Data protection

INTRODUCTION

This data protection declaration clarifies the type, scope and purpose of the collection and use of personal data on the website www.hild-radwelt.de (hereinafter "website") by Hild Radwelt GmbH & Co. KG (hereinafter "We "Or" us "). We are responsible for the processing of personal data on this website, unless this data protection declaration contains different information.

Personal data is information with the help of which a person can be determined, i.e. information that can be backed back to one person. This typically includes the name, the email address or the telephone number. In addition, purely technical data that can be assigned to a person can also be regarded as personal data.

Contact details of the person responsible:

Hild Radwelt GmbH & Co. KG
Mr. Thomas Merkel
Engesserstr. 9
79108 Freiburg
Telephone: 0761/282950
E-mail: info@hild-radwelt.de

Contact details of the data protection officer
Our data protection officer can be reached at the following contact details:

Wagner data protection
Mr. Peter Wagner
E-mail address: dsb@wagner-datenschutz.de

Your rights
You have the right, free of charge about the personal data stored by you information To get (from the second information within 12 months we can raise a fee, provided there has been no new facts). In addition, they have the right to Correction incorrect data, the right that Restriction of processing to request from too extensive data and the right to deletion of illegally processed or long -stored personal data (provided that no legal obligation to retention and no other reasons in accordance with Art. 17 Para. 3 GDPR). In addition, you have the right to transfer all data you handed over to us in a common file format (Right to data portability).

As far as they also have a against individual procedures Right to object to the processing we point out as part of the description of the individual procedures.

To exercise your rights, an email to dsb@wagner-datenschutz.de is sufficient

In addition, they also have that Law on a complaint with a data protection supervisory authority.

Voluntariness of the information of data
The provision of your personal data on this website is generally neither prescribed by law nor contractually. You are not obliged to submit personal data on this website, unless we point out this in individual cases in this data protection declaration. Nevertheless, the provision of the functions of this website and the implementation of an order requires the processing of your personal data.

General information on cookies
Cookies are small text files that are saved on your end device by the browser used on your end device. In this way, you can "recognize" individual services of a website and "remember" what settings you have made. This serves on the one hand of the user-friendliness of websites and thus the users (e.g. storage of login data). On the other hand, cookies serve to record statistical data from the website and use the data obtained in this way for analysis and advertising purposes.

Some cookies are automatically deleted from your end device as soon as you leave the website (so-called session cookie). Other cookies are saved for a certain period of time, which does not exceed for two years (persistent cookies). We also use so-called third-party cookies that are managed by third parties to offer certain services.

You can influence the use of cookies. Most browsers have an option with which the storage of cookies is restricted or completely prevented. However, it is pointed out that the use and in particular the comfort of use are restricted without cookies.

Overview of the procedures
On this website, personal data is processed as part of the following procedures:

Order of goods
Newsletter
Contact
Server log files
Google Analytics including information on cookies
Google Maps API

1. Order of goods

If you want to order something on our website, you will be asked to enter a number of personal data. Salutation, last name, first name, e-mail address, street, zip code and location, billing address (street, house number, zip code, location, state), delivery address (street, house number, plz, location, state), payment methods, e- Mail address and date of birth. Optionally, you can still specify your phone number. We need this information to carry out the contract with you. Optionally, you can still specify the preferred payment method.

As part of the implementation of an order, we pass your personal data to our logistics service providers and - depending on the desired payment method - to payment service providers or your bank in order to carry out the contract with you.

Legal basis
The account data and the order data are processed on the basis of Art. 6 Para. 1 lit. b GDPR. This permission would allow the processing of personal data for the purposes of the fulfillment of a contract.

Duration of data storage
The personal data stored as part of the goods order will be deleted if you have received the goods and the warranty period has passed. This period is two years and begins with the delivery of the matter. In addition, we are legally obliged to keep transaction -bound data for ten years for tax reasons.

2. Newsletter

We use the email address you enter to send you the newsletter and other information tailored to your interests if you have consented to this.

Legal basis
This data processing is based on your consent, which you have given by registering the newsletter. According to Art. 6 Para. 1 Lit. a GDPR, data processing is permitted if you have given consent for data processing for one or more specific purposes. As part of the order of the newsletter, you have submitted the following declaration of consent:

□ I agree that my contact details will be used for the purpose of advertising for services and products related to bicycle retailers. In the future, I would like to be personally informed and advised on these new offers and services by email, telephone, SMS. I know that the collection, processing and use of my data takes place on a voluntary basis. My data is only passed on for the purposes of order data processing. I can revoke this consent at any time without adverse consequences for me with effect for the future. An email to: info@hild-radwelt.de is sufficient In the event of revocation, my data will be deleted with the receipt of my declaration of cancellation

Duration of data storage
The personal data stored as part of the newsletter registration will be deleted if you have successfully deregistered the newsletter.

3. Contact

When contacting us (for example by email or after using the contact form), the information you have given will be processed in order to process the request and in the event that follow-up questions arise.

Legal basis
The information in the context of contact is processed on the basis of Art. 6 Para. 1 and Lit. f GDPR. This permission would allow the processing of personal data to be processed as part of the "legitimate interest" of the person responsible, unless their fundamental rights, fundamental freedoms or interests predominate. Our legitimate interest is in the processing of contact. You can object to this data processing at any time if there are reasons that exist in your special situation and that speak against data processing. An email to the data protection officer is sufficient for this.

Duration of data storage
The personal data stored as part of the contact is deleted if the concern associated with contact is fully clarified and it cannot be expected that the specific contact will be relevant again in the future.

4. Server log files

With every access to the website, we automatically collect a number of technical data that is personal data.

These are:

IP address of the user
Name of the accessed website or file
Date and time of access
transferred amount of data
Message about successful access
Browser type and version
Operating system of the user
used device of the user, including Mac address
Referrer URL (the page previously attended)

This data is not merged with other personal data that you actively provide on the website. We collect server log files for the purpose of being able to administrator the website and recognize and ward off unauthorized access.

Legal basis
The personal data in log files are processed on the basis of Art. 6 Para. 1 lit. f GDPR. This permission would allow the processing of personal data to be processed as part of the "legitimate interest" of the person responsible, unless their fundamental rights, fundamental freedoms or interests predominate. Our legitimate interest consists in the easier administration and the possibility of recognizing and pursuing hacking. You can object to this data processing at any time if there are reasons that exist in your special situation and that speak against data processing. An email to the data protection officer is sufficient for this.

What are IP addresses?
IP addresses are assigned to each device (e.g. smartphone, tablet, PC) that is connected to the Internet. Which IP address this is depends on the internet access via which your device is currently connected to the Internet. It can be the IP address that your internet provider has assigned to you, for example if you are connected to the Internet via your WiFi at home. However, it can also be an IP address that your mobile phone provider has assigned to you or the IP address of a provider of a public or private W-LAN or other Internet access. In its currently most common form (IPV4), the IP address consists of four dials. Most of the time, as a private user, you will not use a constant IP address, since this is only temporarily assigned to you by your provider (so-called "dynamic IP address"). With a permanently assigned IP address (so-called "static IP address"), a clear assignment of the user data is in principle easier. Except for the purpose of persecution inadmissible access to our website, we generally do not use this data on a personal basis, but only evaluate on anonymous basis, which are favored by our websites, how many access is carried out every day and the like.

Our website already supports the new IPV6 addresses. If you already have an IPV6 address, you should also know the following: The IPV6 address consists of eight four blocks. As with the entire IPV4 address, the first four blocks are typically assigned to private users. However, the last four blocks of an IPV6 address (so-called "interface identifier") are determined by the end device, which you use for browsing on the website. Unless otherwise set in your operating system, the so-called Mac address is used. The MAC address is a kind of serial number that is awarded once for every IP-capable device. We therefore do not save the last four blocks of your IPV6 address. In general, we recommend that you activate the so-called "Privacy Extensions" on your end device in order to better anonymize the last four blocks of your IPV6 address. Most common operating systems have a "privacy extensions" function, which in some cases is not preset in terms of factory.

Duration of data storage
The server log files with the above data are automatically deleted after 30 days. We reserve the right to save the server log files longer if there are facts that suggest the acceptance of inadmissible access (such as trying hacking or a so-called DDOS attack).

5. Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc. ("Google"). Google Analytics sets several "cookies" to identify your browser. You can deactivate Google Analytics here click.

The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there. However, we have activated the IP anonymization function on this website, so that your IP address of Google is previously shortened within Member States of the European Union or in other contracting states of the agreement via the European Economic Area. Further information on implementing this function can be found here: https://developers.google.com/analytics/devguides/collection/analyticsjs/ip-anonymization] Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide other services related to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Legal basis
We rely on the processing of personal data by Google Analytics on Art. 6 Para. 1 lit. f GDPR. This permission would allow the processing of personal data to be processed as part of the "legitimate interest" of the person responsible, unless their fundamental rights, fundamental freedoms or interests predominate. Our legitimate interest is in the analysis of the use of our website. You can prevent the transmission of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link : http://tools.google.com/dlpage/gaoptout?hl=de.

Duration of data storage
The personal reference is made directly by the partial deletion of the IP addresses, so that only statistical data is stored.

6. Google Maps API

This website uses Google Maps API to visually present geographical information. Google also collects and processed data on the use of the MAPS functions.

Legal basis
We rely on the processing of personal data by Google Maps API on Art. 6 Para. 1 lit. f GDPR. This permission would allow the processing of personal data to be processed as part of the "legitimate interest" of the person responsible, unless their fundamental rights, fundamental freedoms or interests predominate. Our legitimate interest consists in the improvement of our website and our offer by presenting our accessibility. You can find more information on Google's data processing at https://policies.google.com/privacy?hl=de. There you can also change your personal settings.

Duration of data storage
The personal reference is made directly by the partial deletion of the IP addresses, so that only statistical data is stored.

7. Facebook

In principle, we only process personal data on this Facebook page if you interact with our Facebook page, e.g. if you make a comment, click a Like button or send us a message. The legal basis for data processing by us is on the one hand Art. 6 Para. 1 letter b) GDPR (e.g. if you send us a contract -relevant request). On the other hand, the data processing can also be carried out on the basis of your consent in accordance with Art. 6 Para. 1 letter a) GDPR (e.g. if you "like", comment or upload content on our website). You can revoke a granted consent at any time with effect for the future by deleting the comment or the relevant content. A revocation does not affect the legality of the processing due to the consent until the revocation. We also analyze the calls and interactions on our Facebook page. To do this, create Facebook usage profiles and only provide us with anonymous data. Please note that when using and calling our Facebook page, your personal data will also be processed by the operator companies of "Facebook". This is the one in Ireland

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbor
Dublin 2

as well as around the USA

Facebook, Inc.
1601 Willow Road
Menlo Park
California 94025

In addition to the processing described above, Facebook also processes your data for analysis and advertising purposes or to play personalized advertising. According to our level of knowledge, Facebook also uses cookies that store their usage behavior (also over various end devices). As a result, Facebook can play targeted advertising as part of its own platform and on third sides. You can find more information in the Facebook data protection declaration, which is available here:
https://www.facebook.com/about/privacy/ Facebook also offers the opportunity to object to certain data processing; In this regard, information and opt-out options can be found at https://www.facebook.com/settings?tab=ads. Please note that according to the Facebook data protection regulations, user data is also processed in the USA or other third countries. Facebook transfers user data only to countries for which a decision of the European Commission in accordance with Art. 45 GDPR or based on suitable guarantees according to Art. 46 GDPR. Facebook Inc. is certified under the EU-US Privacy Shield and thereby offers an adequate level of data protection in accordance with Art. 45 GDPR (https://www.privacyshield.gov/Porticipant?id=a2zt0000000gnywaac&status=Active).

With regard to data processing via our Facebook page, you have the option of asserting your concerns about Facebook. Further information can be found in Facebook's data protection declaration.