1) Information about the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Florian Kolb, Vxcores, Theodor-Heuss-Str. 1, 97230 Estenfeld, Germany, Tel.: 09367-4088974, Email:
[email protected]. The controller for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
2) Data collection when visiting our website
When you use our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (possibly: in anonymized form)
Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or otherwise used. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
3) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are automatically deleted after the browser is closed (so-called "session cookies"), while others remain on your device for longer and allow page settings to be saved (so-called "persistent cookies"). In the latter case, you can find out the storage period from the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR for the performance of a contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of given consent, or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contacting us
When you contact us (e.g., via contact form or email), personal data is processed solely for the purpose of handling and responding to your request and only to the extent necessary for this purpose. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, then the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided there are no statutory retention obligations to the contrary.
5) Data processing when opening a customer account
In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required for opening a customer account from the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded through it have been completely processed, no statutory retention periods oppose this, and there is no longer any legitimate interest on our part in further storage.
6) Data processing for order processing
6.1 Insofar as necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.
If, on the basis of a corresponding contract, we owe updates for goods with digital elements or for digital products, we process the contact data you provided when ordering (name, address, email address) in order to inform you personally of upcoming updates within the legally prescribed period via suitable communication channels (e.g., by post or email) as part of our statutory information obligations in accordance with Art. 6 Para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of notifications about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s) who support us in whole or in part in the execution of concluded contracts. Certain personal data will be passed on to these service providers in accordance with the following information.
6.2 Use of payment service providers (payment services)
- Mollie
If you choose a payment method from the payment service provider Mollie, payment processing is carried out via the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands, to whom we pass on the information you provided during the ordering process together with the information about your order (name, address, IBAN, BIC, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Mollie and only to the extent necessary for this purpose.
7) Tools and Miscellaneous
- sevDesk
For the execution of accounting, we use the service sevDesk, the cloud-based accounting software of sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany.
SevDesk processes incoming and outgoing invoices and possibly also the bank transactions of our company in order to automatically record invoices, match them to transactions and, from this, create the financial accounting in a partially automated process.
If personal data is also processed in this context, the processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business processes.
Further information about sevDesk GmbH, automated data processing and data protection provisions can be found at https://sevdesk.de/sicherheit-datenschutz/
8) Data subject rights
8.1 The applicable data protection law grants you the following data subject rights (information and intervention rights) vis-Ã -vis the controller regarding the processing of your personal data, whereby reference is made to the cited legal basis for the respective exercise requirements:
Right of access by the data subject pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7 Para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.
8.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.
9) Duration of storage of personal data
The duration of storage of personal data is measured on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g., commercial and tax law retention periods).
When processing personal data on the basis of express consent in accordance with Art. 6 Para. 1 lit. a GDPR, this data will be stored until the data subject withdraws his/her consent.
If there are statutory retention periods for data that is processed as part of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer required for contract fulfillment or contract initiation and/or there is no longer any legitimate interest on our part in further storage.
When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data will be stored until the data subject exercises his/her right to object under Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 Para. 1 lit. f GDPR, this data will be stored until the data subject exercises his/her right to object under Art. 21 Para. 2 GDPR.
Unless otherwise stated in the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.