Privacy policy

This is a translation of the German original. In the event of any discrepancy between the German and the English version, the German version shall prevail.

Personal data (hereinafter mostly referred to simply as „data“) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.

Pursuant to Article 4 no. 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to simply as the „GDPR“), „processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing. In addition, we inform you below about the third-party components we use for optimisation purposes and to improve the quality of use, insofar as third parties process data under their own responsibility in this context.

Our privacy policy is structured as follows:

• I. Information about us as the controller
• II. Rights of users and data subjects
• III. Information on data processing

I. Information about us as the controller

The controller responsible for this website within the meaning of data protection law is:

DampfWatt Agentur UG (haftungsbeschränkt)
Brüggeweg 45
D-45768 Marl, Germany
E-mail: sales@dampfwattagentur.de

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right:

• to obtain confirmation as to whether data concerning them is being processed, to information about the data processed, to further information about the data processing and to copies of the data (see also Article 15 GDPR);
• to rectification or completion of inaccurate or incomplete data (see also Article 16 GDPR);
• to erasure of the data concerning them without undue delay (see also Article 17 GDPR) or, alternatively, where further processing is necessary pursuant to Article 17(3) GDPR, to restriction of processing in accordance with Article 18 GDPR;
• to receive the data concerning them that they have provided and to have this data transmitted to other providers/controllers (see also Article 20 GDPR);
• to lodge a complaint with the supervisory authority if they consider that the data concerning them is being processed by the provider in breach of data protection provisions (see also Article 77 GDPR).

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or the restriction of processing carried out pursuant to Articles 16, 17(1) and 18 GDPR. However, this obligation does not apply where such communication proves impossible or involves disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Users and data subjects also have the right under Article 21 GDPR to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Article 6(1)(f) GDPR. In particular, an objection to data processing for the purposes of direct marketing is permissible.

III. Information on data processing

Your data processed when using our website will be erased or blocked as soon as the purpose of storage no longer applies, no statutory retention obligations prevent erasure, and no differing information on individual processing procedures is given below.

Cookie manager

In order to obtain consent for the use of cookies that are not technically necessary on the website, the provider uses a cookie manager.

When the website is accessed, a cookie containing the settings information is stored on the user's device, so that on a further visit the consent request does not have to be repeated. The cookie is necessary in order to obtain the user's legally compliant consent. The user can prevent or end the installation of cookies through their browser settings.

Cookies

a) Session cookies

We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you use. These cookies process certain information about you on an individual basis, such as your browser or location data or your IP address.

This processing makes our website more user-friendly, more effective and more secure, since the processing enables, for example, the presentation of our website in different languages or the provision of a shopping cart function.

The legal basis for this processing is Article 6(1)(b) GDPR, insofar as these cookies process data for the initiation or performance of a contract. If the processing does not serve the initiation or performance of a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Article 6(1)(f) GDPR.

These session cookies are deleted when you close your internet browser.

b) Third-party cookies

Our website may also use cookies from partner companies with whom we cooperate for the purposes of advertising, analysis or the functionality of our website. Please refer to the information below for details, in particular on the purposes and legal bases for the processing of such third-party cookies.

c) How to remove cookies

You can prevent or restrict the installation of cookies by adjusting the settings of your internet browser. You can also delete cookies that have already been stored at any time. The steps and measures required for this depend on the specific internet browser you use. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, the processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you use. If you have any questions, please likewise use the help function or documentation of your Flash player or contact the manufacturer or user support.

If you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.

Contact enquiries / contact options

If you contact us via a contact form or by e-mail, the data you provide will be used to process your enquiry. Providing the data is necessary in order to process and answer your enquiry; without providing it we cannot answer your enquiry, or can do so only to a limited extent.

The legal basis for this processing is Article 6(1)(b) GDPR.

Your data will be erased once your enquiry has been conclusively answered and no statutory retention obligations prevent erasure, such as in the case of any subsequent performance of a contract.

Customer account / registration function

If you create a customer account with us via our website, we will collect and store the data you enter during registration (for example your name, your address or your e-mail address) exclusively for pre-contractual services, for the performance of the contract or for the purpose of customer care (for example in order to provide you with an overview of your previous orders with us or to be able to offer you the wish list function). At the same time, we store the IP address and the date and time of your registration. This data is of course not passed on to third parties.

As part of the further registration process, your consent to this processing is obtained and reference is made to this privacy policy. The data collected by us in this context is used exclusively to provide the customer account.

Insofar as you consent to this processing, Article 6(1)(a) GDPR is the legal basis for the processing. If the opening of the customer account also serves pre-contractual measures or the performance of a contract, the legal basis for this processing is additionally Article 6(1)(b) GDPR.

You may withdraw the consent given to us for the opening and maintenance of the customer account at any time with effect for the future in accordance with Article 7(3) GDPR. To do so, you need only notify us of your withdrawal.

The data collected in this respect will be erased as soon as the processing is no longer necessary. In doing so, however, we must observe retention periods under tax and commercial law.

Newsletter

If you subscribe to our free newsletter, the data requested from you for this purpose, that is your e-mail address and, optionally, your name and address, is transmitted to us. At the same time we store the IP address of the internet connection from which you access our website, as well as the date and time of your subscription. As part of the further subscription process we will obtain your consent to receive the newsletter, describe its content specifically and refer to this privacy policy. We use the data collected in this context exclusively for sending the newsletter; in particular, it is therefore not passed on to third parties.

The legal basis for this is Article 6(1)(a) GDPR. You may withdraw your consent to receive the newsletter at any time with effect for the future in accordance with Article 7(3) GDPR. To do so, you need only notify us of your withdrawal or use the unsubscribe link contained in every newsletter.

User contributions, comments and reviews

We offer you the opportunity to publish questions, answers, opinions or reviews, hereinafter referred to simply as „contributions“, on our web pages. If you make use of this offer, we process and publish your contribution, the date and time of submission, and any pseudonym you may have used.

The legal basis for this is Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future in accordance with Article 7(3) GDPR. To do so, you need only notify us of your withdrawal.

In addition, we also process your IP address and e-mail address. The IP address is processed because we have a legitimate interest in initiating or supporting further steps in the event that your contribution infringes the rights of third parties and/or is otherwise unlawful. In this case the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in any legal defence that may be necessary.

Credit assessment and scoring

Insofar as we offer you, as part of our range of goods or services, the general option of payment by invoice and you make use of this option, we reserve the right to obtain a credit report from a credit agency (such as Creditreform, Schufa, Bürgel or infoscore) on the basis of mathematical and statistical procedures. For this purpose, your data, insofar as it is relevant to the contract, such as your name and address, is forwarded to the credit agency. We use the resulting information about the statistical probability of a payment default for our decision as to whether to offer you payment by invoice.

The legal basis for this processing is our legitimate interest in securing the receivable against default pursuant to Article 6(1)(f) GDPR.

Server data

For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your internet browser to us or to our web space provider. These so-called server log files record, among other things, the type and version of your internet browser, the operating system, the website from which you came to our website (referrer URL), the page or pages of our website that you visit, the date and time of the respective access, and the IP address of the internet connection from which our website is used.

The data collected in this way is stored temporarily, but not together with other data about you. Storage takes place on the legal basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data is erased after seven days at the latest, unless further retention is required for evidentiary purposes. Otherwise the data is exempted from erasure in whole or in part until an incident has been finally clarified.

Klarna „CHECK-OUT“

To process payments for orders placed via our online shop, we use the payment service of Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden, hereinafter referred to simply as „Klarna“, on our website. For this purpose we have integrated Klarna's so-called check-out into the final order page of our online shop.

The legal basis is the performance of a contract pursuant to Article 6(1)(b) GDPR. In addition, we have a legitimate interest in offering effective and secure payment options, so that a further legal basis arises from Article 6(1)(f) GDPR.

By integrating Klarna, your internet browser loads the check-out page from a Klarna server. As a result, the operating system you use, the type and version of your internet browser, the web page from which the check-out was requested, the date and time of access and the IP address are transmitted to Klarna, even without you interacting with the check-out page.

As soon as you complete the order in our online shop, the data you have entered in the input fields of the check-out page is processed by Klarna under its own responsibility for the purpose of processing the payment.

For the payment methods „PayPal“ and „advance payment“ offered, the processing is limited, without your further consent, to the transfer of the payment data to us or to PayPal. For the payment methods „purchase on account“, „instalment purchase“, „credit card“, „direct debit“ or „Sofort-Überweisung“ offered, the following personal data in particular is processed by Klarna for the purpose of processing the payment and for identity and credit checks:

• Contact information: names, addresses, date of birth, gender, e-mail address, telephone number, mobile number, IP address, etc.
• Information for processing the order: product type, product number, price, etc.
• Payment information: debit and credit card data (card number, expiry date and CCV code), invoice data, account number, etc.

If the payment method „purchase on account“ or „instalment purchase“ is selected, Klarna collects and uses personal data and information about your previous payment behaviour in order to decide whether the requested payment method will be granted to you. In addition, probability values for your future payment behaviour (so-called scoring) are used. The scoring is calculated on the basis of scientifically recognised mathematical and statistical procedures.

Further information and Klarna's applicable data protection provisions can be found at: Klarna data protection provisions (PDF)

Model privacy policy by Anwaltskanzlei Weiß & Partner