The operator of these website pages takes your data protection very seriously. We handle your personal data confidentially and according to the statutory regulations and this data protection statement.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This data protection statement explains which data we collect and for what purpose we use it. It also explains how and for what purpose this is done.

1. Responsible body

The body responsible for the data processing on this website is that named in the legal information.

2. Data collection on our website

Server log files

The provider of the web pages automatically collects and saves information in so-called server log files, which your browser automatically sends to us. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not combined with other data sources. The data is processed based on Article 6 paragraph 1 (f) GDPR.

Cookies

The website pages partly uses so-called cookies. Cookies are small text files, which are filed on your computer and which your browser saves. They help to make our web pages more user-friendly, effective and secure.

We only use so-called ‘session cookies’. They are automatically deleted after the end of your visit. Other cookies (so-called ‘permanent cookies’) remain saved on your device until you delete them. These cookies would enable us to recognise your browser next time you visit.

You can set your browser so that you are informed about cookies being set and can decide to accept them individually or exclude the acceptance of cookies for certain cases or in general as well as activate the automatic deletion of cookies when the browser closes. If cookies are disabled, the functionality of this website may be limited.

Cookies that are necessary to carry out the electronic communication process or to provide certain functions required by you (e.g. a shopping basket function) are saved based on Article 6 paragraph 1 (b) and (f) GDPR. In addition, the website operator has a legitimate interest in saving cookies to provide its services in an optimal manner and without technical errors. If other cookies (e.g. cookies used to analyse your surfing behaviour) are saved, these are dealt with separately in this data protection statement.

Contact form

If you reach us through contact form enquiries, your details from the contact form, including the contact details entered by you on the form, will be saved by us for the purpose of handling the enquiry and in case there are any follow-up questions. The data entered by you on the contact form will be kept by us until you ask us to delete it or until the purpose for saving the data no longer applies (e.g. once your enquiry has been handled). Essential statutory provisions – in particular retention periods – remain unaffected.

The data entered on the contact form is processed based on Article 6 paragraph 1 (b) GDPR if a concrete enquiry about an order or a purchase order process is involved, as well as on the basis of Article 6 paragraph 1 (f) GDPR for all other general enquiries.

3. Data protection officer

Data protection officer prescribed by law

We have appointed a data protection officer for our company.

STOREBEST GmbH & Co. KG
Mr. Daniel Güntner
Malmöstraße 1
23560 Lübeck
Germany

Phone: +49 (0)451 5304 0
Email: info@storebest.de

4. Data transmission to third parties

We send your data to service providers that help us to operate our website. If this happens as part of order processing according to Article 28 GDPR, our service providers will process your data subject to instructions and with corresponding contractual obligations. We currently use CleverReach as a service provider to send out our newsletter (more about this under Section 5).

Data transmission to third countries

We sometimes send personal data to a third country outside the EU. In this respect, we take care to ensure an appropriate data protection level:

In the case of YouTube and Google (United States of America), an appropriate data protection level is provided from the corresponding participation in the Privacy Shield Framework (Article 45 paragraph 1 GDPR). You can find more details under Section 6.

5. Newsletter

Newsletter data

If you would like to receive the newsletter provided on the website, we need an email address from you, plus information that allows us to check that you are the owner of the email address given and that you agree to receiving the newsletter. Other data is not collected or is only collected on a voluntary basis. We only use this data for sending out the requested information and do not pass it onto third parties apart from our service providers (see below).

The data entered in the newsletter registration form is processed solely on the basis of your consent (Article 6 paragraph 1 lit. (a) GDPR). You can revoke the consent given to save the data and email address as well as the consent to use them to send out the newsletter at any time, for instance by using the ‘Unsubscribe’ link in the newsletter. The lawfulness of data processing procedures already carried out is not affected by the revocation.

CleverReach

This website uses CleverReach to send out newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstrasse 43, 26180 Rastede, Germany. CleverReach is a service that can be used to organise and analyse the distribution of newsletters. The data entered by you for the purpose of receiving newsletters (e.g. an email address) is saved on the CleverReach servers in Germany and/or Ireland.

Our newsletters sent out with CleverReach enable us to analyse the behaviour of the newsletter recipients. Among other things, it is possible to analyse how many recipients opened the newsletter message and how often which link in the newsletter was clicked on. With the help of conversion tracking, it is also possible to analyse whether a predefined action (e.g. the purchase of a product on our website) was carried out after clicking the link in the newsletter. You can find further information about data analysis through CleverReach newsletters at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

The data is processed on the basis of your consent (Article 6 paragraph 1 lit. (a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The lawfulness of data processing procedures already carried out is not affected by the revocation.

If you do not want any analysis by CleverReach, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.

The data about you held by us for the purpose of sending the newsletter will be saved by us until you have been deregistered from the newsletter and will be deleted from our servers as well as from the CleverReach servers once you have unsubscribed from the newsletter. Data that was saved by us for other purposes (e.g. email addresses for the members area) remains unaffected by this.

You can find more information in the CleverReach data protection provisions at: https://www.cleverreach.com/de/datenschutz/.

Concluding an agreement through contract data processing

We have entered an agreement with CleverReach for contract data processing and fully apply the strict requirements set out by the German data protection authorities when it comes to using CleverReach.

6. Plug-ins and tools

YouTube

Our website uses YouTube plug-ins, the website operated by Google. The operator of the web pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, United States of America.

If you visit one of our web pages featuring a YouTube plug-in, a connection to the YouTube servers is established. In this respect, the YouTube server is notified about which of our pages you have visited.

When you are logged into your YouTube account, you enable YouTube to directly allocate your surfing behaviour to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of presenting our online services in an appealing manner. This represents a legitimate interest in accordance with Article 6 paragraph 1 (f) GDPR.

You can find further information about the handling of user data in the YouTube data protection statement at: https://policies.google.com/privacy?hl=de&gl=de.

Google Web Fonts

This site uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When accessing a page, your browser loads the required web fonts into your browser cache in order to correctly display texts and fonts.

For this purpose, the browser used by you must establish a connection to the Google servers. Through this, Google finds out that our website was accessed via your IP address. Google Web Fonts is used in the interest of presenting our online services in a uniform and appealing manner. This represents a legitimate interest in accordance with Article 6 paragraph 1 (f) GDPR.

If your browser does not support web fonts, a standard font is used by your computer.

You can find further information about Google Web Fonts at https://developers.google.com/fonts/faq and in the Google data protection statement at https://www.google.com/policies/privacy/.

Google Maps

This site uses Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America.

In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually sent to a Google server in the United States of America and saved there. The provider of this site has no influence on the transmission of this data.

Google Maps is used in the interest of presenting our online services in an appealing manner and to make it easier to find the locations specified by us on the website. This represents a legitimate interest in accordance with Article 6 paragraph 1 (f) GDPR.

You can find further information about the handling of user data in the Google data protection statement at https://www.google.de/intl/de/policies/privacy/.

Google Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC (“Google”). Google Analytics uses cookies, text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

However, as we have activated IP anonymisation on this website, your IP address will be truncated by Google beforehand within member states of the European Union or other parties to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

Google will use this information on our behalf for the purpose of evaluating your use of our websites, compiling reports on activity on the websites, and providing us with other services relating to website activity and internet usage. The IP address of your browser provided by Google Analytics as part of the service will not be merged with other Google data.

You can prevent the storage of cookies by adjusting your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent. Furthermore, you can prevent Google collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser plug from the following link (http://tools.google.com/dlpage/gaoptout?hl=en).

Alternatively, you can prevent Google Analytics collecting data by setting an opt-out cookie that will prevent your data being collected on future visits to the website. To do this, you click on this link: Click here to prevent recording by Google Analytics

7. Your rights as a user

Revocation of your consent to data processing

Some data processing procedures are only possible with your express consent. You can revoke consent already given at any time. An informal message sent to us by email is adequate for this purpose. The lawfulness of data processing carried out up until revocation is not affected by the revocation.

Right of appeal with the responsible regulatory authority

In case of breaches under the data protection law, the person affected is entitled to appeal with the responsible regulatory authority. The regulatory authority responsible for data protection law issues is the data protection commissioner for the federal state where our company has its registered office. You can find a list of the data protection officers and their contact details from the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to be sent data, which we process automatically based on your consent or to fulfil a contract to yourself or to a third party in a standard machine-readable format. If you ask for the data to be sent directly to another responsible body, this will only happen if it is technically feasible.

SSL and TLS encryption

Please note that the transmission of data on the Internet (e.g. in cases of unencrypted communication by email) can feature security leaks. It is not possible to completely protect the data from being accessed by third parties.

For security reasons and to protect the transmission of confidential content, such as purchase orders or enquiries that you send to us as the site operator, this site therefore uses SSL and TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol on your browser line.

When SSL or TLS encryption is activated, the data that you send us cannot be read by third parties.

Information, blocking, deletion

As part of the applicable statutory provisions, you have the right at any time to free information about your saved personal data, its origin and recipients and the purpose of data processing. You also have a right, if necessary, to this data being corrected, blocked or deleted. For this purpose and for any other questions about personal data, you can get in touch with us at any time via the address given in the legal information.

Information requests can be made to the following address:

STOREBEST GmbH & Co. KG
Malmöstraße 1
23560 Lübeck
Germany

Phone: +49 (-451) 5304 – 0
Telefax: +49 (-451) 5304 – 4220
Email: info@storebest.de