Privacy Policy

Unless otherwise stated below, the provision of your personal data is not legally or contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies as long as no other information is provided in the subsequent processing operations. "Personal data" refers to all information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (so-called server log files). These stored data include, for example, the name of the accessed page, the date and time of retrieval, the IP address, the amount of data transferred, and the requesting provider. Processing is carried out on the basis of Article 6(1)(f) GDPR from our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offer.

Contact

Responsible Party

Contact us if you wish.
The responsible party for data processing is:

Waldkauz GmbH & C0 KG
Berghäuschensweg 57-59
41464 Neuss, Deutschland
Telefon +492131547553
info@waldkauz.net

Initiative Contact by the Customer via Email

If you initiate business contact with us via email, we will collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of handling and responding to your contact request. If the contact serves the performance of pre-contractual measures (e.g., consultation in case of purchase interest, offer preparation) or concerns an already existing contract between you and us, this data processing is carried out on the basis of Article 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) GDPR from our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object to the processing of your personal data based on Article 6(1)(f) GDPR at any time for reasons arising from your particular situation. We will use your email address only to process your request. Your data will then be deleted in compliance with legal retention periods unless you have consented to further processing and use.

Collection and Processing when Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of contacting you. If the contact serves the performance of pre-contractual measures (e.g., consultation in case of purchase interest, offer preparation) or concerns an already existing contract between you and us, this data processing is carried out on the basis of Article 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) GDPR from our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object to the processing of your personal data based on Article 6(1)(f) GDPR at any time for reasons arising from your particular situation. We will use your email address only to process your request. Your data will then be deleted in compliance with legal retention periods unless you have consented to further processing and use.

Customer Account Orders

Customer Account

When you open a customer account, we collect your personal data to the extent specified there. Data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent until the revocation. Your customer account will then be deleted.

Collection, Processing, and Transfer of Personal Data during Orders

When ordering, we collect and process your personal data only to the extent necessary to fulfill and process your order and handle your inquiries. The provision of data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. Processing is carried out on the basis of Article 6(1)(b) GDPR and is necessary for the fulfillment of a contract with you. Your data will be transferred to, for example, the shipping companies and drop shipping providers chosen by you, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transmission is limited to a minimum.

Reviews Advertising

Website Logo for Google Customer Reviews

Our website integrates the website logo for Google Customer Reviews by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The integration serves to display the number and result of our reviews received via Google and to advertise participation in this program. To display the logo on our website and to show you personalized ads on Google, Google uses cookies. This may involve processing your IP address and transmitting it to Google. Your data may be transmitted to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is thus committed to complying with European data protection principles. The use of cookies or comparable technologies takes place with your consent based on Section 25(1) Sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR. Processing your personal data takes place with your consent based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.

Further information on terms of use and data protection in the context of Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html sowie unter https://policies.google.com/privacy?hl=de

Use of Email Address for Sending Newsletters

We use your email address independently of contract processing exclusively for our advertising purposes to send newsletters, provided you have expressly consented to this. Processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Payment Service Providers

Use of PayPal Check-Out

We use the PayPal Check-Out payment service on our website by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). Data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data necessary for payment processing will be transmitted to PayPal to fulfill the contract with you using the chosen payment method. This processing is carried out based on Article 6(1)(b) GDPR.

Credit Card via PayPal, Direct Debit via PayPal & "Pay Later" via PayPal

For certain payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the obtained information on the statistical probability of a payment default to make a balanced decision on the establishment, implementation, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical procedures and include address data. Your protectable interests are considered in accordance with legal requirements. The data processing serves the purpose of credit checking for contract initiation. Processing is carried out based on Article 6(1)(f) GDPR from our overriding legitimate interest in protecting against payment defaults if PayPal makes advance payments. You have the right to object to the processing of your personal data based on Article 6(1)(f) GDPR at any time for reasons arising from your particular situation by notifying PayPal. Providing the data is necessary for the conclusion of the contract with the desired payment method. Failure to provide it will result in no contract being concluded with the desired payment method.

Third-Party Providers

When paying via the payment method of a third-party provider, the data necessary for payment processing will be transmitted to PayPal. This processing is carried out based on Article 6(1)(b) GDPR. To process this payment method, the data may then be transmitted from PayPal to the respective provider. This processing is carried out based on Article 6(1)(b) GDPR. Local third-party providers may include: Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany), giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main).

Invoice Purchase via PayPal

When paying via the payment method "invoice purchase," the data required for payment processing is initially transmitted to PayPal. For this payment method, PayPal then transfers the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") to fulfill the contract with you using the chosen payment method. This processing is carried out based on Article 6(1)(b) GDPR. Ratepay may conduct a credit check using mathematical-statistical methods (probability or score values) with credit agencies as described above. The data processing serves the purpose of credit checking for contract initiation. The processing is carried out based on Article 6(1)(f) GDPR due to our overriding legitimate interest in protecting against payment defaults when Ratepay makes advance payments. Further information on data protection and the credit agencies used by Ratepay can be found at https://www.ratepay.com/legal-payment-dataprivacy and https://www.ratepay.com/legal-payment-creditagencies/. For more details on data processing when using PayPal, please refer to their privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again. Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and individually decide whether to accept them, as well as prevent the storage of cookies and transmission of the data they contain. Already stored cookies can be deleted at any time. However, we would like to point out that you may not be able to fully use all functions of this website. Under the links below, you can find out how to manage (including disabling) cookies in major browsers: Chrome Browser:

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise specified below in the data protection declaration, we only use these technically necessary cookies to make our offer more user-friendly, effective, and secure. Cookies also allow our systems to recognize your browser after a page change and offer you services. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognized again after a page change. The use of cookies or comparable technologies takes place with your consent based on Section 25(1) Sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR. Processing your personal data takes place with your consent based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.

Use of Consent Manager by Shopware

We use the Cookie Consent Manager from shopware AG (Ebbinghoff 10, 48624 Schöppingen; "Shopware") on our website. This tool allows you to give consent for data processing via the website, particularly for the setting of cookies, as well as to exercise your right to withdraw consent for previously granted permissions. The data processing serves the purpose of obtaining and documenting necessary consents for data processing and thereby complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopware. This data is not shared with other third parties. The data processing is carried out to fulfill a legal obligation based on Article 6(1)(c) GDPR. For more information on data protection at Shopware, please visit: https://www.shopware.com/de/datenschutz/.

Use of Google Analytics 4

We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. Google, on behalf of the operator of this website, will use the information obtained to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. Information that can be collected includes, but is not limited to: IP address, date and time of page views, click paths, information about the browser and device you use, pages visited, referrer URL (the website through which you accessed our website), location data, and purchase activities. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Google uses technologies such as cookies, browser storage, and tracking pixels that enable an analysis of your use of the website. The information generated about your use of this website is usually transmitted to and stored on a Google server in the USA. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), exists for the USA. Google has certified itself under the TADPF and is thus committed to adhering to European data protection principles. Both Google and US governmental authorities have access to your data. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google holds about you. When using Google Analytics 4, the IP address transmitted by your website is automatically collected and processed in an anonymized form. The IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand.

The use of cookies or similar technologies occurs with your consent based on Section 25(1) sentence 1 of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data occurs with your consent based on Article 6(1)(a) of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out based on the consent up until the withdrawal. For more information on terms of use and data protection, please visit: https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de

Plug-ins and Other Services

Use of Google Tag Manager

We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This application manages JavaScript and HTML tags used to implement tracking and analysis tools. The data processing aims to design our website according to needs and optimize it. The Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the triggering of other tags that can collect and process personal data. For more information on terms of use and data protection, please visit https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/

Use of Google Invisible reCAPTCHA

We use the invisible reCAPTCHA service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This serves the purpose of distinguishing input made by a human from that made by automated, machine processing. In the background, Google collects and analyzes usage data, which is used by invisible reCAPTCHA to differentiate between regular users and bots. Your input is transmitted to Google and used there. Additionally, the IP address and any other data required by Google for the invisible reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), exists for the USA. Google has certified itself under the TADPF and is thus committed to adhering to European data protection principles. The use of cookies or similar technologies occurs with your consent based on Section 25(1) sentence 1 of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data occurs with your consent based on Article 6(1)(a) of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the withdrawal. For more information about Google reCAPTCHA and its privacy policy, please visit: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy

Use of YouTube

We use the function to embed YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The function displays videos stored on YouTube in an iframe on the website. The "Enhanced Privacy Mode" option is enabled. As a result, no information about the visitors to the website is stored by YouTube. Only when you watch a video are the relevant details transmitted to YouTube and stored there. Your data may be transferred to the USA. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), exists for the USA. YouTube has certified itself under the TADPF and is thus committed to adhering to European data protection principles.

The use of cookies or similar technologies occurs with your consent based on Section 25(1) sentence 1 of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data occurs with your consent based on Article 6(1)(a) of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the withdrawal. For more information on data collection and use by YouTube and Google, your rights in this regard, and options for protecting your privacy, please see YouTube's privacy policy at https://www.youtube.com/t/privacy

Data Subject Rights and Storage Duration

Storage Duration

After the complete execution of the contract, the data is initially stored for the duration of the warranty period and then considering statutory, especially tax and commercial law, retention periods and then deleted after the expiration of these periods unless you have agreed to further processing and use.

Rights of the Data Subject

Under the legal requirements, you have the following rights according to Articles 15 to 20 of the GDPR: the right to access, rectification, deletion, restriction of processing, and data portability. Additionally, according to Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1)(f) of the GDPR and processing for direct marketing purposes.

Right to Lodge a Complaint with a Supervisory Authority

According to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful. You can lodge a complaint with the supervisory authority responsible for us, which you can contact at the following details: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Postfach 20 04 44 40102 Düsseldorf Tel.: +49 211 384240 Fax: +49 211 38424999 E-Mail: poststelle@ldi.nrw.de

Right to Object

If the processing of your personal data listed here is based on our legitimate interest according to Article 6(1)(f) of the GDPR, you have the right to object to these processings at any time for reasons arising from your particular situation with effect for the future. After an objection is made, the processing of the data concerned will be stopped unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

Last Update: 23.10.2023