1. general

1.1 What is personal data
Personal data is information that discloses or may disclose the identity of the user. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.

1.2 Handling of personal data
Personal data is used exclusively for the establishment of the contract, content design, implementation or processing of the contractual relationship (Art. 6 I p. 1 b GDPR).

In addition, personal data will only be processed if we have received your consent to do so (Art. 6 I p. 1 a GDPR) or if the processing of the data is necessary for our legitimate interests and if the balancing of interests shows that there are no overriding interests, fundamental rights or freedoms on your part (Art. 6 I p. 1 f GDPR).

We may use processors to process your personal data, but we will not pass on your personal data to third parties beyond this.

The data will only be passed on to the shipping company commissioned with the delivery for the fulfillment of the contract, insofar as this is necessary for the delivery of ordered goods. In order to process payments, the payment data required for this purpose will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

Your personal data is processed exclusively within the EU, unless otherwise stated below.

1.3 Usage data
General technical information is collected when you visit the website. This includes the IP address used, time, duration of the visit, browser type and, if applicable, the originating page. For technical reasons, this usage data is registered in a log file and can be used and stored for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.

1.4 Registration data
Registration is required in order to make full use of the functions of our website. The registration data is collected through your corresponding entries and used for the specifically stated purpose in accordance with your consent (Art. 6 I p. 1 a GDPR).

1.5 Duration of storage
We only store your personal data after the end of the purpose for which the data was collected for as long as this is required by law (in particular tax law).

2. your rights

2.1 Information
You can request information from us as to whether we process your personal data and, if this is the case, you have a right to information about this personal data and to the further information specified in Art. 15 GDPR.

2.2 Right to rectification
You have the right to rectification of inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 GDPR.

2.3 Right to erasure
You have the right to obtain from us the erasure of personal data concerning you without undue delay. We are obliged to delete it immediately, in particular if one of the following reasons applies: Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed. You withdraw your consent on which the processing of your data was based and there is no other legal basis for the processing. Your data has been processed unlawfully. The right to erasure does not apply if your personal data is required to assert, exercise or defend our legal claims.

2.4 Right to restriction of processing
You have the right to obtain from us restriction of processing of your personal data if you contest the accuracy of the data and we therefore verify the accuracy, the processing is unlawful and you oppose the erasure and request the restriction of its use instead, we no longer need the data but you require it for the establishment, exercise or defense of legal claims, you have objected to processing of your data and it is not yet certain whether our legitimate grounds override your grounds.

2.5 Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or on a contract and the processing is carried out by automated means.

2.6 Right of revocation
If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

2.7 General information and right to lodge a complaint
You can exercise the above rights free of charge. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the state data protection officer.

3. data security

3.1 Data security
All data on our website is protected by technical and organizational measures against loss, destruction, access, modification and dissemination.

3.2 Sessions and cookies
To operate the website, we use cookies or server-side sessions in which data can be stored. We ensure that no personal data is transferred from sessions or through cookies without your express consent and that cookies are only used if this is technically necessary for the website (e.g. spam protection for the contact form, shopping cart function) and thus the consideration shows that there are no overriding interests on your part (Art. 6 I p. 1 f GDPR) or that you have given your express consent.

With your express consent, we use cookies to personalize content and advertisements, to offer social media functions and to analyze access to our website. With your consent, we may share information about your use of our website with our social media, advertising and analytics partners. Our partners may be able to combine this information with other data that the partners already have about you.

4. contact
If you have any questions about your rights and data protection, please contact the Executive Committee.