Data Protection

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This only applies if no other information is provided in the subsequent processing operations.
"Personal data" is all information that relates to an identified or identifiable natural person.

Your data may be transmitted to third countries outside the European Union for which an adequacy decision has been made by the EU Commission.

Contact

Responsible person
Contact us if you wish. The person responsible for data processing is Marco Bahr, Bahnhofstr. 17, 59348 Lüdinghausen, Germany, 02591237140, bifroest@gbk-shop.de

Customers contacting us by email
If you contact us by email, we will only collect your personal data (name, email address, message text) to the extent you provide it. The data processing serves to process and answer your contact request.
If the contact serves to carry out pre-contractual measures (e.g., advice in the event of interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out based on Art. 6 Para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is carried out based on Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object to this processing of personal data concerning you based on Art. 6 Para. 1 lit. f GDPR at any time for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Collection and processing when using the contact form
When you use the contact form, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing serves the purpose of establishing contact.
If the contact serves to carry out pre-contractual measures (e.g., advice in the event of interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out based on Art. 6 Para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is carried out based on Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object to this processing of personal data concerning you based on Art. 6 Para. 1 lit. f GDPR at any time for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Orders      

Your data may be transferred to third countries outside the European Union for which an adequacy decision has been made by the EU Commission. 
 

Shipping Service Provider       and Merchandise Management      

Passing on the email address to shipping companies to inform them about the shipping status
We will pass on your email address to the transport company as part of the contract processing, provided that you have expressly agreed to this during the ordering process. The purpose of the transfer is to inform you about the shipping status by email. The processing is carried out based on Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the legality of the processing carried out based on the consent until the revocation.

Use of an external inventory management system
We use a merchandise management system to process contracts as part of order processing. For this purpose, your personal data collected as part of the order is transmitted to
Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg. 
.

Plug-ins and Related Information

Use of Social Plug-ins
We use social network plug-ins on our website. The integration of social plug-ins and the data processing that takes place in this way serves the purpose of optimizing the advertising for our products.
When social plug-ins are integrated, a link is established between your computer and the servers of the social network provider, and the plug-in is displayed on the page by sending a message to your browser, provided you have expressly consented to this. Both your IP address and the information about which of our pages you have visited are transmitted to the provider's servers. This applies regardless of whether you are registered or logged in to the social network. Data is also transmitted to unregistered or unlogged users. If you are connected to one or more of your social network accounts at the same time, the information collected can also be assigned to your corresponding profiles. When you use the plug-in functions (e.g., by pressing the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.
Cookies or similar technologies are used with your consent based on Section 25 Paragraph 1 Clause 1 TTDSG in conjunction with Article 6 Paragraph 1 Letter a of GDPR. Your personal data is processed with your consent based on Article 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out based on your consent until the revocation.
The social networks named below are integrated into our website using social plug-ins. You can find more information on the scope and purpose of the collection and use of data as well as your rights and options for protecting your privacy in the linked data protection notices of the providers.

Facebook of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Meta Platforms Ireland and we are jointly responsible for the collection of your data when the service is integrated and the transmission of this data to Facebook. This is based on an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum. According to this, we are particularly responsible for fulfilling the information obligations according to Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR regarding the correct technical implementation and configuration of the service and for compliance with the obligations under Art. 33, 34 GDPR, insofar as a breach of the protection of personal data affects our obligations under the agreement on joint processing. Meta Platforms Ireland is responsible for enabling the rights of data subjects in accordance with Art. 15 - 20 GDPR, for complying with the security requirements of Art. 32 GDPR regarding the security of the service and for complying with the obligations under Art. 33, 34 GDPR, insofar as a breach of the protection of personal data affects the obligations of Meta Platforms Ireland under the joint processing agreement.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself according to the TADPF and is therefore committed to complying with European data protection principles.
For more information about the collection and use of data by Facebook, your rights in this regard, and options for protecting your privacy, please see Facebook's privacy policy at https://www.facebook.com/about/privacy/.

Rights of Data Subjects and Storage Period

Duration of storage
Nach vollständiger Vertragsabwicklung werden die Daten zunächst für die Dauer der Gewährleistungsfrist, danach unter Berücksichtigung gesetzlicher, insbesondere steuer- und handelsrechtlicher Aufbewahrungsfristen gespeichert und dann nach Fristablauf gelöscht, sofern Sie der weitergehenden Verarbeitung und Nutzung nicht zugestimmt haben.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability.
In addition, under Art. 21 Para. 1 GDPR, you have the right to object to processing based on Art. 6 Para. 1 f GDPR and to processing for direct marketing purposes.

Right to complain to the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with the supervisory authority responsible for us, which you can reach using the following contact details:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
E-mail: poststelle@ldi.nrw.de

Right of objection
If the personal data processing listed here is based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time, with future effect, for reasons arising from your particular situation.
After the objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise or defend legal claims.

last updated: July 13, 2023