The responsible body for our website, i.e. the person responsible for determining the purposes and means of the processing of personal data, is:
Malmöer Str. 14
USE OF PERSONAL DATA
What is personal data?
According to the law, personal data comprises all information related to an identified or identifiable natural person. A natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Specifically, this means that, for example, apart from the name, address or email address of a person, the IP address or cookies may constitute personal data if they allow inferences to a specific person.
Cookies are text files web servers send to the user’s browser, where they are stored and can be retrieved at a later date. Cookies may contain various information that is mostly related to simplifying the use of a website. This may, for example, be the simple storage of individual page settings (font size, language, or other), so that the user does not need to select the same settings again if he or she revisits the web page (so-called “session” or “temporary” cookies); it may also be the storage of user data for user identification purposes, for example, during an order process in an online shop, to ensure that the content of the shopping cart remains intact if the user changes to another web page (so-called “permanent” or “persistent” cookies). Session cookies are only stored for the duration of the session and are deleted automatically when the browser is closed. Permanent cookies are either automatically deleted according to the set expiration date, or manually deleted by the user.
Both types of aforementioned cookies are used on our website.
If desired, you can prevent the storage of cookies with a setting in your browser software. This may, under particular circumstances, limit the functionality of the website. Moreover, you can prevent the collection of data (including the IP address) generated with the cookie and related to your use of the website, by downloading and installing the browser plugin from the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Collecting access data and logfiles
Our hosting provider collects data (so-called server logs) about every access to the server hosting our offer, among which is also the IP address. The legal basis for this is our legitimate interest within the meaning of Article 6, Par. 1 lit. f. GDPR. These data are stored for a period not exceeding seven days and are erased afterwards. Data that require further storage for evidential purposes are exempt from erasure until the final clarification of the respective case.
When you make a purchase in our online shop, we collect, process and use the following information in order to process your order:
- First name
- Payment method
The legal basis for processing this data is Article 6, Par. 1 lit. b. GDPR.
For payment processing, we collaborate with the following payment service providers:
- PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”).
- Stripe, Inc., 185 Berry Street, Suite 550, San Francisco, CA 94107, USA (“Stripe”)
During the order process, you are requested to enter your payment data into a window, i.e. a website of the payment service provider (PayPal) or into an embedded entry field of one of the payment service providers (Stripe) on our website.
When entering and confirming your data, your payment information is transmitted to the respective payment services provider for the purpose of payment processing.
We revise the personal information you transmit through our online shop on an annual basis with regard to the requirements according to the aforementioned legal basis. If the storage of your data is no longer required and if there is no legal obligation to retain such data, the data are erased within two years of their collection.
Collaboration with processors and third parties
In so far as we are obliged to make the data available to other persons or companies (processors or third parties) within the data processing process, this occurs only on the basis of a legal permission (e.g. if the transmission of data to shipment or payment services providers according to Article 6, Par. 1 lit. b. GDPR is required to execute pre-contractual measures or to fulfill the contract) with your consent, due to legal obligation or on the basis of our legitimate interests according to Article 6, Par. 1 lit. f. GDPR (for example, when transmitting data to the hosting provider).
You have the possibility to contact us through our email address (info[at]lettersoup.de). The personal data transmitted during this process will be used exclusively for the purposes for which you provide your data when contacting us. In as far as you transmit personal data with your message, we assume that you consent to the use of this data for the purpose of processing your request. The legal basis for processing this data is thus your consent according to Article 6, Par. 1, lit. a) GDPR. You may revoke this permission at any time.
We revise the personal data you transmit to us through the contact form or via email on an annual basis with regards to the necessity of further storage according to the aforementioned legal bases. If there is no such necessity, the data are erased within a further month.
Right to access, rectification, erasure and objection
You have the right to be provided with information about data relating to your person according to Article 15 GDPR. Moreover, you may demand the rectification of inaccurate data relating to your person (Article 16 GDPR). According to Article 17 GDPR, you may request the erasure of data relating to your person, and according to Article 18 GDPR you may demand the restriction of processing data relating to your person. You may also object to the processing of your data.
To exercise the aforementioned rights, please contact the above-mentioned “Responsible Body” in the contact data.
You also have the right to lodge a complaint with a supervisory authority.
Erasure of personal data
Status: May 2018