Privacy Notice

Scope of application

This privacy policy shall inform the users of this website "www.gebro-verlag.de/Shop" according to General Data Protection Regulation (GDPR) about the type, scope and purpose of collection and use of personal data relating to a data subject by the website operator.
The website operator takes the protection of data very seriously and will treat your personal data as confidential and according to legal requirements.
Keep in mind that data transmission on the internet can generally be subject to security vulnerabilities.  Full protection against access by strangers is not possible.

Identity and contact details of the controller

The controller in the sense of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

General – scope of the processing of personal data relating to a data subject

In principle, we process the personal data relating to a data subject of our users only insofar as this is necessary to provide a functioning website as well as our content and services. The processing of the personal data relating to a data subject of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent can not be obtained for reasons of fact and the processing of data is permitted by law.

Personal data relating to a data subject is all information that is used to identify your person and which can be traced back to you – such as your name, your address, your e-mail address and your telephone number.

Provision of the website and collection of access data

Description and scope of the data processing:
For the hosting of our website we rely on the use of service providers which we commit to an agreement on order processing on compliance with legal requirements. The provider of the website collects data about the visits to the website and saves these as „server-logfiles“. Thus the following data are logged:

• Name of the visited website resp. file
• Date and time at the moment of access
• Volume of data sent in byte
• Source/referral from which you came to this site (so called referrer-URL)
• Access status (file transferred, file not found etc.)
• Used browser
• Operating system used
• Used IP address

The data collected are used for statistical evaluations only and to improve the website.
However, the operator of the website reserves the right to review the server logfiles subsequently in case of specific indications of illegal use.

Legal basis for the data processing:
The legal basis for the temporary storage of data and the logfiles is art. 6 par. 1 point f GDPR.

Purpose of the data processing:
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the computer of the user. Therefor the IP address of the user needs to be stored for the whole duration of the session.
The storage in logfiles is done to ensure the functionality of the website. Furthermore the data are used to optimise the website and to ensure the safety of our information technology systems. The IP address serves the website provider to recognise and fend attacks. An evaluation of the data for marketing purposes does not take place in this context. We do not pass the logged IP addresses to third parties.
In these purposes can be found our legitimate interest in processing the data in accordance to art. 6 par. 1 point f GDPR.

Period of data storage:
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection.
In the case of the collection of data for providing the website this is the case when the respective session is completed.
In the case of storing the data in logfiles this will be after no more than 7 days. An additional storage is possible. In this case the IP addresses of the users will be deleted or alienated so that a correlation with the calling client is no longer possible.

Possibility of objection and removal:
The collection of data for providing the website and the storage of the data in logfiles is absolutely necessary for the operation of the website. Hence there does not exist a possibility of objection on the part of the user.

Use of cookies

Description and scope of the data processing:
This website uses cookies. Cookies are small text files which are stored on your terminal device when visiting the website. Your browser accesses these files. The use of cookies increases the user friendliness and saftey of this website. Some elements of our website require that the calling browser can be identified also after a page break.
In this shop, information about your customer data is stored in the cookies only at your request, which can then be accessed on your next visit. The data stored in a cookie will relieve you from having to fill out the forms repeatedly.
In the cookies are stored and transmitted for example data like language preferences, articles in a shopping basket, used search keyword or log-in-information.
When visiting our website users will be informed by an info-banner about the use of cookies and  referred to this privacy policy. By continuing to use the website you agree to the use of cookies.
 
Legal basis for the data processing:
The legal basis for the processing of personal data relating to a data subject by using cookies is art. 6 par. 1 point f GDPR.
 
Purpose of the data processing:
The purpose of the use of technically necessary cookies is to facilitate the use of websites for users. Some features of or website can not be offered without the use of cookies. For these it is essential to identify the browser even after a page brake.
Cookies are needed for example for the following applications: language preferences, articles in a shopping basket, to memorise used search keywords or log-in-information.
The user data collected by technically necessary cookies will not be used to create user profiles.
In these purposes can be found our legitimate interest in processing the personal data relating to a data subject in accordance to art. 6 par. 1 point f GDPR.
 
Period of data storage, possibility of objection and removal:
Cookies are stored on the computer of the user and transmitted by this to our website. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your browser program you can administrate the acceptance of cookies from this website, possibly block or restrict their transmission. Already stored cookies can be removed at any time. This can also be done automatically.
Please note: If cookies are disabled for our website there is no guarantee that you will be able to access all features of this website without restrictions.

Sign-up, user accounts

Description and scope of the data processing:
On our webpage we offer users the possibility to register by giving personal data. In doing so the data will be entered into an input mask, then transmitted to us and stored. The data will not be transferred to third parties. The following data will be collected during the registration process:

• Title, last name, first name
• Address
• E-mail address
• Telephone number
• Fax number

During the registration process the consent of the user to process these data will be obtained.
 
Legal basis for the data processing:
The legal basis for the processing of the data with a given consent of the user is art. 6 par. 1 point a GDPR.
If the registration serves the fulfillment of a purchase agreement, with the user as contracting party, or for the implementation of pre-contractual measures, then the additional legal basis for the processing of the data is art. 6 par. 1 point b GDPR.
 
Purpose of the data processing:
User registration is required for the provision of certain content and services on our website. As a registered user with an user account you will have an overview of your orders placed and can manage your user data.
In addition, you can place orders by accessing the registered user data without having to re-enter them during the ordering process.

A registration of the user is not mandatory for the fulfillment of a purchase agreement with the user or for the implementation of pre-contractual measures. Purchase orders can also be placed without a registration using a so-called guest account.
 
Period of data storage:
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection.
In the case of the collection of data during the registration process this is the case when the registration on our website is canceled or modified.
 
In the case of the collection of data during the registration process for the fulfillment of a purchase agreement or for the implementation of pre-contractual measures this is the case when the data for the fulfillment of the purchase agreement are no longer necessary. Even after the fulfillment of the purchase agreement a requirement to store personal data of the contracting party may exist in order to fulfill contractual or legal obligations.
 
Possibility of objection and removal:
As a user, you have the option of canceling the registration at any time and deleting the user account created during registration. As a consequence, you can no longer display the orders you have made in the user account.
You can have changed the data stored about you at any time.
If the data is necessary for the fulfillment of a purchase agreement or for the implementation of pre-contractual measures a premature deletion of the data is only possible unless barred by contractual or legal obligations.
 

Conclusion of a purchase agreement, purchase order processing

Description and scope of the data processing:
On our webpage we offer users the opportunity to place orders for goods. For the fulfillment of a purchase agreement the indication of personal data is necessary. The data is entered into an input mask, then transmitted to us and stored. The following data will be collected during the ordering process:

• Title, last name, first name
• Address
• E-mail address
• Telephone number
• Fax number
• Payment data

The data mandatory for order processing are marked in the input form.
Those data which are absolutely necessary for delivery or for order processing will be passed on to third party service providers (e. g. the shipping company responsible for the delivery or the bank responsible for the payment transaction or if applicable the payment service provider responsible for payment processing resp. the payment service you selected in the order process). In these cases, however, the amount of data transmitted is limited to the minimum required.
The transferred data may only be used by the third parties for the stated purposes.
 
Legal basis for the data processing:
For the fulfillment of a purchase agreement with the user as contracting party the legal basis for the processing of the data is art. 6 par. 1 point b GDPR.
 
Purpose of the data processing:
The collection of personal data is necessary for the fulfillment of a purchase agreement with the user. The data is needed for order processing and for the delivery of the goods.
 
Period of data storage:
So-called guest accounts created during the ordering process which do not require a separate registration will be deleted after completion of the order.
The data collected during the order process for the fulfillment of a purchase agreement will be stored until the data is no longer necessary for the processing of the purchase agreement. Even after the fulfillment of the purchase agreement a requirement to store personal data of the contracting party may exist in order to fulfill contractual or legal obligations.
 
Possibility of objection and removal:
If the data is necessary for the fulfillment of a purchase agreement or for the implementation of pre-contractual measures a premature deletion of the data is only possible unless barred by contractual or legal obligations.
If you do not agree to the data collection during the ordering process, the conclusion of a purchase agreement is not possible.
 

Use of the payment-service PayPal

The service PayPal is provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L- 2449 Luxembourg. If you choose payment by PayPal you will be redirected to PayPal's website by link. In order to use this service PayPal collects, stores and processes your personal data (e. g. your name, your address, your telephone number and your e-mail address as well as your credit card data or bank account data). The responsibility for the protection of the data and the proper handling of the data which are collected by PayPal lies solely with PayPal. Therefore the PayPal Terms of Use apply to the use of this payment service, which you can view on the website www.PayPal.com. Further information on the handling on your data by PayPal can be found in the privacy policy of PayPal at the following link:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
 

Newsletter

Description and scope of the data processing:
If you purchase goods or services on our website and deposit your e-mail address here, this can subsequently be used by us to send a newsletter. In that case the newsletter will only be used to send direct advertising for our own similar goods or services.
In the context of data processing to send a newsletter there is no transfer of data to third parties. The data is used exclusively to send the newsletter.
You may object the use at any time without incurring any costs except the transmission costs according to the basic tariffs.
 
Legal basis for the data processing:
The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 par. 3 UWG.
 
Purpose of the data processing:
The collection of the user's e-mail address serves to deliver the newsletter.
 
Period of data storage:
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. Thus the e-mail address of the user is stored as long as the subscription to the newsletter is active.
 
Possibility of objection and removal:
You may object the use at any time without incurring any costs except the transmission costs according to the basic tariffs. So you can call us, write us, send a fax or e-mail us. For this purpose there is also a link in each newsletter.

Contact form and e-mail messages

Description and scope of the data processing:
On our website there is a contact form available, which can be used for electronic contact. If an user takes advantage of this opportunity the data entered in the input mask will be transmitted to us and stored. These data are:

• Name
• E-mail address
• Subject
• Message

During the sending process the consent of the user to process these data will be obtained and it will be referred to this privacy policy.
Alternatively you can contact us via our provided e-mail address. In this case the personal data of the user transmitted with the e-mail will be stored.
In this context there is no transfer of data to third parties. The data is used exclusively to process the conversation.
 
Legal basis for the data processing:
The legal basis for the processing of the data with a given consent of the user is art. 6 par. 1 point a GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is art. 6 par. 1 point f GDPR.
If the e-mail contact aims to the conclusion of a contract the additional legal basis for the data processing is art. 6 par. 1 point b GDPR.
 
Purpose of the data processing:
The processing of personal data from the input mask serves exclusively to process the contacting. In the case of contacting us by e-mail in these purposes can be found our legitimate interest in processing the data.
 
Period of data storage:
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input mask of the contact form and these transmitted by e-mail this is the case when the respective conversation with the user has ended. The conversation has ended if it can be deduced from the circumstances that the facts are finally clarified. If, in addition, statutory retention requirements should exist, the data will be deleted only after their expiration.
 
Possibility of objection and removal:
The user has the possibility to withdraw his content to the processing of the personal data at any time and to object to the storage of his personal data. In this case the conversation can not be continued.
If you want to withdraw your consent and object to the storage a text message is enough. Therefore you can write us, send a fax or e-mail us.
In this case all personal data which have been stored in the course of contacting will be deleted.

Rights of the data subject

In accordance with the legal requirements you have the right to request access (art. 15 GDPR) to your personal data processed by us at any time.
In addition, you can assert your right to rectification (art. 16 GDPR), right to erasure (art. 17 GDPR) or right to restriction of processing (art. 18 GDPR) or the right to object to processing (art. 21 GDPR) against us at any time. This also applies to a right of data portability (art. 20 GDPR).

Right to withdraw your consent to data processing based on a declaration of consent (art. 7 par. 3 GDPR):
You have the right to withdraw your consent to data processing based on a declaration of consent at any time. The withdrawal of the consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint (art. 77 GDPR):
If you think that we process your personal data unlawfully you can address your complaint to any data protection supervisory authority. The supervisory authority responsible for us is: