Data protection

Data protection

The person responsible for data processing is:
Yusuf ilica
Hohenzollernstr. 69
67063 Ludwigshafen
Germany

info@otanto.de

We look forward to your interest in our online shop. Protecting your privacy is very important to us. Below we will inform you in detail about dealing with your data.

 

1. Access data and hosting

 

You can visit our websites without giving information about yourself. If you call a website, the web server only automatically stores a so-called server log file, which, for example, contains the name of the requested file, your IP address, date and time of access, transmitted amount of data and the requesting provider (access data) and documents the access.

These access data are only evaluated for the purpose of ensuring a trouble -free operation of the page and the improvement of our offer. In accordance with Art. 6 Para. 1 S. 1 Lit. f GDPR, this serves to protect our legitimate interests on a correct presentation of our offer in the context of a balancing of interests. All access data will be deleted no later than seven days after the end of your page visit.

 

2. Data collection and use for contract processing, contacting and opening a customer account

 

We collect personal data if you voluntarily inform us of it as part of your order or if you contact us (e.g. via contact form or email). Mandatory fields are identified as such, since in these cases we need the data for contract processing or to process your contact and you cannot send the order or contact without it. Which data is collected can be seen from the respective input forms. We use the data you provide in accordance with Art. 6 Para. 1 Sentence 1 Lit. B GDPR for the contract processing and processing of your inquiries.
Insofar as you have granted your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR by choosing a customer account, we use your data for the purpose of the customer account opening.
After completing the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the end of the tax and commercial law retention periods, unless you have expressly consented to further use of your data or we are reserved for any further data usage that is legally allowed and about which we inform you in this declaration. Your customer account is deleted at any time and can be done either by message to the contact option described below or via a function provided in the customer account.

3. Data transfer

 

For the fulfillment of the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you choose in the ordering process, we provide the payment data collected for this to handle the payment data collected for this purpose and, if necessary, payment service providers commissioned by us further or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if they create an account there. In this case, you must register with your access data to the payment service provider in the order process. In this respect, the data protection declaration of the respective payment service provider applies.

 

 

We also use an external ERP system for ordering and contract processing. The data transfer or processing taking place is based on order processing.

 

Data transfer to shipping service providers
If you have given us your express consent during or after your order, we will pass on your email address to the selected shipping service provider based on Art. 6 Para. 1 S. 1 Lit. a GDPR, so that it will be available before delivery Purpose of the delivery announcement or vote can contact you.

The consent can be revoked at any time by a message to the contact option described below or directly compared to the shipping service provider at contact address listed below. After revocation, we delete your data provided for this, unless you have expressly consented to further use of your data or we are reserved for a usage of data that is legally permitted and about which we inform you in this declaration.
Sendcloud GmbH
Fürstenrieder Str. 70
80686 Munich
Germany

4. E-mail newsletter and post advertising

Email advertising with registration for the newsletter
If you register for our newsletter, we use the data required or separated from you to send you our e-mail newsletter regularly on the basis of your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR.

You can deregister from the newsletter at any time and can be made either by a message to the contact option described below or via a link provided in the newsletter. After deregistration, we delete your email address from the recipient list, unless you have expressly consented to further use of your data or we are reserved for any other use of data that is legally permitted and about which we inform you in this declaration.

The newsletter will be sent by a service provider as part of processing on our order to which we will pass on your email address. This service provider sits within a country of the European Union or the European Economic Area.

 

Post advertising and your right to object
In addition, we reserve the right to use your first and last names as well as your postal address for your own advertising purposes, e.g. about sending interesting offers and information about our products by letter post. This serves to protect our legitimate interests on an advertising address from our customers in accordance with Article 6 (1) sentence 1 lit. f GDPR.

 

5. Data use in payment processing

 

 

 

Identity and credit check when selecting Klarna payment services
If you opt for KLASS Payment services, we ask you to send your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR that we can transmit the data necessary for the processing of payment and an identity and credit check. In Germany, the identity and credit check that in Klarnas Data protection named economic ideas.
Klarna uses the information obtained about the statistical probability of a default of payment for a weighing decision on the reason, implementation or termination of the contractual relationship.
You can revoke your consent at any time by a message to the contact details below. This can result in that we can no longer offer you certain payment options. You can also revoke your consent to this use of personal data at any time to Klarna.

 

 

6. Cookies and web analysis

In order to make the visit of our website attractive and to enable the use of certain functions to display suitable products or for market research, we use so -called cookies on different pages, insofar have granted.

Cookies are small text files that are automatically saved on your end device. Some of the cookies we use will be deleted again after the end of the browser session, i.e. after closing your browser, (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies). You can find the duration of the storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. The functionality of our website can be restricted when not accepting cookies. Each browser differs in the way it manages the cookie settings. This is described in the auxiliary menu of each browser, which explains how you can change your cookie settings. You can find this for the respective browser under the following links:

Microsoft Edge ™ / Safari ™ / Chrome ™ / Firefox ™ / Opera ™

In addition, you can revoke your consent at any time by a message to the contact option described in the data protection declaration.

7. Online marketing

Live chat tool Tidio
If you use the live chat tool to contact us, the data you have entered there will voluntarily (name, email address, message) in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR for the purpose of answering the request in Processed by us as part of the contract processing. In addition, the use of this tool is used to protect our legitimate interests on an effective and improved customer communication in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR. The data is then deleted.
As part of processing on our behalf, the third-party provider userlike provides us with the services to provide the live chat tool. All data collected as part of the use of the chat tool are processed on its servers.

 

Google Adsense
This website uses Google Adsense, a service for the integration of advertisements from Google Inc. ("Google"). The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Adsense uses so -called "cookies", text files that are stored on your computer and that enable an analysis of the use of the website. Google Adsense also uses so -called Web Beacons (invisible graphics). These web beacons can be used to evaluate information such as visitor traffic on these pages.

The information generated by cookies and web beacons about the use of this website (including your IP address) and delivery of advertising shape are transmitted to a Google server in the USA and stored there. This information can be passed on by Google to Google's contractual partner. However, Google will not bring your IP address together with other data you have stored.

Adsense cookies are stored on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

You can prevent the installation of the cookies by setting your browser software; However, we would like to point out that in this case you may not be able to use all functions of this website fully. By using this website, you agree to process the data collected about you by Google in the manner described above and for the previously mentioned purpose.

Google Analytics remarketing
Our websites use the functions of Google Analytics Remarketing in connection with the cross -device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

This function enables the advertising target groups created with Google Analytics Remarketing to link to the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-related, personalized advertising messages can also be displayed on another of your end devices (e.g. tablet or PC) depending on their previous usage and surfing behavior on a end device (e.g. cell phone).

If you have given the appropriate consent, Google links your web and app browser history with your Google account for this purpose. In this way, on any end device on which you can register with your Google account, they can be switched on personalized advertising messages.

To support this function, Google Analytics records Google authenticated IDS of the users who are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising.

You can permanently contradict the cross-device remarketing/targeting by deactivating personalized advertising in your Google account; Follow this link: https://www.google.com/settings/ads/onweb/.

The summary of the data recorded in your Google account takes place exclusively on the basis of your consent, which you can hand over or revoke on Google (Art. 6 Para. 1 lit. a GDPR). In the case of data acquisition processes that are not merged in your Google account (e.g. because you do not have a Google account or have contradicted the merging), the data is based on Art. 6 Para. 1 lit. f GDPR. The legitimate interest results from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.

Further information and data protection regulations can be found in Google's data protection declaration at: https://www.google.com/policies/technologies/ads/.

Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).

As part of Google AdWords, we use the so-called conversion tracking. If you click on a display connected by Google, a cookie for conversion tracking will be set. Cookies are small text files that the Internet browser puts on the user's computer. These cookies lose their validity after 30 days and do not serve the personal identification of the users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can see that the user has clicked on the display and has been forwarded to this page.

Every Google AdWords customer receives a different cookie. The cookies cannot be tracked on the websites of AdWords customers. The information obtained using the conversion cookies is used to create conversion statistics for AdWords customers who have chosen conversion tracking. Customers learn the total number of users who clicked on their ad and were forwarded to a page with a conversion tracking day. However, you do not receive any information with which users can be identified personally. If you do not want to take part in tracking, you can object to this use by easily deactivating the cookie of Google Conversion tracking using your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” and the use of this tracking tool are based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

More information about Google AdWords and Google Conversion tracking can be found in Google's data protection regulations: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of the cookies when the browser is closed. When deactivating cookies, the functionality of this website can be restricted.

Google Recaptcha
We use “Google Recaptcha” (hereinafter “Recaptcha”) on our websites. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).

Recaptcha is to check whether the data input on our websites (e.g. in a contact form) is carried out by a person or through an automated program. For this purpose, Recaptcha analyzes the behavior of the website searcher based on various characteristics. This analysis begins automatically as soon as the website visitors enter the website. For analysis, Recaptcha evaluates various information (e.g. IP address, length of stay of the website seeker on the website or mouse movements made by the user). The data recorded during the analysis are forwarded to Google.

The recaptcha analyzes run completely in the background. Website visitors are not pointed out that an analysis takes place.

Data processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting his web offers from improper automated spying and spam.

Further information on Google Recaptcha and the data protection declaration from Google can be found in the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Google Maps
This website uses Google Maps for the visual representation of geographical information. Google Maps is an offer from Google Ireland Limited, a company based on Irish law and operated company based in Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to protect our legitimate interests on an optimized presentation of our offer as well as easy access to our locations in accordance with Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
When using Google Maps, Google will transmit or process data on the use of the MAPS functions by website visitors, including the IP address and location data. We have no influence on this data processing. Insofar as information is transmitted to Google server in the USA and stored there, the American Society Google LLC is certified under the EU-US-Privacy Shield. A current certificate can here be viewed. Due to this agreement between the United States and the European Commission, the latter has determined an appropriate level of data protection for companies certified under Privacy Shield. 
In order to deactivate Google Maps' service and thus prevent data transmission to Google, you must deactivate the Java script function in your browser. In this case, Google Maps cannot be used or only used to a limited extent. 
Further information on data processing by Google can be found in the data protection information from Google. The terms of use for Google Maps contain detailed information on the map service. 
Data processing takes place on the basis of an agreement between jointly responsible in accordance with Art. 26 GDPR, which you here can see.

Facebook Pixel


Our website uses the visitor campaign pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) for conversion pixels.

In this way, the behavior of the side visitors can be tracked after they have been forwarded to the provider's website by clicking on a Facebook advertisement. This enables the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures can be optimized.

The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is saved and processed by Facebook, so that a connection to the respective user profile is possible and Facebook the data for its own advertising purposes, according to the Facebook data usage guideline can use. This enables Facebook to be able to switch advertisements on Facebook and outside of Facebook. This use of the data cannot be influenced by us as a site operator.

The use of Facebook pixels is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures, including social media.

In Facebook's data protection information you will find further information on the protection of your privacy: https://www.facebook.com/about/privacy/.

You can also use the remarketing function “Custom Audiences” in the area of ​​settings for advertisements under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deactivate. To do this, you must be registered on Facebook.

If you do not have a Facebook account, you can deactivate Facebook usage -based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

 

8. Social media

Use of social plugins from Facebook, Instagram, using the Shariff solution.

Social buttons are used on our website.

This serves to safeguard our legitimate interests on an optimal marketing of our offer in accordance with Article 6 (1) sentence 1 lit. f GDPR. In order to increase the protection of your data when visiting our website, these buttons are not fully integrated into the page as plugins, but only using an HTML link. This integration ensures that when calling a page of our website, which contains such button, no connection is yet established with the servers of the provider of the respective social network.

Click on one of the buttons, opens a new window of your browser and calls up the page of the respective service provider, on which you (if necessary after entering your login data) you can use the Like or Share button.

The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as a contact option and their rights and settings and setting options To protect your privacy, please refer to the data protection information of the providers:

https://www.facebook.com/policy.php

https://help.instagram.com/155833707900388

Our online presence on Facebook, Instagram

Our presence on social networks and platforms serves better, active communication with our customers and interested parties. We provide information about our products and ongoing special campaigns.
When visiting our online presences on social media, your data for market research and advertising purposes can be automatically collected and saved. This data is created using pseudonyms so -called usage profiles. These can be used to switch advertisements inside and outside the platforms that allegedly correspond to their interests. For this purpose, cookies are usually used on your end device. In these cookies, the visitor behavior and the interests of the users are stored. According to Art. 6 Para. 1 Lit. f. GDPR, this serves to protect our legitimate interests on an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent (consent) to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 Para. 1 lit. a GDPR.
Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission has an adequacy decision. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can here be viewed.
The detailed information on the processing and use of the data by the providers on their pages as well as a contact option and their relevant rights and setting options to protect your privacy, in particular opposition options (opt-out), can be found in the provider linked below. If you still need help in this regard, you can contact us.

Facebook: https://www.facebook.com/about/privacy/
Data processing takes place on the basis of an agreement between jointly responsible in accordance with Art. 26 GDPR, which you here can see.
Further information on data processing as part of the visit of a Facebook fan page (information about Insights data) can be found here.

Instagram: https://help.instagram.com/519522125107875

Opportunity possibility (opt-out):

Facebook: https://www.facebook.com/settings?tab=ads

Instagram: https://help.instagram.com/519522125107875

9. Shipping of evaluations by email

  

Review by Trusted Shops
If you have given us your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR during or after your order, we will send your email address to Trusted Shops GmbH, Subelrather Str. 15c, 50823 Cologne ((www.trustedshops.de) so that this sends you an evaluation reminder by email.

This consent can be revoked at any time by a message to the contact option described below or directly compared to Trusted Shops.

 

Review by Trustpilot 
If you have given us your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR during or after your order, we will transmit your email address to Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen (de.trustpilot.com) so that it sends you an evaluation reminder by email.

This consent can be revoked at any time by a message to the contact option described below or directly compared to Trustpilot A/S.

10. Contact options and your rights

 

As a person concerned, you have the following rights:

  • According to Art. 15 GDPR, the right to request information about your personal data processed by us in the scope described there;
  • According to Art. 16 GDPR, the right to immediately request the correction of incorrect or completion of your personal data stored by us;
  • According to Art. 17 GDPR the right to request the deletion of your personal data stored by us, unless the further processing
    • to exercise the right to freedom of expression and information;
    • to fulfill a legal obligation;
    • For reasons of public interest or
    • to assert, exercise or defend legal claims;
  • According to Art. 18 GDPR the right to restrict the processing of your personal data, if necessary
    • the correctness of the data is denied by you;
    • the processing is illegal, but they reject their deletion;
    • we no longer need the data, but you need it to assert, exercise or defend legal claims or
    • They have objected to the processing in accordance with Art. 21 GDPR;
  • According to Art. 20 GDPR, the right to obtain your personal data that you have provided to us in a structured, common and machine -reading beer format or to request the transmission to another responsible;
  • According to Art. 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual whereabouts or workplace or our company seat.

If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation granted or contradiction against a specific data usage, please contact us directly via the contact details in our imprint.

Right to object
Insofar as we process personal data as explained to safeguard our legitimate interests that are predominant in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for the purposes of direct marketing, you can exercise this right at any time as described above. Insofar as the processing for other purposes is carried out, you only have a right to object if there are any reasons that arise from your special situation.

After exercising your right of objection, we will not continue to process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing of assertion, exercise or defense Legal claims are used

This does not apply if the processing is carried out for direct marketing purposes. Then we will not process your personal data for this purpose.