Last updated: 22.10.2018
Thank you for your trust in kleine körbchen. Protecting your personal data and processing your data according to legal standards (e.g EU-DSGVO) is a matter of great importance to us, and we would now like to give you detailed information about how we handle your data.
1. Responsible for data collection on this website
Responsible for collecting, processing and handling personal data on this webite according to Bundesdatenschutzgesetz and EU-DSGVO is Anna Christina Rau, owner of kleine körbchen, Marschdamm 2, 21640 Horneburg, Germany (below: kleine körbchen).
If you should disagree with the collection, processing and handling of your personal data partly or in total, please send your objection to the following address via e-mail or letter:
Anna Christina Rau
2. Collecting, processing and use of personal data
2.1 Personal data
Personal data is all data with which you can be personally identified. This includes for example your name, your address, your e-mail address and information about your orders at www.kleine-koerbchen.de. Personal data does not include e.g. statistical information about your visit at our website as this cannot be connected with you personally.
2.2 Collection, processing, and use of your personal data
We take the protection of your personal data very seriously. We treat your personal data as confidential and always in accordance with the statutory data protection regulations such as BDSG, TMG und EU-DSGVO.
You can visit and browse our online shop without providing personal information. We only collect your personal data if you provide it voluntarily when placing an order, subscribing to our newsletter or opening a customer account. Unless you give us your separate consent, we only use the data you provide to process and handle your order or to fulfill your service request.
We only send your data to any third party to the extend this is required to process, execute and handle your order (e.g. to have goods delivered by our logistic partners to your location), we are obliged by law to do so or you have explicitly agreed. Your data will not be transmitted for any other purpose unless you have given your explicit consent to do so. Your data will not be disclosed to third parties for any other purpose.
To ensure a smooth execution of your order, the following personal data is required: name, delivery address, billing address and payment preference. Your e-mail address is required for communication with you. You will receive e-mails from us regarding confirmation of your order, receipt of payment and shipping information. You will also need your e-mail address for identification in your customer account. If you do not provide this information, we will not be able to execute your order.
Your personal data will be deleted, if you have sent an explicit request for deletion of your data and your data is no longer required for the fulfillment of your order. Legal retention periods remain unaffected.
2.3 Customer accounts
In order to make sure you don’t have to enter your data all over again the next time you place an order with us, we offer you the opportunity to set up a customer account with us. Your data will then be entered into the order form automatically. When you next visit it, you will only need to enter your customer number or e-mail address and your personal password. You can have your customer account deleted at any time, e.g. by sending an e-mail to email@example.com. Once your account has been deleted, your data will no longer be stored or used for the purposes described. You are responsible for the protection of your password. Do not forward your password to any other person, as we assume no liablilty to any fraud caused by the irresponsible use of your password, unless we should have caused the irresponsible use.
If you subscribe to our newsletter, your e-mail address will be used to send our own advertising material until you unsubscribe. We only use your e-mail address to send our newsletter and will not pass it on the third parties. To verify that you are the owner of the subscribed e-mail address we use Double Opt-in. After subscribing to the newsletter you will receive a confirmation e-mail, where you have to confirm your subscription.
We distribute several newsletters per year in irregular intervals (about 12 times per year). Our newsletter will inform you about new products, special promotions and other relevant news about kleine körbchen.
You can unsubscribe from the newsletter at any time through the “unsubscribe” link provided in every newsletter, in your customer account, by sending an e-mail request to firstname.lastname@example.org or directly here on the website. After unsubscribing your data will no longer be used or processed for our own advertising.
2.5 Contact form
If you should send us queries via the contact form on this website, we will collect the data entered on the form, including the contact details you provide, to answer your message and any follow-up questions. We do not share this information with any third party.
We will store the data provided with the contact form until the information is no longer required to fulfill your query or you revoke your consent, e.g. by an informal e-mail to email@example.com.
2.6 Customer reviews
21 days after completion of your order, we will send you an e-mail inviting you to write short review about your purchased products, if you have agreed to receiving this e-mail during the check-out process of your order. This provides an easy way for you to let us know about your experiences with the products purchased and the shopping experiences at www.kleine-koerbchen.de.
For the review we ask for your name, your e-mail address and your review including a 5-star rating and written text. You also may decide if your name may be published along with your review or if your review shall be published anonymously. We will never publish your e-mail address. Your e-mail address is only required for us to communicate with you regarding your review, if necessary.
We will publish your review after examination at www.kleine-koerbchen.de and anonymously in the customer review program by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
3. Data protection and security
The protection of your personal data is a very serious matter to us and the therefore treat your data as highly confidential and in accordance to TMG, BDSG and EU-DSGVO. We collect and store all the data you enter on our website to ensure that your order is processed smoothly. We only store the minimum personal data we need to process your order, and your data is encrypted before being transmitted via the internet. We have technical and organisational measures in place to safeguard our website and other systems against loss, destruction, access, data modification and data distribution by unauthorised persons.
Please note that complete protection from third-party access is all the same not possible and data transmitted via the internet (e.g. via e-mail) may against all security measures still be subject to security breaches.
However, to guarantee the highest security level possible for your data we work closely with selected partners to ensure the safe processing and storage of your data and a smooth handling of your order or service request.
3.1 Data Encryption
The personal data you enter during the order process is encrypted before being transmitted via the internet. This encryption is carried out by a TLS protocol. You will recognize the encryption by the little lock symbol, that shows up in the address row of your browser. Also the web address in your browser will change from “http://” to “https://”.
3.2 Shop hosting by 1&1 eShop
Our shop data such as content and customer data is stored and protected by 1&1 Internet SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The data is stored on securely protected servers, locally based in Germany.
4.1 What is a cookie?
4.2 Cookies we use
We use mainly session-related cookies; a session expires after 30 minutes of inactivity. Your computer will automatically delete the cookie after 24 hours. Other cookies remain on your device until you delete them. These cookies help to recognize your browser when you are next visiting our site.
5. Tools for tracking and analytics
5.1 Server-log files
For the statistical evaluation and technical optimisation of this website 1&1 Internet SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, collects the following data by using the 1&1 WebAnalytics service: Referrer (previously visited website), requested page or file, browser type, browser version, operating system, type of device, time of access, anonymised IP address. Personal data is not collected, so the individual visitor cannot be identified.
5.2 Google Conversion Tracking
This website uses the online advertising program “Google AdWords”, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (below: Google) and the conversion tracking tool provided by Google AdWords. The conversion tracking cookie is stored whenever a user clicks on an advertisement inserted by Google. This cookies become invalid after 30 days and do not serve the purpose of personal identification. If the user visits certain pages on this website and the cookie has not yet expired, both we and Google can see that the user clicked on the advertisement and was forwarded to this website. Every Google AdWords customer gets a different cookie. It is therefore impossible to track cookies via the websites of AdWords customers. The information collected with the aid of the conversion cookie is used to compile conversion statistics for AdWords customers who have decided to use the conversion tracking tool. The customer will receive information about the total number of users who clicked on his advertisement and were forwarded to a website containing a conversion tracking tag. However, he will not receive any information allowing him to identify any users in person. Users who do not want to use the tracking tool can easily deactivate Google’s conversion tracking cookie by changing the user settings in their web browser. These users will not be included in the conversion tracking statistics.
5.3 Google Analytics
5.5 IP anonymisation
On our website we have activated IP anonymisation. Prior to transmission to the United States your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on our behalf to evaluate the use of our website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
6. Payment service providers
We accept payments via PayPal, e.g. payment by credit card. The provider of this service is PayPal (Europe) S.à.r.l & Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (below: PayPal).
6.3 Sofort Bank Transfer by Klarna
7. Right of access and data portability
Pursuant to the BDSG and EU-DSGVO, you are entitled to request information free of charge relating to which of your personal data has been stored; you are also entitled to have this data amended, blocked or deleted.
If you have any questions about the collection, processing and use of your personal data, if you require information about which personal data we have stored, or if you wish to have this data amended, blocked or deleted or to withdraw any consent you have granted, please contact us at any time, e.g. at firstname.lastname@example.org.
Further, you have the right to request your personal data which we process or store based on your consent or in fulfillment of a contract. We will deliver the data to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
8. Right to file complaints with regulatory authorities
In case of a breach of data protection the concerned party may file a complaint with the responsible regulatory authority. The responsible authority for data protection is the Landesdatenschutzbeauftragte of Niedersachsen, as our company is based in Niedersachsen. You will find contact details on https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html