Data Protection Provisions

Overview

§ 1 Information on the Collection of Personal Data and Provider Identification

1. Below we inform you about the collection of personal data when using this website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
2. Responsible according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is REPROGRAFIE EICHLER GmbH, Mohrenstraße 11-17, D-50670 Cologne, support@repro-online.de (see our imprint). Our data protection officer is Mr Andreas Pinheiro LL.M., a.pinheiro@ap-datenschutz.de
3. If we use commissioned service providers for individual functions of our offer or want to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the established criteria for the storage period.
   
   

§ 2 Rights, Especially to Information and Revocation

1. You have the following rights towards us regarding your personal data:
   – Right to information,
   – Right to correction or deletion,
   – Right to restriction of processing,
   – Right to object to processing,
   – Right to data portability.
2. If you have given consent to the use of data, you can revoke it at any time. If the lawfulness of the processing is based on consent, it remains valid until the revocation is exercised.
3. Please send all information requests, requests for information or objections to data processing by e-mail to Support@repro-online.de or to the address stated in § 1 para. 2.
4. You can request us to delete your data at any time. There may be statutory retention periods that allow us to keep your data until the expiry of the period.
5. If your data should be incorrect, you have the right to request us to correct it. We will comply with this request immediately.
6. You have the right to receive the personal data you have provided to us in a readable format, as far as technically possible, to provide it to another company (right to data portability).
7. You have the right to complain to the supervisory authority responsible for you.
   
   

§ 3 Data Security

1. We maintain current technical measures to ensure data security, especially to protect your personal data from dangers during data transmission and from access by third parties. These are adapted to the current state of technology accordingly.
   
   

§ 4 Collection of Personal Data for Informational Use

1. When using the website purely for informational purposes, i.e. if you do not register, sign up or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following data which are technically necessary for us to display our website and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):
   – IP address
   – Date and time of the request
   – Time zone difference to Greenwich Mean Time (GMT)
   – Content of the request (specific page)
   – Access status/HTTP status code
   – Amount of data transferred each time
   – Website from which the request originates
   – Browser
   – Operating system and its interface
   – Language and version of the browser software
2. When you contact us by e-mail or via the contact form, your e-mail address, your name and, if you provide it, your telephone number will be stored by us. The purpose of this storage is solely to contact you in order to answer your questions.
3. The legal basis for the collection stated is the consent you have given by visiting our website and confirming the cookie banner (Art. 6 para. 1 lit. a GDPR).
4. We will only use your data for advertising purposes to the extent permitted by law. In particular, we use your e-mail address only for direct advertising of our own similar goods or services. You can object to the use of your data for advertising purposes at any time in writing or in text form (e-mail to support@repro-online.de). We rely on our legitimate interest in advertising our products to our customers pursuant to Art. 6 para. 1 lit. f GDPR.
5. In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you use, through which the party setting the cookie (here us) receives certain information. Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offer overall more user-friendly and effective.

§ 5 Cookies

1. We use cookies on our website. Such cookies are necessary so that you can move freely on the website and use its features; this includes, among other things, access to secured areas of the website. Through cookies, we can track who has visited the page(s) and derive from this how often certain pages are visited, which parts of the site are particularly popular. Session cookies store information about your activities on our website.
2. This website uses the following types of cookies, whose scope and functionality are explained below:
   – Transient Cookies (temporary use)
   – Persistent Cookies (time-limited use)
   – Third Party Cookies
3. Transient cookies are automatically deleted when you close the browser. These include in particular session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognised again when you return to the website. The session cookies are deleted when you log out or close the browser.
4. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
5. You can configure your browser settings according to your wishes and, for example, reject the acceptance of third-party cookies or all cookies. We point out that you may not be able to use all functions of this website.
6. We use cookies to be able to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.
7. The following cookies are used:

§ 6 Data Sharing for Website Maintenance

1. We will not share your personal data with third parties unless we inform you in this section about a transfer.
2. Our IT service providers have access to our stored data to fix errors and enable us to implement the required technical and organisational measures. We rely on our legitimate interest in securing our IT pursuant to Art. 6 para. 1 lit. f GDPR or on the fulfilment of legal obligations pursuant to Art. 6 para. 1 lit. c GDPR.
3. To provide the newsletter service, we pass your data to CleverReach GmbH & Co. KG (https://www.cleverreach.de/). This service enables us to organise the sending and management of newsletters, as well as the visual design. Your data will not be passed on by CleverReach GmbH & Co. KG.
4. The IT service provider(s) have been carefully selected and commissioned by us in writing. They are bound by our instructions and are regularly monitored by us. The service providers will not pass on this data to third parties.
5. Your data will not be transferred outside the EU (EEA) area.

§ 7 Use of Our Webshop

1. If you want to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data which we need to process your order. Mandatory information necessary for the processing of contracts is marked separately, other information is voluntary. The data you provide will be processed to process your order. For this purpose, we may pass your payment data to our house bank. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.
2. You can voluntarily create a customer account through which we can store your data for future purchases. When creating an account under "My Account", the data you provide will be stored revocably. All other data, including your user account, can be deleted at any time in the customer area.
3. We may also process the data you provide to inform you about other interesting products from our portfolio or to send you e-mails with technical information.
4. Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for ten years. However, after two years, we restrict processing, i.e. your data will only be used to comply with legal obligations.
5. If you choose the payment method "prepayment", we store your IBAN and BIC to process the payment and according to the statutory retention periods (e.g. § 147 para. 1 AO – 10 years). The legal basis for the collection here is Art. 6 para. 1 lit. b GDPR (performance of a contract) and lit. c (storage due to a legal obligation).
6. We use the data you provide to process your order. For this purpose, we pass your address data to a commissioned shipping company. We delete these after the contract has been processed and the expiry of the tax and commercial retention obligations. The legal basis for the collection stated is your consent, which you have given by creating the customer account or by ordering (Art. 6 para. 1 lit. a GDPR).
7. The payment processing takes place with the options "Sofort-Überweisung" and "Credit Card" via the service provider Heidelberger Payment GmbH. This is the responsible body within the meaning of the BDSG and service provider within the meaning of the TMG. Please note the privacy policy of Heidelberger Payment GmbH at https://www.heidelpay.de/unternehmen/impressum/datenschutz/.
8. If you choose the payment method "paypal", the payment is made via PayPal (Europe) S.à r.l. et Cie, S.C.A. PayPal is also solely responsible for processing the payment towards you within the meaning of the BDSG as a telemedia service provider. Please note the privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
9. To prevent unauthorised access by third parties to your personal data, especially financial data, the ordering process is encrypted using SSL technology.

§ 8 Newsletter

1. With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the consent declaration. When registering to use the user account, you can choose to subscribe to the Repro Eichler newsletter. To do this, you must check the box before "Subscribe to newsletter".
2. For registration to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we send you an e-mail to the specified e-mail address asking you to confirm that you want to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses used and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, clarify possible misuse of your personal data.
3. The only mandatory information for sending the newsletter is your e-mail address. The provision of other, separately marked data is voluntary and is used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
4. You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, via this form on the website, by e-mail to info@repro-eichler.de or by a message to the contact details given in the imprint.
5. We point out that when sending the newsletter, we evaluate your user behaviour. For this evaluation, the sent e-mails contain so-called web beacons, also called tracking pixels. These are one-pixel image files that link to our website and thus enable us to evaluate your user behaviour. This is done by collecting the data mentioned in § 4 as well as web beacons, which are assigned to your e-mail address and linked with their own ID. The data is collected exclusively pseudonymously, i.e. the IDs are not linked to your other personal data, thus excluding direct personal reference. The information collected in this way is stored by the newsletter provider CleverReach on its server in Germany. Such tracking is also not possible if you have disabled the display of images by default in your e-mail program. In this case, however, the newsletter will not be displayed completely and you may not be able to use all functions. If you manually display the images, the above-mentioned tracking takes place.
6. If you have subscribed to a newsletter with us, you can revoke your consent to receive the newsletter at any time. You can declare the revocation by e-mail to support@repro-online.de or by a message to the contact details given in the imprint. Your data will not be passed on to third parties.
7. You can also switch the newsletter subscription on or off at any time via the function in your user account.