Privacy Policy
1. Information on the collection of personal data and contact details of the controller
2. Data collection when visiting our website
3. Contacting us
4. Cookies
5. Data processing for order processing
6. Data processing when opening a customer account and for contract fulfillment
7. Use of social media: Social plugins
8. Rights of the data subject
9. Duration of storage of personal data
1. Information on the collection of personal data and contact details of the controller
1.1. Thank you for visiting our website. Below, we would like to inform you about how we handle your personal data when you use our website. In principle, personal data refers to any data that can be used to personally identify you.
1.2. The controller responsible for data processing on our website within the meaning of the General Data Protection Regulation (GDPR) is: Thomas Gerst Im Rod 39 64569 Nauheim Germany Tel.: 06152-859232 Fax: 06152-6688949 E-Mail: kundenservice@custompolish.com.
2. Data collection when visiting our website
Each time our website is accessed, our system automatically collects data and information transmitted by your browser to our server (so-called "server log files"). The following data, which is technically necessary for us, is collected: The specific website visited Date and time of access Volume of data transmitted in bytes Source/referral link via which you arrived at the site Operating system used Browser used IP address used (if applicable: in anonymized form) The legal basis for this processing is Art. 6(1)(f) GDPR, based on our legitimate interest in improving the stability and maintaining the functionality of our website. The data is not disclosed or used for any other purpose. Temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. To achieve this, the user's IP address must remain stored for the duration of the session. We reserve the right to retrospectively review server log files if there are concrete indications of unlawful use. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected to provide the website, this occurs when the respective session ends. In the case of data stored in log files, this occurs after a maximum of seven days. Storage beyond this period is possible. In such cases, users' IP addresses are deleted or masked so that the accessing client can no longer be identified. Collecting data to provide the website and storing data in log files is essential for the operation of the website. Consequently, the user has no right to object to this processing.
3. Contacting us
If you contact us via the contact form, the data entered in the input mask is transmitted to us and stored. The specific data collected can be seen from the respective input mask. When contacting us via e-mail, only the data you provide in the e-mail is transmitted to us. The data is used exclusively for processing the conversation and your inquiry. Where the user has given consent, the legal basis for processing the data is Art. 6(1)(a) GDPR. The legal basis for processing data transmitted in the course of sending an e-mail is Art. 6(1)(f) GDPR. If the e-mail contact aims to conclude a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and provided there are no statutory retention obligations to the contrary. For personal data from the contact form's input mask and data sent via e-mail, this occurs when the respective conversation with the user has ended. The conversation is considered ended when the circumstances indicate that the matter in question has been conclusively resolved. The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us via e-mail, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
4. Cookies
Our website uses cookies. Cookies are text files stored on the user's device. When a user visits a website, a cookie may be stored on the user's operating system. Certain functions of our website cannot be provided without the use of cookies. For these functions, it is necessary for the browser to be recognized even after navigating to a different page. User data collected via technically necessary cookies is not used to create user profiles. Our legitimate interest in processing personal data pursuant to Art. 6 (1) (f) GDPR also lies in the aforementioned purposes. Furthermore, our website may use cookies that enable an analysis of users' browsing behavior (so-called third-party cookies). You can find further information regarding the scope, purpose, legal basis, and options for objecting in the relevant sections of this privacy policy. As a user, you have full control over the use of cookies. You can disable, restrict, or delete the transmission of cookies by changing the settings in your internet browser. If you disable cookies for our website, you may not be able to use all of the website's functions to their full extent. You can prevent the transmission of Flash cookies by changing the settings of your Flash Player. You can find help regarding the settings in your browser's help menu or at the following links: Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac Opera: https://help.opera.com/en/latest/web-preferences/#cookies Some of the cookies used here are deleted after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser upon your next visit (persistent cookies). When cookies are set, they collect and process specific user information—such as browser and location data as well as IP address values—to varying degrees. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
5. Data processing for order fulfillment
5.1. If you wish to place an order in our online shop, providing the personal data required for us to process your order is necessary for the conclusion of the contract. We process the data you provide in order to fulfill your order. We work with external service providers to process your order. To do so, we must share the necessary personal data with them. If we commission transport companies to deliver your goods, we pass on the data required for delivery to the respective transport company. To process payments, we share your data with the commissioned financial institution to the extent necessary. If we use payment service providers, you will also be informed of this below. The legal basis for the transfer of your data is Art. 6 (1) (b) GDPR.
5.2. Transfer of your personal data to shipping service providers - DHL If your goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we pass on only the recipient's name and the delivery address to DHL for the purpose of delivery and to the extent necessary pursuant to Art. 6 (1) (b) GDPR. Only if you have given your express consent during the ordering process do we pass on your e-mail address to DHL pursuant to Art. 6 (1) (a) GDPR prior to delivery for the purpose of coordinating a delivery date or providing a delivery notification. You may revoke your consent at any time with effect for the future by contacting the controller named above or the transport service provider DHL.
5.3. Use of payment service providers
- PayPal If you select PayPal, credit card via PayPal, direct debit via PayPal, or—where offered—"purchase on account" or "payment by installments" via PayPal as your payment method, payment processing is handled by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). We transmit your personal data to PayPal to the extent necessary, in accordance with Art. 6(1)(b) GDPR. For the payment methods of credit card via PayPal, direct debit via PayPal, or—where offered—"purchase on account" or "payment by installments" via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be transmitted to credit reference agencies in accordance with Art. 6(1)(f) GDPR, based on PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check—specifically the statistical probability of payment default—to decide whether to make the respective payment method available. The credit report may contain probability values (so-called score values). Where score values are included in the credit report result, they are based on a scientifically recognized mathematical-statistical method. Address data, among other factors, is included in the calculation of these score values. Details regarding what other data PayPal collects can be found in PayPal’s privacy policy, available at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full You may object to this processing of your data at any time by notifying PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
6. Data processing when opening a customer account and for contract fulfillment
When you open a customer account with us, personal data is collected and processed in accordance with Art. 6(1)(b) GDPR. The scope of the data collected is evident from the input form. We store and use the data you enter for the purpose of fulfilling the contract. You may delete your customer account at any time. This can be done by sending a message to the address of the controller or, if the option is available, directly within the customer account. In such cases, we will block your data—subject to statutory retention periods under tax and commercial law—and delete it once these periods have expired. Exceptions to this apply only if you have consented to permanent storage or if we are legally permitted to continue processing the data.
7. Use of social media: Social plugins
Facebook plugins with the "2-click solution" We use social plugins ("plugins") from the social network Facebook on our website (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) (hereinafter referred to as "Facebook").
To enhance the protection of your data when visiting our website, the plugins are integrated using a so-called "2-click solution." This ensures that no connection to Facebook's servers is established—and consequently no data is transmitted—when you access a page on our website containing these plugins. Only when you click on a plugin, thereby consenting to data transmission, does your browser establish a direct connection to Facebook's servers. The content of the respective plugin is then transmitted directly to your browser and embedded into the page. Through this integration, the providers receive information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the provider or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a Facebook server. If you are logged into Facebook, the providers can directly associate your visit to our website with your Facebook profile. If you interact with the plugins—for example, by clicking the "Like" button—the corresponding information is also transmitted directly to a Facebook server and stored there. This information is also published on the social network and displayed to your contacts. Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent by clicking the activated plugin again to deactivate it. Data already transmitted remains unaffected by this revocation. Data transmission to the USA is based on the EU Commission's Standard Contractual Clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum. Further information is available in Facebook's privacy policy: http://www.facebook.com/policy.php. If you do not wish for Facebook to directly associate the data collected via our website with your profile, you must log out of Facebook before activating the plugin.
8. Rights of the Data Subject
8.1. Applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data; we inform you of these rights below:
- Right of access pursuant to Art. 15 GDPR: You may request confirmation from the controller as to whether personal data concerning you is being processed by the controller. Furthermore, you have the right to obtain information regarding the purpose, the categories of personal data, the recipients, the planned storage period, and the existence of further rights—such as the rectification of data or the right to lodge a complaint with a supervisory authority; the source of your data (if not collected by us); the existence of automated decision-making, including profiling, and—where applicable—meaningful information about the logic involved and the significance and envisaged consequences of such processing for you; as well as your right to be informed of the safeguards in place pursuant to Art. 46 GDPR regarding the transfer of your data to third countries;
- Right to rectification pursuant to Art. 16 GDPR: You have the right to the immediate rectification of inaccurate data concerning you and/or the completion of incomplete data stored by us; such rectification or completion must be carried out without undue delay.
- Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data while the accuracy of the data is being verified (where you contest its accuracy); if you object to the erasure of your data due to unlawful processing and request the restriction of its use instead; if you require the data for the establishment, exercise, or defense of legal claims after we no longer need it for the original purpose; or if you have objected to processing based on your particular situation, pending the verification of whether our legitimate grounds override yours; If the processing of your personal data has been restricted, such data may—with the exception of storage—only be processed with your consent, for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. If the restriction on processing is lifted, you will be informed by the controller before the restriction is removed.
- Right to erasure pursuant to Art. 17 GDPR: You have the right to obtain the erasure of your personal data without undue delay if the conditions set out in Art. 17 para. 1 GDPR are met. However, this right to erasure does not apply—specifically, though not exclusively—if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims. - Right to be informed pursuant to Art. 19 GDPR: If you have exercised your right to rectification, erasure, or restriction of processing, the controller is obliged to communicate such rectification, erasure, or restriction to all recipients to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.
- Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, or to request its transmission to another controller, insofar as this is technically feasible;
- Right to object pursuant to Art. 7 para. 3 GDPR: You have the right to object at any time to the processing of personal data concerning you that is based on Art. 6 para. 1 (e) or (f) GDPR; this also applies to profiling based on these provisions. Furthermore, you have the right to withdraw your data protection consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. - Right to lodge a complaint pursuant to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority—particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement—if you consider that the processing of personal data concerning you violates the GDPR.
8.2. Right to object
You have the right to object to the processing of your data at any time with effect for the future if we process your data based on our overriding legitimate interest following a balancing of interests. If you exercise this right to object, we will cease processing your data unless there are demonstrable, overriding, compelling legitimate grounds preventing such cessation, or if the continued processing serves the establishment, exercise, or defense of legal claims.
9. Duration of personal data storage
The duration for which personal data is stored depends on statutory retention periods. Once these periods expire, we routinely delete the data, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage. Home Shop Contact Privacy Policy Legal Notice Terms and Conditions Right of Withdrawal Revoke Contract Payment & Shipping