Welcome to our website. We are happy that you have taken an interest in our company and our beautiful collection. The protection of your personal data is important to us. We process your data in accordance with the applicable legal provisions on the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) and the country-specific implementation acts that apply to our company.
Our privacy notices explain which personal data we collect via our website, what we use them for, when we erase them and the security measures we take to protect your data as far as possible. In addition, we disclose the respective legal framework that authorizes us to process data accordingly. Furthermore, you will be informed of your statutory rights in connection with the processing of your data. In order to provide the greatest amount of transparency on our data processing, you will first find general information about the processing of personal data and then more detailed information about the following topics:
• Data processing when surfing
• Advertisements on partner sites
• Contact options
• Purchasing in the online shop
• Payment systems/credit check/fraud prevention
Personal data is any information that enables the identification of a natural person. This includes, in particular, names, birthdays, addresses, telephone numbers, e-mail addresses but also your IP address.
Anonymous data exists if no personal relationship can be established to the user.
The responsible party within the meaning of data protection legislation is:
Urb Es COCONS 117
CIF Y5736321 C
Data collection/personal data
We collect personal data in accordance with the legal requirements. All personal data that we collect from you via the website will only be processed for the purposes described in greater detail below. This collection takes place within the framework of the legal provisions already named, more specifically, only with your consent.
Article 6 EU GDPR in particular specifies when data processing is allowed. BEATE ARENS collects data if:
• You have given consent (Article 6(1) lit. a EU GDPR)
• Processing is necessary for the performance of a contract/prior to entering into a contract (Article 6(1) lit. b EU GDPR)
• Processing is necessary for compliance with a legal obligation (Article 6(1) lit. c EU GDPR)
• Processing is necessary for the purposes of the legitimate interests of our company except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (Article 6(1) lit f. EU GDPR). In particular, we view an overriding, legitimate interest in data processing in the following cases:
• Fraud prevention and reduction of payment default
In order to minimise the risk of default, a credit check is conducted within the order process. This check determines which payment options are displayed. Subsequently, all orders that are transferred and suspected to be fraudulent will be examined by an employee and we will start taking the appropriate steps for fraud prevention.-.
• Protecting the security of our systems/investigating errors
For technical security reasons, particularly to protect against hacking attempts on our web server, data will be saved pursuant to Article 6(1) lit. f EU GDPR. No connection is established to individual users. In particular, we collect the following data:The web browser and operating system that is used/name of the internet service provider/information about the website you are visiting us from/information about the website/that you retrieve on our site, the date and time of your visit/the name of requested files/whether a file was transferred/the amount of data that is transferred/the IP address assigned by your internet service provider.
Of course, personal data that is collected will be kept confidential.
Storage period and criteria for determining this period
BEATE ARENS processes and saves your personal data only for the period required to achieve the particular processing purpose, or if there is a legal retention period (in particular for commercial or taxation purposes). Once this purpose has been achieved or the retention requirement has expired, the respective data will be routinely erased.
In certain cases it is necessary to transfer processed personal data in the course of data processing. In this respect, there are various recipient sites and recipient categories.
Personal data will be transferred to the following categories of recipients while respecting the legal requirements:
• Service providers as part of order fulfilment
• Delivery services, distributors, payment services
• Companies that conduct credit checks
• Companies that provide marketing services
• Service providers that are part of communication systems
• Government authorities and institutions to the extent that this is necessary or required
Safe transfer of your data
We employ the proper technical and organizational security measures to protect data that we save as best as possible from random or intentional manipulation, loss, destruction or access by unauthorized parties. The security level is constantly being monitored together with security experts and adjusted to new security standards.
Links to other providers
Our website also contains clearly recognizable links to the websites of other companies. If and when there are links to the websites of other providers, we have no influence on the contents. For this reason we cannot assume any warranty or liability for this content. The respective provider or operator of these websites are always responsible for the content of these websites. The linked websites were evaluated for possible statutory violations and recognizable violations of the law at the time of linking. We did not identify illegal content at the time of linking. It is not possible, however, to constantly control the content of linked websites without specific evidence that the law has been broken. Should violations become known, these links shall be removed immediately.
Rights of the data subject
We are happy to inform you in the following of the rights that may be available to you free of charge as an affected party.
• Access: We are happy to inform you about whether, and if so, which personal data of yours we have and are processing.
• Rectification: If we are storing personal data erroneously, then of course we will be happy to correct them.
• Restriction: You can restrict how much your personal data is processed under certain legal conditions. This is possible, for example, if you contest the accuracy of the data we have.
• Erasure: we are happy to erase personal data concerning you independent of our erasure policy upon individual request, provided that legal obligations allow us to do so.
• Objection: You can object to the data processing procedures we use to process your personal data, which we base on balancing the interests of all parties, by indicating the specific grounds for objection.
• Withdrawal: Of course, if you have given us consent to process data, you can also withdraw such consent with future effect without indicating the reason.
• Data portability: We are happy to make personal data concerning you which we have received as part of concluding a contract or through consent and based on an automated data processing procedure available to you or a third party named by you in a commonly-used, machine-readable format.
You can exercise your rights as a data subject at any time using the contact options provided or consult with us regarding data protection. Our Data protection organization is available at email@example.com
Data processing when surfing
If you sign up with BEATE ARENS as an existing customer in the online shop or in the app, we will associate this browser or this device for purposes such as authenticating, securing or individualizing your account. Subject to your settings, we can also allocate your account to other browsers or devices which you use for logging on to Twitter (or allocate the device or browser you have signed out of to other browsers or devices). The collected data is processed by the service providers defined in this paragraph, whereby transfer to third countries can be excluded. Furthermore, data is only processed and saved for the amount of time necessary to achieve the particular processing purpose or if there is a legal retention period (in particular for commercial or taxation purposes). Once this purpose has been achieved or the retention requirement has expired, the respective data will be routinely erased.
We base our activities on our legitimate interest in accordance with Article 6(1) lit. f of the EU GDPR. You can exercise your rights as a data subject at any time. If you have any questions, please contact us at firstname.lastname@example.org
Under current legislation you are entitled to object to the storing and use of this data at any time with future effect here.
Web analysis tools
This website uses Google Analytics, a web analysis service of Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files stored on your computer to help the website analyse how you use the site. The information generated by the cookie about your use of this website (including your shortened IP address) will usually be transmitted to and stored by Google on servers in the United States.
This website only uses Google Analytics with the “_anonymizeIp()” extension to ensure that IP addresses are anonymised by shortening them and preventing them from being directly linked to a particular individual. Google uses this extension to shorten your IP address within the member states of the European Union or in other states party to the Agreement on the European Economic Area prior to being transferred. Only in exceptional cases will your full IP address be transmitted to a Google server in the United States and shortened there. In these exceptional cases, this processing shall occur pursuant to Article 6(1) lit. f GDPR on the grounds of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. You can exercise your rights as a data subject at any time.
Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity for us and providing other services relating to website activity and internet usage. The IP address transmitted by your browser within the scope of Google Analytics will not be combined with other data from Google.
Contact form (Legal framework Article 6(1) lit. a EU GDPR)
There is a contact form on our website that can be used to initiate contact electronically. If you use the contact form to write us, we will process your data provided on the contact form in order to initiate contact and to answer your questions and requests. In these cases, the principle of data minimization and data avoidance will be observed in the following way: you will only have to provide the data we will need to initiate contact with you. That is your first name and surname, your e-mail address, the selected topic and the message field itself. In addition, your IP address will be processed out of technical necessity and as a legal safeguard. All other data is entered in voluntary fields and provided optionally (e.g. for a more individualised answer to your questions).
Making a purchase in the online shop (Article 6(1) lit. b EU GDPR)
We offer you two options for processing purchases in our online shop:
• Creating a customer account
• Placing an order as a guest
For both registration options, the shop requests the data necessary for processing an order and payment and for conducting a credit check and fraud prevention. This information is labelled with a star (*) as a required field:
• name, street, postcode, city, birthday and e-mail address
• Name, street, postcode and city will be requested separately for different delivery addresses
The user’s IP address, date and time of registration will also be stored (technical background data).
Creating a customer account:
If you to decide to register in our online shop, you have the benefit of viewing your order history, managing your historical data, participating in our card programme and saving your data for future orders.
Upon conclusion of the registration process, your data will be stored for use in our protected customer portal. Of course, the online shop offers you the option of changing your historical data and to use the “My Account” function.
You may withdraw your consent to using your account. If you do, your customer account in the shop will be deactivated.
Please note: we store the passwords you provide in encrypted form. Employees from our company cannot read this password. Therefore they cannot give you any information about your password if you forget it. In this case, use the “Have you forgotten your password?” function, which will send you a new, automatically generated password by e-mail. No employee is authorised to request your password on the phone or in writing. Therefore never reveal your password should you be asked for it.
Ordering as a guest:
You do not need to create a customer account in our shop if you decide to order from our online shop as a guest. If you order again, you will need to provide your data once again to process the order.
In addition, the data processing procedures in the “Data collection when surfing” rubric shall apply. Of course, you will have access to the contact options and the rights as a data subject described therein.
Payment systems (Article 6(1) lit. b and f EU GDPR)
You can select from different payment methods in our online shop. To that end, the respective data relevant to payment is collected so that your order and payment can be processed. In addition, your IP address will be processed out of technical necessity and as a legal safeguard.
Certain personal data, see required information, is required to fulfil orders. Unfortunately, without this data, we must refuse to enter into this contract, as we will not be able to perform it. The data will be transferred accordingly to our payment service provider to be processed.
Our payment system uses SSL encryption so that your data is protected when transferred.
The payment options available to you depend on the results from our credit check.
Thus, said: Enjoy our collection. We have put a lot of Love and Thought in it.