Data Protection Policy
Created on 22/05/2018
We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about how we handle your data.
1. Access Data and Hosting
You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file that documents the request and contains, for example, the name of the requested file, your IP address, date and time of access, the data volume transferred, and the requesting provider (access data).
These access data are evaluated solely for the purpose of ensuring the trouble-free operation of the site and improving our offer. This serves, pursuant to Art. 6(1)(f) GDPR, to safeguard our legitimate interests in a correct presentation of our offer. All access data are deleted no later than seven days after the end of your site visit.
Hosting services by a third party
As part of processing on our behalf, a third-party provider supplies hosting and website display services. This serves to safeguard our legitimate interests in the correct presentation of our offer. All data collected when using this website or in online shop forms as described below are processed on its servers. Processing on other servers takes place only as explained here.
This service provider is located in a country of the European Union or the European Economic Area.
2. Data Collection and Use for Contract Processing and When Opening a Customer Account
We collect personal data when you voluntarily provide it to us in the course of your order, when contacting us (e.g., via contact form or email), or when opening a customer account. Required fields are marked as such because in these cases we need the data to process the contract, handle your inquiry, or open the customer account, and you cannot complete the order and/or account opening or send the inquiry without providing them. The data collected are evident from the respective input forms. We use the data you provide pursuant to Art. 6(1)(b) GDPR to process the contract and handle your requests. After full performance of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiry of tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to further data use that is permitted by law and about which we inform you in this notice. You can delete your customer account at any time, either by sending a message to the contact option described below or via a function provided in the customer account.
3. Data Disclosure
For contract fulfillment pursuant to Art. 6(1)(b) GDPR, we pass on your data to the shipping company commissioned with delivery, insofar as this is necessary for delivering the ordered goods. Depending on which payment service provider you choose in the ordering process, we pass on the payment data collected for payment processing to the credit institution commissioned with the payment and, where applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect these data themselves if you create an account there. In this case, you must log in with your access data to the payment service provider during the ordering process. The privacy policy of the respective payment service provider applies.
We use a payment service provider based in a country outside the European Union. The transmission of personal data to this company takes place only insofar as necessary for contract fulfillment.
4. Email Newsletter and Postal Advertising
Email advertising with newsletter registration
If you register for our newsletter, we use the data required for this or separately provided by you to send you our email newsletter regularly based on your consent pursuant to Art. 6(1)(a) GDPR.
You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a link provided in the newsletter. After unsubscribing, we delete your email address unless you have expressly consented to further use of your data or we reserve the right to further data use permitted by law and of which we inform you in this notice.
The newsletter is sent within processing on our behalf by a service provider to whom we pass your email address for this purpose.
This service provider is located in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
Postal advertising and your right to object
We also reserve the right to use your first and last name and postal address for our own advertising purposes, e.g., to send interesting offers and information about our products by letter post. This serves to safeguard our legitimate interests in addressing our customers for advertising purposes pursuant to Art. 6(1)(f) GDPR.
5. Name and Address of the Controller
Controller within the meaning of the GDPR, other data protection laws applicable in the Member States of the European Union, and other provisions with a data protection character is:
tenziolabel Online Shop
Proprietors: Kasim Hamad, Marlon Hehl
Deutschenbaurstraße 28 1/2
86157 Augsburg
Phone: +49 (0)
Fax: +49 (0)
Email: Info@tenziolabel.com
Mobile: 015201794831
Email: Info@tenziolabel.com
Website: www.tenziolabel.com
6. Cookies and Web Analytics are disabled
Cookies are NOT ACTIVE and are not used in this shop.
To make our website attractive and to enable certain functions, to display suitable products, or for market research, we use so-called cookies on various pages. This serves, pursuant to Art. 6(1)(f) GDPR, to safeguard our legitimate interests in an optimized presentation of our offer. Cookies are small text files that are automatically stored on your device. Some cookies are deleted after the browser session ends (session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). You can find the storage duration in your web browser’s cookie settings. You can configure your browser to inform you about the setting of cookies and to decide individually on their acceptance or to exclude the acceptance of cookies for certain cases or in general. Instructions for cookie settings can be found in each browser’s help menu:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™: http://help.opera.com/Windows/10.20/de/cookies.html
If cookies are not accepted, the functionality of our website may be limited.
Google services references (DoubleClick, Analytics, AdSense, AdWords Remarketing): Where consent under Art. 6(1)(a) GDPR has been granted, the text describes possible use of Google cookies and processing, IP anonymization, opt-out options, and Privacy Shield certification details, including links for deactivation and further information.
7. Advertising via Marketing Networks
Google AdSense
Our website markets ad space from third parties and ad networks via Google AdSense. These ads appear in various places on this website. With consent under Art. 6(1)(a) GDPR, Google sets the DoubleClick cookie to display interest-based advertising using a pseudonymous user ID. Data collected for this purpose are deleted after the purpose ceases and after we end use of Google AdSense.
Google AdSense is an offer of Google LLC (www.google.de). Google LLC is headquartered in the USA. For this country there is an adequacy decision by the European Commission based on the EU-US Privacy Shield. A current certificate can be viewed here.
You can withdraw your consent at any time with effect for the future by deactivating the DoubleClick cookie via this link. You can also obtain information and set preferences via the Digital Advertising Alliance.
Google AdWords Remarketing
We advertise for this website in Google search results and on third-party websites via Google AdWords. With consent under Art. 6(1)(a) GDPR, a Google remarketing cookie is set when you visit our site to enable interest-based advertising based on pages you visit, using a pseudonymous cookie ID. Data collected for this purpose are deleted after the purpose ceases and after we end use of Google AdWords Remarketing.
Further processing occurs only if you have agreed with Google that your web and app browsing history is linked to your Google account and information from your Google account is used to personalize ads across the web. If you are logged into Google during your visit to our site, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. Your personal data are temporarily linked by Google with Google Analytics data to form audiences.
Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. You can withdraw your consent at any time by deactivating the remarketing cookie via this link or by using the Digital Advertising Alliance.
8. Social Media Plugins
Use of Social Plugins from Facebook, Instagram, Pinterest via the Shariff solution
Social buttons from social networks are used on our website. This serves to safeguard our legitimate interests in optimal marketing of our offer pursuant to Art. 6(1)(f) GDPR. To increase data protection, these buttons are not integrated as unrestricted plugins but only via an HTML link. This ensures that when a page of our website containing such buttons is called up, no connection is yet established to the servers of the provider of the respective social network.
If you click one of the buttons, a new browser window opens and calls up the page of the respective service provider where you can press, for example, the Like or Share button after logging in.
For the purpose and scope of data collection and further processing and use of the data by the providers, as well as contact options and your rights and settings to protect your privacy, please see the providers’ privacy notices:
http://www.facebook.com/policy.php
https://help.instagram.com/155833707900388
https://about.pinterest.com/de/privacy-policy
YouTube video plugins
Content from third-party providers is embedded on this website. These contents are provided by Google LLC (“Provider”). YouTube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
For YouTube videos embedded on our site, the extended privacy mode is enabled. This means no information about website visitors is collected and stored by YouTube unless they play the video. The embedding of videos serves to safeguard our legitimate interests in optimal marketing of our offer pursuant to Art. 6(1)(f) GDPR. For information on purpose and scope of data collection and further processing and use by Google, as well as your rights and settings to protect your privacy, see Google’s privacy information: http://www.google.com/intl/de/+/policy/+1button.html.
9. Sending Review Reminders by Email
Review reminder by Shopware
If you have given us your express consent during or after your order pursuant to Art. 6(1)(a) GDPR, we will transmit your email address to Shopware AG, Ebbinghoff 10, 48624 Schöppingen (www.shopware.de), so they can send you a review reminder by email.
You can revoke this consent at any time by sending a message to the contact option described below or directly to Shopware AG.
10. Data Protection Provisions for PayPal as a Payment Method
We have integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via PayPal accounts, which are virtual private or business accounts. PayPal also enables virtual payments via credit cards if a user does not maintain a PayPal account. A PayPal account is managed via an email address. PayPal enables online payments to third parties or receipt of payments. PayPal also acts as trustee and offers buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.à r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If the data subject selects “PayPal” as a payment option during the ordering process, personal data of the data subject are automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.
Personal data transmitted to PayPal usually include first name, last name, address, email address, IP address, telephone number, mobile number, or other data necessary for payment processing. Personal data related to the respective order are also necessary to execute the purchase contract.
The transmission of data is intended for payment processing and fraud prevention. We will transmit personal data to PayPal particularly if there is a legitimate interest in the transmission. Personal data exchanged between PayPal and us may be transmitted by PayPal to credit agencies. This transmission serves identity and credit checks.
PayPal may pass personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill contractual obligations or if the data are to be processed on behalf of PayPal.
The data subject may revoke consent to the handling of personal data at any time vis-à-vis PayPal. A revocation does not affect personal data that must be processed, used, or transmitted for mandatory (contractual) payment processing.
The current PayPal privacy policy can be retrieved at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
20. Payment Method: Data Protection Provisions for Sofortüberweisung
We have integrated components of Sofortüberweisung on this website. Sofortüberweisung is a payment service that enables cashless payment for products and services on the internet. It provides a technical process by which the online merchant immediately receives a payment confirmation, enabling immediate delivery of goods, services, or downloads after ordering.
Operator of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany.
If the data subject selects “Sofortüberweisung” as a payment option during the ordering process, personal data of the data subject are automatically transmitted to Sofortüberweisung. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.
When processing the purchase via Sofortüberweisung, the buyer transmits PIN and TAN to SOFORT GmbH. After a technical check of the account balance and retrieval of other data to verify coverage, Sofortüberweisung executes a transfer to the online merchant. The execution of the financial transaction is then automatically communicated to the merchant.
Personal data exchanged with Sofortüberweisung include first name, last name, address, email address, IP address, telephone number, mobile number, or other data necessary for payment processing. The transmission of data is intended for payment processing and fraud prevention. We will also transmit other personal data to Sofortüberweisung if there is a legitimate interest in the transmission. Personal data exchanged between Sofortüberweisung and us may be transmitted by Sofortüberweisung to credit agencies. This transmission serves identity and credit checks.
Sofortüberweisung may pass personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill contractual obligations or if the data are to be processed on behalf of Sofortüberweisung.
The data subject may revoke consent to the handling of personal data at any time vis-à-vis Sofortüberweisung. A revocation does not affect personal data that must be processed, used, or transmitted for mandatory (contractual) payment processing.
The current privacy policy of Sofortüberweisung can be retrieved at: https://www.sofort.com/ger-DE/datenschutzerklaerung-sofort-gmbh/
10. Contact Options and Your Rights
As a data subject, you have the following rights:
- Art. 15 GDPR: the right to obtain information about your personal data processed by us to the extent specified there;
- Art. 16 GDPR: the right to have incorrect or incomplete personal data stored by us corrected without delay;
- Art. 17 GDPR: the right to have your personal data stored by us deleted, unless further processing is required
– to exercise the right to freedom of expression and information;
– to comply with a legal obligation;
– for reasons of public interest; or
– for the establishment, exercise, or defense of legal claims; - Art. 18 GDPR: the right to restrict processing of your personal data, insofar as
– you contest the accuracy of the data;
– the processing is unlawful but you oppose deletion;
– we no longer need the data, but you need them for legal claims; or
– you have objected to processing pursuant to Art. 21 GDPR; - Art. 20 GDPR: the right to receive your personal data that you have provided to us in a structured, commonly used, machine-readable format or to request transmission to another controller;
- Art. 77 GDPR: the right to lodge a complaint with a supervisory authority. You can usually contact the supervisory authority of your habitual residence, workplace, or our company headquarters.
If you have questions about the collection, processing, or use of your personal data, or if you need information, correction, blocking or deletion of data, as well as revocation of consents granted or objection to a specific data use, please contact us directly using the contact details in our imprint.
Right to Object
Where we process personal data to safeguard our legitimate interests as part of a balancing of interests as explained above, you may object to this processing with effect for the future. If processing is for direct marketing purposes, you may exercise this right at any time as described above. If processing is for other purposes, you have a right to object only on grounds relating to your particular situation.
After you exercise your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. In that case we will no longer process your personal data for this purpose.