request information about your personal data that has been processed by us within the scope mentioned there;
- In accordance with sec. 16 GDPR you have the right to request immediate correction of false or incomplete personal data that has been saved by us;
- In accordance with sec. 17 GDPR you have the right to request deleting your personal data that has been saved insofar as a further use is not mandatory
- to execute the right to freedom of expression and information;
- to fulfill a contractual obligation;
- for reasons of public interest or
- for assertion, exercise or defense of legal claims;
- In accordance with sec. 18 GDPR you have the right to request limitation of the processing of your personal data when
- the accuracy of the data is denied by you;
- the data processing is illegitimate but you reject the deletion;
- we do not need the data anymore but you need them for assertion, exercise or defense of legal claims or
- you have objected the processing in accordance with sec. 21 GDPR;
- In accordance with sec. 20 GDPR you have the right to receive your personal data that you have provided us with in structured, common and in machine-readable format or to request the transmission to another responsible person;
- In accordance with sec. 77 GDPR you have the right to complain to a supervisory authority. Generally, you may contact a supervisory authority at your usual place of residence / work or at our company headquarters.
In case of questions regarding the collection, processing or use of your personal data and for information, correction, limitation or deletion of data as well as withdrawal of given consent or obligation against certain data use please directly contact us using the contact information provided in our Imprint or through our contact form.
Right to object Insofar we process personal data like described above to protect our legitimate interests in the balancing of interests you can object to this processing with effect for the future. If the processing is for the purpose of direct marketing you may execute this right at any time like described above. If the processing is for different purposes, you may only execute your right to object when there are reasons resulting from your special situation. Following your right to object, we will not process your personal data for these purposes unless we can prove mandatory protection-worthy reasons for the processing that outweigh your interests, rights and freedoms or when the processing serves the assertion, exercise or defense of legal claims. This does not apply if we process your data for the purposes of direct marketing. In that case, we will not proceed processing your data for this purpose. |