data protection

1. Name and contact details of the person responsible for processing and the company data protection officer

This data protection information applies to data processing by:

Responsible person
Parts for Bikes (limited liability UG)
Heerweg 1
35305 Grünberg,
Germany
E-mail address: info (at) parts-for-bikes.de
Phone: 06401 220524

2. Collection and storage of personal data as well as the type and purpose of their use

a) When visiting the website

If you visit our website at https://parts-for-bikes.de the browser used on your device automatically sends certain information to the server on our website. We temporarily save this information in a so-called log file. This happens automatically. The following information is recorded and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the file called up,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the aforementioned data for the following purposes:

• Ensuring a smooth connection to the website,
• Ensuring comfortable use of our website,
• Evaluation of system security and stability as well as
• for further administrative purposes.

The legal basis for data processing is Art. 6 Para. 1 p. 1 lit. f GDPR. Our legitimate interest in the aforementioned data processing results from the purposes for data collection listed above. We do not use the collected data to draw conclusions about your person.

In addition, we use cookies when you visit our website. You can find more detailed explanations under no. 4 of this data protection declaration.

b) When using our online shop and creating a customer account

We process the data of our customers as part of the order processes in our online shop in order to enable them to select and order the selected products and services, as well as their payment and delivery or execution.

The processed data includes inventory data, communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing takes place for the purpose of providing contractual services in the context of the operation of an online shop, billing, delivery and customer services. We use session cookies to store the contents of the shopping cart and permanent cookies to store the login status. You can find more detailed information on cookies in section 4 of this data protection declaration below.

The processing takes place on the basis of Art. 6 Para. 1 lit. b (execution of order processes) and c (legally required archiving) GDPR. The information marked as necessary is required for the establishment and fulfillment of the contract. We only disclose the data to third parties in the context of delivery, payment or in the context of legal permits and obligations to legal advisors and authorities. Further information on external service providers can be found below in the context of this data protection declaration. The data will only be processed in third countries if this is necessary to fulfill the contract (e.g. at the customer’s request for delivery or payment).

Users can optionally create a user account in which they can view their orders in particular. As part of the registration, the required mandatory information is communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention is for commercial or tax law reasons. Art. 6 para. 1 lit. c GDPR necessary. Information in the customer account remains until it is deleted with subsequent archiving in the event of a legal obligation. It is up to the users to save their data in the event of termination before the end of the contract.

As part of the registration and renewed logins as well as the use of our online services, we save the IP address and the time of the respective user action. The storage takes place on the basis of our legitimate interests in accordance with. Art. 6 para. 1 lit. f GDPR, as well as the user in protection against misuse and other unauthorized use. A transfer of this data to third parties does not take place, unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with. Art. 6 para. 1 lit. c GDPR.

The deletion takes place after the expiry of statutory warranty and comparable obligations, the necessity of storing the data is checked every three years; In the case of the statutory archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligation).

3. Transfer of data

There is no other transfer of your personal data to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

• According to Art. 6 Para. 1 p. 1 lit. a GDPR have given express consent to this,
• the transfer according to Art. 6 para. 1 p. 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
• if, in accordance with Art. 6 Para. 1 p. 1 lit. c GDPR are legally obliged to pass on, as well as
• this is legally permissible and according to Art. 6 para. 1 p. 1 lit. b GDPR is required for the processing of contractual relationships with you.

4. Cookies

We use cookies on our website. Cookies are small (text) files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.). Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

The cookie stores information that results in connection with the device you use when you visit our website. This does not necessarily give us direct knowledge of your identity.

We use cookies to make your visit to our website more pleasant. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. Session cookies are automatically deleted after leaving our website.

We also use temporary cookies to optimize the user-friendliness of our website. Temporary cookies are stored on your device for a specified period of time. If you visit our website again, it will automatically be recognized that you have already visited us once. In addition, we then already know which entries and settings you have made and can make them available to you automatically. So you don’t have to enter the information again.

On the other hand, we use cookies to statistically record and evaluate the use of our website. This enables us to continuously optimize our offer. These cookies also enable us to automatically recognize when you visit our site again that you have already visited our website. These cookies are also automatically deleted after a defined period of time.

We base data processing in connection with the use of cookies on our legitimate interests and those of third parties, Art. 6 Para. 1 p. 1 lit. f GDPR, because the use of cookies is necessary to safeguard the aforementioned interests.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, if you completely deactivate cookies, you may not be able to use all the functions of our website.

5. Social media presences and plug-ins

Online presence in social media

We maintain an online presence within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services. When calling up the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply. Unless otherwise stated in our data protection declaration, we process the data of the users as long as they communicate with us within the social networks and platforms, e.g. write articles on our online presence or send us messages.

Integration of services and content from third parties

We use content or service offers from third-party providers within our online offer on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. Integrate services such as videos or fonts (hereinafter uniformly referred to as “content”). This always presupposes that the third-party providers of this content perceive the IP address of the users, since they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We strive to only use content whose respective providers only use the IP address to deliver the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user’s device and contain, among other things, technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, as well as being linked to such information from other sources.

Use of Google Maps

Within our online offer, we integrate the “Google Maps” service from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, the users’ IP addresses and location data, which, however, are not collected without their consent. The data can be processed in the USA. Data protection: https://www.google.com/policies/privacy , Opt-Out: https://adssettings.google.com/authenticated .

Use of Google+

Functions and contents of the Google+ platform, offered by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”), can be integrated into our online offer. This can include, for example, content such as images, videos or texts and buttons with which users can share content from this online offer within Twitter. If the users are members of the Google+ platform, Google can assign the above-mentioned content and functions to the profiles of the users there. Google is certified under the Privacy Shield Agreement and thus offers a guarantee that it will comply with European data protection law ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active) . For more information on the use of data by Google, setting and objection options, please refer to Google’s data protection declaration ( https://policies.google.com/technologies/ads ) as well as in the settings for the display of advertisements by Google ( https://adssettings.google.com/authenticated) .

6. Newsletter

With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures as well as your right of objection.

By subscribing to our newsletter, you declare that you agree to the receipt and the procedures described. Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter “newsletter”) only with the consent of the recipient or with legal permission. If the contents of the newsletter are specifically described when registering for the newsletter, they are decisive for the consent of the user. Incidentally, our newsletters contain information about our services and us.

Double opt-in and logging: The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an email in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with someone else’s e-mail address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes saving the time of registration and confirmation, as well as the IP address. Changes to your data stored by the shipping service provider are also logged. Registration data: To register for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name for the purpose of addressing you personally in the newsletter.

The dispatch of the newsletter and the success measurement associated with it are based on the consent of the recipient in accordance with. Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with Section 7 Para. 2 No. 3 UWG or, if consent is not required, on the basis of our legitimate interests in direct marketing in accordance with. Art. 6 para. 1 according to GDPR in conjunction with § 7 para. 3 UWG. The logging of the registration process is based on our legitimate interests in accordance with. Art. 6 para. 1 lit. f GDPR. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of the users and also allows us to prove consent.

Cancellation / revocation: You can cancel the receipt of our newsletter at any time, ie revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We can save the unsubscribed email addresses for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time.

7. External payment service providers

We use the external payment service provider PayPal, via whose platform the users and we can carry out payment transactions (link to the data protection declaration, PayPal ( https://www.paypal.com/de/webapps/mpp/ua/privacy-full) . As part of the fulfillment of contracts, we use the payment service provider on the basis of Art. 6 Para. 1 lit. b. GDPR. In addition, we use the external payment service provider on the basis of our legitimate interests in accordance with. Art. 6 para. 1 lit. f. GDPR in order to offer our users effective and secure payment options.

The data processed by the payment service provider includes inventory data such as name and address, bank data such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, sums and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed and stored by the payment service provider. This means that we do not receive any account or credit card-related information, but only information with confirmation or negative information about the payment. The data may be transmitted to credit agencies by the payment service provider. The purpose of this transmission is to check your identity and creditworthiness. For this we refer to the terms and conditions and data protection information of the payment service providers.

For payment transactions, the terms and conditions and the data protection information of the respective payment service provider apply, which can be called up within the respective websites or transaction applications. We also refer to these for the purpose of further information and the assertion of rights of revocation, information and other data subjects.

8. Left

If you use external links that are offered on our website, this data protection declaration does not extend to these links. If we offer links, we strive to ensure that these also comply with our data protection and security standards. However, we have no influence on compliance with data protection and security regulations by other providers. Therefore, please inform yourself on the websites of the other providers about the data protection declarations provided there.

9. Rights of data subjects

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the purposes of the processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, insofar as it has not been collected from us, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
• to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is required;
• to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, if
  • You dispute the correctness of the personal data and it was possible for us to check the correctness of the data, or
  • the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted, or
  • we no longer need the data for the purposes of processing and you, however, need the data to assert, exercise or defend legal claims, or
  • You have lodged an objection to the processing, as long as it has not yet been determined whether the legitimate reasons on our part or on your part prevail.

   

• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;
• according to Art. 7 para. 3 GDPR, to revoke your once given consent to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent in the future and
• to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

 

10. Right to object

If we process your personal data and rely on our legitimate interests in accordance with Art. 6 Para. 1 p. 1 lit. f GDPR, you have the right to object to the specific processing of personal data in accordance with Art. 21 GDPR. If your objection is directed against direct mail, you have a general right of objection, which we will implement without specifying a particular situation. For the rest, it is necessary for the successful assertion of the objection that there are reasons for your objection that arise from your particular situation.

If you would like to make use of your right of revocation or objection, an email to is sufficient info (at) parts-for-bikes.de .

11. Data security

We encrypt the data transmission to and from our website using the SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. This is usually a 256-bit encryption. If your browser does not support this, we use 128-bit v3 technology instead. You can recognize the encryption of individual pages of our offer by the closed representation of the key or lock symbol in the lower status bar and / or address line of your browser.

In order to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties, we also use suitable technical and organizational security measures (TOMs). We continuously revise and improve our security measures in line with technological developments.

12. Up-to-dateness and changes to this data protection declaration

This data protection declaration is dated June 2018 and is currently valid.

Changing legal or official requirements, developments in case law and further developments on our website may make changes to our data protection declaration necessary.

The current version of our data protection declaration can be viewed on the website at any time https://parts-for-bikes.de/datenschutz.html retrieve and print out.