Privacy policy

1. SUBJECT OF THIS DATA PROTECTION INFORMATION

1.1 This data protection declaration informs you which personal data we collect when you visit our website and purchase goods and how we process this data. In addition, we inform you about the rights to which you are entitled.
1.2 Personal data are all data that can be related to you personally, such as name, address, e-mail address or your usage behavior on our website.
1.3 This privacy policy is currently valid. Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current version at any time on our website.

2. RESPONSIBLE FOR DATA PROCESSING

2.1 Responsible in the sense of Art. 4 No. 7 of the General Data Protection Regulation (DSGVO) is:

3. GERMAN CAR COVER GMBH

Customer Service
Nürtinger Str. 7
72666 Neckartailfingen
Germany

4. E-MAIL

info@GermanCarCover.com

5. TELEPHONE

0049(0)7127-958898 5.1 Questions or comments regarding this privacy policy should be sent to the following e-mail address: info@germancarcover.com.

6. DATA COLLECTION AND DATA PROCESSING

6.1 The scope of data processing differs depending on whether you use our website only to retrieve information ("informational use") or whether you also purchase goods.
6.2 When you use our website for informational purposes, we collect data that is automatically transmitted to us by your Internet browser, such as date and time, browser type, browser settings, operating system, last visited website, amount of data transmitted and access status, as well as your IP address. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of website provision, this is the case when the respective session has ended. The log files are stored for a maximum of up to 24 hours directly and exclusively accessible to administrators. The IP address is only stored for the duration of your visit. In addition, we store the data for logging purposes exclusively in anonymous form by shortening the IP address so that an assignment is no longer possible. The data processing is necessary to protect our legitimate interests in an optimal presentation of our website and is therefore carried out on the legal basis of Art. 6 para. 1 sentence 1 lit. f) DSGVO.
6.3 If you purchase goods in the online store, the provision of personal data is required, such as name, address, e-mail address, telephone number and payment data. Necessary mandatory information is specially marked, all other information is voluntary. You also have the option of creating a customer account, in which your data will be stored for future purchases. You can delete this data and the customer account at any time. The legal basis for data processing is Art. 6 para.1 lit. b) DSGVO. The processing of your data is necessary for the performance of a contract or for the implementation of pre-contractual measures.

7. NEWSLETTER

7.1 If you subscribe to our newsletter, we will regularly send you current information and offers on our products or services by e-mail. For your registration to our e-mail newsletter, in addition to your consent, we only need your name to address you personally and your e-mail address to which the newsletter should be sent.
7.2 For security reasons, we use the so-called double opt-in procedure to register for our e-mail newsletter: After your registration for our newsletter, you will receive an activation e-mail to your specified e-mail address. Only when you have confirmed your registration by clicking on a link contained therein will you subsequently receive the desired e-mail newsletter. If you do not confirm your registration within the specified period after receiving the activation e-mail, your newsletter registration will be automatically deleted for security reasons.
7.3 If you no longer wish to receive e-mail newsletters from us, you can unsubscribe from our newsletter at any time by either clicking on the unsubscribe link contained at the end of each newsletter e-mail or by sending us an informal e-mail.
7.4 Data processing when ordering our newsletter is based on the legal basis of Art. 6 para. 1 sentence 1 lit. a) DSGVO in connection with your consent to receive the newsletter. We store your consent for proof and documentation purposes for up to three years at the end of the year following the last newsletter dispatch to you or your declaration of revocation.

8. DISCLOSURE OF DATA TO THIRD PARTIES

8.1 We work with payment service providers through which payments for your purchases are processed. During the payment process, the payment service provider collects and processes personal data that is required for the payment method you have chosen. In this respect, the data protection provisions of the payment service provider selected by you apply in addition. When we receive a payment, we process the data that the payment service provider transmits to us. The processing of payments via service providers takes place on the basis of Art. 6 para. 1 lit. b) DSGVO. In addition, we have a legitimate interest within the meaning of Art. 6 (1) (f) DSGVO to offer our customers the use of suitable and secure payment options. We store payment data until all mutual claims arising from the respective contractual relationship with you have been fulfilled and the retention periods applicable to us under commercial and tax law have expired.
8.2 If you select the payment method "purchase on account", we transmit your data to the payment service provider Klarna. Klarna checks and evaluates your information and exchanges data with other companies and credit agencies (credit check). If your creditworthiness is not guaranteed, Klarna may refuse the selected payment method. Your personal data will be treated by Klarna in accordance with data protection laws and will not be passed on to third parties for advertising purposes. Further information can be found in Klarna's privacy policy.
8.3 Furthermore, for the purpose of accounting and bookkeeping, we pass on data to third parties who are either subject to a professional duty of confidentiality (e.g. tax consultants) or with whom we have concluded an order for data processing.

9. TRANSMISSION TO THIRD COUNTRIES

9.1 We use the store system of the company Shopify, based in Ireland. The legal basis for this is an order processing agreement between us and Shopify, by which Shopify may only process data according to our instructions.
9.2 When using Shopify, data may also be transferred from Shopify Ireland to Shopify in Canada. In the event that data is transferred to Canada, the appropriate level of data protection is guaranteed by adequacy decision of the European Commission.

10. TRACKING & ANALYSIS

10.1 We use tracking tools from Facebook and Instagram as well as other social media platforms. These tools enable us to display individually tailored and interest-based advertising on social media platforms to certain groups of pseudonymized visitors to our website.
10.2 We use Google Analytics to evaluate the user behavior of visitors to our website and thereby improve the user experience on our website. Data is sent to Google, evaluated and made available to us in the form of reports.
10.3 For tracking and analysis, the setting of so-called cookies is necessary. Cookies are small text files that are sent from our web server to your browser and stored by it on your end device for later retrieval. When you visit our website, you can determine for yourself whether or which cookies are set by us by making settings in the so-called consent banner. The legal basis is therefore your consent pursuant to Art. 6 para. 1 lit a) DSGVO.

11. EMBEDDING VIDEOS

11.1 We embed external videos from YouTube on our website. YouTube is a video portal that belongs to Google. YouTube or Google collects data from users in order to personalize advertising, among other things.
11.2 The embedding of the videos takes place via the "extended data protection mode" option provided by YouTube. When you call up one of our pages with an embedded YouTube video, a connection is established to the YouTube servers in the USA. A transmission of data, in particular which of our pages you have previously visited as well as device-specific information including the IP address, will only be transmitted to YouTube when you start the video.
11.3 If you are logged into your Google account at the same time as using our website, the data collected will be assigned to your Google account. You can prevent this by logging out of your Google account before visiting our website. Alternatively, you can make settings in your Google account to increase data protection.
11.4 The processing of personal data by Google is based on the standard data protection clauses of the European Commission in accordance with Article 46 (2c) DSGVO. Google has also implemented extensive technical and organizational measures to protect personal data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access by third parties. These Google measures are certified to the ISO/IEC 27001:2013 standard. For more information about the privacy practices of YouTube can be found in Google's privacy policy.
11.5 The embedding of YouTube videos on our website is based on Art. 6 para. 1 lit. f DSGVO, as we have a legitimate interest in implementing our business model through our own or third-party videos and offering our users valuable topic-related information.

12. YOUR RIGHT AS A DATA SUBJECT

12.1 You have the right to request information at any time about whether and which of your data we process and for what purpose, and to whom and on what basis it is disclosed (Art. 15 DSGVO). This also includes your right to receive copies. In the event of a large amount of data, users may be asked to specify the information to be provided for certain types of data. The information must be provided without delay and may in no case take longer than one month.
12.2 You also have the right to have inaccurately collected personal data corrected or incompletely collected data completed (Art. 16 GDPR).
12.3 Furthermore, you have the right to demand that we restrict the processing of your data, provided that the legal requirements for this are met (Art. 18 DSGVO).
12.4 In addition, you have the so-called "right to be forgotten", i.e. you can demand that we delete your personal data, provided that the legal requirements for this are met (Art. 17 DSGVO). Irrespective of this, your personal data will be automatically deleted by us if the purpose of the data collection has ceased to exist or the data processing has been carried out unlawfully.
12.5 You have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer to another controller (Art. 20 DSGVO).
12.6 In accordance with Art. 7 (3) DSGVO, you have the right to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future.
12.7 You also have the right to object to the processing of your personal data at any time, provided that a right of objection is provided for by law. In the event of an effective objection, your personal data will also be automatically deleted by us (Art. 21 DSGVO).
12.8 If you wish to exercise your right of revocation or objection, a notification by e-mail shall suffice.
12.9 Without prejudice to any other administrative or judicial remedy pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR. The competent supervisory authority for us is, among others, the State Commissioner for Data Protection.