Privacybeleid

 

PRIVACY POLICY

  1. INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when you use our website. Personal data refers to all data that can be used to personally identify you.

1.2 The responsible party for data processing on this website, in accordance with the General Data Protection Regulation (GDPR), is CalySups The responsible party for processing personal data is the natural or legal person who, alone or together with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

  1. DATA COLLECTION WHEN VISITING OUR WEBSITE

When you visit our website for informational purposes only, meaning if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website:

  • Our visited website

  • Date and time of access

  • Amount of data sent in bytes

  • Source/reference from which you came to the page

  • Used browser

  • Used operating system

  • Used IP address (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

  1. COOKIES

To make visiting our website attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (cookies from third parties) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

In some cases, cookies serve to simplify the order process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

We may work with advertising partners who help us make our internet offering more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive (cookies from third parties) when you visit our website. If we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected.

Please note that you can set your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in how it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Please note that the functionality of our website may be limited if cookies are not accepted.

  1. CONTACT

When contacting us (e.g., via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used solely for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after the final processing of your request, provided that there are no legal retention obligations to the contrary.

  1. DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING

In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The data collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the above-mentioned address of the responsible party. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with respect to tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or a legally permitted further data use has been reserved, about which we will inform you accordingly below.

  1. USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Newsletter Subscription

If you sign up for our email newsletter, we will send you regular information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing further data is voluntary and will be used to address you personally. For the newsletter distribution, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have expressly confirmed that you agree to the newsletter being sent. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter in the future by clicking on an appropriate link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address as entered by the Internet Service Provider (ISP) as well as the date and time of registration to track any possible misuse of your email address at a later date. The data collected by us when you register for the newsletter will be used exclusively for advertising purposes through the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.

6.2 Newsletter for Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. In this case, we do not need to obtain separate consent from you. The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, no mail will be sent by us. You have the right to object to the use of your email address for the above-mentioned advertising purposes at any time with effect for the future by notifying the responsible party mentioned at the beginning. You will only incur transmission costs according to the base tariffs. After receiving your objection, the use of your email address for advertising purposes will be immediately stopped.

  1. DATA PROCESSING FOR ORDER PROCESSING

7.1 The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, to the extent that this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution within the framework of the payment processing, provided this is necessary for the payment processing. If payment service providers are used, we explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

7.2 Use of Payment Service Providers

  • Paypal

For payments via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit check may contain probability values (so-called score values), which are calculated based on scientifically recognized mathematical-statistical procedures. Address data is included in the calculation of the score values but not exclusively. For more information about data protection law, including the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.

  1. CONTACT OPTIONS AND YOUR RIGHTS

8.1 As a data subject, you have the following rights:

  • Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent specified therein.

  • Pursuant to Art. 16 GDPR, you have the right to request the immediate correction of incorrect or incomplete personal data stored by us.

  • Pursuant to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us unless further processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest, or for asserting, exercising, or defending legal claims.

  • Pursuant to Art. 18 GDPR, you have the right to request the restriction of processing of your personal data if you dispute the accuracy of the data, the processing is unlawful, but you oppose its deletion, we no longer need the data, but you need it to assert, exercise, or defend legal claims, or you have objected to processing pursuant to Art. 21 GDPR.

  • Pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller.

  • Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your habitual residence, workplace, or our company headquarters.

8.2 Right to Object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds relating to your particular situation or the objection is against direct marketing. In the latter case, you have a general right to object that we will implement without specifying a particular situation.

If you wish to exercise your right to object, simply send an email to info@calysups.shop

  1. DATA STORAGE PERIOD

The storage duration of personal data is based on the respective statutory retention period (e.g., commercial and tax retention periods). After the expiration of this period, the corresponding data will be routinely deleted, provided that they are no longer necessary for the performance of the contract or initiation of a contract and/or there is no legitimate interest on our part for further storage.