Our Security & Privacy for You - you can count on it!
To ensure you can shop with us safely, we have taken every measure to protect your data from third-party access. Your data and your trust are our commitment to the highest security. We wouldn't want it any other way ourselves.
That's why we only use the data you transmit to us to fulfill and process your orders.
We reject sharing with third parties, except with partners in the course of order processing, and it does not occur under any circumstances. You can be sure of that. Your email address will neither be shared nor sold.
Specifically, this means for you
You will never receive unsolicited advertising calls, promotional mail or advertising emails from us - promised.
Your passwords are not visible to us. They are encrypted. This means we also have no access to your customer account.
Your credit card data is not visible to any of us. Your credit cards are also not stored with us or on our server.
During the order process, this data is transmitted directly and encrypted to the payment partner - without going through our system. Authorization also exists only for the amount you have purchased from us.
Datenschutzerklärung
Name and Address of the Responsible Party
The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
HAJUS AG
Spinnereistraße 3
01591 Riesa
Deutschland
Tel:051518779812
www.westfalia.de
Legal Basis for Processing Personal Data
Insofar as we obtain consent from the data subject for processing operations of personal data, Article 6 Para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is party, Article 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 Para. 1 lit. d GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 Para. 1 lit. f GDPR serves as the legal basis for processing.
Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Our legitimate interest in data processing according to Article 6 Para. 1 lit. f GDPR also lies in these purposes.
Storage of Access Data in Server Log Files
You can visit our websites without providing any personal information. We only store access data in so-called server log files, such as the name of the requested file, date and time of access, amount of data transferred and the requesting provider. This data is evaluated exclusively to ensure trouble-free operation of the site and to improve our offering and does not allow us to draw any conclusions about your identity.
Access Data and Hosting
You can visit our websites without providing any personal information. Each time a web page is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred and the requesting provider (access data) and documents the access.
This access data is analyzed exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. In accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, this serves to protect our legitimate interests, which prevail in the context of a balancing of interests, in a correct presentation of our offer. All access data will be deleted no later than seven days after the end of your visit to the site.
Hosting Services by a Third-Party Provider
As part of processing on our behalf, a third-party provider provides us with hosting and website presentation services. This serves to protect our legitimate interests, which prevail in the context of a balancing of interests, in a correct presentation of our offer. All data collected as part of the use of this website or in forms provided for this purpose in the online shop as described below are processed on its servers. Processing on other servers only takes place within the scope explained here.
This service provider is located within a country of the European Union or the European Economic Area.
Data Collection and Use for Contract Processing and When Opening a Customer Account
We collect personal data when you voluntarily provide it to us as part of your order, when contacting us (e.g. via contact form or email) or when opening a customer account. Which data is collected can be seen from the respective input forms. We use the data you provide to process contracts and handle your inquiries. After complete processing of the contract or deletion of your customer account, your data will be blocked for further use and deleted after expiry of the tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you below. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.
Data Transfer for Contract Fulfillment
For contract fulfillment in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, payment service providers commissioned by us, or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves, insofar as you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.
Data Transfer to Shipping Service Providers
If you have given us your express consent to this during or after your order, we will pass on your email address and telephone number to the selected shipping service provider on the basis of this consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, so that they can contact you before delivery for the purpose of delivery notification or coordination.
Consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
DPD
Wailandtstraße 1
63741
Aschaffenburg
Data Use When Registering for Email Newsletter
If you register for our newsletter, we use the data required for this purpose or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.
Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
Registration on www.westfalia.de
Description and Scope of Data Processing
On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input form and transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process:
- Date and time of registration
- IP address
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR if the user has given consent.
Registration does not serve to conclude a contract with the user.
User registration is required to provide certain content and services on our website.
Contact form and email contact
Description and Scope of Data Processing
A contact form is available on our website which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input form will be transmitted to us and stored. This data includes:
- Name
- Address
- Content
At the time the message is sent, the following data is also stored:
- The IP address
- Date and time of registration
Your consent for the processing of the data is obtained during the sending process and reference is made to this privacy policy.
Alternatively, contact is possible via the email address provided. In this case, the user's personal data transmitted with the email will be stored.
In this context, the data is not passed on to third parties. The data is used exclusively for processing the conversation.
Legal basis for data processing
The legal basis for processing the data if the user has given consent is Art. 6 Para. 1 lit. a GDPR.
The legal basis for processing data transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR. If the email contact aims to conclude a contract, an additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR.
Purpose of data processing
The processing of personal data from the input form serves solely to handle the contact request. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
Use of cookies
To make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our legitimate interests, which prevail in the context of a balancing of interests, in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the browser session ends, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). The storage duration can be found in the overview in the cookie settings of your web browser. You can set your browser to inform you about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™: http://help.opera.com/Windows/10.20/de/cookies.html
If you do not accept cookies, the functionality of our website may be limited.
You can set your browser to inform you about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.
Data stored in cookies:
- Items in shopping cart
- Log in information
Storage duration, objection and removal options
Cookies are stored on the user's computer and transmitted from there to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use all functions of the website to their full extent.
Web Analytics with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website.
The information generated by the cookie about your use of this website is usually transferred to and stored on a Google server in the USA. In case IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, please note that if you do this you may not be able to use all functions of this website to their full extent.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=en
Social plugins from Facebook, Google+ and Twitter using the "2-click solution"
Our website uses so-called social plugins ("plugins") from the social networks Facebook and Google+ and the microblogging service Twitter. These services are offered by the companies Facebook Inc., Google Inc. and Twitter Inc. ("providers"). Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). An overview of Facebook's plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins/ Google+ is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
An overview of Google's plugins and their appearance can be found here: https://developers.google.com/+/web/ Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103.
An overview of Twitter buttons and their appearance can be found here: https://twitter.com/about/resources/buttons To increase the protection of your data when visiting our website, the plugins are integrated into the page using the so-called "2-click solution" from Heise Online. This integration ensures that when you access a page of our website that contains such plugins, no connection is yet established with the servers of Facebook, Google and Twitter. Only when you activate the plugins and thereby give your consent to data transmission does your browser establish a direct connection to the servers of Google, Facebook or Twitter. The content of the respective plugin is then transmitted directly to your browser by the associated provider and integrated into the page.
By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the respective provider or are not currently logged in. This information (including your IP address) is transmitted directly by your browser to a server of the respective provider in the USA and stored there. If you are logged into one of the social networks, the providers can directly associate the visit to our website with your profile on Facebook or Google+.
If you interact with the plugins, for example by clicking the "Like", "+1" or "Tweet" button, the corresponding information is also transmitted directly to a server of the providers and stored there. The information is also published in the social network or on your Twitter account and displayed to your contacts there. The purpose and scope of data collection and the further processing and use of the data by the providers, as well as your related rights and setting options for protecting your privacy, can be found in the providers' privacy policies.
Facebook privacy policy: http://www.facebook.com/policy.php
Google privacy policy: http://www.google.com/intl/de/+/policy/+1button.html
Twitter privacy policy: https://twitter.com/privacy
If you do not want Google, Facebook or Twitter to directly associate the data collected via our website with your profile in the respective service, you must log out of the corresponding service before activating the plugins.
Use of Instagram Social Plugins
Our website uses so-called social plugins ("plugins") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera".
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted directly to your browser by Instagram and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there.
For information on the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your rights and settings options to protect your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/.
If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g. with a script blocker.
Use of Pinterest Plugins
Our website uses so-called social plugins ("plugins") of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest"). The plugins are marked with a Pinterest logo.
When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Pinterest's servers. The content of the plugin is transmitted directly to your browser by Pinterest and integrated into the page. Through this integration, Pinterest receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Pinterest profile or are not currently logged in to Pinterest. This information (including your IP address) is transmitted directly from your browser to a Pinterest server in the USA and stored there.
If you are logged in to Pinterest, Pinterest can directly associate your visit to our website with your Pinterest profile. If you interact with the plugins, for example by clicking the "Pin it" button or leaving a comment, this information is also transmitted directly to a Pinterest server and stored there. The information may also be published on your Pinterest profile and displayed to your Pinterest followers.
For information on the purpose and scope of data collection and the further processing and use of data by Pinterest, as well as your rights and settings options to protect your privacy, please refer to Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy
If you do not want Pinterest to directly associate the data collected via our website with your Pinterest profile, you must log out of Pinterest before visiting our website. You can also completely prevent the loading of Pinterest plugins with add-ons for your browser, e.g. a script blocker.
Information about our payment providers
Purchase on invoice via Paymorrow
To assess liability risk and for credit checks, Paymorrow or partner companies commissioned by Paymorrow may transmit your address data to credit agencies for credit and solvency checks when you register for purchase on invoice, within the scope of what is legally permissible and taking into account your respective legitimate interests in excluding the transmission or use. We obtain information about your previous payment behavior from the following credit agencies, which store data for the provision of information:
Bürgel, Bürgel Wirtschaftsinformationen GmbH & Co.KG
Gasstraße 18
D-22761 Hamburg
Tel.: +49 (0) 40 - 89 80 3-0, Fax -557
Ceg, Creditreform Consumer GmbH
Hellersbergerdtr. 11
D-41460 Neuss
Tel.: +49 (0)2131-109-501, Fax: -557
Delta Vista, Deltavista GmbH
Freisinger Landstr. 74
80939 Munich
Tel.: +49 (0)89 - 7244880, Fax: - 22
For the purpose of its own credit check, Paymorrow or partner companies commissioned by Paymorrow may retrieve credit information based on mathematical-statistical procedures from the named institutions. In these cases, you consent to the communication of your first and last name, street, house number, postal code, city, as well as your date of birth and telephone number to the named institutions. In this context, Paymorrow ensures that both the commissioned partner companies and the named institutions process and/or use the data exclusively within the scope of the intended purpose.
All credit checks are carried out to exclude difficulties in payment transactions. The data exchange between Paymorrow, partner companies commissioned by Paymorrow and other business information services protects online retail from damages that have long-term effects on sales prices. This way, you as an end customer also benefit from a review of customer data for this purpose.
Identitätsprüfung
When purchasing on account via paymorrow GmbH, your personal data will be transmitted to SCHUFA (SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden) for the purpose of identity verification, and SCHUFA will then transmit back to paymorrow GmbH the degree of correspondence in percentage values between the personal data stored with them and the personal data you provided, as well as, if applicable, a reference to an ID-based legitimacy check previously carried out at SCHUFA or another contractual partner.
Paymorrow GmbH can thus recognize from the transmitted match rates whether a person is stored in SCHUFA's database under the address you provided. No further data exchange or transmission of deviating addresses or storage of your data in SCHUFA's database takes place. Only the fact of the address verification at SCHUFA is stored for verification purposes.
PayPal - PayPal Credit Card - PayPal Direct Debit
When paying by PAYPAL, we pass on your payment data as part of the payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").
The transfer is made in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal.
For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit information, they are based on a scientifically recognized mathematical-statistical procedure.
Address data, among other things but not exclusively, is included in the calculation of score values. For further data protection information, including the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
Instant Bank Transfer
SOFORT When selecting the payment method "SOFORT", payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we pass on the information you provided during the order process together with information about your order in accordance with Art. 6 para. 1 lit. b GDPR.
Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is transferred exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. You can find further information about SOFORT's data protection provisions at the following internet address: https://www.klarna.com/sofort/datenschutz
Integration of eKomi Reviews
We use the independent review portal eKomi, which is operated by eKomi Ltd., Markgrafenstr. 11, 10969 Berlin, Germany. We want to constantly improve ourselves and our service and have therefore decided to use such a solution. Accordingly, it is not possible for us to individually control or influence review invitations.
Only in this way can a complete, independent customer review for our
company and our services be guaranteed that cannot be influenced by us as a shop. The data transferred to eKomi for this purpose is passed on to eKomi and used by eKomi itself or passed on to third parties to fulfill the contract.
When the seal is accessed, the web server automatically stores a so-called server log file, which contains, for example, your IP address, date and time of access, amount of data transferred and the requesting provider (access data) and documents the access. This access data is not analyzed and is automatically overwritten at the latest seven days after the end of your page visit.
Submitting a review is optional for you as a customer. By submitting a review/providing feedback, you agree to eKomi's current communication rules. If you have any questions about the collection, processing or use of your personal data, or for information, correction, blocking or deletion of data, as well as revocation of any consent given or objection to a specific data use, please contact us at: [email protected]
Retargeting Releva GmbH
This website uses retargeting technology from releva GmbH, Feilnerstr. 10, 10969 Berlin (www.releva.nz). This enables us to target visitors to our website with personalized, interest-based advertising. The advertising is displayed based on a cookie-based analysis of previous usage behavior, whereby no personal data is stored. In cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests as part of a pseudonymized user profile and thus adapt advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. As a result, you are shown advertising that is highly likely to match your product and information interests. If the collected information contains personal data, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in displaying personalized advertising and in market research.
The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym. To generally object to the use of cookies on your computer, you can set your internet browser so that no more cookies can be stored on your computer in the future or cookies that have already been stored are deleted. You can also permanently object to the setting of cookies or the creation of a pseudonymized user profile by using the available opt-out function at the following link:
Further information and the privacy policy regarding advertising and releva GmbH can be viewed at https://releva.nz/datenschutz .
Privacy Policy for Use and Application of Groupify Shopping
Groupify Shopping is a brand of Groupify, under which primarily social shopping solutions are offered for operators and customers of online shops. The operating company of Groupify Shopping is Groupify GmbH, Urbanstraße 116, 10967 Berlin. Groupify Shopping transmits data to the Groupify server both with clicks and with other activities. Each of these data transmissions triggers a cookie request to the user's browser.
The purpose of the data transmission is to ensure social shopping functionality, as well as the assignment of the user when the website is accessed again at a later time. Furthermore, the cookie serves to increase security for the user and to limit the possibilities of misuse.
Within the scope of this technical procedure, grouping information about data is used, which also serves to a) indicate the other participants to participants of a group order, b) determine and indicate the names, description and price of the jointly ordered products. Such a setting of the internet browser used would also prevent Groupify from setting cookies on the user's information technology system. In addition, cookies already set by Groupify can be deleted at any time via an internet browser or other software programs.
Contact Options and Your Rights
As a data subject, you have the following rights:
- pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
- pursuant to Art. 16 GDPR, the right to request the immediate correction of inaccurate data or completion of your personal data stored with us;
- pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored with us, unless further processing is
- - necessary for exercising the right to freedom of expression and information;
- - necessary for compliance with a legal obligation;
- - necessary for reasons of public interest or
- - necessary for the establishment, exercise or defense of legal claims;
- required;
- pursuant to Art. 18 GDPR, the right to request restriction of processing of your personal data, insofar as
- - the accuracy of the data is contested by you;
- - the processing is unlawful, but you refuse its deletion;
- - we no longer need the data, but you require it for the establishment, exercise or defense of legal claims or
- - you have objected to the processing pursuant to Art. 21 GDPR;
- pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller;
- pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
If you have any questions about the collection, processing or use of your personal data, or if you wish to request information, correction, blocking or deletion of data, or to revoke consent given or object to a specific use of data, please contact us directly using the contact details in our imprint.
Right to restriction of processing
You may request restriction of processing of your personal data under the following conditions:
(1) if you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you oppose the erasure of the personal data and request restriction of their use instead;
(3) the controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defense of legal claims, or
(4) if you have objected to processing pursuant to Art. 21(1) GDPR and verification as to whether the legitimate grounds of the controller override your grounds is pending.
Where processing of your personal data has been restricted, such data may only be processed – with the exception of storage – with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If processing has been restricted under the above conditions, you will be informed by the controller before the restriction is lifted.
Right to erasure
Obligation to erase
You may request that the controller erase your personal data without undue delay, and the controller is obliged to erase such data without undue delay where one of the following grounds applies:
(1) Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
(2) You withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal ground for the processing.
(3) You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
(4) Your personal data has been unlawfully processed.
(5) The erasure of your personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
(6) Your personal data has been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
Information to third parties
Where the controller has made your personal data public and is obliged pursuant to Art. 17(1) GDPR to erase it, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as data subject have requested the erasure by such controllers of any links to, or copy or replication of, that personal data.
Right to notification
If you have asserted the right to correction, erasure or restriction of processing against the controller, the controller is obliged to communicate this correction or erasure of data or restriction of processing to all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right to be informed about these recipients by the controller.
Right to data portability
You have the right to receive your personal data, which you have provided to the controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance from the controller to which the personal data was provided, where
(1)the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
(2)the processing is carried out using automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another controller, where technically feasible. The freedoms and rights of other persons must not be adversely affected thereby.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Widerspruchsrecht
Insofar as we process personal data as explained above to protect our legitimate interests which are overriding in the context of a balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Insofar as the processing is carried out for other purposes, you only have a right to object if there are grounds arising from your particular situation.
After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.
This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.
Right to withdraw data protection consent
You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(1)is necessary for entering into, or performance of, a contract between you and the controller,
(2)is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests or
(3)is based on your explicit consent.
However, these decisions may not be based on special categories of personal data referred to in Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and suitable measures to safeguard the rights and freedoms and your legitimate interests have been taken.
In the cases referred to in (1) and (3), the controller shall implement suitable measures to safeguard the rights and freedoms and your legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
2 more important notes:
To transmit your data we use a secure server with SSL technology (secure socket layer) with 128-bit encryption. This ensures your data is transmitted securely and unreadable to unauthorized parties.
Should your bank details be misused by unauthorized parties, most banks cover all costs. Should your bank require a personal contribution of max. 50 euros, westfalia will cover this payment for you.
In case of misuse of your data, please inform your bank immediately and contact us at [email protected]
Conclusion:
Your customer data is stored and processed by us in compliance with all applicable provisions of the Federal Data Protection Acts (bdsg) and the Telemedia Act (tmg). Your personal data is only collected for specified, explicit and legitimate purposes and not kept in a personally identifiable form for longer than necessary.