Data protection declaration
1) Information on the collection of personal data and contact details of the person in charge
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about how we handle your personal data when you use our website. Personal data are all data with which you can be personally identified.
1.2 The person responsible for data processing on this website in accordance with the German Data Protection Act (DSGVO) is Fallons GmbH, Karl-Gustav-Weg 17b, 22453 Hamburg, Germany, Tel.: +4915237277702, E-Mail: firstname.lastname@example.org. The person responsible for processing personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential contents (e.g. orders or inquiries to the responsible person), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.
2) Data collection during the visit of our website
When using our website for informational purposes only, i.e. when you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:
- Our visited website
- Date and time of access
- Amount of sent data in bytes
- Source/reference from which you reached the page
- Used Browser
- Operating system used
- IP address used (if necessary: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.
Hosting through Shopify
We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online store based on processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the above Shopify services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on behalf of Shopify. In the event that data is transferred to Shopify Inc. in Canada, an adequacy finding by the European Commission will ensure an adequate level of data protection. Further information on Shopify's data protection policy is available at the following website: https://www.shopify.de/legal/datenschutz
Any further processing on servers other than the aforementioned servers of Shopify shall only take place within the scope of the following notification.
To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies used by us are deleted after the end of the browser session, i.e. after closing your browser, deleted again (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser the next time you visit us (so-called persistent cookies).If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. The duration of the respective cookie storage can be seen in the overview of the cookie settings of your web browser.
Sometimes cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If individual cookies used by us also process personal data, the processing is carried out in accordance with Art. 6 Para. 1 letter b DSGVO either for the execution of the contract, in accordance with Art. 6 Para. 1 letter a DSGVO in the case of a granted consent or in accordance with Art. 6 Para. 1 letter f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or generally.
Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for each browser under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-mana ge-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Please note that the functionality of our website may be limited if cookies are not accepted.
5) Contact us
5.1 personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for contacting you and the related technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f DSGVO. If your contact is aimed at the conclusion of a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after final processing of your request. This is the case if it can be deduced from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal storage obligations to the contrary.
5.2 WhatsApp Business
We offer visitors to our Web site the opportunity to contact us through the WhatsApp news service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose we use the so-called "Business Version" of WhatsApp.
If you contact us via WhatsApp in connection with a specific business transaction (e.g. an order placed), we will store and use the mobile phone number you use at WhatsApp and - if provided - your first name and surname in accordance with Art. 6 para. 1 lit. b. DSGVO for processing and answering your request. Based on the same legal basis, we will ask you via WhatsApp to provide further data (order number, customer number, address or e-mail address) if necessary in order to be able to assign your inquiry to a specific transaction.
Use our WhatsApp contact for general inquiries (such as for service range, availability or our Internet presence), we store and use the mobile phone number you use at WhatsApp as well as - if provided - your first and last name in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the efficient and timely provision of the requested information.
Your data will only be used to answer your request via WhatsApp. Your data will not be passed on to third parties.
Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book stores only the WhatsApp contact data of users who have contacted us via WhatsApp.
6) Data processing when opening a customer account and for contract processing
In accordance with Art. 6 Para. 1 lit. b DSGVO, personal data will continue to be collected and processed if you provide us with this information for the purpose of executing a contract or opening a customer account. Which data is collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be done by sending a message to the above mentioned address of the responsible person. We store and use the data you provide us with for the purpose of contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by us.
7) Data processing for order processing
7.1 for the processing of your order we work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, if this is necessary for the delivery of the goods. Your payment data will be passed on to the assigned credit institute within the scope of the payment processing, as far as this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b DSGVO.
7.2 Use of payment service providers (payment services)
- Cash payment via Cash Payment
If you choose the payment method "Cash Payments", we will pass on your personal data (first name and surname, street, house number, zip code, city, date of birth, e-mail address and possibly telephone number) to the payment service provider Cash Payment Solutions GmbH, Dircksenstr. 40, 10178 Berlin for the purpose of payment processing in accordance with article 6 paragraph 1 letter b DSGVO, so that Cash Payment Solutions GmbH can provide you with an individually generated number or barcode (so-called "payment form") for the respective transaction. The transfer is only made as far as this is necessary for the processing of the payment method "cash payments". With the help of the payment form, it is possible for you to settle the respective transaction costs by paying cash in the business premises of partner companies of Cash Payment Solutions GmbH. The cash payment partner company sends the payment confirmation in real time, whereupon the shipping process can be started immediately if the goods are available immediately.
To process the payment method "Cash Payment", Cash Payment Solutions GmbH uses the credit institution NordFinanz Bank Aktiengesellschaft, Martinistraße 48, 28195 Bremen (hereafter "NordFinanz") and passes on your payment data to this credit institution in accordance with Art. 6 para. 1 lit. b DSGVO - as far as necessary for the execution of the cash payment.
Both Cash Payment Solutions GmbH and NordFinanz use your personal data exclusively for the purpose of implementing the payment method "cash payments" and to comply with money laundering regulations.
If a Klarna payment service is selected, the payment will be processed by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable payment processing, your personal data (name, surname, street, house number, postal code, city, gender, e-mail address, telephone number and IP address) as well as data in connection with the order (e.g. invoice amount, article, type of delivery) for the purpose of identity and credit assessment.
Klarna, if you have expressly agreed to this in accordance with Art. 6 para. 1 lit. a DSGVO during the ordering process. To which credit agencies your data can be passed on in this connection, you can see here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies The credit report may contain probability values (so-called score values).
If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values. Klarna uses the information obtained on the statistical probability of payment default to make a balanced decision on the establishment, execution or termination of the contractual relationship.
You may withdraw your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still process your personal data, if necessary, if this is necessary for the contractual payment processing.
Your personal data will be treated in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations for data subjects domiciled in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy or for data subjects domiciled in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.
In case of payment via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") within the scope of the payment processing. The data will be passed on in accordance with Art. 6 para. 1 lit. b DSGVO and only to the extent necessary for payment processing.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary to process your payment in accordance with the contract.
8) Web analysis services
Google (Universal) Analytics with Google Signals
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transferred to a Google server and stored there, and may also be transferred to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes the possibility of direct personal reference. Through the extension, your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a server of Google LLC.in the USA and shortened there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide us with further services related to the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google (Universal) Analytics is not combined with other Google data.
Google Analytics also enables the compilation of statistics with statements about the age, gender and interests of visitors to the site using a special function, the so-called "demographic characteristics", on the basis of an evaluation of interest-related advertising and by using information from third parties. This allows the definition and differentiation of user groups of the website for the purpose of target-group-optimized marketing measures. About the "Demographic characteristics" records cannot be assigned to a specific person.
All processing described above, in particular the setting of Google Analytics cookies for reading information on the terminal equipment used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 letter a DSGVO. Without this consent, the use of Google Analytics during your visit to our website will not take place.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie-Consent-Tool" provided on the website. We have agreed with Google for the use of Google Analytics has concluded a contract for processing orders, which obliges Google to protect the data of our site visitors and not to pass it on to third parties. For the transmission of data from the EU to the USA, Google refers to the so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA. Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
This website also uses the Google Signals service as an extension of Google Analytics. With Google Signals, we can have Google generate cross-device reports (so-called "cross device tracking"). If you have activated "personalized ads" in your settings in your Google Account and you have linked your Internet-capable devices to your Google Account, Google can analyze user behavior across devices and create database models based on this, provided that you have given the appropriate consent for the use of Google Analytics in accordance with Art. 6 para. 1 lit. a DSGVO (see above). The registrations and device types of all visitors to the site who were logged into a Google account and have performed a conversion are taken into account. The data shows, among other things, on which device you clicked on an ad for the first time and on which device the corresponding conversion took place. We do not receive any personal data from Google, but only statistics based on Google Signals. You have the option of deactivating the "personalized ads" function in the settings of your Google account and thus turn off the cross-device analysis. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de Further information about Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=de
9) Retargeting/ remarketing/ recommendation advertising
Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, hereby we advertise this website in Google search results, as well as on third party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f DSGVO.
Any further data processing will only take place if you have agreed with Google that your internet and app browsing history will be linked by Google to your Google Account and that information from your Google Account will be used to personalize ads you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your information together with Google Analytics data to create and define target group lists for cross-device remarketing For this purpose, your personal data will be temporarily linked by Google with Google Analytics data to form target groups. In the course of using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA.
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/
As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the
"Cookie-Consent-Tool" or alternatively follow the above described option to make an objection.
10) Tools and others
Applications for job advertisements by e-mail
On our website, we advertise currently vacant positions in a separate section, for which interested parties can apply by e-mail to the contact address provided.
In order to be included in the application process, applicants must provide us with all personal data required for a well-founded and informed assessment and selection together with their application by e-mail.
The required data includes general personal information (name, address, telephone or electronic contact details) as well as performance-specific proof of the qualifications required for a position.
Where appropriate, health-related information may also be required, which in the interests of social protection must be given special consideration in the person of the applicant under labor and social law.
Which components an application must contain in each individual case for it to be considered and in what form these components are to be sent by e-mail can be found in the respective job advertisement.
After receipt of the application sent using the e-mail contact address provided, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. For any queries arising in the course of processing the application, we will use either the e-mail address provided by the applicant with his or her application or a telephone number.
The legal basis for these processing operations, including contact for queries, is generally Art. 6 Para. 1 lit. b DSGVO (for processing operations in Germany in conjunction with § 26 Para. 1 BDSG), according to which the completion of the application procedure is considered to be the initiation of an employment contract.
As far as special categories of personal data within the meaning of Art. 9 para. 1 DSGVO (e.g. health data such as information on the status of severely disabled persons) are requested from applicants in the course of the application procedure, processing is carried out in accordance with Art. 9 para. 2 lit. b. DSGVO so that we can exercise the rights arising from labor law and social security and social protection law and fulfil our obligations in this regard.
Cumulatively or alternatively, the processing of the special categories of data may also be based on art. 9 para. 1 letter h. DPA if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnosis, care or treatment in the health or social field or for the management of systems and services in the health or social field.
If, in the course of the evaluation described above, the applicant is not selected or if an applicant withdraws his or her application prematurely, his or her data transmitted by e-mail and all electronic correspondence, including the original application e-mail, will be deleted after 6 months at the latest following notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our obligation to provide evidence in accordance with the regulations on the equal treatment of applicants.
In the event of a successful application, the data provided will be further processed on the basis of Art. 6 para. 1 lit. b DSGVO (in the case of processing in Germany in conjunction with § 26 para. 1 BDSG) for the purposes of carrying out the employment relationship.
11) Rights of the data subject
11.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the person responsible for processing your personal data, about which we inform you below:
- Right of access in accordance with Art. 15 DSGVO: you have in particular the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right of rectification, cancellation, restriction of processing, opposition to processing, complaint in the event of supervisory authority, the origin of your data, if it was not collected from you by us, the existence of automated decision making including profiling and, if applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees that exist pursuant to Art. 46 DPA when your data is transferred to third countries;
- Right of rectification under art. 16 DPA: You have the right to have incorrect data concerning you corrected and/or incomplete data held by us completed without delay;
- Right to deletion in accordance with Art. 17 DSGVO: You have the right to request the deletion of your personal data if the conditions of Art. 17 para. 1 DSGVO are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- Right to limit processing in accordance with Art. 18 DSGVO: You have the right to demand the limitation of the processing of your personal data for as long as the accuracy of your data which you dispute is checked, if you refuse to delete your data because of unauthorized data processing and instead demand the limitation of the processing of your data, if you require your data for the assertion, exercise or defense of legal claims, after we no longer require this data after the purpose has been achieved, or if you have lodged an objection for reasons relating to your particular situation, as long as it has not yet been established whether our justified reasons outweigh the objection;
- Right to information in accordance with Art. 19 DSGVO: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
- Right to data transferability in accordance with Art. 20 DSGVO: You have the right to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party, as far as this is technically feasible;
- Right to revoke consents granted in accordance with Art. 7 Para. 3 DSGVO: You have the right to revoke at any time with future effect any consent you have given to the processing of data. In the event of revocation, we will immediately delete the data concerned, unless further processing cannot be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation;
- Right to appeal pursuant to Art. 77 DSGVO: If you are of the opinion that the processing of personal data concerning you is contrary to the DSGVO you have the right, without prejudice to any other administrative or judicial remedy, to complain to a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place where the alleged infringement is committed.
11.2 RIGHT OF CANCELLATION
IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS DUE TO OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR SPECIAL SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO WITHDRAW YOUR CONSENT, WE WILL TERMINATE THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
12) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and - if relevant - additionally by the respective legal retention period (e.g. retention periods under commercial and tax law).
When personal data is processed on the basis of an explicit consent pursuant to Art. 6 para. 1 letter a DSGVO, this data is stored until the person concerned revokes his or her consent.
If there are legal retention periods for data which are processed within the scope of legal or similar obligations on the basis of Art. 6 Para. 1 letter b DSGVO, these data are routinely deleted after expiry of the retention periods, provided that they are no longer required for the performance of the contract or the initiation of the contract and/or we have no justified interest in their further storage.
When personal data are processed on the basis of Art. 6 Para. 1 letter f DSGVO, these data are stored until the person concerned exercises his or her right to object in accordance with Art. 21 Para. 1 DSGVO, unless we can prove compelling reasons for processing worthy of protection which outweigh the interests, rights and freedoms of the person concerned, or the processing serves to assert, exercise or defend legal claims.
In the case of processing of personal data for the purpose of direct advertising on the basis of Art. 6 para. 1 letter f DSGVO, these data are stored until the person concerned exercises his or her right to object in accordance with Art. 21 para. 2 DSGVO.
Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.