Datenschutz
The person responsible for data processing is:
Markus Immig XCNAV UG (limited liability)
Köpkenstraße 6
Bremen
Germany
Phone: 015782385341
We are pleased about your interest in our online shop. The protection of your privacy is very important to us. Below, we will inform you in detail about how we handle your data.
Access data and hosting
You can visit our website without providing any personal information. Each time a website is accessed, the web server merely automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred and the requesting provider (access data) and documents the request. This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our services. This serves to safeguard our legitimate interests in the proper presentation of our services in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO. All access data is deleted no later than seven days after the end of your visit to the site.
Data processing for contract execution, establishing contact and opening a customer account
We collect personal data that you voluntarily provide to us as part of your order or when contacting us (e.g. via contact form or email). Mandatory fields are marked as such because we need the data in these cases to execute the contract or to process your contact request, and you cannot send the order or contact request without providing the information. The data collected can be seen from the respective input forms. We use the data you provide to process the contract and your enquiries in accordance with Art. 6 (1) sentence 1 lit. b GDPR.
Insofar as you have given your consent to this in accordance with Art. 6 (1) sentence 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account. Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods in accordance with Art. 6 para. 1 sentence 1 lit. c DSGVO, unless you expressly have consented to further use of your data in accordance with Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this statement. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a designated function in the customer account.
Data processing for the purpose of shipping
In order to fulfill the contract in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO, we will pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
Data transfer to shipping service providers for the purpose of shipping announcement
If you have given us your express consent to do so during or after your order, we will forward your e-mail address to the selected shipping service provider in accordance with Art. 6 (1) sentence 1 lit. a GDPR so that the shipping service provider can contact you to announce or coordinate delivery.
You can revoke your consent at any time by sending a message to the contact option described in this data protection declaration or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you have provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data for other purposes that are permitted by law and about which we inform you in this declaration.
DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
Hermes Germany GmbH
Essener Straße 89
D-22419 Hamburg
Germany
General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Straße 1 - 7
DE-36286 Neuenstein
Germany
United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany
Data processing for payment processing
When processing payments in our online store, we work together with these partners: technical service providers, credit institutions, payment service providers.
4.1 Data processing for transaction processing
Depending on the selected payment method, we pass on the data necessary for the processing of the payment transaction to our technical service providers, who work for us as part of an order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for the processing of the payment. This serves the fulfillment of the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. In some cases, the payment service providers collect the data required for the processing of the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.
If you have any questions about our partners for payment processing and the basis of our cooperation with them, please use the contact option described in this data protection declaration.
4.2 Data processing for the purpose of fraud prevention and the optimization of our payment processes
We may provide our service providers with additional data that they, together with the data necessary for processing the payment, use as our processors for the purposes of fraud prevention and optimizing our payment processes (e.g. invoicing, processing contested payments, accounting support). This serves to safeguard our legitimate interests in protecting ourselves against fraud and in efficient payment management, which are overriding in the process of balancing of interests, in accordance with Article 6 (1) (f) GDPR.
4.3 Identity and credit checks when selecting Klarna payment services
Klarna Pay now (direct debit)
If you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna), we ask for your consent in accordance with Art. 6 (1) sentence 1 a GDPR to transfer the data necessary for the processing of the payment and an identity and credit check to Klarna. In Germany, the credit reference agencies named in Klarna's data protection declaration may be used for identity and credit checks. Klarna uses the information obtained on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact option mentioned in this data protection declaration. This may mean that we can no longer offer you certain payment options. You can also revoke your consent to Klarna for this use of personal data at any time.
Advertising by email
5.1 Email newsletter with registration
When you register for our newsletter, we use the data required for this or provided separately by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 (1) 1 lit. a GDPR. You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or via a link provided in the newsletter for this purpose. After unsubscribing, we will delete your e-mail address from the list of recipients, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use data in a manner that goes beyond this, which is permitted by law and about which we inform you in this statement.
5.2 Sending requests for reviews by e-mail
If you have given us your express consent to do so during or after your order in accordance with Art. 6 (1) 1 lit. a GDPR, we will use your e-mail address to request that you submit an evaluation of your order via the evaluation system we use. This consent can be withdrawn at any time by sending a message to the contact option described in this data protection declaration or via a link provided for this purpose in the evaluation request.
Cookies and other technologies
6.1 General information
We use technologies on various pages, including cookies, to make visiting our website more attractive and to enable the use of certain functions. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies).
We use such technologies that are essential for the use of certain features of our website (e.g. shopping cart function). These technologies collect and process IP address, time of visit, device and browser information, and information about your use of our website (e.g. information about the contents of the shopping cart). In the context of a weighing of interests, this serves the overriding legitimate interests of an optimized presentation of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO.
In addition, we use technologies to fulfill the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.
The cookie settings for your browser can be found under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have consented to the use of the technologies in accordance with Art. 6 (1) 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the data protection declaration. Alternatively, you can also access the following link: xcnav.de. If you do not accept cookies, the functionality of our website may be limited.
6.2 Cookiebot Consent Management Platform
We use Cookiebot on our website to inform you about the cookies and other technologies we use on our website and to obtain, manage and document your consent to the processing of your personal data by these technologies, where required. This is necessary in order to fulfil our legal obligation under Art. 6 (1) 1 lit. c GDPR to be able to demonstrate your consent to the processing of your personal data, to which we are subject, in accordance with Art. 7 (1) GDPR. Cookiebot is an offer from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf.
After you have submitted your cookie statement on our website, Cookiebot's web server stores your anonymized IP address, the date and time of your statement, browser information, the URL from which the statement was sent, information on your consent behavior and an anonymous random key. In addition, a cookie is set that contains the information about your consent behavior and the key. Your data will be deleted after twelve months unless you have expressly consented to further use of your data in accordance with Art. 6 (1) 1 lit. a GDPR or we reserve the right to use the data for other purposes that are permitted by law and about which we inform you in this statement.
Use of cookies and other technologies for web analysis and advertising purposes
If you have given your consent in accordance with Art. 6 (1) 1 lit. a GDPR, we use the following cookies and other technologies from third-party providers on our website. After the purpose and end of our use of the respective technology, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. Further information on your revocation options can be found in the section “Cookies and other technologies”. Further information, including the basis of our cooperation with the individual providers, can be found with the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this data protection declaration.
7.1 Use of Google services
We use the following technologies provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision for the USA by the European Commission. Our cooperation is based on standard data protection clauses adopted by the European Commission. If your IP address is collected using Google technologies, it will be shortened by activating IP anonymization before it is stored on Google's servers. Only in exceptional cases will the full IP address be sent to a Google server and shortened there. Unless otherwise stated for the individual technologies, the data processing is carried out on the basis of an agreement concluded for the respective technology between jointly responsible parties in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in Google's privacy policy.
Google Analytics
For the purpose of website analysis, data (IP address, time of visit, device and browser information, and information on your use of our website) is automatically collected and stored using Google Analytics, from which user profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address will not be merged with any other data held by Google. The data processing is carried out on the basis of an agreement on order processing by Google.
Google Maps
For the visual representation of geographical information, Google Maps collects data about your use of the Maps functions, in particular the IP address and location data, which is transmitted to Google and then processed by Google. We have no influence on this subsequent data processing.
YouTube Video Plugin
To integrate third-party content, the YouTube video plugin in the advanced privacy mode we use collects data (IP address, time of visit, device and browser information), transmits it to Google and then processes it, only when you play a video.
7.2 Use of Facebook services
Use of Facebook Pixel
We use Facebook Pixel as part of the technologies of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”) as described below. Facebook Pixel is used to automatically collect and store data (IP address, time of visit, device and browser information, and information about your use of our website based on events specified by us, such as visiting a website or registering for a newsletter), which is used to create user profiles using pseudonyms. For this purpose, a cookie is automatically set by the Facebook pixel when you visit our website, which automatically enables your browser to be recognized when you visit other websites by means of a pseudonymous cookie ID. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website usage, in particular personalized and group-based advertising.
The information automatically collected by Facebook technologies about your use of our website is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. The European Commission has not issued an adequacy decision for the USA. Insofar as we are responsible for the data transfer to the USA, our cooperation is based on standard data protection clauses adopted by the European Commission. Further information about data processing by Facebook can be found in Facebook's privacy policy.
7.3 Other providers of web analysis and online marketing services
Live chat tool Userlike
If you use the live chat tool Userlike to contact us, the data you voluntarily enter there (name, email address, message) will be processed by us in accordance with Art. 6 (1) 1 lit. b GDPR for the purpose of answering your inquiry in the context of contract processing. In addition, the use of this tool serves to safeguard our legitimate interests in effective and improved customer communication in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO. The data will be deleted afterwards. The live chat tool is provided by Userlike UG (haftungsbeschränkt), Probsteigasse 44-46, 50670 Cologne, Germany, which works on our behalf.
Social media
Social plugins from Twitter
Our website uses social buttons from social networks. These are embedded in the page only as HTML links, so that no connection is established with the servers of the respective provider when you access our website. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser. There you can, for example, click the Like or Share button.
Contact options and your rights
As the data subject, you have the following rights:
pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent described therein;
pursuant to Art. 16 GDPR, the right to request the immediate correction of incorrect or incomplete personal data stored by us;
pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is
necessary to exercise the right to freedom of expression and information;
to fulfill a legal obligation;
for reasons of public interest or
to assert, exercise or defend legal claims;
pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data if
you dispute the accuracy of the data;
the processing is unlawful but you refuse to allow it to be deleted;
we no longer require the data but you require it for the establishment, exercise or defense of legal claims; or
you have objected to the processing in accordance with Article 21 of the GDPR;
pursuant to Art. 20 GDPR, the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller;
pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
If you have any questions regarding the collection, processing or use of your personal data, or if you wish to request information, correct, restrict or delete data, or revoke consent granted or object to a particular use of data, please contact us directly using the contact details provided in our imprint.
Right to object
If we process personal data as described above in order to protect our legitimate interests, which are overriding in the process of balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for the purposes of direct marketing, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you have the right to object only on grounds relating to your particular situation.
After you have exercised your right of objection, we will no longer process your personal data for these purposes unless we can prove compelling reasons for the processing worthy of protection that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
This does not apply if the processing is carried out for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.
Privacy policy created with rechtstexter.de.
Not translated
Privacy Policy