Personal data is information that relates to an identified or identifiable person. This includes, above all, information that makes it possible to draw conclusions about your identity, such as your name, telephone number, address or e-mail address. Statistical data that we collect, for example, when you visit our website and that cannot be associated with your person, is not covered by the term “personal data”.
1. Contact person
Contact person and so-called person in charge of the processing of your personal data when visiting this website within the meaning of the EU General Data Protection Regulation (DSGVO) is BENEGANIC GmbH GmbH, Churerstrasse 54, 8808 Pfäffikon, Switzerland Phone: +41 78 300 66 76, E-Mail: firstname.lastname@example.org. For any questions about privacy in connection with the use of our website, you can always contact our data protection officer. This can be reached at the above postal address as well as at the previously stated e-mail address (keyword: “for the attention of the data protection officer”).
2. Data processing on our website
2.1. Call our website / access data
Each time you use our website, we collect the access data that your browser automatically transmits to enable you to visit the website. The access data include in particular:
- IP address of the requesting device;
- Date and time of the request;
- Address of the website and the requesting website;
- Information about the browser used and the operating system;
- Online identifiers (eg device identifiers, session IDs).
The data processing of this access data is necessary to enable the visit of the website and to ensure the long-term functionality and security of our systems. The access data is also temporarily stored in internal log files for the purposes described above to provide statistical information about the use of our website in order to further develop our website in terms of the usage habits of our visitors (for example, as the share of mobile devices increases, with which the pages are retrieved) and to maintain our website in general administrative. The legal basis is Art. 6 para. 1 sentence 1 lit. b DSGVO.
The information stored in the log files does not allow any direct inference to your person, in particular we store the IP addresses only in a shortened, anonymized form. The log files are stored for 30 days and archived after subsequent anonymization.
You have various options to contact us. In this context, we process your data transmitted in the course of the contact only for the purpose of communication with you. The legal basis is Art. 6 para. 1 lit. b DSGVO. The data collected by us will be automatically deleted after complete processing of your request, unless we still need your request
You have the opportunity to register for our login area in order to use the full functionality of our website (eg for ordering in our online shop, except for guest orders). We have highlighted the data that you are required to enter as obligatory fields. Without this data registration is not possible. The legal basis of the processing is Art. 6 para. 1 lit. b DSGVO.
In an order process, we collect necessary data for the contract:
- First and Last Name;
- Date of birth (only for some payment methods);
- E-mail address;
- Billing and shipping address;
- Payment information, payment information.
Without this data, the contract is not possible. Optionally, information such as telephone and fax numbers are possible, so that we can contact you in case of queries also on these paths. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
2.5 Payment options, payment service providers
For orders in our online shop we offer PayPal and credit card payments. We work together with a payment service provider, from whom we receive your payment data or to whom we transfer your payment data. Without these payment data and payment service providers, the payment and contract processing is not possible. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
Our payment service provider is
- Saferpay: SIX Payment Services AG, Hardturmstrasse 201, CH-8021 Zurich (http: // six-payment-services.com)
We use own cookies in particular
- for login authentication,
- for load distribution,
- for session-wide storage of your shopping cart
- to note that you have displayed an information placed on our website ¬ so it will not be displayed again the next time you visit the site.
We want to enable you a more comfortable and individual use of our website. These services are based on our aforementioned legitimate interests. The legal basis is Art. 6 (1) sentence 1 lit. f DSGVO.
The legal basis for the data processing described in the following section is Article 6 (1) sentence 1 lit. f DSGVO, based on our legitimate interest in the needs-based design and continuous optimization of our website.
In the following list of technologies we use, you will also find information on the possibilities of contradicting our analysis measures by means of an opt-out cookie. Please note that after deleting all cookies in your browser or later using another browser and / or profile an opt-out cookie must be set again.
2.7 Google Analytics
Google will process the information obtained through cookies in order to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage.
3. Disclosure of data
A dissemination of the data collected by us takes place only if:
- you have given your express consent in accordance with Art. 6 para. 1 sentence 1 letter a of the GDPR;
- disclosure pursuant to Art. 6 (1) sentence 1 lit. f DSGVO is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in refraining from passing on your data;
- we are legally obliged to disclose it in accordance with Art. 6 (1) sentence 1 (c) DSGVO;
- this is legally permissible and required under Art. 6 (1) sentence 1 (b) DSGVO for the execution of contractual relationships with you or for the execution of pre-contractual measures, which occur at your request.
4. Integration of content and services of third parties
Occasionally, content from third parties, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites, may be incorporated into our website. This always assumes that the providers of this content (“third party”) know your IP address. Because without the IP address, you cannot send the content to your browser. The IP address is therefore required for the presentation of this content. The legal basis for this data processing is Art. 6 para. 1 lit. b, f DSGVO.
We endeavor to use only content whose respective providers use the IP address only for the delivery of the content. However, we have no influence on it, if the third party providers store the IP address for statistical purposes, for example.
5. Storage duration
Basically, we store personal information only as long as necessary to fulfill the contractual or legal obligations to which we collected the information. Thereafter, we will delete the data immediately, unless we need the data until the expiration of the statutory limitation period for evidence for civil claims or for statutory retention requirements.
For evidence, we must retain contract information for three years from the end of the year in which the business relationship with you ends. Any claims become statute-barred after the legal limitation period at the earliest at this time.
Even after that, we sometimes have to save your data for accounting reasons. We are obliged to do so because of legal documentation obligations that may arise from the German Commercial Code, the Tax Code, the Banking Act, the Money Laundering Act and the Securities Trading Act. The deadlines for storing documents are two to ten years.
6. Your rights
You have the right to request information about the processing of your personal data by us at any time. As part of the provision of information, we will explain the data processing and provide you with an overview of the data stored about you.
If data stored with us should be incorrect or out of date, you have the right to have this data corrected. You can also request the deletion of your data. If the deletion due to other legislation is not possible in exceptional cases, the data will be blocked, so that they are only available for this legal purpose.
You can also limit the processing of your data, such as: For example, if you believe that the information we hold is incorrect.
You are also entitled to data portability. D. h. we will send you a digital copy of the personal data you provide on request.
To exercise your rights as described here, you can always contact the contact details above. This also applies if you wish to receive copies of warranties to demonstrate adequate data protection.
In addition, you have the right to object to data processing, which is based on Art. 6 para. 1 lit. e or f DSGVO. Finally, you have the right to complain to the Data Protection Inspectorate responsible for us. You may assert this right with a supervisory authority in the Member State of your place of residence, your place of work or the place of alleged infringement. In Berlin, our headquarters, the responsible supervisory authority is: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin.
7. Right of revocation and opposition
In accordance with Article 7 (2) of the GDPR, you have the right to revoke a consent once given to us at any time. As a result, we will not continue the data processing based on this consent for the future. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Insofar as we process your data on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f DSGVO, you have the right, in accordance with Art. 21 GDPR, to appeal against the processing of your data and to give us reasons that arise from your particular situation and that, in your opinion, speak in favor of your legitimate interests. If it concerns a contradiction against the data processing for purposes of the direct advertisement you have a general right of objection, which is implemented also without the indication of reasons of us.
If you would like to exercise your right of revocation or objection, it is sufficient to send an informal message to the above mentioned contact details.
8. Data security
We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data against dangers during data transfers as well as prior knowledge of third parties. These are adjusted according to the current state of the art. To secure the personal information you provide on our website, we use Transport Layer Security (TLS), which encrypts the information you provide.
© BENEGANIC GmbH – Version: 1.0 / Status: April 2019