1.1 What are personal data
Personal data is information that reveals or can reveal the identity of the user. We adhere to the principle of data avoidance. As far as possible, the collection of personal data is dispensed with.
1.2 Handling of personal data
Personal data are used exclusively for the purpose of establishing a contract, structuring the content, implementing or processing the contractual relationship (Art. 6 I S. 1 b GDPR).
In addition, personal data will only be processed insofar as we have received your consent (Art. 6 I S. 1 a GDPR) or it is data whose processing is necessary for our legitimate interests and insofar as the balance shows that none oppose overriding interests, fundamental rights or fundamental freedoms on your part (Art. 6 I S. 1 f GDPR).
We can use contract processors to process your personal data, but we will generally not pass the personal data on to third parties.
The data will only be passed on to the shipping company commissioned with the delivery to fulfill the contract, insofar as this is necessary for the delivery of the ordered goods. To process payments, the payment data required for this is passed on to the credit institute commissioned with the payment and, if applicable, the commissioned and selected payment service provider.
Your personal data will only be processed within the EU, unless otherwise stated below.
1.3 Usage data
General technical information is collected when you visit the website. These are the IP address used, time, duration of the visit, browser type and, if applicable, the page of origin. For technical reasons, this usage data is registered in a log file and can be used and saved for the purpose of statistical analysis of this website. There is no link between this usage data and your other personal data.
1.4 Duration of storage
After the end of the purpose for which the data was collected, we only save your personal data for as long as this is required by law (in particular tax law).
2. Your rights
You can request information from us as to whether we are processing your personal data and, if this is the case, you have a right to information about this personal data and the further information specified in Art. 15 GDPR.
2.2 Right to Correction
You have the right to correct incorrect personal data relating to you and, in accordance with Art. 16 GDPR, you can request the completion of incomplete personal data.
2.3 right to erasure
You have the right to demand that we delete your personal data immediately. We are obliged to delete them immediately, especially if one of the following reasons applies:
- Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke your consent on which the processing of your data was based and there is no other legal basis for the processing.
- Your data has been processed unlawfully.
The right to deletion does not exist if your personal data are required to assert, exercise or defend our legal claims.
2.4 Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data if
- You dispute the correctness of the data and we therefore check the correctness,
- the processing is unlawful and you reject the deletion and instead request the restriction of use
- we no longer need the data, but you need them to assert, exercise or defend legal claims,
- You have objected to the processing of your data and it has not yet been determined whether our legitimate reasons outweigh your reasons.
2.5 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transmit this data to another person responsible without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us using automated procedures.
2.6 Right of Withdrawal
If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.
2.7 General and right of appeal
Exercising your above rights is basically free of charge for you. If you have any complaints, you have the right to contact the supervisory authority responsible for us, the state data protection officer.
3. Data security
3.1 Data security
All data on our website are protected against loss, destruction, access, modification and dissemination using technical and organizational measures.
3.2 Sessions and Cookies
If you register for our newsletter, we will use the data required for this or separately provided by you in order to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 Para. 1 S. 1 lit.
You can unsubscribe from the newsletter at any time and you can either send us a message using the contact options given in the imprint or the link provided in the newsletter. After unsubscribing, we will delete your e-mail address, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.
5. Third Party Services
5.1 Google Analytics
This website uses Google Analytics, a web analysis service from Google, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") and collects and stores data via this web analysis service, from which usage profiles are created using pseudonyms become. The usage profiles created in this way are used to evaluate visitor behavior in order to design and improve the offerings presented on this website as required. Google Analytics uses so-called “cookies”, small text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The usage profiles managed under a pseudonym are also not merged with the personal data about the user without the express and separately declared consent of the user. Thus, the balance shows that there are no overriding interests on your part (Art. 6 I S. 1 f GDPR). You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the link below http://tools.google.com/dlpage/gaoptout?hl=de Download and install the available browser plug-in.
5.2 Use of Facebook remarketing pixels
We use the remarketing function “Custom Audiences” operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94304, USA (“Facebook”). The body responsible for processing the information collected by Facebook is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. This function enables us to target visitors to this website on Facebook with advertising. For this purpose, personalized and interest-based Facebook ads are placed when the Facebook pages are visited. The function is made possible on our website by a remarketing pixel from Facebook, which is implemented on the page. When you visit our website, a direct connection to the Facebook server is established via the pixel if you have consented to the setting of the pixel or activated the plug-in. Which of our websites the user has visited is transmitted to the Facebook server. Facebook assigns this information to your personal Facebook user account. For more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy, see the Facebook data protection information at https://www.facebook.com/about/privacy/ .
If you do not want Facebook to assign the information collected directly to your Facebook user account, you can use the remarketing function "Custom Audiences" in your account settings under: https://www.facebook.com/login.phpnext=https%3A%2F%2Fwww.facebook.com%2Fsettings%2F%3Ftab%3Dads#_=_b edit. To do this, you must be logged in to Facebook.
6. Social Media Links
We have our own social media pages with the third-party providers that can be reached via links from this website. Using the links will take you to the respective websites of the third party providers (e.g. Facebook, Twitter, Google+). To avoid unnecessary data transfer, we recommend logging out of the respective third-party provider before using a corresponding link, so that usage profiles cannot be created by the third-party provider just by using the link.
7. Contacting us
To contact us regarding data protection, please feel free to contact us using the contact options below. Responsible according to the GDPR:
Youbag Munich GmbH
Fax: +49 (0) 9119508787