Privacy policy
Sect. 1 General
We will process your personal data (e.g. title, name, address, e-mail address, phone number, bank details, credit card number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarise yourself with the respective use of your data there.
Sect. 2 Inventory data
(1) Purpose of data processing
Your personal data you provide us during the ordering process are necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we would not be able to send you the goods without your address. For some payment methods we ask for the necessary payment data in order to pass them on to a payment service provider commissioned by us. Hence, the processing of your data collected during the ordering process is soley for the purpose of contract performance.
If you send us a request by e-mail or by using the contact form, etc. before concluding the contract, we process the obtained data to carry out pre-contractual measures and answer your questions about e.g. our products.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (b) of the GDPR.
(3) Recipient categories
Payment service provider, shipping service provider, hosting provider, if necessary merchandise management system, suppliers if necessary (drop-shipping).
(4) Duration of Storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).
The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
Sect. 3 Comments
(1) Purpose of data processing
Adding comments is possible. Your personal data (e.g. name/pseudonym, email address, website) collected in this scope will be solely processed for the purpose of publishing your comments.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.
(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on specific topics and products. The publication serves, among other things, the purpose of transparency and opinion-forming. Your interest in data protection is preserved, as you can publish your comment under a pseudonym.
(4) Duration of Storage
There is no provision for a certain storage period. You may request the deletion of your comment at any time.
(5) Right of objection
You have the right to object at any time to the processing of data which was performed according to Article 6 (1)(f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.
In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.
Sect. 4 Further information
Integration of the Trusted Shops Trustbadge
To display our valuations collected with Trusted Shops, the Trusted Shops Trust Badge is included on this website.
This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in the optimal marketing of our offer pursuant to Art. 6 (1) sentence 1 lit. f DSGVO. The Trustbadge and the services advertised are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is called, the Web server automatically stores a so-called server log file, which can be used, for example. Your IP address, date and time of the retrieval, transferred amount of data and the requesting provider (access data) contains and documented the call. These access data will not be evaluated and automatically overwritten within seven days after the end of your page visit.
Other personal data will only be transferred to Trusted Shops, as far as you have consented to this, decide after the completion of an order for the use of Trusted Shops products or have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.
Google AdWords with conversion tracking
In our website, we use the advertising component Google AdWords and the so-called conversion tracking. This is a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter referred to as "Google."
Certified under the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
guarantees Google that EU data protection standards will be respected even when processing data in the US.
We use the conversion tracking for the targeted application of our offer. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
If you click on an ad served by Google, the conversion tracking we use will store a cookie on your device. These so-called conversion cookies lose their validity after 30 days and do not serve your personal identification.
If the cookie is still valid and you visit a certain page of our website, both we and Google can evaluate that you have clicked on one of our ads placed on Google and that you have subsequently been redirected to our website.
Google uses the information gathered in this way to provide us with statistics about visiting our website. It also gives us information about the number of users who have clicked on our ad (s) as well as the subsequently accessed pages of our website. Neither we nor third parties using Google AdWords will be able to identify you in this way.
You can also prevent or restrict the installation of cookies by using the appropriate settings on your Internet browser. At the same time, you can delete previously saved cookies at any time. However, the necessary steps and measures depend on your specific Internet browser. If you have questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.
Furthermore, Google also offers
https://services.google.com/sitestats/de.html
http://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
Further information on this topic and in particular on the possibilities of preventing the use of data.
Google fonts
In our website we use Google fonts for displaying external fonts. This is a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter referred to as "Google."
Certified under the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
guarantees Google that EU data protection standards will be respected even when processing data in the US.
In order to enable the representation of certain writings in our Internet appearance, a connection to the Google server in the USA is set up when calling our Internet appearance.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.
Google can determine from which website your request has been sent and to which IP address the presentation of the font is to be transmitted by the connection to Google established when our website is called up.
Google offers below
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
Further information, in particular on the possibilities of preventing the use of data.
Sect. 5 Credit check
As far as we advance, e.g. if paying by invoice, we may obtain a credit report about you from the following companies: PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg. For this we will forward your personal data (such as name and address) to this company. On the basis of mathematical-statistical procedures, it is checked how high the risk of a payment default is. From the result of the credit check, we make the contract of sale dependent.
Sect. 6 Information about cookies
(1) Purpose of data processing
This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable, for example, the inserting of several products in a shopping basket.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This preserves your interest in data protection.
(4) Duration of Storage
The technically necessary cookies are usually deleted when the browser is closed. Persistent cookies have different validity period from a few minutes to several years.
(5) Right of objection
If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website. You can also delete persistent cookies at any time by changing your browser settings.
Sect. 7 Social plugins
(1) We use social plugins from facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. The plugins can be recognised by the Facebook logo or the addition of "Facebook social plugin”. If you click on the "Like" button or enter a comment, the corresponding information is sent directly from your browser to Facebook and stored there. Details on the handling of your personal data by Facebook and your relevant rights can be found in the privacy policy: Facebook. If you do not want Facebook to collect information about you via our web pages, you should log out of Facebook before you visit our website. You can prevent the storing of Facebook plugins also with add-ons for your browser completely, e.g. with the „Facebook blocker“ (Facebook).
(2) In connection with Twitter and the Re-Tweet functions, we use the so-called “social plugins” from twitter.com, operated by Twitter Inc. 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. The plugins are marked with a Twitter logo such as the blue "Twitter bird". If you use the Re-Tweet functions, the web pages you visit will be disclosed to third parties and linked to your Twitter account. For details on the use of your data by Twitter as well as on your rights and setting options to protect your personal data, please see the privacy policy: Twitter. If you do not like the fact that Twitter directly assigns the data collected over our web appearance to your Twitter account you must out-log on Twitter before your visit of our website. You can prevent the storing of Twitter plugins also with add-ons for your browser completely, e.g. with the script blocker (NoScript).
(3) On our website we use so-called "Social plugins” of the social network Google+, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, the USA (“Google”). The plugins are recognizable e.g. on buttons with the indication “+1” on white or colored background. An overview of Google plugins and their appearance you find here.
If you call a side of our web appearance, which such plugin contains, your browser develops a direct connection to the servers of Google. Contents of the plugins are conveyed by Google directly to your browser and merged into the side. By the integration Google receives the information that your browser called the appropriate side of our web appearance, even if you possess no profile with Google+ or are not logged in with Google+. This information (including your IP-address) is conveyed by your browser directly to a server of Google into the USA and stored there.
If you are logged in with Google+, Google can assign directly the visit of our website to your Google+ profile. If you interact with the plugins, for example operate the “+1” - button, the appropriate information will be conveyed directly to a server by Google and stored there. In addition the information is published on Google+ and is shown to your contacts on Google+.
Purpose and range of the data acquisition and the further processing and use of the data by Google as well as your relevant rights and attitude possibilities for the protection of your privacy you please take from the privacy statements of Google.
If you do not like the fact that Google directly assigns the data collected over our web appearance to your profile on Google+ you must out-log on Google+ before your visit of our website with Google+. You can prevent the loading of Google plugins also with add-ons for your browser completely.
Sect. 8 Newsletter
(1) Purpose of data processing
When registering for the newsletter, your e-mail address will be used for advertising purposes, i.e. the newsletter will inform you in particular about products from our product range. For statistical purposes we may evaluate which links are viewed in the newsletter. However, it is not recognizable for us, which concrete person has accessed the links.
You have expressly given the following consent separately or, as the case may be, in the course of the ordering process: Subscribe to the newsletter
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.
(3) Recipient categories
if necessary: newsletter provider
(4) Duration of Storage
Your e-mail address will only be stored for the respective duration of your registration.
(5) Right of revocation
You may revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you may unsubscribe as follows: By a log-out link in the newsletter
Sect. 9 Rights of the data subject
If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards the controller:
1. Right of access by the data subject
You may ask the controller to confirm whether your personal data is processed.
In the case of such processing, you may request the following information from the controller:
(1) the purposes of the processing of the personal data;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipient to whom the personal data have been or will be disclosed;
(4) the estimated period of time for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(5) the right to request from the controller to rectify or erase the personal data or the right to restrict the processing of personal data concerning the data subject or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) the right to all available information on the source of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) of the GDPR and - at least in these cases - meaningful information for your about the logic involved, as well as the consequences and intended effects of such processing.
As a data subject, you have the right to be informed whether the personal data concerning you are transferred to a third country or to an international organisation. In this regard, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
2. Right to rectification
You have the right to have corrected and/or completed your personal data from the controller if your personal data processed is incorrect or incomplete. The controller has to make the correction without delay.
3. Right to restriction of processing
You have the right to obtain from the controller restriction of processing where one of the following applies:
(1) if you contest the accuracy of the personal data relating to you for a period of time that enables the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to erase the personal data and request the restriction of the use of the personal data instead;
(3) the controller no longer needs the personal data for the purposes of processing, but you need them to establish, exercise or defend legal claims; or
(4) if you have lodged an objection against the processing in accordance with Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your grounds.
Where processing of personal data relating to you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the purpose of establishing, exercising or defending legal claims or for the protecting of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the conditions mentioned above, you will be informed by the controller before the restriction of processing is lifted.
4. Right to erasure
a) Obligation regarding erasure
You have the right to obtain from the controller the erasure of your personal data immediately and the controller is obliged to erase this data without delay where one of the following reasons applies:
(1) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
(2) you withdraw your consent on which the processing is based accordance to point (a) of Article 6 (1), or point (a) of Article 9 (2) GDPR and where there is no other legal ground for the processing;
(3) you submit an objection to the processing accordance to Article 21 (1) of the GDPR, and there are no legitimate reasons for the processing, or you lodge an objection against the processing accordance to Article 21 (2) of the GDPR;
(4) your personal data have been unlawfully processed;
(5) your personal data need to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
(6) your personal data have been collected in relation to the offer information society services referred to Article 8 (1);
b) Obligation to inform other controllers (third parties)
If the controller has made your personal data public and is obliged to erase them accordance to Article 17 (1) of the GDPR, he has to take reasonable steps, taking into account the available technology and the cost of implementation, including technical measures, to inform the controllers who process the personal data that you, as the person concerned, have requested the erasure of any links to, or copy or replication of those personal data.
c) Exceptions
The right to erasure does not apply to the extent that processing is necessary:
(1) for exercising the right of freedom of expression and information;
(2) for fulfilment of a legal obligation which requires processing by the law of the Union or of the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or the exercise of official authority transferred to the controller;
(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9 (2) as well as Article 9 (3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research or for statistical purposes in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 is likely to make it impossible or seriously impair the achievement of the objectives of such processing; or
(5) for the establishing, exercising or defending legal claims.
5. Notification obligation
If you have made use of your right to correct, erase or restrict the processing of your personal data, the controller is obliged to inform all recipients to whom the personal data have been disclosed of this correction or erasure of the data or limitation of the processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed of these recipients by the controller.
6. Right to data portability
You have the right to receive the personal data relating to you which you have provided to the data controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance by the controller, who has been provided with the personal data, where:
(1) the processing is based on a consent in accordance with the point (a) of Article 6 (1) or point (a) of Article 9 (2) or on a contract in accordance with the point (b) of Article 6 (1); and
(2) the processing is carried out using automated means.
In exercising this right, you also have the right to have your personal data are transmitted directly from one controller to another, as far as this is technically feasible. Freedoms and rights of other persons may not be affected thereby.
The right to data portability is not applicable to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority given to the data controller.
7. Right to object
For reasons arising from your particular situation, you have the right to object at any time to processing of personal data concerning you, which is carried out based on point (e) or (f) of Article 6 (1); this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you, unless the controller can prove that there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.
Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
Where you object to the processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right to object by automated means using technical specifications.
8. Right to withdraw the declaration of consent under Data Protection Act
You have the right to withdraw your declaration of consent under Data Protection Act at any time. The withdrawal of the consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal.
9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on you or which significantly impairs you in a similar manner.
This does not apply if the decision:
(1) is necessary for entering into, or performance of, a contract between you and a data controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions may not be based on special categories of personal data in accordance with Article 9 (1), unless point (a) or (g) of Article 9 (2) applies and appropriate measures to safeguard the rights and freedoms and your legitimate interests are in place.
Regarding the cases referred to in (1) and (3), the data controller has to take appropriate measures to safeguard the rights and freedoms and your legitimate interests, at least the right to obtain human intervention on the part of the data controller, to state his or her own position and to contest the decision.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this Regulation.
The supervisory authority with which the complaint has been lodged is to inform the complainant on the progress and the outcome of the complaint including the possibility of judicial remedy accordance to Article 78.
Responsible for data processing:
NANUKO e.K. Inhaber Dana Na
Heinrich Lersch Str. 7
40721 Hilden
Phone: +49 (0)211-78178968
info@nanuko.de
Contact details of our data protection officer:
Heinrich Lersch Str. 7
40721 Hilden
datenschutz@nanuko.de
Sect. 1 General
We will process your personal data (e.g. title, name, address, e-mail address, phone number, bank details, credit card number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarise yourself with the respective use of your data there.
Sect. 2 Inventory data
(1) Purpose of data processing
Your personal data you provide us during the ordering process are necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we would not be able to send you the goods without your address. For some payment methods we ask for the necessary payment data in order to pass them on to a payment service provider commissioned by us. Hence, the processing of your data collected during the ordering process is soley for the purpose of contract performance.
If you send us a request by e-mail or by using the contact form, etc. before concluding the contract, we process the obtained data to carry out pre-contractual measures and answer your questions about e.g. our products.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (b) of the GDPR.
(3) Recipient categories
Payment service provider, shipping service provider, hosting provider, if necessary merchandise management system, suppliers if necessary (drop-shipping).
(4) Duration of Storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).
The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
Sect. 3 Comments
(1) Purpose of data processing
Adding comments is possible. Your personal data (e.g. name/pseudonym, email address, website) collected in this scope will be solely processed for the purpose of publishing your comments.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.
(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on specific topics and products. The publication serves, among other things, the purpose of transparency and opinion-forming. Your interest in data protection is preserved, as you can publish your comment under a pseudonym.
(4) Duration of Storage
There is no provision for a certain storage period. You may request the deletion of your comment at any time.
(5) Right of objection
You have the right to object at any time to the processing of data which was performed according to Article 6 (1)(f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.
In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.
Sect. 4 Further information
Integration of the Trusted Shops Trustbadge
To display our valuations collected with Trusted Shops, the Trusted Shops Trust Badge is included on this website.
This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in the optimal marketing of our offer pursuant to Art. 6 (1) sentence 1 lit. f DSGVO. The Trustbadge and the services advertised are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is called, the Web server automatically stores a so-called server log file, which can be used, for example. Your IP address, date and time of the retrieval, transferred amount of data and the requesting provider (access data) contains and documented the call. These access data will not be evaluated and automatically overwritten within seven days after the end of your page visit.
Other personal data will only be transferred to Trusted Shops, as far as you have consented to this, decide after the completion of an order for the use of Trusted Shops products or have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.
Google AdWords with conversion tracking
In our website, we use the advertising component Google AdWords and the so-called conversion tracking. This is a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter referred to as "Google."
Certified under the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
guarantees Google that EU data protection standards will be respected even when processing data in the US.
We use the conversion tracking for the targeted application of our offer. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
If you click on an ad served by Google, the conversion tracking we use will store a cookie on your device. These so-called conversion cookies lose their validity after 30 days and do not serve your personal identification.
If the cookie is still valid and you visit a certain page of our website, both we and Google can evaluate that you have clicked on one of our ads placed on Google and that you have subsequently been redirected to our website.
Google uses the information gathered in this way to provide us with statistics about visiting our website. It also gives us information about the number of users who have clicked on our ad (s) as well as the subsequently accessed pages of our website. Neither we nor third parties using Google AdWords will be able to identify you in this way.
You can also prevent or restrict the installation of cookies by using the appropriate settings on your Internet browser. At the same time, you can delete previously saved cookies at any time. However, the necessary steps and measures depend on your specific Internet browser. If you have questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.
Furthermore, Google also offers
https://services.google.com/sitestats/de.html
http://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
Further information on this topic and in particular on the possibilities of preventing the use of data.
Google fonts
In our website we use Google fonts for displaying external fonts. This is a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter referred to as "Google."
Certified under the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
guarantees Google that EU data protection standards will be respected even when processing data in the US.
In order to enable the representation of certain writings in our Internet appearance, a connection to the Google server in the USA is set up when calling our Internet appearance.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.
Google can determine from which website your request has been sent and to which IP address the presentation of the font is to be transmitted by the connection to Google established when our website is called up.
Google offers below
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
Further information, in particular on the possibilities of preventing the use of data.
Sect. 5 Credit check
As far as we advance, e.g. if paying by invoice, we may obtain a credit report about you from the following companies: PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg. For this we will forward your personal data (such as name and address) to this company. On the basis of mathematical-statistical procedures, it is checked how high the risk of a payment default is. From the result of the credit check, we make the contract of sale dependent.
Sect. 6 Information about cookies
(1) Purpose of data processing
This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable, for example, the inserting of several products in a shopping basket.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This preserves your interest in data protection.
(4) Duration of Storage
The technically necessary cookies are usually deleted when the browser is closed. Persistent cookies have different validity period from a few minutes to several years.
(5) Right of objection
If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website. You can also delete persistent cookies at any time by changing your browser settings.
Sect. 7 Social plugins
(1) We use social plugins from facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. The plugins can be recognised by the Facebook logo or the addition of "Facebook social plugin”. If you click on the "Like" button or enter a comment, the corresponding information is sent directly from your browser to Facebook and stored there. Details on the handling of your personal data by Facebook and your relevant rights can be found in the privacy policy: Facebook. If you do not want Facebook to collect information about you via our web pages, you should log out of Facebook before you visit our website. You can prevent the storing of Facebook plugins also with add-ons for your browser completely, e.g. with the „Facebook blocker“ (Facebook).
(2) In connection with Twitter and the Re-Tweet functions, we use the so-called “social plugins” from twitter.com, operated by Twitter Inc. 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. The plugins are marked with a Twitter logo such as the blue "Twitter bird". If you use the Re-Tweet functions, the web pages you visit will be disclosed to third parties and linked to your Twitter account. For details on the use of your data by Twitter as well as on your rights and setting options to protect your personal data, please see the privacy policy: Twitter. If you do not like the fact that Twitter directly assigns the data collected over our web appearance to your Twitter account you must out-log on Twitter before your visit of our website. You can prevent the storing of Twitter plugins also with add-ons for your browser completely, e.g. with the script blocker (NoScript).
(3) On our website we use so-called "Social plugins” of the social network Google+, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, the USA (“Google”). The plugins are recognizable e.g. on buttons with the indication “+1” on white or colored background. An overview of Google plugins and their appearance you find here.
If you call a side of our web appearance, which such plugin contains, your browser develops a direct connection to the servers of Google. Contents of the plugins are conveyed by Google directly to your browser and merged into the side. By the integration Google receives the information that your browser called the appropriate side of our web appearance, even if you possess no profile with Google+ or are not logged in with Google+. This information (including your IP-address) is conveyed by your browser directly to a server of Google into the USA and stored there.
If you are logged in with Google+, Google can assign directly the visit of our website to your Google+ profile. If you interact with the plugins, for example operate the “+1” - button, the appropriate information will be conveyed directly to a server by Google and stored there. In addition the information is published on Google+ and is shown to your contacts on Google+.
Purpose and range of the data acquisition and the further processing and use of the data by Google as well as your relevant rights and attitude possibilities for the protection of your privacy you please take from the privacy statements of Google.
If you do not like the fact that Google directly assigns the data collected over our web appearance to your profile on Google+ you must out-log on Google+ before your visit of our website with Google+. You can prevent the loading of Google plugins also with add-ons for your browser completely.
Sect. 8 Newsletter
(1) Purpose of data processing
When registering for the newsletter, your e-mail address will be used for advertising purposes, i.e. the newsletter will inform you in particular about products from our product range. For statistical purposes we may evaluate which links are viewed in the newsletter. However, it is not recognizable for us, which concrete person has accessed the links.
You have expressly given the following consent separately or, as the case may be, in the course of the ordering process: Subscribe to the newsletter
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.
(3) Recipient categories
if necessary: newsletter provider
(4) Duration of Storage
Your e-mail address will only be stored for the respective duration of your registration.
(5) Right of revocation
You may revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you may unsubscribe as follows: By a log-out link in the newsletter
Sect. 9 Rights of the data subject
If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards the controller:
1. Right of access by the data subject
You may ask the controller to confirm whether your personal data is processed.
In the case of such processing, you may request the following information from the controller:
(1) the purposes of the processing of the personal data;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipient to whom the personal data have been or will be disclosed;
(4) the estimated period of time for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(5) the right to request from the controller to rectify or erase the personal data or the right to restrict the processing of personal data concerning the data subject or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) the right to all available information on the source of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) of the GDPR and - at least in these cases - meaningful information for your about the logic involved, as well as the consequences and intended effects of such processing.
As a data subject, you have the right to be informed whether the personal data concerning you are transferred to a third country or to an international organisation. In this regard, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
2. Right to rectification
You have the right to have corrected and/or completed your personal data from the controller if your personal data processed is incorrect or incomplete. The controller has to make the correction without delay.
3. Right to restriction of processing
You have the right to obtain from the controller restriction of processing where one of the following applies:
(1) if you contest the accuracy of the personal data relating to you for a period of time that enables the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to erase the personal data and request the restriction of the use of the personal data instead;
(3) the controller no longer needs the personal data for the purposes of processing, but you need them to establish, exercise or defend legal claims; or
(4) if you have lodged an objection against the processing in accordance with Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your grounds.
Where processing of personal data relating to you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the purpose of establishing, exercising or defending legal claims or for the protecting of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the conditions mentioned above, you will be informed by the controller before the restriction of processing is lifted.
4. Right to erasure
a) Obligation regarding erasure
You have the right to obtain from the controller the erasure of your personal data immediately and the controller is obliged to erase this data without delay where one of the following reasons applies:
(1) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
(2) you withdraw your consent on which the processing is based accordance to point (a) of Article 6 (1), or point (a) of Article 9 (2) GDPR and where there is no other legal ground for the processing;
(3) you submit an objection to the processing accordance to Article 21 (1) of the GDPR, and there are no legitimate reasons for the processing, or you lodge an objection against the processing accordance to Article 21 (2) of the GDPR;
(4) your personal data have been unlawfully processed;
(5) your personal data need to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
(6) your personal data have been collected in relation to the offer information society services referred to Article 8 (1);
b) Obligation to inform other controllers (third parties)
If the controller has made your personal data public and is obliged to erase them accordance to Article 17 (1) of the GDPR, he has to take reasonable steps, taking into account the available technology and the cost of implementation, including technical measures, to inform the controllers who process the personal data that you, as the person concerned, have requested the erasure of any links to, or copy or replication of those personal data.
c) Exceptions
The right to erasure does not apply to the extent that processing is necessary:
(1) for exercising the right of freedom of expression and information;
(2) for fulfilment of a legal obligation which requires processing by the law of the Union or of the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or the exercise of official authority transferred to the controller;
(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9 (2) as well as Article 9 (3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research or for statistical purposes in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 is likely to make it impossible or seriously impair the achievement of the objectives of such processing; or
(5) for the establishing, exercising or defending legal claims.
5. Notification obligation
If you have made use of your right to correct, erase or restrict the processing of your personal data, the controller is obliged to inform all recipients to whom the personal data have been disclosed of this correction or erasure of the data or limitation of the processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed of these recipients by the controller.
6. Right to data portability
You have the right to receive the personal data relating to you which you have provided to the data controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance by the controller, who has been provided with the personal data, where:
(1) the processing is based on a consent in accordance with the point (a) of Article 6 (1) or point (a) of Article 9 (2) or on a contract in accordance with the point (b) of Article 6 (1); and
(2) the processing is carried out using automated means.
In exercising this right, you also have the right to have your personal data are transmitted directly from one controller to another, as far as this is technically feasible. Freedoms and rights of other persons may not be affected thereby.
The right to data portability is not applicable to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority given to the data controller.
7. Right to object
For reasons arising from your particular situation, you have the right to object at any time to processing of personal data concerning you, which is carried out based on point (e) or (f) of Article 6 (1); this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you, unless the controller can prove that there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.
Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
Where you object to the processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right to object by automated means using technical specifications.
8. Right to withdraw the declaration of consent under Data Protection Act
You have the right to withdraw your declaration of consent under Data Protection Act at any time. The withdrawal of the consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal.
9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on you or which significantly impairs you in a similar manner.
This does not apply if the decision:
(1) is necessary for entering into, or performance of, a contract between you and a data controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions may not be based on special categories of personal data in accordance with Article 9 (1), unless point (a) or (g) of Article 9 (2) applies and appropriate measures to safeguard the rights and freedoms and your legitimate interests are in place.
Regarding the cases referred to in (1) and (3), the data controller has to take appropriate measures to safeguard the rights and freedoms and your legitimate interests, at least the right to obtain human intervention on the part of the data controller, to state his or her own position and to contest the decision.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this Regulation.
The supervisory authority with which the complaint has been lodged is to inform the complainant on the progress and the outcome of the complaint including the possibility of judicial remedy accordance to Article 78.
Responsible for data processing:
NANUKO e.K. Inhaber Dana Na
Heinrich Lersch Str. 7
40721 Hilden
Phone: +49 (0)211-78178968
info@nanuko.de
Contact details of our data protection officer:
Heinrich Lersch Str. 7
40721 Hilden
datenschutz@nanuko.de