Privacy Notice
Privacy
The protection of your data and your privacy is of utmost importance to us. Our data processing is aimed at the objective of only collecting, processing or using personal data required for a sensible and economic use of our website. In the following we would like to inform you, when data is stored when you visit our website and how we use this data. We have taken technical and organisational measures, to ensure that the data protection provisions are observed.
For data security reasons and for the protection of confidential information during transmission, such as enquiries for instance, which you send us as the controller, our site uses SSL encryption. You can recognize an encrypted connection by the address bar of the browser changing from “http://” to “https://” and by the closed padlock icon in the address bar of the browser. When the SSL encryption is enabled, the data you transmit to us cannot be accessed by third parties.
Please address questions or comments regarding this Privacy Policy or general information pertaining to data privacy to our Data Security Officer.
I. Name and address of the controller
The controller in terms of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the:
OPTIMEX Services GmbH
Toyota-Allee 37
D - 50858 Cologne
Tel: +49 2234 - 990 92 24
Fax: +49 2234 - 990 92 21
order@optimex-shop.com
District Court of Cologne, HRB no. 65256, VAT ID no. DE 815054497
Management: Uwe Boden; Stephan Breuer
II. Collection and use of your data
Whether or not and which of your data we process depends on whether you merely visit our website to access information (informational use) or make use of the services we offer (e.g. ordering of goods in the online shop):
1.0 Data collection during an informational visit to our website
When solely using the website for informational purposes, that is without registering or otherwise transmitting information to us, we only collect the personal data automatically transmitted to our server by your browser (so-called “server log files”). When accessing our website, we collect the following data we require for technical purposes, to be able to display our website to you:
- website visited
- date and time of access
- data volume sent in bytes
- source/link from which the website was accessed
- browser used
− operating system used
- IP address used (if applicable: in anonymous form)
Processing is conducted pursuant to art. 6 sec. 1 lit. f of the GDPR. We have a legitimate interest in improving the stability and functionality of our website. The data is not transmitted or otherwise used. However, we reserve the right to subsequently review the server log files, should there be concrete indications of illegal use.
2.0 Data collection/processing when using our offers
If you decide to use the services we offer, it is necessary to provide us with additional information for that purpose. The processing of the communicated data is for the purpose of providing the service(s) you request; for example to be able place and process an order in the online shop. Among other things, we require your first and last name, your address as well as an email address for electronic communication as well as all other fields marked mandatory for that purpose. If necessary, your data is transmitted to service providers (e.g. logistics and payment providers) for the aforementioned purpose, which support us and which we have of course diligently selected and which have contractually been committed to observing the data privacy laws according to art. 28 of the GDPR pursuant to the data privacy requirements. These can be technical service providers or service providers, which support us in the shipping process.
2.1 Establishing contact
Personal data is collected when contacting us (e.g. via contact form or email) In this case, the respective contact form shows which data is concerned. This data is solely stored and used to respond to or process your enquiry or for contact purposes and the corresponding technical administration.
The legal basis for the processing of this data is our legitimate interest in responding to your enquiry pursuant to art. 6 sec. 1 lit. f of the GDPR. If your contacting us is aimed at entering into a contract, the additional legal basis for processing is art. 6 sec. 1 lit. b of the GDPR. Your data is erased after the final processing of your enquiry; this is the case, when the circumstances indicate that the issue at hand has been conclusively clarified and provided that there are no conflicting statutory retention requirements.
2.2 Data processing when creating a possible customer account and for contract processing
Pursuant to art. 6 sec. 1 lit. b of the GDPR, personal data continues to be collected and processed if you communicate said data to us, to execute a contract or when opening a possible customer account. The respective online forms show which data is collected. You can delete your customer account at any time; this can be done by sending notification to the aforementioned address of the controller (or the address shown in the company details). We store and use the data you provide us with for contract processing. Upon complete execution of the contract or deletion of your customer account, your data is blocked and erased taking the retention periods under tax and commercial law into account, unless you have explicitly consented to further use of your data or a legally permitted further use of the data has been reserved on our part, which we inform you of accordingly below.
2.3 Use of cookies
In the interest of a user-friendly operation and at the same time, to enable the use of specific functions, we use so-called cookies on various pages. These are small text files, which are placed on your end device. Some of the cookies we use are deleted at the end of the browser session, i.e. after closing your browser. Other cookies stay on your end device and enable recognising your browser the next time you visit (persistent cookies). If cookies are placed, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are deleted automatically after a specified period of currently 24 hours.
Cookies primarily serve simplifying the order process by storing settings (e.g. storing the content of the online shopping cart, which was not yet ordered but you may like to do at a later point in time, when you return to the website). Insofar as individual cookies we implement also process personal data, processing either takes place to execute the contract pursuant to art. 6 sec. 1 lit. b of the GDPR or pursuant to art. 6 sec. 1 lit. f of the GDPR, to safeguard our legitimate interest in the technically optimised functionality of the website as well as a customer-friendly and effective usability of the website or online shop.
You can disable or limit the transmission of cookies by changing the settings in you Internet browser. Cookies, which have already been stored, can be deleted at any time. This can also take place automatically. If the use of cookies on our website is disabled, it is possible that you may not be able to use the full extent of functions on our website.
III.Rights of the data subject
If your personal data is processed, you are a data subject in terms of the GDPR. As the data subject, whose data is being processed, you can assert certain rights against us according to the GDPR and other relevant data protection provisions. You can assert the following rights against us in accordance with the GDPR.
Rights of the data subjects
According to the GDPR, you are entitled to the following particular rights as a data subject:
Right of access (art. 15 of the GDPR):
You can request information regarding your data from us at any time. Among other things, this information includes the data categories we process, for which purposes we process this data, the origin of the data, in the event that we did not collect it directly from you and if applicable, the recipients, who we transferred your data to. You can receive a free copy of your data from us. If you are interested in an additional copy, we reserve the right to charge you for any additional copies.
Right to rectification (art. 16 of the GDPR):
You can request us to rectify your data. We will take appropriate measures, to keep your personal data, which we store and continuously process, accurate, complete and up-to-date, based on the most current information available to us.
Right to erasure (art. 17 of the GDPR)
You can request us to erase your data, provided that the legal requirements to do so are given. According to art. 17 of the GDPR, this is the case if:
- the data is no longer required for the purposes, for which it was collected or otherwise processed;
- you revoke your consent, which is the basis for data processing and there is no other legal basis for processing;
- you object to the processing of your data and there are no overriding legitimate grounds for the processing or you object to data processing for purposes of direct marketing;
- the data was processed illegally;
- processing is not required to ensure observing a legal obligation, which requires us to process your data; in particular, regarding statutory retention periods; to assert, exercise or defend legal claims.
Right to restriction of processing (art. 18 of the GDPR):
You can request our restriction in processing your data if:
- you contest the accuracy of your data, namely for the period, which we require to review the accurateness of the data;
- the processing is unlawful and you object to the erasure of your data and instead request the restriction of use;
- we no longer require your data but you require it, to assert, exercise or defend legal claims;
- you have objected to processing, as long as it has not yet been determined, whether our legitimate interests override yours.
Right to data portability (art. 20 of the GDPR):
Upon your request, we will transfer your data to another processor – if technically possible. However, you are only entitled to this right if data processing is based on your consent or is required, to execute a contract. Instead of receiving a copy, you can also ask us to transfer the data directly to another processor of your choice.
Right to object (art. 21 of the GDPR):
You can object to the processing of your data at any time, for reasons resulting from your particular situation, provided that data processing is based on your consent or on our legitimate interests or those of a third party. In this case, your data will no longer be processed. The latter does not apply if we can verify compelling and legitimate grounds for this processing, which are worthy of protection and which override your interests or we require your data to assert, exercise or defend legal claims.
Time limits for fulfilling data subject rights
We fundamentally strive to answer all enquiries within 30 days. However, this period can be extended for reasons, which apply to the specific data subject right or the complexity of your enquiry.
Limiting the disclosure of information for the fulfilment of data subject rights
In certain situations, we may not be able to give you information regarding all of your data due to legal requirements. In the event that we have to object to your application for information in such a case, we will also inform you of the reasons for said objection.
Complaint with supervisory authorities
We take your rights and data privacy very seriously. If you believe that we did not respond to your complaints or concerns sufficiently, you have the right to lodge a complaint with a responsible data protection authority.