The responsible party for the processing of your personal data within the meaning of the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG) is:
With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others about the purposes and means of processing. In addition, we inform you below about the third-party components used by us for optimization purposes as well as to increase the quality of use, insofar as third parties process data through this, again on their own responsibility.
Please read through these regulations, from which you can see how we handle your personal data.
II. PERSONAL DATA
According to Article 4(1) of Regulation (EU) 2016/679, i.e. the GDPR, "processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The controller declares that it will take particular care to protect the interests of data subjects and in particular will ensure that:
processes personal data lawfully, fairly and in a manner that is transparent to data subjects;
collects personal data for specific, explicit and legitimate purposes and does not further process it in a way incompatible with those purposes;
personal data are adequate, relevant and limited to what is necessary for the purposes for which they are processed;
personal data will be accurate and, where necessary, updated; and
personal data are kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed; and
processes personal data in such a way as to ensure appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by means of appropriate technical or organisational measures.
The provision of personal data is voluntary but necessary for the purposes mentioned in point III.
We guarantee the security of the data you provide us with materially, electronically and administratively. We strongly advise you to take all necessary measures to protect your data when surfing the Internet.
We use standard SSL (Secure Sockets Layer) encryption on all Internet pages through which personal data is entered.
If content, tools or other means from other providers (hereinafter collectively referred to as "third party providers") are used within the scope of this data protection declaration and their named registered office is located in a third country, it is to be assumed that a transfer of data to the third party providers' countries of domicile takes place. Third countries are countries in which the GDPR is not directly applicable law, i.e. basically countries outside the EU or the European Economic Area. The transfer of data to third countries takes place either if there is an adequate level of data protection, user consent or otherwise legal permission.
III. PURPOSES OF THE PROCESSING
As a matter of principle, we only store your data for as long as is necessary for the respective purpose of the processing.
We only process users' personal data in compliance with the relevant data protection regulations. This means that the users' data is only processed if a legal permission exists. I.e., in particular if the data processing is necessary for the provision of our contractual services (e.g. processing of orders) as well as online services, or is required by law, the consent of the users has been obtained, as well as on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation and security of our online offer within the meaning of Art. 6 para. 1 lit. f) GDPR, in particular in the case of range measurement, creation of profiles for advertising and marketing purposes as well as collection of access data and use of third-party services).
We point out that the legal basis for the consents is Art. 6 para. 1 lit. a) and Art. 7 GDPR, the legal basis for the processing for the fulfilment of our services and implementation of contractual measures is Art. 6 para. 1 lit.
GDPR, the legal basis for processing to fulfil our legal obligations Art. 6 para. 1 lit. c) GDPR, and the legal basis for processing to protect our legitimate interests Art. 6 para. 1 lit.
GDPR.
If a purchase is made or other services offered by www.evamats.eu are used, the fulfilment of the contract (Art. 6 para. 1 lit. b GDPR) is the basis for the processing of the user data. Accordingly, the user data is processed until the order or service has been fulfilled or until the statute of limitations has expired or the claims have expired.
Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers, who work for us within the framework of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for processing the payment. This serves the fulfilment of the contract according to Art. 6 para. 1 p. 1 lit. b GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.
Newsletter: You can register on our website to receive our newsletter. The newsletter contains news, offers and other information about EVAMATS products and services. Our newsletter is sent on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR. To receive the newsletter, you must enter your e-mail address in the field provided on our website. We will then send you a notification e-mail and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in this e-mail (double opt-in). We will therefore only send you a newsletter by e-mail if you have previously expressly confirmed that you want us to activate the newsletter service.
You can revoke your consent to the processing of your data for newsletter dispatch at any time with effect for the future. Each time you use our website, we collect access data that your browser automatically transmits to enable you to visit the website. The access data includes in particular: IP address of the requesting device, information on the time of the request, address of the accessed website and the requesting website, information on the browser used and the operating system, online identifiers.
The personal data you provide in connection with contacting the responsible person by e-mail, telephone or contact form are primarily processed for the purpose of processing your request and responding to your enquiry. The legal basis for processing your personal data for this purpose is the legitimate interest of the controller - Art. 6(1)(f) GDPR.
Data recipients may include: shipping companies, accounting companies, suppliers of goods, suppliers of IT solutions, payment processing companies, marketing companies, suppliers of telecommunication services, authorised state authorities.
If payment is made using a payment method offered by Stripe, the payment will be processed by the payment service provider Stripe Payments Europe, Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin.
If payment is made using a payment method offered by Klarna, the payment is processed via the payment service provider Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm.
IV. YOUR RIGHTS WITH REGARD TO THE COLLECTION OF PERSONAL DATA
The applicable data protection law grants you comprehensive data subject rights vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:
Right to confirmation (Art. 15 GDPR). You have the right to request confirmation from us as to whether we are processing personal data relating to you. Requests to this effect should be addressed to us. If you make the relevant request electronically, the information shall be provided by us in a commonly used electronic format, unless you specify otherwise.
Right of access (Art. 15 GDPR). If personal data relating to you is processed by us, you have the right to obtain from us at any time, free of charge, information about the personal data stored about you and a copy of that data. You can also request information from us about the following: - the purposes of processing; - the categories of personal data processed; - the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations; - if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration; - the existence of a right to rectification or erasure of the personal data concerning you or to restriction of processing by us or a right to object to such processing; - the existence of a right to lodge a complaint with a supervisory authority; - if the personal data are not collected from you, any available information on the origin of the data; - the existence of automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you. You can contact us at any time to exercise the aforementioned rights of access. If you make the relevant request electronically, the information shall be provided by us in a commonly used electronic format, unless you specify otherwise.
Right to rectification (Art. 16 GDPR). You have the right to request the rectification without delay of inaccurate personal data concerning you and, taking into account the purposes of the processing, the completion of incomplete personal data, including by means of a supplementary declaration. Corresponding requests should be addressed to us.
Right to erasure (right to be forgotten) (Art. 17 GDPR).You may request us to erase the personal data concerning you without undue delay, provided that one of the following reasons applies: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; - you withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR and there is no other legal basis for the processing; - you object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR object to the processing: - the personal data have been processed unlawfully: - erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject or - the personal data have been collected in relation to information society services offered pursuant to Art. 8 (1) GDPR. If one of the above reasons applies and you would like us to delete personal data, you can contact us at any time.
Right to restriction of processing (Art. 18 GDPR). You have the right to request us to restrict processing if one of the following conditions is met: the accuracy of the personal data is contested by you, for a period of time that allows us to verify the accuracy of the personal data; - the processing is unlawful, you object to the erasure of the personal data and request instead the restriction of the use of the personal data; - we no longer need the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims or - you have objected to the processing pursuant to. You have objected to the processing pursuant to Art. 21 (1) DSGVO and it is not yet clear whether our legitimate grounds outweigh yours.If one of the aforementioned reasons exists and you would therefore like to request the restriction of the processing of your data, you can contact us at any time. If processing has been restricted by us, we may only process this personal data - apart from storing it - with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.
Right to data portability (Art. 20 GDPR). You have the right to receive the personal data relating to you that has been provided to us by you in a structured, commonly used and machine-readable format. You also have the right to transfer this data to third parties without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 (1) a) GDPR or Art. 9 (2) a) GDPR or on a contract pursuant to Art. 6 (1) b) DSGVO and the processing is carried out with the aid of automated procedures. Furthermore, you have the right to request that the personal data be transferred directly from us to third parties, insofar as this is technically feasible and insofar as this does not affect the rights and freedoms of other persons. These rights do not apply if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. To assert the right to data portability, you can contact us at any time.
Right to object (Art. 21 GDPR), you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) GDPR. We will no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims. If personal data is processed for the purpose of direct advertising, you may also object to this at any time. We will then no longer process your data for this purpose. In addition, you have the right to object on grounds relating to your particular situation to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest. To assert your right to object, you can contact us at any time.
Right to revoke consent under data protection law (Art. 7 para. 1 p. 1 GDPR). You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent.
Right to lodge a complaint (Art. 77 GDPR) You have the right to lodge complaints with the competent supervisory authority at any time.
V . COOKIES
We use cookies on our website. Cookies are small files that are stored on your terminal device and save certain settings and data for exchange with our system via your browser. Basically, we distinguish between two different types of cookies, so-called session cookies, which are deleted as soon as you close your browser, and temporary/permanent cookies, which are stored on your end device for a longer period of time or indefinitely. This storage helps us to design our website and our offers for you accordingly and makes it easier for you to use, for example by storing certain entries you make so that you do not have to keep repeating them.
If you consent to the use of cookies, the legal basis for the processing is your declared consent pursuant to Section 6 (1) sentence 1 a) GDPR.
Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (e.g. in the business operation of our online offer and its improvement) or, if the use of cookies is necessary to fulfil our contractual obligations, both pursuant to § 6 (1) sentence 1 lit. f) GDPR.
You can adjust your cookie settings at any time. You can set your Internet browser to generally prevent cookies from being saved on your end device or to ask you each time whether you agree to cookies being set. Once cookies have been set, you can delete them at any time. You can find out how this works in detail in the help function of your browser. Special explanations are available for the internet browsers Safari, Firefox, Microsoft Internet Explorer and Google Chrome.
Google Analytics
Google Analytics is a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. - Google Analytics uses cookies to enable an analysis of the use of the website www.evamats.eu and its subpages. The information generated by the cookies is usually transferred to a Google server in the USA and stored there. Your IP address will be shortened by Google within the area of the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA; in exceptional cases, the full IP address will be transmitted to a
Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The cookies stored by Google Analytics are deleted after 14 months at the latest. Further information on data protection and the terms of use for Google Analytics can be found at: https://marketingplatform.google.com/about/analytics/terms/us/ and https:policies.google.com/privacy.
To deactivate Google Analytics, download the following link to download and install a browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=de.
The legal basis for the use of the web analytics service Google Analytics is Art. 6 para. 1 lit. f) GDPR.
All third-party cookies:
Google Analytics (Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
Google Ads (Google Ireland Ltd. | Gordon House, Barrow Street, Dublin 4, Ireland).
Meta Pixel (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).
TikTok (TikTok Technology Limited ("TikTok Ireland") TikTok Information Technologies UK Limited ("TikTok UK").
Klaviyo Inc (225 Franklin St., Boston, Massachusetts 02110, USA).
VI. FINAL CLAUSES
The responsible person may change the privacy policy in the future. Each time, information about such a change will be displayed on the website of the online shop. Each time a change is made, a new version of the privacy policy with a new date will be displayed.
This version of the privacy policy will be valid from 10.03.2023.
Safe shopping zone
