Data protection

Data protection

1) Introduction and contact details of the person responsible

1.1 We are pleased that you visit our website and thank you for your interest. In the following we will inform you about dealing with your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Fynch-Hatton Retail GmbH, Alsstr. 166, 41063 Mönchengladbach, Germany, Tel.: 02161567451028, email: datenschutz@fynch-haton.de. The person responsible for processing personal data is the natural or legal person who decides alone or together with others about the purposes and means of processing personal data.

1.3 The person responsible has appointed a data protection officer, which can be reached as follows: "Dabag Technology GmbH Erik Friemel (Ext. DSB), datenschutz@fynch-haton.de"

2) Data acquisition when visiting our website

2.1 When using our website, i.e. if you do not register or otherwise convey information, we only collect data that your browser transmits to the side server (so-called "server log files"). When you call up our website, we will collect the following data that is technically necessary for us to display the website:

- Our visited website

- Date and time at the time of access

- Quantity of the data sent in byte

- Source/reference, from which they came to the page

- used browser

- Operating system used

- used IP address (possibly: in anonymized form)

The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to check the server log files retrospectively, should indicate specific indications of illegal use.

2.2 This website uses an SSL-BZW for security reasons and to protect the transfer of personal data and other confidential content (e.g. orders or inquiries to those responsible) TLS encryption. You can see an encrypted connection to the string "https: //" and the castle symbol in your browser line.

3) Cookies

In order to make the visit of our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. In some cases, these cookies are automatically deleted after closing the browser (so-called "session cookies"), some of these cookies remain longer on their device and enable the storage of side settings (so-called "persistent cookies"). In the latter case, you can find the memory duration of the overview of the cookie settings of your web browser.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 Lit.B GDPR either for the implementation of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the event of consent or According to Art. 6 Para. 1 Lit. f GDPR to maintain our legitimate interests in the best possible functionality of the website and a customer -friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or can rule out the acceptance of cookies for certain cases or in general.

Please note that the functionality of our website may be restricted if you are not accepted.

4) Contact

4.1 Shopify Inbox

This website uses the live chat system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

The processing of personal data transmitted via the chat is either in accordance with Art. 6 Para. 1 Lit B GDPR, because it is required for contract initiation or implementation, or in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest the effective care of our side visitors.

Your data transmitted in this way will be deleted, subject to contradictory legal retention periods, if the affected fact is finally clarified.

In addition, for the purpose of creating pseudonymized usage profiles, further information can be collected and evaluated using cookies, which, however, do not serve your personal identification and are not merged with other data records. If this information has a personal reference, the processing is carried out in accordance with Art. 6 Para. 1 Lit. f GDPR on the basis of our legitimate interest in the statistical analysis of the user behavior for optimization purposes.

The setting of cookies can be prevented by corresponding browser settings. In this case, the functionality of our website will be restricted.

The data collection and storage for the purpose of creating a pseudonymized usage profile can contradict us at any time with effect for the future.

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, on K2P 1L4, Canada

We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.

In the event of a data transmission to Canada, an appropriate level of data protection is guaranteed by an adequacy decision by the European Commission.

4.2 EKomi

For evaluations, we use the services of the following provider: EKOMI Ltd., Markgrafenstraße 11, 10969 Berlin, Germany

Only on the basis of your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, we transmit your email address and, if necessary, other customer data to the provider so that he can contact you with an email.

You can revoke your consent at any time with effect for the future towards us or the provider.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.

4.3 WhatsApp business

We offer visitors to our website the opportunity to get in touch with us via the WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. For this we use the so-called "business version" from WhatsApp.

If you contact us on the occasion of a specific business (for example a placed order) via WhatsApp, save and use the mobile phone number you use at WhatsApp and- if provided- your first and last name in accordance with Art. 6 Para. 1 lit. b. GDPR for processing and answering your concern. On the basis of the same legal basis, we may ask you via WhatsApp to provide you with the provision of further data (order number, customer number, address or email address) in order to be able to assign your request to a specific process.

Use our WhatsApp contact for general inquiries (such as the range of services, for availability or for our website) Save and we use the mobile phone number you use at WhatsApp and- if provided- your first and last name in accordance with Art. 6 Para. 1 lit .

Your data will always only be used to answer your request via WhatsApp. There is no transfer to third parties.

Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transmits telephone numbers stored in the address book to a server of the parent company Meta Platform Inc. in the USA. For the operation of our WhatsApp business account, we use a mobile device, in the address book of which only the WhatsApp contact data of such users who have also come into contact with us via WhatsApp are also stored.

This ensures that every person whose WhatsApp contact details are stored in our address book is already when the app is used for the first time by accepting the WhatsApp terms of use into the transmission of his WhatsApp phone number from the address books of his chat contacts in accordance with Art. 6 para. 1 lit. a GDPR. The transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded.

The purpose and scope of the data collection and the further processing and use of the data by WhatsApp as well as your rights and setting options to protect your privacy can be found in the data protection information from WhatsApp: https://www.whatsapp.com/legal/?eea=1# Privacy policy

As part of the above -mentioned processing, data transmissions to Server from Meta Platforms Inc. can occur in the USA.

For data transmission to the USA, the provider has joined the EU-US-data protection framework (EU-US-EU Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

4.4 As part of the contact with us (e.g. via contact form or email), personal data will be processed-exclusively for the purpose of processing and answering your request and only to the extent required.

The legal basis for the processing of this data is our legitimate interest in answering your concern in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be seen from the circumstances that the affected fact is finally clarified and if there are no statutory retention obligations.

5) Data processing when opening a customer account

According to Art. 6 Para. 1 Lit. B GDPR, personal data will continue to be collected and processed to the extent required if you provide us with the opening of a customer account. The input mask of the corresponding form on our website can be found in which data is required for the opening of the account.

Your customer account is deleted at any time and can be made by a message to the above address of the person responsible. After deleting your customer account, your data will be deleted, provided that all contracts concluded over it are completely handled, there are no statutory retention periods and our partly no legitimate interest in the further storage continues.

6) Use of customer data for direct marketing

6.1 Registration for our email newsletter

If you register for our email newsletter, we will send you information about our offers regularly. Your email address is solely mandatory for sending the newsletter. The specification of further data is voluntary and is used to be able to address you personally. For the newsletter shipping, we use the so-called Double Opt-in that ensures that you will only receive newsletters if you have expressly confirmed your consent to the newsletter reception by pressing an email address provided to the specified email address.

By activating the confirmation link, you will give us your consent to the use of your personal data in accordance with Art. 6 Para. 1 Lit. a GDPR. Here we save your IP address entered by the Internet Service provider (ISP) as well as the date and time of registration in order to be able to understand a possible misuse of your email address at a later date. The data collected by us when registering for the newsletter are used strictly.

You can unsubscribe from the newsletter provided in the newsletter at any time via the link provided or by means of a message to the responsible responsible person. After deregistration, your e-mail address will be deleted immediately in our newsletter distributor, unless you have expressly consented to further use of your data or we are reserved for any further data usage that is legally permitted and about which we inform you in this declaration.

6.2 Deputy pone

Our e-mail newsletter is sent by this provider: Transponse Sp. Z o.o., Arkonska 6, A3, Gdansk (80-387), Poland

Based on our legitimate interest in an effective and user-friendly newsletter marketing, we pass on your data provided for the newsletter registration according to Art. 6 Para. 1 lit. f GDPR to this provider so that the newsletter shipping on our behalf.

Subject to your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the provider also carries out a statistical evaluation of success of newsletter campaigns using web beacons or tracking pixels in the emails sent, the opening rates and specific interactions with the content can measure the newsletter. The end device information (e.g. time of the call, IP address, browser type and operating system) is also charged and evaluated, but not merged with other databases.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded an order processing contract with the provider that protects our side visitors' data and prohibits a transfer to third parties.

6.3 shopping basket memories by email

In the event of the termination of your purchase from us, you have the option of being reminded of the content of your virtual shopping cart once before completing the order.

Your email address is mandatory for sending this memory. The specification of further data is voluntary and is used if necessary to be able to address it personally. For the mail order shipping, we use the so-called double opt-in procedure, which ensures that you will only receive a notification if you have expressly confirmed your consent to us by pressing an email address provided to the specified email address.

By activating the confirmation link, you will grant us your consent to the use of your personal data in accordance with Art. 6 Para. 1 Lit. a GDPR for sending a shopping cart reminder. Here we save your IP address entered by the Internet Service provider (ISP) as well as the date and time of registration in order to be able to understand a possible misuse of your email address at a later date. The data collected by us when registering for our email notification service are used strictly.

You can unsubscribe from the shopping basket memories at any time by the appropriate message to the responsible responsible person. After deregistration, your email address will be deleted immediately from our distributor set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data that is legally permitted and about which we inform you in this declaration.

7) Data processing for order processing

7.1 Insofar as the contractual processing is required for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 Lit.B GDPR.

If we are on the basis of a corresponding contract updates for goods with digital elements or for digital products, we will process the contact details you transmit when you order (name, address, email address) in order to be within the framework of our statutory information obligations in accordance with Art. 6 ABS . 1 lit. c GDPR on a suitable communication path (such as postal or email) about upcoming updates in the legally provided period. Your contact details will be used strictly for communications about updates owed by us and for this purpose by us only processed to the extent that this is necessary for the respective information.

To handle your order, we also work with the subsequent service provider (s), who support us in whole or in part in the implementation. Certain personal data is transmitted to these service providers in accordance with the following information.

7.2 Use of payment service providers (payment services)

- Amazon Pay

One or more types of online payment from the following provider are available on this website: Amazon Payments Europe S.C.A., 38 Avenue J.F. Kennedy, L-1855 Luxembourg

If you choose a payment method of the provider, in which you are in advance (such as credit card payment), your payment data communicated as part of the order process (including name, address, banking and number card information, currency and transaction number) as well as information about the content of your order will passed on in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only insofar as it is necessary.

- Apple Pay

If you decide on the payment method "Apple Pay" of the Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your end device operated with iOS, Watchos or MacOS by loading a payment card stored on "Apple Pay". Apple Pay uses safety functions that are integrated into the hardware and software of your device to protect your transactions. For the release of a payment, the entry of a codes previously defined by it and the verification using the "Face ID" or "Touch ID"- function of your device is required.

For the purpose of the payment processing, your information given as part of the order process and the information about your order is passed on to Apple in encrypted form. Apple then again encrypted this data with a developer -specific key before the data to carry out the payment to the payment service provider of the payment card stored in Apple Pay is transmitted. The encryption ensures that only the website that the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction -specific, dynamic security code to the output website to confirm the payment success.

If personal data is processed in the transmission described, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

Apple keeps anonymized transaction data, including the approximate purchase amount, the approximate date and the approximate time as well as the information as to whether the transaction was successfully completed. Anonymization fully excludes a personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on the iPhone or Apple Watch to complete a purchase that you made via Safari on the Mac, communicate the Mac and the authorization device via an encrypted channel on the Apple server. Apple processes or stores none of this information in a format with which your person can be identified. You can deactivate the possibility of using Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and deactivate "allow payments on Mac".

Further information on data protection at Apple Pay can be found at the website below: https://support.apple.com/de-de/ht203027

- Klarna

One or more types of online payment from the following provider are available on this website: Klarna Bank, Sveafen 46, 111 34 Stockholm, Sweden

If you choose a payment method in which the provider is in advance (such as accounting or installment purchase or direct debit), you will also be asked in the order process, certain personal data (first and last name, street, house number, postal code, place, date of birth, E -Mail address, telephone number, possibly data on an alternative means of payment).

In order to protect our legitimate interest in determining the solvency of our customers, we are forwarded to the provider for the purpose of a credit check to the provider in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks on the basis of the personal data you specified and other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option you have selected with regard to payment and/or claim loss risks can be granted.

In addition to the provider-internal criteria in accordance with Art. 6 Para. 1 Lit. f GDPR, identity and credit information from the following information can also be included in the decision as part of the application test:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit information can contain probability values (so-called score values). Insofar as score values flow into the result of the credit information, you have your basis in a scientifically recognized mathematical-statistical process. The calculation of the score values flow, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by a message to us or to the provider. However, the provider may remain entitled to process your personal data, provided that this is necessary for contractual payment processing.

- PayPal

One or more types of online payment from the following provider are available on this website: PayPal (Europe) S.A.R.L. et cie, s.c.a., 22-24 Boulevard Royal, L-2449 Luxembourg

If you choose a payment method of the provider, in which you are in advance, your payment data communicated as part of the order process (including name, address, banking and number card information, currency and transaction number) as well as information about the content of your order in accordance with Art. 6 Paragraph 1 lit. b GDPR passed on. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only insofar as it is necessary.

When selecting a payment method in which we are in advance, you will also be asked in the order sequence, certain personal data (first and last name, street, house number, postcode, location, date of birth, email address, telephone number, an alternative means of payment).

In order to protect our legitimate interest in determining your solvency in such cases, this data is forwarded by us in accordance with Art. 6 Para. 1 Lit. f GDPR for the purpose of a credit check to the provider. The provider checks on the basis of the personal data you specified and other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option you have selected with regard to payment and/or claim loss risks can be granted.

8) Online marketing

Google Adsense

This website uses Google Adsense, a webanze duty Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Adsense uses so -called cookies, i.e. text files that are stored on your computer and that enable an analysis of the use of the website by you. In addition, Google Adsense also uses so-called "Web Beacons" (small invisible graphics) for the collection of information, through the use of which simple actions such as visitor traffic can be recorded, collected and evaluated. The information generated by the cookie and/ or web beacon (including your IP address) by using this website is usually transferred to a Google server and stored there. Here it can also be sent to the Google LLC servers. come in the USA.

Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google Adsense is not merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/ or if third parties process this data on behalf of Google.

All processing described above, in particular reading information on the end device used via cookies and/or web biacons, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this granting of consent, the use of Google Adsense during your page visit will be omitted.

You can cancel your consent with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

Further information on Google's data protection regulations can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

9) Web analysis services

9.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analysis service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

Google (Universal) Analytics is only used on this website without the use of cookies, which means that the service never sets cookies on your end device.

Instead, the local memory of your browser is used to store an individual ID assigned by Google (Universal) analytics, which enables an analysis of your use of the website. For this purpose, certain user information is processed via the ID. The scope of this information also includes your IP address, which Google cuts around the finishing digits in order to rule out direct personal relationship.

The information is transferred to Google server and processed there. Transmitters to Google LLC based in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activities for us and to provide other services associated with website usage and internet use. The IP address transmitted and reduced by your browser as part of Google Analytics is not merged with other Google data. The data collected as part of the use of Google (Universal) Analytics are saved for a period of two months and then deleted.

All processing described above, including the storage of information on the end device used in the form of the ID, only take place if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR.

Without your consent, the use of Google (Universal) Analytics is omitted during your page visit. You can revoke your consent granted at any time with effect for the future.

To exercise your revocation, you can download and install the browser plugin available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin or within browsers on mobile devices, you can revoke your consent by clicking on the following link to set an opt-out cookie that prevents Google Analytics in the future (this opt -Out cookie only works in this browser and only for this domain.

Deactivate Google Analytics

With Google we have concluded an order processing contract that ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.

Further legal information on Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https: //policies.google.com/technologies/partner-sites

Demographic characteristics

Google (Universal) Analytics uses the special function "demographic features" and can create statistics that make statements about the age, gender and interests of side visitors. This is done by analyzing advertising and information from third -party providers. This allows target groups for marketing activities. However, the collected data cannot be assigned to a specific person and will be deleted for a period of two months after storing.

Google Signals

Google Signals can be used on this website as an extension to Google (Universal) Analytics to have cross -device reports created. If you have activated personalized advertisements and have linked your devices with your Google account, Google, subject to your consent to use Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, can analyze your usage behavior across devices and, among other things, to cross-equipment Conversions. We do not receive any personal data from Google, but only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalized Advertising" function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de Further information on Google Signals can be found at the following link: https://support.google.com/analytics /Answer/7532985? HL = de

Userids

As an extension to Google (Universal) Analytics, the "Userids" function can be used on this website. If you consented to Google (Universal) Analytics in accordance with Art. 6 Para. 1 Lit. a GDPR, set up an account on this website and register with this account on various devices, your activities, including conversions, can can be analyzed across devices.

9.2 Hotjar

This website uses the web analysis service of the following provider: Hotjar LTD, Level 2, ST Juleans Business Center, 3, Elia Zammit Street, St Julean Stj 1000, Malta

With the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms to read out the end device and browser information), the service dates pseudonymized visitor data, including information from the end device used, such as the IP address and browser information to you to Rain the statistical analysis of the usage behavior on our website and to create pseudonymized usage profiles. Among other things, it is possible to evaluate movement patterns (so-called heat maps), which show the duration of page visits and interactions with page content (e.g. text inputs, scrolls, clicks and mouse-over). Pseudonymization generally excludes direct personal relationship. There is no merging with clard data to you in other ways.

All processing described above, in particular reading or saving information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 Lit. a GDPR. You can cancel your consent with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.

10) Retargeting/ remarketing and conversion tracking

10.1 Meta Pixel with expanded data comparison

Within our online offer, we use the "Meta Pixel" service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quar, Dublin 2, Ireland ("Meta") within our online offer.

If a user click on a advertisement that we have switched on on Facebook or Instagram, the URL of our linked page is expanded with a parameter with the help of "Meta Pixel". This URL parameter is then entered in the user's browser after the forwarding by a cookie that our linked page sets itself. In addition, this cookie records specific customer data such as the email address, which we collect on our website linked to the Facebook or Instagram display for processes such as purchase finishes, account registrations or registrations (extended data comparison). The cookie is then read out and enables the transmission of the data including the specific customer data to META.

We use "Meta Pixel" with an extended data balance to make our advertisements (so -called "ads") on Facebook and/or Instagram more effective and ensure that they correspond to the interests of the users or have certain characteristics (e.g. interests on certain topics or Products that are determined on the basis of the websites visited) that we transmit to meta (so -called "Custom Audiences").

In addition, we analyze the effectiveness of our advertisements by tracking whether users have been forwarded to our website after clicking on an advertisement (conversion). Compared to the standard variant of "Meta Pixel", the function of the extended data balance helps us to better measure the effectiveness of our advertising campaigns by capturing more assigned conversions.

All transmitted data is stored and processed by META so that an assignment to the respective user profile is possible and META can use the data for your own advertising purposes in accordance with the data usage guidelines of META (https://www.facebook.com/about/privacy/). The data can enable META and its partners to switch advertisements on and outside of Facebook.

All processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 Lit. a GDPR. You can cancel your consent with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.

The information generated by meta is usually transferred to a meta server and stored there; In this context, there can also be a transfer to Meta Platforms Inc. server in the USA.

10.2 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to switch relevant ads for users, improve the reports on campaign performance or to avoid that a user sees the same ads several times. Google records which ads are switched into which browser and can thus prevent them from being displayed several times. In addition, GMP can use cookie IDS so-called conversions that have reference to advertising inquiries. This is the case, for example, when a user sees a GMP display and later calls the website of the advertiser when using the same browser and buys something via this website. According to Google, GMP cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server.

We have no influence on the scope and further use of the data that is collected by Google through the use of this tool and therefore inform them in accordance with our level of knowledge as follows: By integrating GMP, Google receives the information that you get the corresponding part of our Called up the website or clicked on an advertisement from us. If you are registered with a service from Google, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider will find and save your IP address. As part of the use of GMP, it can also be transmitted to the Google LLC server. come in the USA.

The data protection regulations of GMP by Google can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11) Page functionalities

11.1 EHI test seal widget

For the display of external customer reviews and/or an externally awarded quality mark, graphic elements of the following provider are integrated on our website: EHI Retail Institute GmbH, Spichernstraße 55, 50672 Cologne, Germany

If you call up a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers to properly load the elements. Here, certain browser information, including your IP address, is transmitted to the provider.

If personal data is also processed, this is done in accordance with Art. 6 Para. 1 Lit. f GDPR on the basis of our legitimate interest in the optimal marketing of our offer and the appealing design of our website.

11.2 Google Recaptcha

On this website we use the captcha service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data can also be transmitted to: Google LLC, USA. For the optical design of the captcha window, the provider "Google Fonts", i.e. from Google, uses fonts invited from the Internet. For processing, further information than the above, which is already transferred to Google via the functionality of Recaptcha, comes It is not.

The service checks whether an input is carried out by a natural person or abused by mechanical and automated processing, and blocks spam, DDOS attacks and similar automated damage. In order to ensure that an action is carried out by a person and not by an automated bot, the provider collects the IP address of the end device used, identification data of the browser and operating system type as well as the date and duration of the visit and transmits it for evaluation Server of the provider.

The legal basis is our legitimate interest in determining individual personal responsibility on the Internet and avoiding abuse and spam in accordance with Art. 6 Para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.

Further information on Google's data protection regulations can be found here: https://business.safety.google/intl/de/privacy/

11.3 Applications for job advertisements by email

On our website, we are currently writing out vacant positions in a separate section that interested parties can apply to the contact address provided by email.

Applicants must provide all personal data required for a well -founded assessment, including general information such as name, address and contact options, as well as performance -related evidence and, if necessary, health -related information. Details on the application can be found in the job advertisement.

After receipt of the application by email, the data is only saved and evaluated for the purpose of application processing. If you have any questions, we either use the email address or telephone number of the applicant. The processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR (or § 26 Paragraph 1 BDSG), in the sense of which the application procedure is passed as an employment contract initiation.

Insofar as special categories of personal data within the meaning of Art. 9 Para. 1 GDPR (e.g. health data such as information about the severely disabled status) are requested in the context of the application process, the processing is carried out in accordance with Art. 9 Para. 2 lit. b. GDPR so that we can exercise the rights adults from labor law and the law of social security and social protection and meet our obligations in this regard.

The processing of the special data categories can also be based on Art. 9 Para. 1 lit. h GDPR if you are based on the purpose of health care or occupational medicine, for assessing the work skills, for medical diagnostics, care or Treatment in the health or social sector or for the management of systems and services in the health or social sector.

If there is no selection of the applicant or if an applicant withdraws his application prematurely, its transmitted data and all electronic correspondence, including the application email, will be deleted after a corresponding notification after 6 months at the latest. According to our legitimate interest, this period is measured to answer any connection questions about the application and, if necessary, to be able to meet our proof of evidence from the regulations for equal treatment of applicants.

In the event of a successful application, the data provided is processed on the basis of Art. 6 Para. 1 lit. b GDPR (for processing in Germany in conjunction with § 26 Paragraph 1 BDSG) for the purpose of carrying out the employment relationship.

12) Tools and other

12.1 Cookie Consent tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications. The "cookie consent tool" is displayed in the form of an interactive user interface when calling for a checkout, on which consent for certain cookies and/or cookie-based applications can be issued. The use of the tool only invites all cookies/services subject to consent if the respective user grants the corresponding consent by ticking. This ensures that such cookies are only placed on the user's respective end device in the event of a granted consent.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed here.

If it comes to the processing of personal data (such as the IP address) in individual cases for the purpose of storing, assigning or logging in cookie settings, this takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest Legal, user -specific and user -friendly consent management for cookies and therefore in a legally compliant design of our website.

The further legal basis for processing is also Art. 6 Para. 1 lit. c GDPR. As the person responsible, we are subject to the legal obligation to make the use of technically not necessary cookies dependent on the respective user consent.

If necessary, we have concluded an order processing contract with the provider that ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.

Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

12.2 Channel

This website uses CHANNABLE, an online marketing tool of the ProductImpulse BV, Kromme Nieuwegracht 66, 3512 HL Utrecht, Netherlands. The use is based on Art. 6 Para. 1 S. 1 lit. f. GDPR. CHANNABLE uses so -called cookies, these are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of the website such as browser type/version, referrer URL (the previously visited page), host name of the accessible computer (IP address), time of the server request, are usually on a server Translated from Channel in Germany and stored there. The IP address transmitted by your browser as part of Channel by your browser is not merged with other data from CHANNABLE. In addition, the Chanable IP address is only stored for a short period of time (usually a maximum of 24 hours) and then made unrecognizable. The intermediate storage takes place without it to recognize possible click fraud (bot detection).

On behalf of the operator of this website, Channel will use this information in order to evaluate the performance of connected online marketing channels such as Idealo.de or Google Shopping. You can prevent the storage of cookies by setting your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website in full. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) to Chanable and the processing of this data by channelable by the option available under the following link option option Use: www.channelpilot.de/optout. In this case, an opt-out cookie is set to prevent the future recording of your data when visiting this website. The opt-out cookie only applies to the last browser used. Delete the cookies in this browser, you have to put the opt-out cookie again.

Further information on data protection in connection with CHANNABLE can be found at https://www.channable.com/privacy-policy

Insofar as legally necessary, we have obtained your consent to Art. 6 Para. 1 lit. a GDPR for the processing of your data presented above. You can revoke your consent granted at any time with effect for the future. In order to exercise your revocation, please follow the possibility described above to make an objection.

13) Rights of the person concerned

13.1 The applicable data protection law grants you the following data rights (information rights and intervention rights) with regard to the processing of your personal data, whereby refer to the legal basis for the respective exercise requirements:

- Right of information in accordance with Art. 15 GDPR;

- Right to correction according to Art. 16 GDPR;

- Right to deletion according to Art. 17 GDPR;

- Right to restrict the processing in accordance with Art. 18 GDPR;

- Right to information in accordance with Art. 19 GDPR;

- Right to data portability in accordance with Art. 20 GDPR;

- Right to revocated consent in accordance with Art. 7 Para. 3 GDPR;

- Right to complaint according to Art. 77 GDPR.

13.2 Right of objection

If we process your personal data on the basis of our predominant interest in the context of a balancing of interests, you have the right to object to this processing with effect for the future for reasons that arise from your special situation.

If you make use of your right to object, we end the processing of the data concerned. However, further processing is reserved if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, fundamental rights and fundamental freedoms, or if the processing of assertion, exercise or defend legal claims serves.

If we are processed your personal data to operate direct mail, you have the right to object at any time to the processing of personal data relating to the purpose of such advertising. You can exercise the objection as described above.

If you make use of your right of objection, we end the processing of the data concerned for directives.

14) Duration of the storage of personal data

The duration of the storage of personal data is measured on the basis of the respective legal basis, in the processing purpose and- if relevant- also based on the respective statutory retention period (e.g. commercial and tax law retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the data concerned will be stored until you cancel your consent.

If there are statutory retention periods for data that are processed in the context of legal transactions or legal transactions on the basis of Art. 6 Para. 1 lit. b GDPR, this data is routinely deleted after the retention periods, provided that it is no longer necessary for the fulfillment of contract or contract are and/or on our part there is no legitimate interest in the further storage.

When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is saved until you exercise your right of objection in accordance with Art. 21 Para. 1 GDPR, unless we can compelling legitimate grounds for The processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 Para. 1 lit. f GDPR, this data is saved until you exercise your right to object in accordance with Art. 21 Para. 2 GDPR.

Unless otherwise aroused from the other information of this explanation about specific processing situations, stored personal data will also be deleted if they are no longer necessary for the purposes for which they were collected or processed in any other way.

15) Hosting & Content Delivery-Network
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Building, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and the display of the online shop based on one Processing on our behalf. All data collected on our website is processed on the Shopify servers. As part of the aforementioned services of Shopify, data can also be used as part of a further processing to the Shopify Inc., 150 ELGIN ST, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing, Shopify Payments (USA) Inc . or Shopify (USA). In the event of the transmission of data to Shopify Inc. in Canada, the reasonable data protection level is guaranteed by the European Commission's appropriateness decision. Further information on the data protection from Shopify can be found on the website below: https://www.shopify.de/legal/datenschutz
Further processing on other servers than the aforementioned of Shopify only takes place in the framework that is communicated below.

Responsible for data processing:
Fynch-Hatton Retail GmbH
Alsstraße 166
D-41063 Mönchengladbach
Telephone: +492161567451085
onlineshop@fynch-hatton.de

Contact details of our data protection officer:
Dabag Technology GmbH
Erik Friemel (Ext. DSB)
datenschutz@fynch-hatton.de

Fynch-Hatton men

Fynch-Hatton women

Fynch-Hatton Story