Data protection declaration
The following data protection declaration explains which personal data we collect from you, e.g. when you visit our website and how we use this data. The responsible authority for the collection, processing and use of your personal data within the meaning of the General Data Protection Regulation (GDPR) is:
René Bruder e.K.
Phone: +49 209 977 68140
Fax: +49 209 977 68166
External data protection officer according to Art. 37 EU-GDPR i.V.m. § 4f Abs. 1 S. 1 BDSG:
This is simply a translation of the original data protection declaration in German. German law applies at all time.
1. Who is affected by the General Data Protection Regulation?
It is generally possible to use our website without providing personal data. If personal data (e.g. name, address or e-mail addresses) is collected on our pages, it is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your explicit consent.
We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can be subject to security gaps. A complete protection of the data against access by third parties is not possible. The utilization of contact data published within the framework of the imprint obligation by a third party for the consignment of advertisements and information, which was not specifically requested, is herewith explicitly objected to. The operators of these pages expressly reserve the right to take legal action against unsolicited mailing or e-mailing of spam and other similar advertising materials.
If we process personal data, this means that we collect, store, use, transmit or delete it. This data protection declaration deals with personal data of interested parties and visitors to our website and/or customers.
2. Your personal data
2.1 What personal data do we collect?
We collect your personal data when you contact us, e.g. as an interested party or customer. In particular, if you create a customer account on our website, add products to your shopping cart, subscribe to our newsletter or request offers by telephone or otherwise contact us.
We also process personal data from publicly accessible sources in the event that this is necessary for one of our services. Personal data is also transmitted to us by other third parties (e.g. credit agencies). This concerns the following personal data:
Personal identification information: This includes information and details such as your name, address or other postal address, telephone number or e-mail address.
Data on your online behaviour and preferences: e.g. IP addresses, unique identifiers of mobile devices, data on your visits to our website (payment methods, shopping carts, purchase transactions).
2.2 Are you obliged to transmit your personal data to us?
As part of our business relationship, we require the following personal data from you:
- Data required for the establishment and performance of business relationships.
- Data necessary for the fulfilment of the associated obligations.
- Data which we are legally obliged to collect.
Without this personal data, we are generally not in a position to enter into or execute a contract with you.
3 What do we process your data for and on what legal basis does this take place?
3.1 Performance of contract
In order to fulfil our contracts to your complete satisfaction, we must process your data. This also applies to pre-contractual information which you send us, e.g. as part of the checkout when selecting the method of payment.
3.1.1 Order processing
In order to process the product delivery, we require contact information such as telephone number or e-mail address as well as billing address and/or your delivery address.
3.1.2 Forms for air volume calculation, financing requests, complaints or general contact
The data collected is visible in the form and limited to the data required for processing the services. You can also contact us by telephone at +49 209 97768140 or by e-mail at firstname.lastname@example.org .
3.2 Use of data with your consent
If you have given us permission to process personal data for certain purposes, the processing of this data is lawful. However, you can revoke your consent at any time. This also applies to the revocation of declarations of consent that you gave us before the GDPR (General Data Protection Regulation) became law, i.e. before 25 May 2018. The revocation of the consent does not affect the legality of the data processed until the revocation.
3.2.1 Creation of a customer account or telephone contact
If you create a user account on our website or contact us by telephone, we will store your personal data such as name, address and contact information after your consent.
You can register for our newsletter on our website. In this newsletter we inform you regularly about us and our offers.
To receive the newsletter we need a valid e-mail address. This data will only be used for sending the newsletter and will not be passed on to third parties.
For the dispatch of the newsletter we use the so-called double opt-in procedure, i.e. we will only send you our newsletter after you have expressly confirmed to us that you wish to make use of the newsletter service. We will then send you an e-mail and ask you to confirm that you wish to receive our newsletter by clicking on the link contained therein. You can revoke your consent to the storage of data, e-mail address and their use to send the newsletter at any time. The revocation can be made via a link in the newsletter itself, on www.gastroplus24.de/newsletter or by e-mail to the following e-mail address: email@example.com.
3.2.3 Shop reviews
In order to offer our customers the possibility to evaluate, we integrated the evaluation software of the independent evaluation service provider Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Köln, Germany, into our website.
You can revoke your consent regarding the receipt of the e-mails and the passing on of order data in your customer account at any time. Alternatively, you can revoke your consent by sending an e-mail to firstname.lastname@example.org .
3.3 Processing on the basis of legitimate interests
3.3.1 Securing the operation of our website
For technical reasons, your browser automatically sends data to our web server during data transmission (e.g. when calling up a page from our website). This includes date and time of access, URL of the referring website, which file was accessed, amount of data sent, browser type and version, operating system and your IP address. These data - separated from other data that you enter when using our website - are stored exclusively for IT security purposes and deleted after one week at the latest. These data are not assigned to a specific person.
This procedure protects both you and us from illegal activities. If this information is passed on to third parties, we will also ensure that it is deleted in due time in accordance with the applicable General Data Protection Regulation.
3.3.2 Web analysis and advertising
In order to optimise our product range, product presentation and user guidance in our online shop and to adapt them to your needs, we and third-party service providers commissioned by us process the following data for the purpose described in each case. Information for this purpose is often stored in so-called cookies:
What are cookies? These are small files that your browser stores on your device in a directory provided for this purpose. These cookies can be used, for example, to determine whether you have visited a website before. Most browsers automatically accept cookies. However, you can set your browser in a way that no cookies are saved or explicit consent is required before saving a cookie. You can also delete cookies that have already been set at any time. However, please note that the deactivation of cookies may lead to restrictions in the use of our website.
184.108.40.206 Bing Ads
This website uses "Bing Ads", a program of the Microsoft Corporation, Microsoft Way Redmond, WA 98052-7329, USA, using the so-called Universal Event Tracking (UEN) for the implementation of remarketing and closing tracking.
For this purpose, a cookie is placed on the website visitor's computer when he reaches our website via the Bing or Yahoo search engines. The data is collected and stored in an anonymous form. By using the remarketing function, the user is presented with offers specifically tailored for him in a later search on one of the above-mentioned search engines. You can call up Microsoft's data protection conditions for handling collected data under the following link: https://privacy.microsoft.com/de-de/privacystatement/. Bing Ads can be deactivated at any time. Please follow the instructions: http://choice.microsoft.com/de-DE/opt-out.
220.127.116.11 Google Adwords
On our website we use the online advertising program "Google AdWords" and in this context conversion tracking. Google Conversion Tracking is an analysis service provided by Google Inc.,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google".
When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not expired, Google and we may recognize that you clicked on the ad and were directed to that page. Each Google AdWords customer receives a different cookie. Thus, there is no way that cookies can be tracked through AdWords customer websites.
The information collected with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were directed to a page with a conversion tracking tag. However, we do not receive information that personally identifies users. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR for the legitimate interest in targeted advertising and the analysis of the effect and efficiency of this advertising.
18.104.22.168 Google Dynamic Remarketing
On our website we use the dynamic remarketing function of "Google AdWords", a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This technology enables us to automatically generate targeted advertisements after you visited our website. The ads are based on the products and services you clicked on last time you visited our website.
Cookies are also used to create interest-based advertisements. Google normally stores information such as your web request, IP address, browser type, browser language, the date and time of your request. This information is used only to identify the web browser on a particular computer. They cannot be used to identify a person. If you do not want to receive user-based advertising from Google, you can deactivate advertisements by using Google's ad preferences.
22.214.171.124 Google Analytics
This website uses "Google Analytics", a web analysis service provided by Google Inc. "("Google"). Google Analytics also uses so-called cookies. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. At this point, we expressly point out that demographic characteristics such as age or gender are also processed.
Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google Inc. under any circumstances.
You can object to the data collection by Google at any time under the following link: https://support.google.com/analytics/answer/6004245?hl=de.
A prerequisite for the legally compliant use of "Google Analytics" is the anonymization of the IP addresses of the users by including the function "anonymous IP". By using the code extension, the last 8 bits of the IP addresses are deleted and thus made anonymous. Thus only a rough localization of the IP address is possible.
4. Who receives your data?
4.1 Within the company
Within the company, access to your data is only granted to those persons/departments who need it to safeguard our legitimate interests or to fulfil our contractual and legal obligations.
4.2 Outside the company
We principally guarantee that the transmission of data is carried out in accordance with data protection requirements and that your personal data is protected. We ensure that only third parties have access to personal data that is necessary for the performance of individual tasks. Under no circumstances will we sell your personal data to third parties.
In order to fulfil our contractual obligations, we cooperate with other companies. These include:
- Logistics service provider: In order to process the delivery of the ordered goods and return processes, names, contact and address information as well as information about the ordered products and payment method are provided.
- Payment service provider: In order to check and determine the payment options offered and to process the payment, personal information is transmitted within the framework of the implementation of the contractual obligations. GastroPlus24 cooperates in this context with the following payment service providers: Amazon Pay, PayPal and Klarna (immediate transfer).
If you choose the payment method "Amazon Pay", the payment is processed via the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter referred to as "Amazon Payments"), to whom we pass on the information you provided during the ordering process, together with the information about your order, in accordance with Art. 6 para. 1 lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. You can find more information about Amazon Payments' data protection regulations at the following link: https://pay.amazon.com/de/help/201751600.
Within the framework of the cooperation with PayPal, PayPal (Europe) S.à.r.l. et Cie; S.C.A.; 22-24 Boulevard Royal; L-2449 Luxembourg, this is not an order processing relationship, as PayPal is not a data processor for merchants. PayPal processes the personal data received from the buyers only for the processing of the payment always on instruction of the buyer, thus not on behalf of the dealer (GastroPlus24). Here you will find detailed information: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE.
If you decide to go for the payment method PayPal, among other things the following personal data are seized by you:
- Information about registration and use
- Information on transactions and experience
- Personal data of transaction participants
- Personal data about friends and contacts
For more information on how PayPal processes your personal data, please visit: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE.
With the payment service provider Klarna (immediate transfer), Klarna Bank AB (publ); Sveavägen 46; 11134 Stockholm; Sweden, there is no order processing relationship within the meaning of the GDPR, as the service "immediate transfer” does not constitute a support service - no data is processed in the name of GastroPlus24. For this reason, a joint responsibility for the processing within the meaning of Art. 26 GDPR is also excluded. See also: https://www.klarna.com/sofort/business/haendler-support/geldwaeschegesetz/fragen-zur-auftragsdatenverarbeitung-hinsichtlich-einer-vereinbarung-fuer-eine-auftragsverarbeitung-nach-art-28-gdpr-sowie-den-technischen-und-organisatorischen-massnahmen/.
Customers who choose the payment method immediate transfer in the checkout process will pass on the following data to Klarna:
- Address data and contact information. Name, date of birth, title, billing and delivery address, e-mail address, mobile phone number, etc.
- Payment information: Debit and credit card information (card number, expiration date and CCV code), billing information, account number, etc.
The valid data protection regulations of Skrill can be called up under https://www.skrill.com/de/fusszeile/datenschutzbestimmungen/.
- Other service providers who support us: In order to fulfil the described purposes, further service providers used by us may receive data, provided that they fulfil special confidentiality requirements and have taken prescribed technical and organisational measures to protect your data. These can be, for example, companies in the categories IT services, printing services, financial services, telecommunications, consulting or sales and marketing.
In addition, we must disclose personal information to government institutions and authorities where required to do so by law or where a justified and lawful request (e.g., criminal prosecution) exists.
In order to protect your privacy, we have agreed to conclude a processing contract with "Tawk.to". According to Art. 28 GDPR, this contract states in writing that GastroPlus24 only cooperates with contract processors who offer sufficient guarantees that suitable technical and organisational measures will be carried out, that the processing will take place in accordance with the requirements of GDPR and that the rights of the person concerned will be protected. This contract becomes valid with the consent of the data protection guidelines of "Tawk.to". More information can be found at: https://www.tawk.to/terms-of-service/.
4.2.2 WhatsApp service
Our WhatsApp service enables our customers to quickly and easily accept offers and process complaints. "WhatsApp" is a service provided by WhatsApp Inc. (WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), which in turn is part of Facebook, Inc. GastroPlus24 is in no way responsible for the content and data shared, uploaded and processed via "WhatsApp" outside its own network. The data protection guidelines of "WhatsApp" apply here.
Your mobile number is not centrally stored from us and is deleted from the history of WhatsApp after order processing is complete.
4.3 Transfer of personal data to third countries
If we transfer data to third parties outside the European Economic Area (EEA), the protection of personal data is handled differently than in the EEA. In such cases we take security measures (e.g. special contractual clauses, carrying out audits) to ensure that your personal data is treated with the same care as in the EEA.
5. Right to information and revocation of data use
It is our concern to answer your questions as soon as possible. However, for a variety of reasons, it is possible that an answer from us may take several weeks from time to time. If it takes more than a month for us to reply to you, we will inform you about it.
What rights do you have as an interested party or customer of GastroPlus24 when it comes to processing your data? Details can be found in the respective provisions of the General Data Protection Regulation (Articles 15 to 21):
5.1 Right to information and correction
You have the right to receive information about the data stored by us at any time free of charge, to correct incorrect data and to have incomplete data complemented. Please contact our service team at email@example.com for this purpose. If we have forwarded your data to third parties, we will inform these third parties about the correction/addition - if this is required by law or necessary for operational reasons.
5.2 Right to deletion of your personal data
For the following reasons you have the right to an immediate deletion of your personal data:
- If your personal data is no longer required for the purposes for which it was collected.
- If you revoke your consent and there is no other legal basis.
- If you object to the processing and there are no overriding reasons worthy of protection for the processing.
- If your personal data has been unlawfully processed.
- If your personal data must be deleted in order to comply with legal requirements.
Please note that a claim for deletion depends on whether there is a legitimate reason that makes the processing of the data necessary.
5.3 Right to restrict the processing of your personal data
You have the right, for one of the following reasons, to request a restriction on the processing of your personal data:
- If you dispute the accuracy of your personal data and we have had the opportunity to verify its accuracy.
- If the processing does not take place lawfully and you demand a restriction of use instead of deletion.
- If we no longer need your data for the purposes of processing, but you need it to assert, exercise or defend against legal claims.
- If you have lodged an objection, as long as it has not yet been established whether your interests prevail.
5.4 Right of appeal
In individual cases it can happen that you are not satisfied with our answer to your request. Then you are entitled to file a complaint with the data protection officer of GastroPlus24 as well as with the responsible data protection supervisory authority.
5.5 Right of objection
We may process your data on the basis of legitimate interests or in the public interest. In these cases you have the right to object to the processing of your data. This also applies if we use your data for our direct advertising. Please note our separate note in point 7: "Information on the right of objection".
5.6 Right to data transferability
You have the right to receive the personal data you have given us in a transferable format. To do so, please contact firstname.lastname@example.org.
6 How long will your data be stored?
We do not store your data for longer than we need it for the respective processing purposes.
If the data are no longer required for the fulfilment of contractual or legal obligations, they will be deleted regularly. Unless their - temporary - storage is still necessary. Legitimate reasons for this can be e.g..:
- The fulfilment of commercial and tax retention obligations: The Commercial Code, the Revenue Code, the Banking Act, the Money Laundering Act and the Securities Trading Act are to be mentioned in particular. The time limits specified there for storage and documentation are up to ten years.
- Obtaining evidence for legal disputes within the framework of the legal statutes of limitations: Civil limitation periods can be up to 30 years, whereby the regular limitation period is three years.
7. Information on the right of objection
7.1 Right of objection in individual cases
You have the right to object to the processing of your personal data for reasons arising from your particular situation. The prerequisite for this is that the data processing is carried out in the public interest or on the basis of a weighing of interests. In the event of an objection, we will no longer process your personal data. Unless we can prove compelling reasons worthy of protection for the processing of these data, which outweigh your interests, rights and freedoms. Or your personal data is used to assert, exercise or defend legal claims.
7.2 Objection to the processing of your data for our direct marketing purposes
In individual cases we use your personal data for our direct advertising. You have the right to object to this at any time. In the event of an objection, we will no longer process your personal data for these purposes. The objection can be sent informally to email@example.com or by post to :
René Bruder e.K.
8. Liability for contents
The contents of our pages have been compiled with the greatest care. However, we cannot assume any liability for the correctness, completeness and topicality of the contents. As a service provider we are responsible according to § 7 Abs.1 TMG for our own contents on these pages according to the general laws.
According to §§ 8 to 10 TMG, we are not obliged as a service provider to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information in accordance with general laws remain unaffected by this. However, liability in this respect is only possible from the time of knowledge of a specific violation of the law. As soon as we become aware of such infringements, we will remove the content immediately.
9. liability for links
Our offer contains links to external websites of third parties on whose contents we have no influence. Therefore, we cannot assume any liability for these external contents. The respective provider or operator of the pages is always responsible for the contents of the linked pages. The linked pages were checked for possible legal infringements at the time of linking.
Illegal contents were not recognizable at the time of linking. However, a permanent control of the contents of the linked pages is not reasonable without specific evidence of a violation of the law. As soon as we become aware of any legal infringements, we will remove such links immediately.
The contents and works on these pages created by the site operators are subject to German copyright law. The duplication, processing, distribution and any kind of use outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of these pages are only permitted for private, non-commercial use. If as the content on this site was not created by the operator, the copyrights of third parties are respected. Contents of third parties are particularly marked as such. Should you nevertheless become aware of an infringement of copyright, please inform us. Such contents will be removed immediately upon becoming aware of any infringements of the law.
11. SSL certificates
In order to guarantee the greatest possible protection for your personal data, our website uses a so-called SSL certificate. SSL stands for "Secure Sockets Layer" and is used to encrypt data that is transported between the web server and the computer. As part of the GDPR, every website that requests personal data from users has been obliged to have a so-called SSL connection since 25 May 2018.
12. Server log files
We or our webspace provider (ALL-INKL.COM - Neue Medien München, Hauptstraße 68, 02742 Friedersdorf, Germany) collects data about each access to the offer - so-called server log files. These access data include:
- Name of the accessed website
- transferred data volume
- Date and time of retrieval
- IP address and the requesting provider
- Notification of successful retrieval
- Browser type and version
- Operating system of the user
- Referrer URL (the previously visited page)
The provider uses the log data only for statistical evaluations for the purpose of operation, security and optimisation of the offer. However, we reserve the right to subsequently check the log data if there is a justified suspicion of illegal use on the basis of specific indications.
Information on the log files of our provider can be found at: https://all-inkl.com/info/datenschutzinformationen/.
13. Reservation of changes
We reserve the right to change this privacy statement at any time, taking into account the legal requirements.
Status: June 2018