Trusted Shops Cetrificate
Search
0 Items0,00 €

Privacy Policy

Data Protection Statement

We take the protection of your data seriously and make every effort to collect and store as little data as possible. Nevertheless, a certain degree of storage and evaluation of user data is necessary to guarantee and improve the operation of this website. The use of this Internet site is basically possible without having to provide any personal data. Nor is there any assignment of data to a specific person - unless you tell us your name, for example in an e-mail, via one of our forms or as part of an order.

If you use one of the services offered on this website or buy goods, this also regularly requires the collection, processing and storage of personal data, such as your name, your address, your e-mail address or telephone number. This collection, processing and storage takes place either on the basis of your express consent obtained beforehand or on the basis of a corresponding legal approval and on the basis of the provisions of the European Data Protection Basic Regulation and the German Federal Data Protection Act.

We would like to inform you here about the type, scope and purpose of the data collected, processed, stored and used by us via this website as well as about your rights in this context.

We use SSL transport encryption on this site. This serves among other things the protection of confidential contents, for example in the case of inquiries to us. You can see that the connection is actually encrypted in the address line of your browser, which always starts with "https://" and confirms the existing transport encryption with a green lock symbol.

1. Name and address of the controller

The controller within the meaning of the Basic Data Protection Ordinance and other data protection regulations is:

CK-Merchandising GmbH
Willeckstr. 7, D-35614 Asslar, Germany
privacy@ck-merchandising.de

External data protection officer:

PROLIANCE GmbH
Leopoldstr. 21, 80802 München
datenschutzbeauftragter@datenschutzexperte.de

2. Definitions

Data protection law has special terms which we also use in this data protection declaration in accordance with the legal definitions of the basic European data protection regulation. Therefore in this data protection declaration the expression

3. Legal basis of data processing

The processing of personal data by us is carried out on the basis of the provisions of the European Data Protection Basic Regulation and the German Federal Data Protection Act:

The provision of personal data may be required for legal (e.g. commercial or tax) reasons or for reasons of contract execution. If such data (such as information on a contractual partner) is not made available to us for processing, we cannot conclude a corresponding contract.

4. Log files

are listed. This information is required and used by us

5. Cookies and user profiles

Within the framework of legal regulations we can,

evaluate use profiles under a pseudonym, but only if you have not made use of your legal right to object to this use of your data. Some of our services require that we use so-called cookies.

These are small (text files) that your web browser stores on your device. Cookies may store information about your visit to our website that enables us to recognise your browser and to distinguish it from the browsers of other persons affected.

Most browsers are set to accept cookies by default. However, you can reconfigure your browser at any time so that it rejects cookies or asks you for confirmation beforehand. If you refuse cookies, however, this may mean that not all offers and functions of this website function or can be used by you without interruption.

Further details on the use of cookies on this website - including the existing opt-out options - can be found in this data protection declaration in the sections

6. Internal visitor statistics

This website uses "Google Analytics" for statistical analysis of visitor access. This is a web analysis service offered by Google Inc. Google Inc. acts on our behalf as a contract processor. The data is collected and processed via servers operated by Google Inc, which are usually not located in the European Union but in the USA. Pseudonymous user profiles of visitors to our website are created.

We use the web analysis service "Google Analytics" with activated "IP-Anonymisation". This shortens the IP address of visitors to our website. This shortening of the IP address is not done by us, but by Google Inc.

Google Inc. uses cookies for "Google Analytics", whose information is read out by Google, transferred to servers located in the USA and processed and stored there.

Important for you: You can generally prevent the installation of cookies by setting your browser software accordingly. Alternatively, you can prevent Google from collecting, processing and storing the data generated by the cookie by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en.

The data protection declaration of Google Inc. applicable to the "Google Analytics" service can be viewed at https://support.google.com/analytics/answer/6004245?hl=en .

7. e-mail and contact forms

If you send us an e-mail or contact us via a contact form, the personal data voluntarily transmitted to us will be automatically stored and, if necessary, processed for the purpose of processing or contacting you. This includes - if stated by you - in particular your name, your address or e-mail address, your telephone number and any other information you provide voluntarily. If you contact us via a form provided on this website, your IP address will also be stored. As a matter of principle, we only use the resulting personal data to the extent necessary for processing your inquiries and orders. This data is never passed on to third parties, unless we are legally obliged to do so.

8. Registration

This website offers you the possibility of registration. This registration takes place under indication of personal data, which we inquire in the form provided for this purpose. In addition, the IP address used by you and the date and time of sending the registration form are recorded. This personal data is collected and stored by us for internal use, for the purpose of communicating with you, for processing existing or future contractual relationships (e.g. orders), for protecting our technical system and for preventing misuse and, if necessary, for passing on to one or more contract processors (such as postal, parcel and payment service providers).

As a registered person, you can change or delete your personal data provided at the time of registration at any time, provided there are no legal regulations to the contrary, such as legal retention regulations. You can also obtain information from us at any time about which personal data about you as the person concerned is stored.

9. Newsletter

If you subscribe to a newsletter offered by us on this website, you must submit certain personal data, in particular your e-mail address, to us using the corresponding input form.

For legal reasons we use the "Double-Opt-In"-procedure for the newsletter registration by means of an automatically processed confirmation e-mail to the e-mail address provided by you. We hereby check whether the owner of the e-mail address you have provided has actually authorised the receipt of the newsletter as the person concerned.

We use the personal data collected in the context of the newsletter registration exclusively

A newsletter subscription can be cancelled at any time and consent to the storage of personal data can be revoked at any time. Such termination or revocation may be effected via the link contained in each newsletter or by other communication to the controller. In the event of both termination and revocation, we will delete the respective personal data, unless otherwise required by law, and discontinue sending the newsletter to the person concerned.

In addition to the information provided via the input form, we also store the date and time of your registration and the IP address you use for this purpose. This is done for the purpose of our own legal protection and to protect our technical systems against misuse.

The newsletters we send contain pixel tags, i.e. miniature graphics embedded in the e-mail, whose call is recorded in a log file and is used to determine whether and when the respective newsletter was opened. In the same way, the links contained in the newsletter are recorded and evaluated. This data is stored and processed exclusively for the purpose of statistical evaluation of the newsletter dispatch, optimisation of the newsletter dispatch and better adaptation of the newsletter content to the respective subscriber.

10. On-line advertising

  1. Use of Google Adwords Conversion
    1. We use the offer of Google Adwords to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites. We can determine in relation to the data of the advertising campaigns how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.
    2. These advertising media are delivered by Google via so-called "Ad Servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the insertion of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords stores a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (mark that the user no longer wishes to be addressed) are usually stored as analysis values.
    3. These cookies enable Google to recognise your Internet browser. If the user visits a certain page of the website of an adword customer and if the cookie has not yet expired, Google and the customer will be able to tell that the user clicked on the ad and was forwarded to this page. Each Google AdWords customer gets a different cookie. Thus, cookies cannot be tracked via the website of AdWords clients. We do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. On the basis of these evaluations we can recognise which of the used advertising measures are particularly effective. We do not receive any further data from the use of advertising material; in particular, we cannot identify users on the basis of this information.
    4. Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating AdWords Conversion, Google receives information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
    5. You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking, by setting your browser so that cookies are blocked by the domain "www.googleadservices.com", https://www.google.com/settings/ads, this setting being deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies; d) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browsers under the link https://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all functions of this offer in full.
    6. The legal basis for processing is Art. 6 para. 1. S. 1 lit. f DSGVO. For more information on Google's privacy policy, click here: https://www.google.com/intl/en/policies/privacy and https://services.google.com/sitestats/en.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at https://www.networkadvertising.org. Google has submitted to the EU-US privacy shield https://www.privacyshield.gov/EU-US-Framework.
  2. Remarketing

    Besides Adwords Conversion we use the application Google Remarketing. This is a process we would like to use to contact you again. This application allows you to see our advertisements after visiting our website when you continue to use the Internet. This is done by means of cookies stored in your browser, which are used to record and evaluate your usage behaviour when Google visits various websites. This is how Google can determine your previous visit to our website. According to Google's own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. According to Google, pseudonymisation is used for remarketing in particular.
  3. DoubleClick by Google

    1. This website continues to use the on-line marketing tool DoubleClick by Google. DoubleClick uses cookies to serve ads relevant to users, improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to track which ads are displayed in which browser and to prevent them from being displayed more than once. In addition, DoubleClick may use cookie IDs to collect conversions related to ad inquiries. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information.
    2. Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
    3. You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking, by setting your browser so that cookies are blocked by the domain "www.googleadservices.com", https://www.google.com/settings/ads, this setting being deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies; d) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browsers under the link https://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all functions of this offer in full.
    4. The legal basis for processing is Art. 6 para. 1. S. 1 lit. f DSGVO. For more information about DoubleClick by Google, please visit https://www.google.com/doubleclick and https://support.google.com/adsense/answer/2839090,, and Google's privacy policy in general: https://www.google.com/intl/en/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at https://www.networkadvertising.org. Google has submitted to the EU-US privacy shield https://www.privacyshield.gov/EU-US-Framework.
  4. Facebook Custom Audiences

    1. The website also uses the re-marketing function "Custom Audiences" of Facebook Inc. "("Facebook"). This allows users of the website to see interest-based advertisements ("Facebook ads") when visiting the social network Facebook or other websites that also use the process. We thus track the interest of showing you advertisements that are of interest to you, to make our website more interesting for you.
    2. Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the extent and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating Facebook Custom Audiences, Facebook receives information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Facebook service, Facebook may associate your visit with your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider may obtain and store your IP address and other identification features.
    3. The function "Facebook Custom Audiences" can be deactivated[here and] for logged in users at https://www.facebook.com/settings/?tab=ads.
    4. The legal basis for processing is Art. 6 para. 1. S. 1 lit. f DSGVO. For more information about Facebook's data processing, please visit https://www.facebook.com/about/privacy.

11. Integration of the Trustbadge Trusted Shop

The Trusted Shops Trustbadge is included on this website to display our Trusted Shops seal of approval and any collected evaluations as well as to offer Trusted Shops products to buyers after an order.

This serves to safeguard our legitimate interests in the optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO, which predominate in the context of a balancing of interests. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the trust badge is called, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit.

Further personal data will only be transferred to Trusted Shops if you have consented to this, decide to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.

12. Integration of Google customer reviews

The Google Customer Reviews widget is included on this website to display Google customer reviews and any reviews collected.

This serves to safeguard our legitimate interests in the optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO, which predominate in the context of a balancing of interests. The widget and the services advertised with it are an offer of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When the widget is called up, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. In addition, the order number, e-mail address, invoice country and identification numbers of the purchased products are transmitted for orders placed.

You can find the data protection declaration at  https://www.google.com/policies/privacy/. Under https://adssettings.google.com/authenticated you can object to the data processing.

13. Google Maps

This website uses the map service provider "Google Maps" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may in particular include location data and IP addresses of users, which, however, may not be collected without their consent (within the framework of the settings of their mobile devices and browsers). The data may be processed in the USA. You can find the data protection declaration at  https://www.google.com/policies/privacy/. Under https://adssettings.google.com/authenticated you can object to the data processing.

14. Youtube Videos

This website uses "Youtube" videos of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the extended data protection mode "nocookie". You can find the data protection declaration at  https://www.google.com/policies/privacy/. Under https://adssettings.google.com/authenticated you can object to the data processing.

15. Data processing for job applications

If we receive personal data - for example via a corresponding application form on the website or by e-mail - within the scope of job applications for the purpose of processing the application procedure, the following also applies:

In the event that an employment contract is concluded with the job applicant, we will store the personal data transmitted to us for the purpose of processing the employment relationship.

Otherwise we will automatically delete the personal data transmitted to us two months after cancellation, insofar as there are no other legitimate interests of the data controller to the contrary. Such a justified interest contrary to deletion may be, for example, a duty of documentation and evidence required due to violation of the General Equal Treatment Act or a legal defence in a legal action brought or threatened by the job applicant against us.

16. Duration of storage, deletion and blocking of personal data

Personal data of data subjects shall be processed or stored by the controller, subject to other legal provisions, only for the period necessary to achieve the storage purpose. A further determining criterion for the duration of the storage of personal data is the respective legal retention period.
After the storage purposes have ceased to apply and existing legal storage periods have expired, the personal data will be blocked or deleted by the data controller in accordance with the statutory provisions and requirements, even without a corresponding request from the data subject.

17. Your rights as a data subject


In the following, we describe the rights that each person affected by the processing of personal data has vis-à-vis the data controller. If you wish to exercise any of these rights, you may contact the controller at any time. We recommend that you inform us of your request either in writing or by e-mail at privacy@ck-merchandising.de

Any person concerned by the processing of personal data must has vis-à-vis the data controller

  1. the right to confirmation,
    i.e. the right to ask the controller to confirm whether personal data relating to them are being processed;
  2. the right to information,
    :i.e. in the case of the processing of personal data, a right to information on this personal data and on the following information:
    1. the purposes of processing;
    2. the categories of personal data being processed;
    3. the recipients or categories of recipients to whom the personal data has been or is still being disclosed, in particular recipients in third countries or international organisations;
    4. if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
    5. the existence of a right to correction or deletion of personal data concerning you, a right to limitation of processing by the controller or a right to object to such processing;
    6. the existence of a right of appeal to a supervisory authority;
    7. if the personal data is not collected from the data subject, all available information on the origin of the data;
    8. the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 DSGVO and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject. (Note: We do not use profiling or other automated decision making methods.
  3. in the case of transfers of personal data to a third country or an international organisation, the right to be informed of the appropriate guarantees in accordance with Article 46 of the basic Regulation on data protection in relation to transfers;
  4. the right to have made available
    a copy of the personal data which is the subject of the processing. For all other copies requested by the data subject, the data processor may charge an appropriate fee on the basis of the administrative costs. Where the data subject submits the application electronically, the information shall be provided in a common electronic format, unless otherwise indicated. This right to receive a copy must not prejudice the rights and freedoms of others.
  5. the right to report,
    i.e. the right to request that the controller correct any inaccurate personal data concerning him/her without delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration;
  6. the right to cancellation ("right to be forgotten"),
    i.e. the right to request that the data controller delete the personal data relating to him/her without delay and the controller is obliged to delete this data without delay if one of the following reasons applies:
    1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
    2. The data subject revokes his/her consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO, and there is no other legal basis for the processing.
    3. The data subject shall object to processing in accordance with Article 21 para 1  of the basic Regulation on data protection and there are no overriding legitimate grounds for processing or the data subject shall object to processing in accordance with Article 21 para 2 of the basic Regulation on data protection.
    4. The personal data has been processed unlawfully.
    5. The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
    6. The personal data concerning you was collected in relation to information society services offered pursuant to Article 8 para. 1 DSGVO.
    If the data controller has made the personal data concerning you public and is obliged to delete it pursuant para. 1, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors that process the personal data that a data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data.
    This does not apply if processing is necessary.
    1. to exercise freedom of expression and information;
    2. for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
    3. for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO;
    4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89 para 1 DSGVO, insofar as the law referred to is likely to make it impossible or seriously impair the attainment of the objectives of such processing, or
    5. to assert, exercise or defend legal claims.
  7. the right to restrict processing,
    i.e. the right of a data subject to request that the data controller delete the personal data relating to him/her without delay and the controller is obliged to delete this data without delay if one of the following reasons applies:
    1. the accuracy of the personal data is disputed by the data subject for a period which enables the data controller to verify the accuracy of the personal data,
    2. the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted;
    3. the data controller no longer needs the personal data for the purposes of the processing, but the data subject does need it to assert, exercise or defend legal claims, or
    4. the data subject has lodged an objection to the processing in accordance with Article 21(1) of the basic Regulation on data protection until it has been established whether the controller's legitimate reasons outweigh those of the data subject.
    If the processing of personal data has been restricted following this, such data may only be processed - apart from being stored - with the consent of the data subject or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. A data subject who has obtained a restriction on processing shall be informed by the controller before the restriction is lifted.
  8. The right to data transferability,
    i.e. the right of the data subject to the processing of personal data to obtain the personal data concerning him which he has provided to a controller in a structured, current and machine-readable format and he has the right to transmit this data to another controller without interference by the controller to whom the personal data have been provided, provided that
    1. processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the Basic Data Protection Regulation or on a contract pursuant to Article 6(1)(b) of the Basic Data Protection Regulation, and
    2. processing is carried out by means of automated methods.
    In exercising this right to data transferability, the data subject also has the right to request that the personal data be transferred directly from one data controller to another data controller, insofar as this is technically feasible. This right must not prejudice the rights and freedoms of others.
    The exercise of this right to data transferability does not affect the right to deletion ("right to be forgotten"). The right shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.
  9. The right of objection,
    i.e. the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f) of the DSBER; this also applies to profiling based on these provisions. The controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
    If the personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of the personal data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
    If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
    The data subject has the possibility to exercise his/her right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
    The data subject shall have the right to object to the processing of personal data concerning him/her for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the basic Regulation on data protection for reasons arising from his particular situation, unless such processing is necessary for the performance of a task in the public interest.
  10.  the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against him/her or significantly impairs him/her in a similar manner.
    This does not apply if the decision
    1. is necessary for the conclusion or performance of a contract between you and the person responsible,
    2. is admissible under the legislation of the Union or of the Member States to which the person responsible is subject and that legislation contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or
    3. is done with the express consent of the data subject.
    In the cases referred to in letters a and c, the person responsible shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the controller, to state his own position and to challenge the decision.
    Automated decisions may not be based on specific categories of personal data, unless the data subject has consented or processing on the basis of Union law or the law of a Member State proportionate to the objective pursued preserves the very essence of the right to data protection and provides for appropriate and specific measures to safeguard the fundamental rights and interests of the data subject on grounds of a substantial public interest.

© 2024 ck-Merchandising GmbH | All rights reserved | * Price indication incl. legal value plus shipping fees