Privacy Policy

Order

Creating a customer account is not required to place an order. When you place an order through our webshop (either through your customer account or guest access), you enter your personal data in an input mask on our website.



In addition to your title, first name and last name, we also collect the following data
 

•   a valid e-mail address,

 

•  your address,

 

•   your telephone number (landline and/or mobile) and

 

•  Your date of birth

 

•   If applicable, your bank details (see payment service provider below).

 

 We need this information

 

•   to be able to identify you as a customer

 

•   to be able to process and handle your registration/order/inquiry;

 

•   for correspondence with you;

 

•   for invoicing purposes;

 

•   to process payments (in the case of direct debit authorizations)

 

•   to manage our participant data

 

•   to process any liability claims that may exist and to assert any claims against you.

As part of the registration process, consent is obtained from you for the processing of this data. According to the Basic Data Protection Regulation, the collection of this data in the context of the order is necessary for the mutual fulfillment of contractual obligations.

The data processing is only carried out on the basis of your registration and is necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the stated purposes for the processing of your order and for the mutual fulfillment of obligations arising from the contract.

The personal data collected by us for the processing of your order will be stored until the expiry of the legal obligation to retain data and then deleted, unless we are obliged to store data for a longer period in accordance with Article 6 (1) sentence 1 lit. c DSGVO due to legal obligations to retain data and documentation (from StGB or AO) or you have consented to storage beyond this in accordance with Article 6 (1) sentence 1 lit. a DSGVO.


Payment service provider

PayPal:

If you use the option to settle your payment via PayPal, you will be redirected to the PayPal page. There you must log in with your data stored there (login/password) and order the payment there. The settlement will then take place based on the agreement concluded between you and PayPal. Your invoice is only fully paid when the entire invoice amount is finally on our account and we can freely dispose of it.

PayPal will be transferred in this context the data of your order:

Among other things, name, first name, shopping cart contents, date and transfer amount, e-mail account, delivery address,

IP address, language settings, browser settings, time zone, operating system, platform, screen resolution and similar data about your device settings.

The recipient of the data is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

A collection and forwarding of your personal data is only for the processing of the payment (Art. 6 para. 1 lit. f DSGVO) and for the performance of the contract (Art. 6 para. 1 lit b. DSGVO). Without the transmission of your personal data, we can not carry out a payment via PayPal. You can refuse this and, if necessary, choose another payment method.

You can find more information on objection and removal options vis-à-vis PayPal at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Your data will be stored until the completion of the contract (here: payment). This also includes the period required for the processing of other payment movements, such as refunds, receivables management and fraud prevention.

PayPal is not a processor in the sense of Art. 4 No. 8 DSGVO. There is an own responsibility.

​

Credit/Debitcards and Giropay:

If you use the option to settle your payment via Credit/Debitcard or Giropay by using Wix payments, the settlement will then take place based on the agreement concluded between you and Wix payments.

For more information on the exact storage, objection and removal options vis-à-vis Wix payments, please visit:

https://de.wix.com/about/terms-of-payments?utm_source=email_mkt&utm_campaign=em__en&experiment_id=privacy_responsive

Klarna:

If you use the option to settle your payment using the offer of Klarna Bank AB, P.O. Box 900162, 90492 Nuremberg, Germany (Klarna), you will be redirected to the Klarna site. The settlement will then take place based on the agreement concluded between you and Klarna. Your invoice is only fully paid when the entire invoice amount is finally in our account and we can freely dispose of it.

In this context, the data of your order will be transferred and stored by Klarna:

Among other things, name, first name, shopping cart contents, date and transfer amount, e-mail account, delivery address.

IP address, language settings, browser settings, time zone, operating system, platform, screen resolution and similar data about your device settings.

The recipient of the data is Klarna Bank AB, P.O. Box 900162, 90492 Nuremberg, Germany. The latter may carry out its own checks in compliance with money laundering law. You can find more information under:

A collection and forwarding of your personal data only takes place for the processing of the payment (Art. 6 para. 1 lit. f DSGVO) and for the performance of the contract (Art. 6 para. 1 lit b. DSGVO). Without the transmission of your personal data, we cannot carry out a payment via PayPal. You can refuse this and, if necessary, choose another payment method.

Klarna also stores your online banking user identification (login name/account number) as a hash value. Neither PIN nor TAN codes are stored in this process.

For more information on the exact storage, objection and removal options vis-à-vis Klarna, please visit:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

Your data will be stored until the completion of the contract (here: payment). This also includes the period required for processing other payment movements, such as refunds, receivables management and fraud prevention.

Klarna is not a processor in the sense of Art. 4 No. 8 DSGVO. There is an own responsibility.


Deletion periods

We store and process your personal data in each case only as long as we need it for the respective purpose. We have provided information on this in the respective paragraphs. If this purpose no longer exists, they will be deleted after a deletion period (maximum 6 months), unless other legal provisions (including commercial law, money laundering law) require longer storage.

​

Passing on of data

A transfer of your personal data from us to third parties takes place only to the service partners involved in the contract processing, such as the credit institution entrusted with payment matters or the supplier. In these cases, the scope of the transmitted data is limited to the necessary minimum.

A transfer of your personal data to third parties for purposes other than those mentioned above does not take place.

We will only pass on your personal data to third parties if:
 

•   you have given your express consent to do so in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO,

 

•   in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 p. 1 lit. c DSGVO,

 

•   this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you, as well as

 

•   the disclosure is required in accordance with Art. 6 (1) sentence 1 lit. f DSGVO for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

As part of the registration process, consent is obtained from you for the disclosure of your data to third parties.


SSL encryption

Our website uses SSL encryption for security reasons. The use of encryption is easy to recognize: The display in your browser line changes from "http://" to "https://". Data encrypted via SSL cannot be read by third parties. Therefore, only transmit your confidential information when SSL encryption is activated.


Data subject rights

You have the right to:
 

•   Request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details (Article 15 DSGVO);

 

•   to request without delay the correction of incorrect or completion of your personal data stored by us (Art. 16 DSGVO);

 

•   request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims (Art. 17 DSGVO);

 

•   to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO (Art. 17 DSGVO);

 

•   To receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller (Art. 20 DSGVO);

 

•   To revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future (Art. 7 (3) DSGVO); and

 

•   to complain to a supervisory authority (Art. 77 DSGVO). As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

Right of objection

You have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising, insofar as your personal data are processed on the basis of legitimate interests in accordance with Art. 6 (1) sentence 1 lit. f DSGVO. In the case of direct advertising, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an email to support@cavityboards.com.