Data Protection Declaration

Data Protection Declaration

Unless otherwise stated below, the provision of your personal data is neither required by law or contract, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Non-provision has no consequences. This applies only insofar as no other information is given in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page called up, the date and time of the call, the IP address, the amount of data transferred and the requesting provider.
Processing is based on Art. 6 (1) (f) GDPR from our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offer.

Contact

Controller
Contact us if you wish. The controller for data processing is: Pavel Dudenkov, Eichstätter Str. 4, 86673 Bergheim Germany, + 49 8431 397 34 33, support@elcoda.com

Proactive contact by the customer via e-mail
If you proactively initiate business contact with us via e-mail, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data processing serves the purpose of processing and answering your contact request.
If the contact serves to carry out pre-contractual measures (e.g. consultation for interest in purchase, creation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR.
If contact is made for other reasons, this data processing is based on Art. 6 (1) (f) GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to these processings concerning you based on Art. 6 (1) (f) GDPR.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data processing serves the purpose of establishing contact.
If the contact serves to carry out pre-contractual measures (e.g. consultation for interest in purchase, creation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR. If contact is made for other reasons, this data processing is based on Art. 6 (1) (f) GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to these processings concerning you based on Art. 6 (1) (f) GDPR. We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the withdrawal button (Widerrufsbutton)
If you have concluded a contract via our online presence, we provide you with a withdrawal function (withdrawal button), via which you can directly submit your declaration of withdrawal.
When using the withdrawal function, we collect your personal data (name, e-mail address, information to identify the contract or part of the contract you wish to withdraw from, as well as the time (date and time) of sending the declaration of withdrawal) only to the extent provided by you. The data processing serves the purpose of providing you with the legally required possibility to withdraw from your contract as well as the proper processing of your withdrawal.
If the contact concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR. Otherwise, the data processing is based on Art. 6 (1) (c) GDPR, as we are legally obliged to provide you with a withdrawal function on our online presence.
We only use your e-mail address to process your declaration of withdrawal. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
The processing of your personal data serves the purpose of legally fulfilling the requirements for the design of the withdrawal function and is based on Art. 6 (1) (c) GDPR. This data processing is also based on Art. 6 (1) (f) GDPR from our overriding legitimate interest in being able to provide you with a user-friendly withdrawal option. In this case, you have the right, for reasons arising from your particular situation, to object at any time to these processings concerning you based on Art. 6 (1) (f) GDPR.

Customer Account / Orders

Customer Account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.

Collection, processing and disclosure of personal data for orders
When ordering, we only collect and process your personal data insofar as this is necessary for the fulfillment and processing of your order and to process your inquiries. The provision of data is necessary for the conclusion of the contract. Non-provision results in no contract being concluded. Processing is based on Art. 6 (1) (b) GDPR and is necessary for the fulfillment of a contract with you.
A transfer of your data takes place, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.

Reviews / Advertising

Data collection when writing a comment or review
When commenting on/reviewing an article or a post, we only collect your personal data (name, e-mail address, comment text) to the extent provided by you. The processing serves the purpose of enabling commenting/reviewing and displaying comments/reviews.
By sending the comment/review, you consent to the processing of the transmitted data. The processing is based on Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Your personal data will then be deleted.
When your comment/review is published, the name you provided and the e-mail address you provided will be published.

Shopauskunft customer review
We use the review tool "shopauskunft.de" of Händlerbund Management AG (Kohlgartenstraße 11 - 13, 04315 Leipzig; "Shopauskunft") for our website.
After your order, we would like to ask you to review and comment on your purchase with us. For this purpose, you will be contacted by us via e-mail, using the technical system "Legal review request (RBA)". In doing so, we process the data on your order (order number/invoice number, purchase value and shipping costs) as well as your e-mail address. If necessary, we also use this data for the purpose of verifying your review.
Processing is based on Art. 6 (1) (a) GDPR with your consent, provided you have expressly consented to the disclosure of your data and the receipt of the review request.
You can revoke your consent at any time by using the corresponding link in the e-mail or by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
Further information on data protection when using Shopauskunft can be found at: https://www.shopauskunft.de/datenschutz.

Google Customer Reviews tool
We use the Google Customer Reviews tool of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") for our website.
After your order, we would like to ask you to review and comment on your purchase with us. For this purpose, you will be contacted by us via e-mail, using the Google survey opt-in module. In doing so, information such as order details (e.g. order ID, delivery country, expected delivery date, GTIN of the ordered products) as well as your e-mail address may be processed and transmitted to Google.
Your data may be transmitted to the USA. For the USA, an adequacy decision of the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified according to the TADPF and thus committed to complying with European data protection principles.
Processing is based on Art. 6 (1) (a) GDPR with your consent, provided you have expressly consented to the disclosure of your data and the receipt of the review request. You can revoke your consent at any time with effect for the future.
Further information on terms of use and data protection when using Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/en/1_01_tos.html and https://policies.google.com/privacy?hl=en

Use of e-mail address for sending newsletters
We use your e-mail address to send information and offers via newsletter, provided you have expressly consented to this. Data processing serves exclusively the purpose of advertising. For this purpose, we process your e-mail address and, if applicable, other data that you have voluntarily provided in the context of registering for our newsletter.
Processing is based on Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list. Despite removal from the distribution list, we may continue to store your e-mail address in a so-called blacklist to prevent you from receiving newsletter e-mails from us in the future. This storage is based on Art. 6 (1) (f) GDPR from our and your legitimate interest in preventing the reuse of your e-mail address for sending our newsletter. You have the right, for reasons arising from your particular situation, to object at any time to this processing.

Use of Mailchimp
We use the service of the Rocket Science Group LLC (675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, USA; "Mailchimp") for newsletter distribution within the framework of order processing.
We pass on the information provided by you during the newsletter registration (e-mail address, name if applicable) to Mailchimp. The data processing serves the purpose of newsletter dispatch and its statistical evaluation.
To evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser type and device as well as the time. Usage profiles can be created from this data under a pseudonym. The data collected will not be used to identify you personally. The data collected is only used for statistical evaluation to improve newsletter campaigns.
Your data is usually transmitted to Mailchimp servers in the USA and stored there. For the USA, an adequacy decision of the EU Commission is available (TADPF). Mailchimp is not certified according to the TADPF. Data transfer takes place on the basis of standard contractual clauses as suitable guarantees. Processing is based on Art. 6 (1) (f) GDPR. You have the right to object.
Further information can be found at: https://mailchimp.com/de/legal/data-processing-addendum/ and https://www.intuit.com/privacy/statement/.

Shipping Service Providers / ERP

Forwarding of the e-mail address to shipping companies for information on shipping status
We pass on your e-mail address to the transport company as part of the contract execution, provided you have expressly consented to this in the ordering process. The transfer serves the purpose of informing you about the shipping status by e-mail. Processing is based on Art. 6 (1) (a) GDPR. You can revoke your consent at any time.

Use of an external inventory management system (ERP)
We use an inventory management system for contract processing as part of order processing. For this purpose, your personal data collected in the context of the order will be transmitted to:
Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
Processing serves the purpose of fulfilling the contract concluded with you and is based on Art. 6 (1) (b) GDPR.

Payment Service Providers

Use of PayPal Check-Out
We use the payment service PayPal Check-Out of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (Luxembourg; "PayPal"). The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing are transmitted to PayPal. This is based on Art. 6 (1) (b) GDPR.
Cookies may be stored. This is based on Art. 6 (1) (f) GDPR. You have the right to object.

Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal
For individual payment methods, PayPal reserves the right to obtain a credit report. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency. Processing is based on Art. 6 (1) (f) GDPR from our legitimate interest in protection against payment default. You can object by notifying PayPal.

Third-party providers
When paying via a third-party provider's payment method, data is transmitted to PayPal (Art. 6 (1) (b) GDPR). Local third-party providers can be, for example: Apple Pay, Google Pay.

Purchase on account via PayPal
When paying by purchase on account, data is transmitted to Ratepay GmbH (Berlin). This is based on Art. 6 (1) (b) GDPR. Ratepay may carry out a credit check (Art. 6 (1) (f) GDPR). Information: https://www.ratepay.com/legal-payment-dataprivacy/.

Use of the payment service provider Stripe
We use Stripe of Stripe Payments Europe Ltd. (Ireland). Data is transmitted based on Art. 6 (1) (b) GDPR. Stripe reserves the right to obtain a credit report (Art. 6 (1) (f) GDPR). You have the right to object. See: https://stripe.com/de/privacy.

Use of the payment method Link
We use Link from Stripe. Use of cookies is based on your consent (§ 25 (1) TDDDG / Art. 6 (1) (a) GDPR). Payment data transfer is based on Art. 6 (1) (b) GDPR. Info: https://link.co/de/privacy.

Cookies

Our website uses cookies. These are small text files. You have full control over the use of cookies through your browser settings. Links for managing cookies:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

Technically necessary cookies: Used on the basis of § 25 (2) TDDDG and Art. 6 (1) (f) GDPR. You have the right to object.

Cookie Consent Manager CCM19: Used for obtaining and documenting consents (Art. 6 (1) (c) GDPR). Information is stored for 1 year and 1 month. Info: https://www.haendlerbund.de/de/datenschutzerklaerung.

Analysis

Use of Google Analytics 4: We use Google Analytics (Google Ireland Limited). Data such as IP, click path, device, location are collected. IP addresses are truncated within the EU. Use is based on consent (§ 25 (1) TDDDG / Art. 6 (1) (a) GDPR). Data transferred to USA (TADPF certified). Info: https://policies.google.com/privacy?hl=en.

Plug-ins and Miscellaneous

Google Tag Manager: Manages tags. No cookies or personal data processed by the manager itself. Info: https://www.google.com/intl/de/tagmanager/use-policy.html.
Google reCAPTCHA: Distinguishes humans from bots. Based on consent (Art. 6 (1) (a) GDPR).
GoogleMaps: Visual representation of maps. Based on consent (Art. 6 (1) (a) GDPR).
YouTube: Embedded videos with advanced privacy mode. Data transferred only when watching. Based on consent (Art. 6 (1) (a) GDPR).
SoundCloud: Plays audio. Based on consent (Art. 6 (1) (a) GDPR). Info: https://soundcloud.com/pages/privacy.
FontAwesome: Uniform display of fonts. Based on consent (Art. 6 (1) (a) GDPR). Info: https://fontawesome.com/privacy.

Data Subject Rights and Storage Period

Storage duration: Stored for warranty and statutory retention periods (tax/commercial), then deleted.
Rights: You have rights to information, correction, deletion, restriction, and portability (Art. 15-20 GDPR), and right to object (Art. 21 GDPR) as well as to lodge a complaint with a supervisory authority (Art. 77 GDPR).
Right to object: Based on Art. 6 (1) (f) GDPR, you can object for reasons arising from your situation. We will stop processing unless compelling reasons exist.

Last update: 22.10.2024