Valid since 02.11.2018
This data protection declaration has been translated from German by machine and may be incorrect. In case of dispute, only the German-language original version applies.
Privacy statement according to the DSGVO
I. Name and address of the person responsible
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Freunde der Erfrischung GmbH
Managing Directors: Andreas Sahlke & Karsten Demske
28357 Bremen, Germany
Tel .: 0421-1651 2700
Fax: 0421-1651 2709
Mail: info [at] unverfroren.de
I. General information about data processing
In principle, we collect and use personal data of our users only to the extent necessary for the provision of a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent can not be obtained for reasons of fact and the processing of the data is permitted by law.
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
II. Provision of the website and creation of logfiles
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected here:
a) Information about the browser type and version used
b) The operating system of the user
c) The Internet service provider of the user
d) The IP address of the user
e) date and time of access
f) Websites from which the user's system reaches our website
g) Websites that are accessed by the user's system through our website
The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f) GDPR. The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f) GDPR.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.
In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.
In the o.g. For our purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f) GDPR.
The following data is stored and transmitted in the cookies:
a) language settings
b) Articles in a shopping cart
c) log-in information
d) URL history
Please note that even after setting your browser accordingly, you can be informed individually about the setting of cookies and thus decide on their acceptance.
Help can be found in the respective help menu of your browser under the following links:
Internet Explorer: https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
IV. Registration and order processing
If you want to order in our webshop, it is necessary for the conclusion of the contract, that you provide your personal data, which we need for the processing of your order. We process the data provided by you to process your order.
You also have the option of registering yourself with personal data. The data is entered into an input mask and transmitted to us and stored. The collected data can be found in the respective input mask.
At the time of registration, the following data is also stored:
a) The IP address of the user
b) date and time of registration
c) The sector category as end user (B2C), commercial user (B2B), public institution or association / church.
d) The gender: Mr. or Mrs.
e) first and last name
f) e-mail address
g) telephone number
h) date of birth
Registration is required for the provision of certain content and services on our website, e.g. Insight into your orders and shipment information.
As part of the registration process, the consent of the user to process this data is obtained. Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a) GDPR.
If the data collection serves the fulfillment of a contract of which the user is a party or the implementation of pre-contractual measures, then additional legal basis for the processing of the data is Art. 6 (1) lit. b) GDPR. The same applies to the transfer of your payment data to our bank.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. This is the case for the data collected during the registration process when the registration on our website is canceled or modified.
For the data collected during the registration process to fulfill a contract or to carry out pre-contractual measures, this is the case when the data is no longer necessary for the execution of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contracting party in order to comply with contractual or legal obligations.
As a user, you have the option at any time to dissolve the registration by informing us via email. The data stored about you can be changed at any time by informal message by email to us.
If the data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible, unless contractual or legal obligations preclude deletion.
V. Passing the email address to the parcel service provider
During the ordering process, the customer has the opportunity to give his consent to the forwarding his email address to the implementing shipping service DHL or DPD.
The transfer is then exclusively for the purpose of announcing the delivery to the customer. Another use does not take place. After the delivery of the package, the customer's email address will be deleted.
VI. Contact form and e-mail contact
On our website is a contact form available, which can be used for electronic contact. If a user realizes this option, the data entered in the input mask will be transmitted to us and saved. The collected data can be found in the respective input mask.
At the time of sending the message, the following data is also stored:
a) The IP address of the user
b) date and time of registration
d) Salutation Mr / Mrs
e) First name and last name:
f) E-Mail Address:
h) Subject: Your comment:
For the processing of the data in the context of the sending process your consent is obtained and referred to this privacy statement. Alternatively, contact via the provided under point 1 e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored. In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation. Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a) GDPR. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f) GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified. The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.The user has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue. The revocation can be made by informal declaration to the e-mail address mentioned under point 1. All personal data stored in the course of contacting will be deleted in this case.
VII. Third Party Cookies
1. Google Analytics
This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there.
2. Trusted Shops Trust Badge
On our website, we include the Trusted Shops Trustbadge to display the Trusted Shops seal of approval and the possibly collected reviews as well as the offer of Trusted Shops products for buyers after an order.
This serves to safeguard our legitimate interests (Art. 6 para. 1 lit. f DSGVO), which predominate in the context of a weighing up of interests, in order to optimize the marketing of our offer. The Trustbadge and the services advertised are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When the Trustbadge is called, the Web server automatically stores a so-called server log file, which can be used, for example. Your IP address, date and time of the retrieval, transferred amount of data and the requesting provider (access data) contains and documented the call. These access data will not be evaluated and automatically overwritten within seven days after the end of your page visit.
Additional personal data will only be transferred to Trusted Shops if and when you decide to use Trusted Shops products after completing an order or if you have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.
3. Google DoubleClick
4. Plugins and Tools
The following explains the tools used on this website, as well as the options for deactivating or opt-out options. If at some point you delete all cookies on your computer, you must set all the respective opt-out cookies again. Disabling cookies in general may limit the functionality of our site.
a) Google Web Fonts
This site uses so-called web fonts for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
To do this, the browser you use must connect to Google's servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your browser does not support web fonts, a default font will be used by your computer. The same applies if you deactivate the plugin via your browser setting as shown above. Opt-Out: https://adssettings.google.com/authenticated.
b) Google reCAPTCHA
c) Google Maps
d) Youtube videos
VIII. External service companies
We offer several payment methods for the use of the webshop and serve different payment service providers. Depending on which payment method you choose, different data will be transmitted to the respective payment service provider. The legal basis for the transfer is Art. 6 para. 1 lit. a) GDPR. Below we list our payment service providers.
If you choose the payment method PayPal, your personal data will be transmitted to PayPal. Prerequisite for the use of PayPal is the opening of a PayPal account. With the use or opening of a PayPal account name, address, telephone number and e-mail address must be transmitted to PayPal. The legal basis for the transmission of data is Article 6 (1) lit. a) GDPR (consent) and Article 6 para. 1 lit. b) GDPR (processing to fulfill a contract). Operator of the payment service PayPal is the:
PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg E-Mail: email@example.com
If we enter in advance, z. B. in a purchase on account, we get to safeguard our legitimate interests acc. Art. 6 para. 1 lit. f DSGVO, if applicable, a credit assessment based on mathematical-statistical procedures at SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden. For this purpose, we pass on the personal data required for a credit check to SCHUFA Holding AG and use the information received on the statistical probability of a default for a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit information can contain probability values (score values) which are calculated on the basis of scientifically recognized mathematical-statistical methods and whose calculation includes, among other things, address data. Your concerns will be considered in accordance with the statutory provisions.
The delivery of the goods to you can be carried out by one of the following transport service providers:
DPD (DPD Germany GmbH, Wailandtstraße 1, 63741 Aschaffenburg)
GLS (General Logistics Systems, Germany GmbH & Co. OHG, GLS Germany Road 1 - 7, DE-36286 Neuenstein)
DHL (Deutsche Post AG, Charles-de-Gaulle-Strasse 20, 53113 Bonn)
UPS (United Parcel Service Germany S.à.r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss)
Schenker (Schenker Germany AG, Uhlfelder Strasse 1-3, 60314 Frankfurt)
Kühne & Nagel (Kuehne + Nagel (AG & Co.) KG, Great Grasbrook 11-13, 20457 Hamburg)
TNT (TNT Express GmbH, Haberstrasse 2, 53842 Troisdorf)
For the purpose of delivery we provide, insofar as this is necessary for the delivery of goods, in accordance with Art. 6 para. 1 lit. b) DSGVO only the name of the recipient and the delivery address to the transport service provider on. Insofar as in any individual case a transport company other than the above mentioned must be commissioned (for example due to the scope of the order) you will informed about this separately. In that case, your data will be transferred in accordance with the provisions of this chapter. Only if you have given your express consent in the ordering process will we provide your e-mail address in accordance with Art. 6 para. 1 lit. a) GDPR before delivery of the goods for the purpose of coordinating a delivery date or delivery notification to the transport service provider. The consent can be withdrawn at any time with effect for the future against the above designated person or against the respective transport service provider.
IX. Rights of the person concerned
If you process personal data, you are i.S.d. DSGVO and you have the following rights to the person responsible:
1. Right to information
You may ask the person responsible for a confirmation as to whether personal data concerning you is being processed by the person responsible. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of the storage and the existence of other rights such as rectification of the data or the existence of a right to complain to a supervisory authority.
2. Right to rectification
You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.
3. Right to restriction of processing
You have the right to request that your personal data be restricted as long as the accuracy of your information is disputed, if you refuse to delete your data for improper processing and instead request that your data be restricted when processing your data to assert, exercise or defend legal claims after we no longer require such data for purpose or if you have filed an objection based on your particular situation, as yet as we know that our legitimate reasons prevail.
If the processing of personal data concerning you has been restricted, these data may only be used - with the exception of their storage - for the assertion, exercise or defense of legal claims or for the protection of another natural or legal rights
legal person or for reasons of significant public interest of the Union or of a Member State.
If the restriction on processing has been restricted, the person responsible informs you before the restriction is lifted.
4. Right to cancellation
You may demand from the person responsible that the personal data relating to you be deleted immediately if and to the extent that the requirements for this have been met. The responsible person is obliged to delete this data immediately.
If the person in charge has made the personal data concerning you public and is acc. Article 17 (1) of the GDPR, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs Persons requesting deletion of all links to such personal data or of copies or replications of such personal data.
The right to erasure does not exist if the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task which is in the public interest or in the exercise of official authority conferring on the controller has been;
(3) for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h) and i and Art. 9 (3) GDPR;
(4) for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
(5) to assert, exercise or defend legal claims.
5. Right to information
You have the right to be informed by the controller about which recipient the controller has notified to you that you have asserted your right to rectify, erase or limit processing to the controller.
6. Right to Data Portability
You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format.
7. Right to object
You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e) or f) GDPR, objection is lodged; this also applies to profiling based on these provisions.
8. Right to revoke the data protection consent declaration
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
9. Right to non-automated decision on a case-by-case basis, including profiling
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner.
10. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the DSGVO violates.
The data protection authority of the state of Bremen can be reached at https://www.datenschutz.bremen.de/
The data protection officer of Freunde der Erfrischung GmbH can be reached at firstname.lastname@example.org.