Privacy policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This only applies insofar as no other indication is made in the processing operations described below.

“Personal data” means any information relating to an identified or identifiable natural person.

Server log files

You can visit our websites without providing any information about yourself.

Each time our website is accessed, usage data is transmitted to us or to our web host/IT service provider by your internet browser and stored in log files (so-called server log files). The stored data includes, for example, the name of the page accessed, date and time of access, IP address, amount of data transferred, and the requesting provider.

Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offering.

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists—the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual commitments comparable to the EU Commission’s Standard Contractual Clauses.

Contact

Controller

Please contact us if you wish. The controller for data processing is:
Helmut Ohnheiser, Zusmarshauser Str. 25 A, 86637 Wertingen, Germany, +49 8272 9948 173, ohnheiser@eurosol24.com

Customer-initiated contact by email

If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to handle and respond to your inquiry.

If the contact is for the purpose of carrying out pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this processing is carried out on the basis of Art. 6(1)(b) GDPR.

If the contact is made for other reasons, this processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your inquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.

We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of making contact.

We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Use of Google Maps API Address Validation

We use the address validation service of Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; “Google”) on our website.

The data processing serves the purpose of checking your entries in our address forms in real time for input and spelling errors and, where applicable, supplementing missing data. In the event of incorrect entries, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there, and evaluated.

Among other things, the following information may be transmitted to and processed by Google: postal addresses (country, city, postal code, street, house number), email address, phone number.

Your data may also be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists—the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and thus committed to complying with European data protection principles.

Processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in having correct data to fulfill our contractual obligations. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

The data is processed by the provider separately and not merged with other data. It is deleted by the provider as soon as the status of the entered data has been determined, but no later than after 30 days.

Further information on Google’s terms of use and privacy can be found at: https://cloud.google.com/maps-platform/terms and https://www.google.de/policies/privacy/.

WhatsApp Business

If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).

Data processing serves to handle and respond to your inquiry. For this purpose, we collect and process your mobile number stored with WhatsApp, your name if provided, and any additional data you supply. We use a mobile device for this service whose address book contains only data of users who have contacted us via WhatsApp. Personal data is therefore not disclosed to WhatsApp unless you have already given your consent to WhatsApp.

Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, an adequacy decision by the EU Commission exists (TADPF). Meta Platforms Inc. is certified under the TADPF and thus committed to complying with European data protection principles. If the contact serves to carry out pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this processing is carried out on the basis of Art. 6(1)(b) GDPR.

If the contact is made for other reasons, this processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in providing a quick and easy means of contact and in responding to your inquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to processing based on Art. 6(1)(f) GDPR.

We use your personal data only to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Further information on the terms of use and privacy when using WhatsApp can be found at:
https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.

Customer accounts & orders

Customer account

When opening a customer account, we collect your personal data to the extent indicated there. Data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your customer account will then be deleted.

Collection, processing and transfer of personal data during orders

When placing an order, we collect and process your personal data only insofar as this is necessary to fulfill and process your order and to handle your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. Processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data is transferred, for example, to shipping companies, dropshipping/fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly observe legal requirements. The scope of data transfer is limited to a minimum.

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision (TADPF) exists. Shopify is not certified under the TADPF. This data transfer is based on contractual commitments comparable to the EU Commission’s Standard Contractual Clauses.

Marketing

Use of the email address for sending newsletters

We use your email address to send information and offers by newsletter, provided you have expressly consented. Data processing serves exclusively the purpose of direct advertising. For this purpose we process your email address and, where applicable, other data you voluntarily provided when signing up.

Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You can unsubscribe at any time using the corresponding link in the newsletter or by notifying us.

Your email address will then be removed from the distribution list. Despite removal from the distribution list, we may continue to store your email address in a so-called blacklist to prevent you from receiving future newsletter emails from us. This storage is based on Art. 6(1)(f) GDPR due to our and your legitimate interest in preventing the renewed use of your email address for sending our newsletter. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Merchandise management

Use of an external merchandise management system

We use a merchandise management system for contract processing within the scope of a data processing agreement. For this purpose, the personal data collected as part of the order is transmitted to easybill GmbH, Düsselstr. 21, 41654 Kaarst.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6(1)(b) GDPR.

Payment service providers

Use of PayPal

We use the PayPal payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website. The data processing serves the purpose of offering you payment via the service. By selecting and using payment via PayPal, the data necessary for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.

All PayPal transactions are subject to PayPal’s Privacy Policy, available at
https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of PayPal Checkout

We use PayPal Checkout (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg; “PayPal”). The data processing serves the purpose of offering you payment via the service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.

Cookies may be stored that enable recognition of your browser. This processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in offering a customer-oriented range of different payment methods. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal

For certain payment methods such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of default for a balanced decision about the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, which include address data, among other things. Your legitimate interests are taken into account in accordance with legal requirements. The data processing serves the purpose of credit assessment for contract initiation. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default where PayPal provides advance performance.

You have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying PayPal.

The provision of data is required for the conclusion of a contract with the payment method you have chosen. Failure to provide data means that the contract cannot be concluded using the chosen payment method.

Third-party providers

When paying via a third-party provider’s payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6(1)(b) GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Local third-party providers can include, for example:
Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Purchase on account via PayPal

For payment by invoice, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28–29, 10587 Berlin; “Ratepay”) in order to fulfill the contract with you using the chosen payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Ratepay may obtain a credit report based on mathematical-statistical procedures (probability or score values) using credit agencies as described above. The data processing serves the purpose of credit assessment for contract initiation. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default where Ratepay provides advance performance.

Further information on data protection and the credit agencies used by Ratepay can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in PayPal’s Privacy Policy at
https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Cookies

Our website uses cookies. Cookies are small text files stored in the internet browser or by the internet browser on the user’s computer system. When a user loads a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is revisited.

Cookies are stored on your device. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide on their acceptance on a case-by-case basis, as well as prevent the storage of cookies and transmission of the data they contain. Cookies already stored can be deleted at any time. However, we advise that you may not be able to use all functions of this website in full if you do so.

You can find out how to manage (including disable) cookies in the most important browsers at:

Chrome: https://support.google.com/accounts/answer/61416?hl=en
Microsoft Edge: https://support.microsoft.com/microsoft-edge/ (cookies help)
Mozilla Firefox: https://support.mozilla.org/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/

Technically necessary cookies

Unless otherwise stated in this privacy policy, we only use these technically necessary cookies in order to make our offering more user-friendly, effective, and secure. Cookies also enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be provided without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The use of cookies or comparable technologies is based on § 25(2) TDDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offering.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Use of the Shopify consent tool (Shopify Privacy & Compliance)

We use the consent tool “Shopify Privacy & Compliance” from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”). Shopify is affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The tool allows you to grant consents to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already granted. The processing serves the purpose of obtaining and documenting the necessary consents for data processing and thus fulfilling legal obligations.

Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision (TADPF) exists. Shopify is not certified under the TADPF. This data transfer is based on contractual commitments comparable to the EU Commission’s Standard Contractual Clauses.

Processing is carried out for compliance with a legal obligation on the basis of Art. 6(1)(c) GDPR.

Further information on data protection at Shopify can be found at https://www.shopify.com/legal/privacy.

Plugins and other services

Use of hCaptcha

We use the hCaptcha service of Intuition Machines Inc. (1065 SW 8th St #704, Miami, FL 33130, USA; “hCaptcha”) on our website within the scope of a data processing agreement.

hCaptcha protects our website against spam and abuse by automated access (bots). By implementing hCaptcha, we ensure that certain actions on our website are performed only by real people, thereby safeguarding the security and integrity of our online services.

When using hCaptcha, the following data may be collected and processed: user’s IP address, information about the end device used (e.g., browser and operating system), mouse movements and interactions on the website, time spent on the website, user input behavior.

Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists (TADPF). hCaptcha is certified under the TADPF and thus committed to complying with European data protection principles.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on data processing and privacy at hCaptcha can be found at https://www.hcaptcha.com/gdpr.

Use of Google Maps

We use the function for embedding Google Maps maps of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

The function enables the visual display of geographic information and interactive maps. When pages with embedded Google Maps maps are accessed, Google also collects, processes, and uses data from visitors to those pages.

Your data may also be transferred to the USA. For the USA, an adequacy decision (TADPF) exists. Google is certified under the TADPF and thus committed to complying with European data protection principles.

Further information on the collection and use of data by Google can be found in Google’s Privacy Policy at https://www.google.com/privacypolicy.html. There you can also change your settings in the Privacy Center to manage and protect your data processed by Google.

Use of YouTube

We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”). YouTube is affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

The function displays videos stored on YouTube in an iFrame on the website. The “enhanced privacy mode” option is enabled. This means that YouTube does not store information about visitors to the website. Only when you watch a video are information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. For the USA, an adequacy decision (TADPF) exists. YouTube is certified under the TADPF and thus committed to complying with European data protection principles.

Further information on the collection and use of data by YouTube and Google, your rights in this regard, and options to protect your privacy can be found in YouTube’s Privacy Policy at https://www.youtube.com/t/privacy.

Rights of data subjects and storage duration

Storage period

After complete performance of the contract, the data will first be stored for the duration of the warranty period and then, taking into account statutory—particularly tax and commercial—retention periods, deleted after the expiry of these periods unless you have consented to further processing and use.

Rights of the data subject

Where the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, rectification, erasure, restriction of processing, data portability.

In addition, under Art. 21(1) GDPR you have the right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.

Right to lodge a complaint with the supervisory authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data is unlawful.

You may submit a complaint, among others, to the supervisory authority responsible for us, which can be contacted at:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de

Right to object

Where the processing of personal data listed here is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to such processing with effect for the future.

After an objection has been made, processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or where the processing serves the establishment, exercise, or defence of legal claims.

Last updated: 22/10/2024