The website provides you with the opportunity to arrange a personal customer account for the online shop (hereinafter referred to as “customer account”). You can record your personal information in your customer account to make shopping in the online shop even more convenient. To arrange your personal customer account we need your title, your first and last name, your email address and a freely selectable password. Optionally you can also give us your date of birth , which if need be we will use for the credit check according to Section B.III. At the same time, the email address you provide serves as the user identification for the customer account. Once you have successfully registered, you will automatically receive a confirmation by email. In the personal section of your customer account, you can update your information at any time as well as follow the status of your orders and your purchasing history. Your purchasing history will be stored in your customer account for a year from the date of each purchase.
II. Orders in the online shop
You have two available options for ordering in our online shop:
1. Ordering with a customer account.
If you have opened a customer account with us (see B.I above) you will as part of the ordering process receive a request to log in to your customer account with your email address and your password. If you have stored your delivery and billing address in your customer account, these addresses will be suggested to you each time you place an order. Otherwise, you will receive a request to provide a billing address which will then be stored in your customer account and also used for future orders. You also have the option of giving us your telephone number so that we can contact you if there are any queries on your order or to arrange delivery. During the ordering process you will always have the option of changing or adding to your details.
2. Ordering without a customer account.
You can of course also use the online shop without having a customer account. In this case, please enter the information needed to process your order while you are placing that order (title, first and last name, postal address, date of birth, email address and additionally your telephone number if you wish) and send this information directly to DORNSCHILD as part of the ordering process.
III. Credit check
If we provide advance performance (in particular with a purchase on account) we reserve the right for the protection of our rightful interests to obtain a credit reference, based on a mathematically statistical analysis procedure, from Real Inkasso GmbH & Co. KG , Germany. If, during the ordering process, you choose payment on account, we will send the personal details you have given as part of the ordering process (first and last name, postal address and date of birth) to one of the two credit agencies named above, which will provide us with the relevant credit reference on you. On the one hand, the credit reference may contain information on present specific payment defaults, e.g. from lists of debtors or data from summonses. On the other hand, the reference may also list so-called score values, which are calculated on the basis of a scientifically recognised mathematically statistical procedure and used to assess the credit risk. If you have consented to this, we will store the credit reference obtained on you for a year and take the information contained in the reference into account for your future purchases on account within this period.
You can get in touch with DORNSCHILD directly via mail firstname.lastname@example.org, telephone +49-(0)89-33035283 or fax +49-(0)89-33035285. DORNSCHILD collects, processes and uses the information provided by you via the contact form (title, first and last name, email address, subject and content of your message) only for processing your request.
V. DORNSCHILD newsletter
You can also sign up for our electronic newsletter on our website. If you have consented to this, DORNSCHILD will use the email address you have provided to send you the latest product offers and information from DORNSCHILD. If you have opted for a personal form of address in each newsletter when you signed up to the newsletter, we will also use your first and last name and date of birth for this. Once you have successfully registered for the newsletter you will automatically receive an email requesting you confirm your email address. As soon as you have confirmed your email address by clicking on the link contained in the confirmation email, you will regularly receive the newsletter for ladies or gentlemen you selected. In your customer account or via email at email@example.com you can unsubscribe from the newsletter and withdraw your consents at any time (see also C on this).
VI. Use of logistics providers and other service providers
In shipping your order, DORNSCHILD will make your personal details available to our logistics providers, who will process these details on behalf of DORNSCHILD and in compliance with the required security measures exclusively for the purpose of fulfilling the contract. Furthermore, we contract other specialised service providers to perform certain services (in particular our customer services as well as the hosting and maintenance of the website), and these service providers will process your personal details on our behalf and exclusively according to our instructions (commissioned data processing, § 11 of the German Data Protection Act).
DORNSCHILD uses so-called cookies on its website. Cookies are small text files which are stored in the cache of your browser to enable your browser to be recognised and make your visit to our website even more attractive. We use both so-called session cookies and so-called persistent cookies for this.
Session cookies automatically lose their validity when the website is exited. Persistent cookies stay on your end device for a longer period and allow us to store things like the contents of your shopping basket or country settings, as well as to use the tools described below for web analysis and addressing individualised target groups (targeting). The cookie we use allows us to use the products you have selected on our website as a basis for showing you further relevant product suggestions on our website as part of the ordering process. You can of course also visit our website without cookies being stored on your browser. You can restrict or deactivate the storing of cookies in your browser settings at any time, but this may lead to limitations in the functions and user-friendliness of our website.
VIII. Advertising, market research and need-based design of web pages
On this web page user data of your web page visit (e.g. information about beginning, end and extent of a web page visit and click trails) may be collected, stored and used for purposes of advertising, market research and need-based design of these web pages. The data will be stored under a pseudonym of a use profile. Cookies (i.e. small texts file stored locally in the cache of the web browser) and/or a user ID which may contain anonymous data on the end devices used by you in visiting the web pages may be used. Cookies and user ID allow your end device to be recognised with a certain probability. The collected data will not without your express and separate agreement (e.g. under the agreement according to the section “Consent to measures for preventing and detecting misuse”) be used to identify you or associate you with data about the bearer of the pseudonym. You may object to data collection, storage and use for purposes of advertising, market research and need-based design at any time with effect for the future. The use profiles will then in spite of any agreement given according to the section “Consent to measures for preventing and recognising misuse” also no longer be used for purposes of preventing and detecting misuse.
IX. Web analysis and targeting tools
1. Google Analytics
If you have given your consent, Google Analytics, a web analysis service of Google LLC ("Google") is used on this website. The use includes the "Universal Analytics" operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze a user's activities across devices.
Purposes of the Processing
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website and Internet use.
The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Recipients or Categories of Recipients
The recipient of the collected data is Google.
Transfer to Third Countries
Personal data will be transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission's adequacy decision. You can download the certificate here.
Duration of Data Storage
The data sent by us and linked to cookies, user-identifiers (e.g. User-IDs) or advertising-identifiers are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.
Rights of the Persons affected
You can revoke your consent at any time with effect for the future by blocking the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functionalities of this website to their full extent.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the Browser Add-on. Opt-out cookies will prevent future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt-out on all systems used. If you click here, the opt-out cookie will be set: Disable Google Analytics
2. Google Remarketing
We also use the targeting technology Google Remarketing from Google Inc., USA on our website. This allows us to address internet users who have visited our website on the websites of the Google partner network with targeted product recommendations in the form of advertising banners. These advertising media are displayed on our partners’ pages on the basis of cookies and an analysis of your previous usage behaviour. This analysis is done under a pseudonym; no use profiles are collated with your real name. You can object to the collection of data by Google Inc. at any time under the following link http://www.google.com/settings.
C. Withdrawal of consents
You can withdraw your consent at any time with effect for the future at no charge at firstname.lastname@example.org or by written communication to DORNSCHILD KG, Am Einlass 3a, 80469 Munich, Germany.
D. Information and rectification
You have the right, at no charge, to information on the personal data stored about you and can where appropriate demand that they be deleted, rectified or blocked. You can get in touch with DORNSCHILDat the email email@example.com or using the contact details given in the site notice. We will also be happy to answer any further questions you may have on data protection and the processing of your personal details.
E. Rights of the person concerned
If personal data of yours are processed, then you are the person concerned for the purpose of the GDPR and you are afforded the following rights in regards to us as the controller:
1. Right to information
You can ask us as the controller for a confirmation of whether personal data concerning you are processed by us. If such a processing exists, you can demand disclosure about the following information:
a) the purposes for which the personal data are processed;
b) the categories of personal data that are processed;
c) the recipients and/or categories of recipients to whom was revealed the personal data concerning you or are still being revealed;
d) the planned duration of the storage of the personal data that concern you or, in case concrete details on this are not possible, criteria for the determination of the duration of storage;
e) the existence of a right to rectification or erasure of the personal data concerning you, a right of limitation of the processing by the controller or a right to object against this processing;
f) the existence of a right of appeal with a supervisory authority;
g) all available information about the provenance of the data, if the personal data are not directly collected from you as the person concerned;
h) the existence of an automated decision making, including profiling as per Article 22, paragraphs 1 and 4 of the GDPR and – at least in these instances – meaningful information about the involved rationale and scope and the sought-after effects of such a processing for the person concerned.
i) you have the right to demand information about whether the personal data concerning you are transmitted to a third country or to an international organisation. In this framework, you can demand to be informed about the appropriate guarantees pursuant to Article 46 of the GDPR in the context of the transmission.
2. Right to rectification
You have a right to rectification and/or completion in respect to the controller, insofar as the processed, personal data that affect you are incorrect or incomplete. The controller is required to carry out the correction promptly.
3. Right to limitation of the processing
Under the following conditions, you can demand the limitation of the processing of the personal data that concern you:
a) if you dispute the correctness of the personal data that concern you for a length of time that enables us to verify the correctness of the personal data;
b) the processing is unlawful and you reject the erasure of the personal data and instead demand the limitation of the use of the personal data;
c) we no longer require the personal data for the purpose of the processing, however you require these for the assertion, exercise or defence of legal claims, or
d) if you have filed an objection against the processing pursuant to Article 21, para. 1 of the GDPR and it has not yet been determined, whether the legitimate grounds for the controller outweigh your grounds.
If the processing of the personal data concerning you was limited, these data may – apart from their storage – only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or on the grounds of an important public matter of interest of the state or of a member state of the European Union.
If the limitation of the processing was limited according to the above-mentioned conditions, you will be informed before the limitation is lifted.
4. Right to erasure
a) Obligation to erase
You can require us to erase promptly all personal data that concern you; we are obligated to erase these data promptly, as long as one of the following reasons applies:
(1) The personal data that concern you are for purposes for which they were collected or otherwise processed are no longer ncessary.
(2) You withdraw your consent upon which rests the processing pursuant to Article 6, para. 1, let. a or Article 9, para. 2, let. a of the GDPR and there is not other legal basis for the processing.
(3) You submit an objection pursuant to Article 21, para. 1 of the GDPR against the processing and there are no overriding legitimate grounds for the processing, or you submit an objection pursuant to Article 21, para. 2 of the GDPR against the processing.
(4) The personal data concerning you were processed unlawfully.
(5) The erasure of the personal data concerning you is necessary for the fulfilment of a legal obligation pursuant to EU law or the law of the member states which the controller is subject to.
(6) The personal data concerning you were collected in regard to offered services by the information society pursuant to Article 8, para. 1 of the GDPR.
b) Information to third parties
If we as the controller have made the personal data concerning you public and if we are so obligated pursuant to Article 17, para. 1 of the GDPR, we will take available measures, including technical ones, to inform data controllers, subject to the technology and implementation costs, of erasing all links to such personal data or copies or replications of such personal data that you as the person concerned have requested.
The right to erasure does not apply, if the processing is necessary
(1) for the exercise of the right to freedom of expression and information;
(2) to fulfil a legal obligation that requires processing in accordance with EU or Member State law to which the controller is subject, or for the execution of a task of public interest, or in the exercise of official authority conferring on the controller, or
(3) to assert, exercise or defend legal claims.
5. Right to information
If you have asserted your right to correction, erasure or limitation of the processing in respect to the controller, they are obligated to inform all recipients with whom they have shared personal data concerning you of this correction or erasure of the data or the limitation of the processing, unless this proves to be impossible or is associated with an disproportionate expense.
You have the right to be informed by the controller about these recipients.
6. Right to data portability
You have the right to obtain the personal data that concern you which you have provided to us in a structured, accessible and machine-readable format. Furthermore, you have the right to demand that we transfer these data to another controller, as long as
a) the processing is based on consent pursuant to Article 6, para. 1, let a of the GDPR or on a contract pursuant to Article 6, para. 1, let. b of the GDPR and
b) the processing takes place by means an automatic procedure and
c) freedoms and rights of other person may not be adversely affected by this.
7. Right to object
If the processing of you personal data takes place on the basis of Article 6, para. 1, let. e or f of the GDPR, you have the right to submit an objection against the processing at any time on grounds that arise due to your particular situation; this also applies for a profiling that is based on these provisions.
We will then no longer process the personal data that concern you, unless we are able to demonstrate compelling grounds that are worthy of protection for the processing that outweigh your interests, rights and freedoms, or that the processing serves the assertion, exercise or defence of legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object to the processing for purposes of direct marketing, the personal data concerning you will no longer be used for these purposes.
You have the option, in the context of the use of information society services – regardless of Directive 2002/58/EC – of exercising your right to object through automated procedures that use technical specifications.
8. Right to rescind your data protection consent declaration
You have the right to rescind your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent up to the revocation.
9. Automated decision on a case-by-case basis, including profiling
You have the right to not be subjected to decision based exclusively on an automated processing, including profiling, that has a legal effect in respect to you or significantly, adversely impacts you in a similar manner. This does not apply, if the decision
(1) is necessary for the conclusion or fulfilment of a contract between you and the controller,
(2) is permissible due to legal regulations of the EU or of the Member States to which the controller is subject and these legal regulations contain appropriate measures for the safeguarding of your rights and freedoms, as well as your legitimate interests or
(3) takes place with your explicit consent.
However, these decisions must not be based on special categories of personal data under Article 9, para. 1 of the GDPR, unless Article 9, para. 2 lit. a or g of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures to uphold the rights and freedoms as well as their legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his or her own position and heard on challenge of the decision.
10. Right of appeal with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you violates the GDPR.
The supervisory authority in receipt of the appeal informs the complainant of the status and results of the appeal including the possibility of a legal remedy pursuant to Article 78 of the GDPR.
As at: July 2018