Privacy Statement

1) Information über die Sammlung personenbezogener Daten und Kontaktdaten des Verantwortlichen

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data is any data that can be used to identify you personally.

1.2 The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Nikolaos Vlassis, Albrecht-Dürer-Straße 181, 97204 Höchberg, Germany, Tel.: 017663147062, E-Mail: info@vlassis-edv.de. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the person responsible). You can recognise an encrypted connection by the string „https://“ and the lock symbol in your browser bar.

.

2) Data collection when visiting our website

When you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called server log files). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

.
  • Our visited website
  • The date and time at the time of access
  • .
  • Quantity of data sent in bytes
  • Source/reference from which you reached the page
  • .
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymised form)
  • .

The processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files on a regular basis if there are concrete indications of illegal use.

3) Cookies

To make visiting our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your terminal device. Some of these cookies are automatically deleted after you close your browser (so-called session cookies), while others remain on your terminal device for longer and allow you to save page settings (so-called persistent cookies). In the latter case, you can find the storage period in the cookie settings overview of your web browser. If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b DSGVO either for the execution of the contract, in accordance with Art. 6 Para. 1 lit. a DSGVO in the case of consent given or in accordance with Art. 6 Para. 1 lit. a DSGVO in the case of consent given or pursuant to Art. 6 Para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit. You can set your browser in such a way that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contacting

When contacting us (e.g. via contact form or e-mail), personal data is processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f DSGVO. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b DSGVO. Your data will be deleted if the circumstances indicate that the matter concerned has been finally clarified and provided that there are no statutory retention obligations to the contrary

.

5) Data processing when opening a customer account

In accordance with Art. 6 Para. 1 lit. b DSGVO, personal data will continue to be collected and processed to the extent required in each case if you provide us with this data when opening a customer account. The data required to open an account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be effected by sending a message to the above address of the person responsible. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via this account have been fully processed, no legal retention periods are opposed to this and no justified interest in continued storage exists on our part.

.

6) Use of customer data for direct marketing

Subscribe to our email newsletter

If you register for our e-mail newsletter, we will send you information about our offers on a regular basis. The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you will only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified e-mail address

.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a DSGVO. We store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time by clicking on the link provided for this purpose in the newsletter or by sending a message to the responsible person mentioned at the beginning. After unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this declaration.

7) Data processing for order handling

7.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b DSGVO.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, email address) provided by you when placing the order in order to inform you personally within the scope of our legal information obligations pursuant to Art. 6 para. 1 lit. c DSGVO, we will inform you personally by suitable means of communication (e.g. by post or e-mail) about upcoming updates within the legally stipulated period. Your contact details will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the respective information.

In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the performance of concluded contracts. Certain personal data is transmitted to these service providers after the following information has been provided.

7.2 Use of payment service providers (payment services)

- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or, if offered, purchase on account or payment by instalments via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as PayPal) as part of the payment processing. The transfer is carried out in accordance with Art. 6 Para. 1 lit. b DSGVO and only insofar as this is necessary for the processing of the payment. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, purchase on account or payment by instalment via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection, including information on the credit agencies used, please refer to PayPal's data protection statement: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments. - Stripe
If you choose a payment method from the payment service provider Stripe, the payment will be processed via the payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process, together with the information about your order (name, address, account number, bank code, any credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b DSGVO. Further information on Stripe's data protection can be found at the URL https://stripe.com/en/privacy#translation.
Stripe reserves the right to carry out a credit check on the basis of mathematical-statistical methods in order to safeguard the legitimate interest in determining the user's ability to pay. The personal data required for a creditworthiness check and received in the course of the payment processing is communicated by Stripe to selected credit agencies if necessary, which Stripe discloses to users upon request. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, these have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Stripe uses the result of the credit assessment in relation to the statistical probability of non-payment for the purpose of deciding on the authorisation to use the selected payment method. You can object to this processing of your data at any time by sending a message to Stripe or the appointed credit agencies. However, Stripe may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

8) Web analytics services

Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyse the use of websites.
When using Google Analytics 4, so-called cookies are used as standard. Cookies are text files that are stored on your terminal device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your terminal device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also result in the transfer of information to the servers of Google LLC, which is based in the USA, and further processing of the information there. When using Google Analytics 4, the IP address transmitted by your terminal device when you use the website is always collected and processed anonymously by default and automatically, so that the information collected cannot be directly linked to a person. This automatic anonymisation is carried out by Google shortening the IP address transmitted by your terminal device by the last digits within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA). Google uses this and other information on our behalf to evaluate your use of the website, to compile reports on your website activities and usage behaviour and to provide us with other services relating to your website usage and internet usage. The IP address transmitted and coded by your terminal device within the scope of Google Analytics 4 will not be combined with other Google data. The data collected in the context of the use of Google Analytics 4 will be stored for 2 months and then deleted. Google Analytics 4 enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the help of information from third-party providers. This makes it possible to determine and distinguish user groups of the website for the purpose of targeting marketing measures. However, data collected via the demographic characteristics cannot be assigned to a specific person and thus cannot be assigned to you personally. This data collected via the demographic characteristics function is kept for two months and then deleted. All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the terminal device used by you for the use of the website, will only take place if you have given us your express consent for this in accordance with Art. 6 Para. 1 lit. a DSGVO. Without your consent, Google Analytics 4 will not be used during your use of the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service using the cookie consent tool provided on the website. We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties. In order to guarantee compliance with the European level of data protection, including in the event of any transfer of data from the EU or EEA to the USA and possible further processing there, Google refers to the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google. Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=en&gl=en and at https://policies.google.com/technologies/partner-sites

.

9) Retargeting/ Remarketing/ Referral advertising

Google Ads Remarketing
Our website uses the Google Ads Remarketing function to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. Further data processing will only take place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalise the ads you see on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-generational remarketing. To this end, Google will temporarily link your personal data with Google Analytics data in order to create target groups. In the context of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC in the USA. Details on the processing triggered by Google Ads Remarketing and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/ads/answer/7395996?
Further information and the data protection provisions regarding advertising and Google can be found here:
https://www.google.com/policies/technologies/ads/
All processing described above, in particular the setting of cookies for reading out information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the cookie consent tool provided on the website.

10) Page functionality

Google reCAPTCHA

On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). This function is primarily used to distinguish whether an entry is made by a natural person or is abused by machine and automated processing. The service includes the sending of the IP address and, if applicable, further data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in determining individual responsibility on the Internet and the prevention of misuse and spam. In the context of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA.

For more information on Google reCAPTCHA and Google's privacy policy, please visit: https://www.google.com/intl/en/policies/privacy/

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. In order to exercise your right of revocation, please follow the procedure described above for making an objection.

11) Tools and miscellaneous

11.1 - Lexoffice
We use the cloud-based accounting software „lexoffice“ from Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany, to do our bookkeeping.
Lexoffice processes incoming and outgoing invoices and, where applicable, our company's bank transactions to automatically record invoices, match them to transactions and create the financial accounting from this in a semi-automated process.
If personal data is also processed in this context, the processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in the efficient organisation and documentation of our business processes. For more information on lexoffice, the automated processing of data and the data protection provisions, please visit https://www.lexoffice.de/datenschutz/

.

11.2 - Data Dog
The functions of the service „Datadog“ of Datadog, Inc., 620 8th Ave, 45th Floor, New York, NY 10018 USA, are integrated on our platform. The system notifies our development team about possible technical complications or functional problems in connection with the operation of our website. For this purpose, server information as well as usage parameters such as the IP address, the browser used, time stamps and the URL accessed can be transmitted to Datadog. Insofar as personal data is included in the information thus transmitted, the processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in an efficient error cause analysis to improve the reliability and functionality of our Internet presence. Further information on the collection and use of data by Datadog, Inc. can be found at: www.datadoghq.com/legal/privacy/

.

12) Rights of the data subject

12.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective conditions for exercise:

.
  • Right of access according to Art. 15 DSGVO;
  • Right to rectification pursuant to Art. 16 of the GDPR;
  • Right to privacy according to Art. 17 DSGVO;
  • Right to restrict processing pursuant to Art. 18 of the GDPR;
  • Right to information pursuant to Art. 19 of the GDPR;
  • Right to data portability according to Art. 20 DSGVO;
  • Right to revoke consent granted pursuant to Art. 7 (3) DSGVO;
  • Right to lodge a complaint pursuant to Art. 77 of the GDPR.

12.2 CROSS-INFRINGEMENT

If WE PROCESS YOUR PERSONAL DATA IN THE PROCESSING OF YOUR INTEREST ON THE BASIS OF OUR PERSONAL INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING ON THE BASIS OF YOUR PARTICULAR SITUATION.You have the right to object to such processing at any time for any reason arising out of your particular circumstances and with effect for the future.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. FURTHER PROCESSING WILL STILL BE PROVIDED IF WE CAN PROVIDE COMPULSORY PRIVACY REASONS FOR THE PROCESSING;NNEN, THEIR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR WHETHER THE PROCESS IS FOR THE PURPOSE OF ENFORCING, EXTENDING OR DEFENDING LEGAL CLAIMS.

If YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN CANCEL THE OPPOSITION AS DESCRIBED ABOVE.

If YOU EXERCISE YOUR RIGHT OF RESPECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

13) Duration of storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and, if applicable, additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a DSGVO, this data is stored until the person concerned revokes his/her consent.

If there are legal retention periods for data that is processed within the scope of legal business or legal business obligations on the basis of Art. 6 para. 1 lit. b DSGVO, this data is routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance of the contract or the initiation of the contract and/or we have no justified interest in continuing to store it.

.

When personal data is processed on the basis of Art. 6 para. 1 lit. f DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 1 DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of asserting, exercising or defending legal claims.

When personal data is processed for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f DSGVO, this data is stored until the data subject exercises his/her right to object in accordance with Art. 21 para. 2 DSGVO.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

.