Data protection

1) Information about the collection of personal data and contact details of the person responsible

1.1We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Bediha Peukert, Am Heidbergbad 24, 28717 Bremen, Germany, Tel .: 0421/24286812, E-Mail: mail@BediaB.de. The person responsible for processing personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or TLS encryption. You can recognize an encrypted connection by the character string “https: //” and the lock symbol in your browser line.

2) Data collection when you visit our website

If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source / reference from which you came to the page
  • Used Browser
  • Used Operating System
  • IP address used (if necessary: ​​in anonymous form)

The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values ​​on an individual basis. Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings in your web browser.

In some cases, the cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies we use, processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the implementation of the contract, according to Art. 6 Para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

Please note that you can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of every browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4) Contact

When you contact us (e.g. using the contact form or email), personal data is collected. Which data is collected when a contact form is used can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f DSGVO. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b DSGVO. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention requirements.

5) Data processing when opening a customer account and for contract processing

According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide them to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We save and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with due regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we reserve the right to further use of your data as permitted by law became.

6) Comment function

As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the name of the commentator you have chosen will be saved and published on this website. Your IP address is also recorded and saved. The IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties by submitting a comment or posts illegal content. We need your e-mail address in order to contact you if a third party should object to your published content as unlawful. The legal basis for the storage of your data is Art. 6 Para. 1 lit. b and f DSGVO. We reserve the right to delete comments if third parties complain that they are illegal.

7) Use of customer data for direct mail

7.1 Sending the email newsletter to existing customers

If you have given us your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by e-mail. For this we have to according to § 7 Abs. 3 UWG do not obtain separate consent from you. In this respect, data processing takes place solely on the basis of our legitimate interest in personalized direct mail in accordance with Art. 6 Para. 1 lit. f DSGVO. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the person responsible named at the beginning. For this you only have to pay transmission costs according to the basic tariffs. After receipt of your objection, the use of your e-mail address for advertising purposes will be stopped immediately.

7.2 Notification of the availability of goods by email

If we offer the option in our online shop of selected, temporarily unavailable articles to inform you about the time of availability by e-mail, you can register for our e-mail notification service for the availability of goods. If you register for our e-mail notification service for the availability of goods, we will send you a one-time e-mail about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. The provision of further data is voluntary and may be used in order to be able to address you personally. We use the so-called double opt-in procedure to send this notification. This means that we will only send you a corresponding notification if you have expressly confirmed to us that you consent to receiving such a message. We will then send you a confirmation email asking you to confirm that you wish to receive such a notification by clicking on a corresponding link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a DSGVO. When you register for our e-mail notification service for the availability of goods, we save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to prevent possible misuse of your e-mail address at a later point in time to be able to understand. The data collected by us when registering for our e-mail notification service about the availability of goods are used exclusively for the purpose of informing you about the availability of a certain article in our online shop. You can unsubscribe from the e-mail notification service for the availability of goods at any time by sending a message to the person responsible mentioned above. After you have unsubscribed, your email address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration .

8) Data processing for order processing

8.1 – Transfer of image files for order processing by email

On our website, we offer customers the opportunity to commission the personalization of products by sending image files by email. The submitted image is used as a template for personalizing the selected product.

The customer can use the email address given on the website to send us one or more image files from the memory of the device used. We then collect, save and use the files transmitted in this way exclusively to produce the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the preparation and processing of the order, you will be explicitly informed about this in the following paragraphs. Any further transfer does not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Para. 1 lit. b DSGVO. After the order has been processed, the transmitted image files are automatically and completely deleted.

8.2 To process your order, we work together with the following service provider(s) who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of the payment processing, if this is necessary for the payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b DSGVO.

8.3 Transfer of personal data to shipping service providers

– Deutsche Post

If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will give your email address in accordance with Art. 6 Para. 1 lit. a GDPR to Deutsche Post before delivery of the goods for the purpose of agreeing a delivery date or to announce the delivery, provided that you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR only forward the name of the recipient and the delivery address to Deutsche Post.b DSGVO nur den Namen des Empfängers und die Lieferadresse an die Deutsche Post weiter. The transfer takes place only as far as this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Deutsche Post or the delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the person in charge named above or vis-à-vis Deutsche Post.

– DHL

If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will give your email address in accordance with Art. 6 Para. 1 lit. a GDPR to DHL prior to the delivery of the goods for the purpose of agreeing a delivery date or to announce the delivery, provided that you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR only forwards the name of the recipient and the delivery address to DHL. The transfer takes place only as far as this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider DHL.

– DPD

If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will give your email address and telephone number before the goods are delivered in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of agreeing a delivery date or to announce the delivery to DPD, provided that you have given your express consent in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR only forwards the name of the recipient and the delivery address to DPD. The transfer takes place only as far as this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DPD or the delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider DPD.

– UPS

If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will give your email address before the goods are delivered in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of agreeing a delivery date or to announce the delivery to UPS, provided that you have given your express consent in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR only forward the name of the recipient and the delivery address to UPS. The transfer takes place only as far as this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with UPS or the transmission of status information of the shipment delivery is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider UPS.

8.4 Use of payment service providers (payment services)

– Klarna

If a Klarna payment service is selected, the payment will be processed by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). In order to enable the processing of the payment, your personal data (first and last name, street, house number, zip code, city, gender, email address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, type of delivery) passed on to Klarna for the purpose of the identity and credit check, provided that you hereby pursuant to Art. 6 Para. 1 lit. a GDPR have expressly consented in the course of the ordering process. You can see here which credit agencies your data can be forwarded to:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, but is not limited to, address data. Klarna uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, implementation or termination of the contractual relationship.

You can revoke your consent at any time by sending a message to the person responsible for data processing or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.

Your personal details are processed in accordance with the applicable data protection regulations and in accordance with the information in Klarna’s data protection regulations for data subjects based in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

or for those affected who are based in Austriahttps://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy

treated.

– Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment in installments” via PayPal, we give your payment details to PayPal (Europe) S.a.r.l. as part of the payment process. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment in installments” via PayPal. For this purpose, your payment data may be processed in accordance with Art. 6 Para. 1 lit. f GDPR passed on to credit agencies on the basis of PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, but is not limited to, address data. For more information on data protection, including the credit agencies used, please refer to PayPal’s privacy policy:https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

– SOFORT

If you select the “SOFORT” payment method, payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we will send the information you provided during the ordering process along with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is passed on exclusively for the purpose of processing payments with the payment service provider SOFORT and only insofar as it is necessary for this. You can find more information about SOFORT’s data protection provisions at the following Internet address:https://www.klarna.com/sofort/datenschutz

8.5 Credit checks

– EuroTreuhand Inkasso

If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard our legitimate interest in determining the solvency of our customers. We transmit the personal data necessary for a credit check in accordance with Art. 6 Para. 1 lit. f GDPR to the following service provider:

EuroTreuhand Inkasso GmbH

Amsterdamer Str. 133b

50735 Köln

The credit report can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, but is not limited to, address data. We use the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the establishment, implementation or termination of a contractual relationship.

You can object to this processing of your data at any time by sending a message to the person responsible for data processing or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for contractual payment processing.

9) Use of Social Media: Videos

Use of Youtube Videos

This website uses the YouTube embedding function to display and play back videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The extended data protection mode is used here, which, according to the provider, does not start storing user information until the video (s) are played back. If the playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information from “Youtube”, these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive practices. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish to be assigned to your profile on YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 Para. 1 lit. f GDPR based on Google’s legitimate interests in displaying personalized advertising, market research and / or needs-based design of its website. You have the right to revoke to the creation of these user profiles, although you must contact YouTube to exercise this right. When using YouTube, personal data may also be transmitted to the servers of Google LLC. in the US.

Regardless of whether or not the embedded videos are played, a connection to the Google network is established each time this website is accessed, which can trigger further data processing operations beyond our control.

Further information on data protection at “Youtube” can be found in the Youtube terms of use at https://www.youtube.com/static?template=terms and in Google’s data protection declaration athttps://www.google.de/intl/de/policies/privacy

As far as legally required, we have your consent to the processing of your data described above in accordance with Art. 6 Para. 1 lit. a GDPR obtained. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website.

 

11) Rights of the Person Concerned

11.1 The applicable data protection law grants you the following rights of data subjects (information and intervention rights) vis-à-vis the person responsible with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:

  • Right to information in accordance with Art. 15 GDPR;
  • Right to rectification in accordance with Art. 16 GDPR;
  • Right to deletion in accordance with Art. 17 GDPR;
  • Right to restriction of processing in accordance with Art. 18 GDPR;
  • Right to information in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
  • Right to complain in accordance with Art. 77 GDPR.

11.2 REVOCATION

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR MAINLY LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE ANY TIME TO PROCESS YOUR PERSONAL DATA, FOR REASONS THAT WE GIVE UPON YOUR SPECIFIC SITUATION.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED. FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPULSORY REASONS FOR THE PROCESSING, THAT OUTSIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING OR EXPRESSION APPLIES.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY OBJECTIVE AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

12) Duration of storage of personal data

The duration of the storage of personal data is based on the respective legal basis, the processing purpose and – if relevant – additionally based on the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6 Para. 1 lit. a GDPR, this data is stored until the person concerned revokes his consent.

Are there any statutory retention periods for data that are required within the framework of legal or similar obligations on the basis of Art. 6 Para. 1 lit. b GDPR are processed, this data is routinely deleted after the retention period has expired, provided that it is no longer required for contract fulfillment or contract initiation and / or we have no legitimate interest in further storage.

When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the person concerned exercises his right of objection according to Art. 21 Para. 1 GDPR, unless we can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the person concerned exercises his right of objection according to Art. 21 Para. 2 GDPR.

Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

.