PRIVACY POLICIES
​
I. Introduction
​
These data protection provisions tell you how your personal data is used when you visit our website, functions and content as well as external online presences, such as our social media profiles, interact with us and buy our goods and services. It also informs you about your data protection rights and how you are protected by legal norms.
This privacy policy was last updated on May 20, 2018.
II. Name and address of those responsible
​
The person responsible within the meaning of the General Data Protection Regulation ("DSVGO") and the Telemedia Act ("TMG"), as well as other data protection regulations, is:
​
Nampelka GmbH
Alisa Sydow
Himmelsthürerstraße 9
31137 Hildesheim (Germany)
Phone: +49 5121 2829900
E-Mail: info@nampelka.com
III. Services
Furthermore, we maintain an online presence within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services. When calling up the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply.
Unless otherwise stated in our data protection declaration, we process the data of the users as long as they communicate with us within the social networks and platforms, e.g. write articles on our online presence or send us messages.
IV. Purpose of data processing & type of data
The person responsible processes the following data from users, interested parties, business partners, visitors and customers of the online offer:
- Payment data (bank details, payment history)
- Inventory data (name, full address)
- Contact details (telephone number, email address)
- Content data (texts when e.g. leaving comments)
- Usage data (websites visited, interest in content, access times)
- Meta / communication data (device information, IP addresses)
This data is saved and the online offer, including its functions and content, is made available, contact inquiries are answered, communication with users is enabled, and contractual services (e.g. from a sales contract) are fulfilled. Furthermore, the storage of the data is used for service, customer care, marketing, advertising and market research.
Furthermore, we process data in the context of administrative tasks as well as the organization of our operations, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services. The processing bases are Article 6 Paragraph 1 lit. DSGVO, Art. 6 Para. 1 lit.f. DSGVO. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in processing lies in administration, financial accounting, office organization, archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of the data with regard to contractual services and contractual communication corresponds to the information given for these processing activities.
We disclose or transmit data to the financial administration, consultants, such as tax consultants or auditors, as well as other fee offices and payment service providers.
Furthermore, on the basis of our business interests, we store information about suppliers, organizers and other business partners, e.g. for the purpose of later contact. We generally store this mostly company-related data permanently
​
V. Communication options
1. Contact form
If you send us inquiries via the contact form or by e-mail, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the request and in the event of follow-up questions.
Alternatively, you can contact us using the email addresses provided. In this case, the user's personal data transmitted with the email will be saved.
We do not pass on this data without your consent.
2. Comments
When visitors write comments on the website, we collect the data that is displayed in the comment form, as well as the anonymized IP address of the visitor and the user agent string (this identifies the browser) in order to be able to detect spam support.
If you write a comment on our website, this can be a consent to save your name, email address and website in cookies. This is a convenience function so that you do not have to re-enter all this data if you write another comment. These cookies are stored for a year.
If you write a comment, it will be saved indefinitely, including metadata. In this way, we can automatically recognize and approve follow-up comments instead of holding them in a moderation queue.
3. Newsletter
We use the list provider MailChimp to send our newsletter. MailChimp is an offer from The Rocket Science Group, LLC, 512 Means Street, Ste 404 Atlanta, GA 30318.
If you register for our newsletter, the data (your email address) that you provide when registering for the newsletter will be transmitted to MailChimp and stored there. After registration you will receive an email from MailChimp to confirm your registration (“double opt-in”). MailChimp offers extensive analysis options on how the newsletters are opened and used. These analyzes are group-related and are not used by us for individual evaluation. MailChimp also uses the Google Analytics analysis tool and, if necessary, integrates it into the newsletter. Further details on Google Analytics can be found in the section “Web analyzes using Google Analytics”.
Further information on MailChimp and data protection at MailChimp can be found here: http://mailchimp.com/legal/privacy/
​
VI. Tracking & data collection
​
1. Hosting
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online offer.
We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 Para. 1 lit.f GDPR in conjunction with Art. 28 GDPR. An order processing contract has been concluded with our hosting provider.
2. Server log files
You can visit our website without giving any personal information. It will be with everyone
Access to our website usage data transmitted through your internet browser and in log data
(Server log files). These stored data include, for example, the name of the page accessed, the date
and time of access, amount of data transferred and the requesting provider. These data are used
exclusively to ensure the trouble-free operation of our website and to improve our
Offer. It is not possible to assign this data to a specific person.
Collection, processing, use and processing of personal data for orders
When ordering, we only collect and use your personal data insofar as this is necessary for the fulfillment and
Processing of your order as well as processing your inquiries is necessary. The provision of the data is
required for the conclusion of the contract. Failure to provide it has the consequence that no contract is concluded can be. The processing takes place on the basis of Art. 6 (1) lit. b GDPR and is necessary for the fulfillment of a Contract with you required. Your data will be passed on to third parties without your express consent. The only exceptions to this are our service partners, who we use to process a contractual relationship or service provider that we are in the context of order processing to serve. In addition to the recipients named in the respective clauses of this data protection declaration, these are for example, recipients of the following categories: shipping service providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping dealer. In all cases we strictly observe the legal requirements. The scope of the data transmission is limited to a minimum.
​
Duration of storage
After the contract has been fully processed, the data will initially be used for the duration of the warranty period, thereafter, taking into account legal, in particular tax and commercial retention periods stored and then deleted after the deadline, provided that you do not allow further processing and use have agreed.
​
3. Google Analytics
This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). It is used on the basis of Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR.
Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of the website such as
- browser type / version,
- the operating system used,
- Referrer URL (the previously visited page),
- host name of the accessing computer (IP address),
- Date & time of the server request,
- screen resolution
- Geographical data (location)
- Preferred language setting for displaying the website
- Data on the use of the website (mouse pointer position, mouse movements, clicks)
are usually transmitted to and stored by Google on servers in the United States. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We have also added the code “anonymizeIP” to Google Analytics on this website. This guarantees that your IP address is masked so that all data is collected anonymously. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de.
​
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link: https://tools.google.com/dlpage/gaoptout?hl=en
An opt-out cookie will be set which prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de) or here: http://www.google. com / analytics / terms / gb.html or here https://www.google.de/intl/en_uk/policies/.
Saved data will be retained by Google Analytics for 38 months before they are automatically deleted.
​
VII. Integration of services and content from third parties
​
We use content or service offers from third-party providers within our online offer on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. Integrate services such as videos or fonts (hereinafter uniformly referred to as “content”).
This always presupposes that the third-party providers of this content perceive the IP address of the user, since they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We strive to only use content whose respective providers only use the IP address to deliver the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, and can also be linked to such information from other sources.
​
1. Youtube
​
Our website uses plugins from YouTube, operated by Google. The operator of the website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages equipped with a YouTube plug-in, a connection to the YouTube servers will be established. The YouTube server is informed which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR.
YouTube provides more information in its privacy policy: https://www.google.de/intl/de/policies/privacy
You can find options for opting out here: https://adssettings.google.com/authenticated.
2. Google Fonts
This page uses so-called web fonts for the uniform representation of fonts, which are provided by the provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts takes place in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
More information is provided by Google Web Fonts and Google's data protection declaration: https://developers.google.com/fonts/faq
Data protection declaration: https://www.google.com/policies/privacy/
Opt-Out: https://adssettings.google.com/authenticated
3. Instagram
Functions and contents of the Instagram service, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, can be integrated into our online offer.
This can include, for example, content such as images, videos or texts and buttons with which users can express their liking for the content, subscribe to the authors of the content or our contributions. If the users are members of the Instagram platform, Instagram can assign the above-mentioned content and functions to the profiles of the users there.
Instagram privacy policy: http://instagram.com/about/legal/privacy/
​
4. Pinterest
Functions and contents of the Pinterest service, offered by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA, can be integrated into our online offer.
This can include, for example, content such as images, videos or texts and buttons with which users can express their liking for the content, subscribe to the author of the content or our contributions. If the users are members of the Pinterest platform, Pinterest can assign the above-mentioned content and functions to the profiles of the users there.
Pinterest data protection declaration: https://about.pinterest.com/de/privacy-policy
​
VIII. Relevant legal bases
​
In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing. If the legal basis is not mentioned in the data protection declaration, the following applies: The legal basis for obtaining consent is Article 6 Paragraph 1 lit. Answering inquiries is Art. 6 Para. 1 lit.b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 Para. 1 lit. c GDPR, and the legal basis for processing to safeguard our legitimate interests is Art . 6 para. 1 lit.f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.
​
Rights of the data subject
​
If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR:
Right to information, to correction, to deletion, to restriction of processing
Data portability.
In addition, according to Art. 21 (1) GDPR, you have the right to object to processing based on Art.
6 (1) f GDPR, as well as against processing for the purpose of direct mail.
Contact us if you wish. The contact details can be found in our imprint.
Right of appeal to the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you are the
Are of the opinion that the processing of your personal data is not lawful.
​
IX. Cooperation with contract processors and third parties
​
If we disclose data to other persons and companies (contract processors or third parties) as part of our processing, transmit them to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if the data is transmitted to third parties, such as to payment service providers, according to Art. 6 Paragraph 1 lit.
If we commission third parties to process data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.
​
X. Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this happens in the context of the use of third-party services or disclosure or transmission of data to third parties, this will only take place if it happens to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 ff. GDPR are met. This means that processing takes place e.g. on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
XI. Rights of data subjects
You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.
You have accordingly. Art. 16 GDPR the right to request the completion of the data concerning you or the correction of the incorrect data concerning you.
In accordance with Art. 17 GDPR, you have the right to demand that the relevant data be deleted immediately or, alternatively, in accordance with Art. 18 GDPR, to request a restriction on the processing of the data.
You have the right to request that you receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request that it be transmitted to other responsible parties.
In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority.
​
XII. Right of withdrawal
You have the right to revoke your consent in accordance with Article 7 (3) GDPR with effect for the future
XIII. Right to object
You can object to the future processing of your data in accordance with Art. 21 GDPR at any time. The objection can in particular be made against processing for direct marketing purposes.
XIV. Deletion of data
The data processed by us will be deleted or restricted in their processing in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention requirements. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax reasons.
According to legal requirements in Germany, the storage takes place in particular for 6 years in accordance with § 257 Paragraph 1 HGB (trading books, inventories, opening balances, annual financial statements, commercial letters, accounting documents, etc.) and for 10 years in accordance with § 147 Paragraph 1 AO (books, records , Management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
​
XV. Online shop and customer account
1. Order processing
We process the data of our customers as part of the order processes in our online shop in order to enable them to select and order the selected products and services, as well as their payment and delivery or execution.
The processed data includes inventory data, communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing takes place for the purpose of providing contractual services in the context of the operation of an online shop, billing, delivery and customer services. We use session cookies to store the contents of the shopping cart and permanent cookies to store the login status.
The processing takes place on the basis of Art. 6 Paragraph 1 lit. b (execution of order processes) and c (legally required archiving) GDPR. The information marked as necessary is required for the establishment and fulfillment of the contract. We only disclose the data to third parties in the context of delivery, payment or in the context of legal permits and obligations to legal advisors and authorities. The data is only processed in third countries if this is necessary to fulfill the contract (e.g. at the customer's request for delivery or payment).
​
Users can optionally create a user account in which they can view their orders in particular. As part of the registration, the required mandatory information is communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention is necessary for commercial or tax reasons in accordance with Art. 6 Para. 1 lit. c GDPR. Information in the customer account remains until it is deleted with subsequent archiving in the event of a legal obligation. It is up to the users to save their data in the event of termination before the end of the contract.
As part of the registration and renewed logins as well as the use of our online services, we save the IP address and the time of the respective user action. The storage takes place on the basis of our legitimate interests, as well as the users in protection against misuse and other unauthorized use. This data is generally not passed on to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 (1) (c) GDPR.
The deletion takes place after the expiry of statutory warranty and comparable obligations, the necessity of storing the data is checked every three years; In the case of the statutory archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligation).
​
2. External payment service providers
We use external payment service providers, through whose platforms the user and we can carry out payment transactions (e.g., each with a link to the data protection declaration,
- Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)
- Paypal Plus (https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE)
As part of the fulfillment of contracts, we use the payment service providers on the basis of Article 6 (1) lit. b. GDPR. In addition, we use external payment service providers on the basis of our legitimate interests in accordance with Article 6 (1) lit. GDPR to offer our users effective and secure payment options.
The data processed by the payment service providers include inventory data such as name and address, bank data such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, sums and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that we do not receive any account or credit card-related information, but only information with confirmation or negative information about the payment. The data may be transmitted to credit agencies by the payment service provider. The purpose of this transmission is to check your identity and creditworthiness. For this we refer to the terms and conditions and data protection information of the payment service providers.
The terms and conditions and data protection notices of the respective payment service providers, which can be called up within the respective websites or transaction applications, apply to payment transactions. We also refer to these for the purpose of further information and assertion of rights of revocation, information and other data subjects.