Privacy Policy

This privacy statement applies to the website www.badmoebelguenstig.de Responsible: Hans John

HGHS House, Garden, Trade - Servicegesellschaft mbH Holstenhofweg 12 D – 22041 Hamburg Tel : +494028281660 E-Mail: info@badmoebelguenstig.de Managing Director : Hans John

1.) Processing of personal data

As part of the website, we process your personal data as follows, among other things (for further data processing as part of the website, please refer to the following sections of this data protection declaration):

Log files when visiting the website

When you use our website, our hosting provider logs so-called “log file” data each time the server is accessed, such as the name of the website accessed, the previously visited page (“referrer” URL), product and version information of the browser and operating system used, requesting provider, date and time of access, search engines used, country of access, amount of data transferred, names of downloaded files and IP address.

The legal basis for the processing is Article 6 paragraph 1 f) GDPR. Our legitimate interest in storing the log file data lies in ensuring system security, including the investigation of misuse. The IP addresses are deleted after a maximum of 7 days, unless they are required for longer due to a security-related incident, e.g. for clarification or evidence purposes.

Contact inquiries:

When you contact us, we process your personal data such as name, address, email address, telephone number, etc., which we need to answer your request.

The legal basis for the processing of your personal data in the context of contact requests is Art. 6 Para. 1 b) General Data Protection Regulation.

In the context of contact requests, we store your personal data for as long as it is necessary to process your request, plus an appropriate retention period for follow-up queries.

The provision of this personal data is not required by law or contract or necessary for the conclusion of a contract. If you do not provide us with this data, however, we will not be able to answer your contact request or - in the case of limited contact details - not be able to answer all requested communication channels.

Registration/Orders:

When you register or place orders, we process your personal data such as name, address, email address, telephone number, date of birth, self-selected user name, payment details, etc., which we need to fulfill the contractual relationship with you or to carry out pre-contractual measures that are carried out at your request.

We store your personal data collected during registration or orders for as long as it is necessary to fulfill the contractual relationship (if applicable, including the provision of the customer account) and/or to carry out pre-contractual measures at your request and/or with regard to warranty, guarantee or similar obligations and/or with regard to statutory retention periods.

The legal basis for the processing of your personal data collected during registration or orders is Art. 6 Para. 1 b) and Art. 6 Para. 1 c) of the General Data Protection Regulation.

The provision of this personal data is not required by law or contract. However, it is necessary for the conclusion of the contract, i.e. the implementation of the registration or order, insofar as the relevant information is mandatory (instead of just voluntary) in our registration/order process.

Newsletter:

If you subscribe to our newsletter, we will process the data collected, such as your email address, title, etc., for the purpose of sending the newsletter.

If the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6 paragraph 1 a) GDPR (consent). Otherwise, the data processing is carried out on the basis of Article 6 paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes mentioned above.

We store the personal data that we need to send the newsletter for as long as we need it for this purpose or until you revoke your consent to receive the newsletter. Any legitimate continued storage for other purposes (e.g. customer communication) remains unaffected.

02.) Use of cookies

In this section we inform you about the use of cookies on our website.

a.) Description and functionality

Cookies are small text files that are stored on the user's computer and enable analysis of the user's use of the website.

b.) Own cookies

We use cookies to make using the website easier and more convenient for visitors or to enable certain functions in the first place.

The legal basis for our processing of your personal data in connection with the use of cookies is Art. 6 (1) (f) of the General Data Protection Regulation (“legitimate interest”). The legitimate interest arises from the purposes stated above.

When using cookies, we store your personal data for as long as necessary to make using our website easier and more convenient.

c.) Third-party cookies

The Website may also use third-party cookies to collect or receive information from our website and elsewhere on the Internet and then use that information to provide, for example, web tracking services, rating services or targeted advertising.

When using cookies, your personal data will be stored for as long as necessary to achieve the purposes described above.

If the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6 paragraph 1 a) GDPR (consent). Otherwise, the data processing is carried out on the basis of Article 6 paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes mentioned above.

  1. d) Revocation/ objection/ settings

You have the option of revoking your consent to the use of cookies or objecting to data processing through cookies at any time by deleting the cookies in your browser settings.

You can also set your browser so that cookies are only accepted if you agree to this.

You can find another option to revoke, object and/or manage your cookies here:

Cookie Preferences

As for advertising cookies, you can block and/or manage many of them through the following services:

www.aboutads.info/choices/ www.youronlinechoices.com/uk/your-ad-choices/ www.networkadvertising.org/managing/o pt_out.asp

However, if you reject cookies, you may not be able to use certain website features, services, applications or tools.

03.) Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. Google bases this data transfer on the EU standard contractual clauses.

However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Unless cookies are only set on the website with your consent, you can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

The data processed as part of the use of Google Analytics will be automatically deleted after …….…...

If the data processing is carried out with your consent, the legal basis is Article 6 paragraph 1 a) GDPR (consent). Otherwise, the data processing is carried out on the basis of Article 6 paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes stated below.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

04.) Presence on Facebook

We have a presence on the social network Facebook.

Your personal data will be processed by us and, above all, by Facebook. Below we describe which of your data we process on our Facebook page and what our relationship is with Facebook.

  1. a) What personal data do we process when you use our Facebook page?

When you use our Facebook page, we process the following personal data

  1. a) Communication

We maintain our presence on Facebook to present our goods and/or services and to communicate with customers and interested parties.

The legal basis for our processing of the relevant communication content with you is Article 6 Paragraph 1 Clause 1 Letter f) GDPR ("legitimate interests"), whereby our legitimate interests lie in the purposes set out above. For orders via our presence on social networks, the legal basis is also Article 6 Paragraph 1 Letter b) GDPR ("performance of contract")

  1. b) Technical usage data

When you use our Facebook page, we process technical information about your visit to our Facebook page, such as the IP address of your device, the time of your visit and the website from which you visit us. We process this data for technical administration and to provide the Facebook page and, as the operator of the Facebook page, to obtain statistical information about the use of our Facebook page.

The legal basis for the processing of your data is Art. 6 (1) (f) GDPR. Our interest lies in constantly improving our Facebook page and providing you with information that is interesting and relevant to you.

  1. c) Statistical usage data

We also collect statistical usage data. This includes, for example, information about page views, posts or videos, subscriptions, likes of posts, recommendations of posts or comments, sharing of content, reactions or comments on posts, reports of posts, clicks on links on other pages that lead to the fan page, mouse movements over names or profile pictures to get a preview of content, clicks on buttons on a fan page and the device (computer or mobile device) with which you are logged in.

We only receive such ("usage data") in aggregated, i.e. summarized, form via the Facebook tool "Page Insights" ( https://www.facebook.com/business/a/page/page-insights and https://de-de.facebook.com/legal/terms/information_about_page_insights_data ) (" Insights data "). We cannot assign Insights data to you personally.

We process this data for technical administration and to provide our Facebook page and, as the operator of the Facebook page, to obtain statistical information about the use of our fan page. The legal basis for the processing of this data is Art. 6 (1) (f) GDPR. Our interest here is the administration and improvement of the Facebook page.

We and Facebook are so-called "joint controllers" for the processing of Insights data. This means that Facebook and we process this data with the joint purpose of getting to know the usage behavior of visitors to our fan page. Facebook, as the operator of the platform, collects the detailed usage data from you; we only receive the summarized Insights data from Facebook. Therefore, only Facebook makes the decisions about the processing of usage data in connection with page insights. In the event of such joint responsibility, the EU General Data Protection Regulation requires that we conclude a contract with Facebook. You can access this contract here: https://www.facebook.com/legal/terms/page_controller_addendum . It contains further details and explanations on joint responsibility with Facebook in the context of Insights.

  1. d) Likes, posts and messages

When you use our Facebook page, we process

  • Your Facebook username and profile picture,
  • Your click interactions with our posts (“likes”, “shares”, etc.) and
  • Your comments, posts, messages and other content you provide to us on our Facebook page.

The legal basis for processing is Art. 6 (1) (f) GDPR (balancing of interests). We process your data in order to provide you and the other users of our Facebook page with interesting information and to regularly inform you about our offering.

  1. a) Data processing by Facebook

We have no access to other personal data that is processed when you use Facebook. Facebook's privacy policy ( https://de-de.facebook.com/policy.php ) applies to the processing of your personal data by Facebook.

Please note in particular the following:

  1. a) Data transfer to the USA and other third countries

In order to provide our Facebook page on the Facebook platform, your personal data will be processed by Facebook Ireland Limited and transferred to Facebook in the USA (and other third countries as set out at https://de-de.facebook.com/policy.php ). Facebook uses standard contractual clauses approved by the European Commission and may rely on the adequacy decisions issued by the European Commission with respect to certain countries for data transfers from the EEA to the USA and other countries.

Meta can transfer your data to servers worldwide. Meta bases data transfers to countries for which an adequacy decision of the EU Commission applies on the relevant adequacy decision. Meta bases data transfers to the USA on the EU-US data protection framework for Facebook, among others. Facebook bases data transfers to countries without an adequate level of data protection on the EU standard contractual clauses. You can find details in the following section of Facebook's privacy policy: https://de-de.facebook.com/privacy/policy?annotations[0]=9.ex.2-MechanismsWeUseFor&subpage=9.subpage.3-HowDoWeSafeguard

You can find Facebook’s privacy policy at: https://de-de.facebook.com/privacy/policy

  1. b) Use of cookies by Facebook

When you visit Facebook - regardless of our Facebook page - Facebook places cookies and similar trackers on your device. If you are also logged in to Facebook as a user, Facebook is able to track that you have visited our Facebook page and how you have used it. This also applies to all other Facebook fan pages.

Facebook describes in general terms in its data policy which cookies Facebook uses and which information Facebook receives via the cookie, how this information is used, how long it is stored by Facebook and with which third-party partners it is shared. There you will also find information about how to contact Facebook and the setting options for advertisements. The data policy is available at the following link: https://de-de.facebook.com/policy.php .

You can delete Facebook cookies here, for example: http://www.youronlinechoices.com/de/praferenzmanagement/ .

05.) Presence on Instagram

We have a presence on Instagram.

The Instagram service is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (hereinafter “Facebook”).

responsible

We are the controller within the meaning of Art. 4 Para. 7 of the General Data Protection Regulation (GDPR) if we exclusively process the personal data you send to us via Instagram ourselves.

To the extent that the personal data you transmit to us via Instagram is also or exclusively processed by Instagram, Facebook Ireland Ltd. , 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin Ireland, is also responsible for data processing within the meaning of the GDPR.

You can contact the data protection officer of Instagram or Facebook using the contact form provided by Facebook.

As the person responsible for the Instagram page, we have entered into agreements with Facebook which, among other things, regulate the conditions for using the Instagram page. The Instagram terms of use and the other conditions and guidelines listed at the end of the page apply.

Use of cookies by Facebook

When you visit our Instagram page, Facebook, as the controller, collects personal data from the respective users, including through the use of cookies.

You can find out which cookies Facebook uses and what information Facebook receives via the cookie, how these are used, how long they are stored by Facebook and with which third-party partners they are shared in Instagram's privacy policy .

There you will also find information about how to contact Facebook and the settings options for advertisements. You can also configure your browser settings according to your wishes and, for example, refuse to accept cookies. However, we would like to point out that in this case not all Instagram functions may be available to you.

You can delete Facebook cookies here: http://www.youronlinechoices.com/de/praferenzmanagement/ .

Likes, posts and messages

If you visit our Instagram page as a registered Instagram user, we process the following data:

  • Your Instagram username and profile picture,
  • Your click interaction with our posts (“likes”, “shares”, etc.) and
  • Your comments, posts, messages and other content you make available on our site.

If you contact us via our Instagram page or by email, the data you may provide with the message (email address, name) will be stored by us in order to answer your questions. We delete the data collected in this context once storage is no longer required.

The legal basis for processing is Art. 6 (1) (b) and (f) GDPR (balancing of interests, at the request of the data subject). We process your data in order to provide you and other users of our site with interesting information and to regularly inform you about our offerings.

However, we do not have full access to the data collected by Facebook or your profile data and can only see the public information on your profile. You decide what this is in your Instagram settings. For example, you have the option of actively hiding "likes" on your profile or no longer following our Instagram page. Then your profile will no longer appear in the list of fans on our Instagram page.

However, we have no influence on the collection of your data and the further processing by Instagram. Likewise, it is not clear to us where, for what period of time and to what extent the respective data is stored by Facebook. This also applies to existing deletion obligations of Facebook, which evaluations and connections or links Facebook makes with the data and to whom the data is passed on. You can find out which additional personal data Facebook processes when you use our Instagram page in Instagram's privacy policy .

Statistical usage data

In order to better achieve the goals of our Instagram page, demographic and geographical analyses are also created using the information collected by Facebook and made available to us by Facebook. We can use this information to place targeted, interest-based advertisements without directly knowing the identity of the visitor. If visitors use Instagram on multiple devices, the data can also be collected and evaluated across devices if the visitors are registered and logged into their own profile. The following information is provided to us by Facebook about the use of our Instagram page:

  • Followers: Number of people who follow our Instagram page - including increases and development over a defined time frame.
  • Reach: Number of people who see a specific post. Number of interactions on a post. From this, you can determine, for example, which content is more popular in the community than others.
  • Ad performance: How many people were reached and interacted with a post or paid ad?
  • Demographics: Average age of visitors, gender, place of residence, language.
  • Activities: Times when most users in the community are online.
  • On-site actions: clicks on routes, emails, website and profile visits.
  • Page views: Number of times the page was viewed and on which device.

These visitor statistics are sent to us by Facebook via the Instagram tool (“ Insights ”) exclusively in an anonymized form. However, we cannot assign Insights data to you personally. We also have no access to the underlying data.

We process this data exclusively for technical administration and to provide our Instagram page and, as the operator of the page, to obtain statistical information about its use. The legal basis for the processing of this data is Art. 6 (1) (f) GDPR. Our interest here is the administration and improvement of the page.

We and Facebook are so-called “joint controllers” for the processing of Insights data. This means that Facebook and we process this data with the joint purpose of getting to know the usage behavior of visitors to our Instagram pages. Facebook, as the operator of the platform, collects the detailed usage data from you; we only receive the summarized Insights data from Facebook. Therefore, only Facebook makes the decisions about the processing of usage data in connection with page insights. In the event of such joint responsibility, the EU General Data Protection Regulation requires that we conclude a contract with Facebook. You can access this contract here: https://www.facebook.com/legal/terms/page_controller_addendum . It contains further details and explanations on joint responsibility with Facebook in the context of Insights.

The contract essentially states that requests for information and the assertion of data subject rights with regard to the Insights data must be made directly to Facebook as the controller.

Instagram users can also influence the extent to which their user behavior may be recorded when visiting our Instagram page under the advertising preference settings . Further options are available in the Instagram settings or the form for the right of objection .

Data transfer to the USA and other third countries

In order to provide our Instagram page on the Instagram platform, your personal data will be transferred to the USA (as well as other third countries as set out at https://de-de.facebook.com/policy.php ). Facebook uses standard contractual clauses approved by the European Commission and may rely on the adequacy decisions issued by the European Commission with respect to certain countries for data transfers from the EEA to the USA and other countries.

06.) Presence on other social networks

We maintain a presence on other social networks in order to present our goods and/or services and/or to communicate with customers and interested parties.

The data of social network users, especially data on user behavior, is usually also processed to create user profiles for the purposes of personalized advertising. This can be done via cookies, fingerprinting or similar technologies or by tracking logged-in users.

The legal basis for our processing of personal data in social networks is Article 6 paragraph 1 sentence 1 letter f) GDPR (“legitimate interests”).

Further information, including on the processing of personal data by the operators of the social networks or your options for objection, can be found in the data protection declarations of the relevant social networks linked below.

Our presence on social networks:

  • Pinterest; operator is Pinterest Europe Ltd., Palmerston House, 2nd Floor Fenian Street, Dublin 2, Ireland; privacy policy: https://policy.pinterest.com/de/privacy-policy
  • TikTok; the responsible parties are TikTok Technology Limited, an Irish company, and TikTok Information Technologies UK Limited, a British company; Tiktok transfers data to the USA and Singapore, among others; Tiktok bases this data transfer on the EU standard contractual clauses; for more information on this and other data processing by Tiktok, see their privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de

07.) Rights of data subjects

According to Art. 15 of the General Data Protection Regulation, you have the right to request information about the processing of your personal data ("right of information of the data subject").

According to Art. 16 of the General Data Protection Regulation, you have the right to request the rectification and erasure of inaccurate personal data concerning you ("right to rectification").

According to Art. 17 of the General Data Protection Regulation, you can request the deletion of personal data concerning you if one of the reasons listed therein applies ("right to be forgotten").

Likewise, according to Art. 18 of the General Data Protection Regulation, you have the right to request the restriction of the processing of personal data concerning you if one of the conditions listed therein applies ("right to restriction of processing").

According to Art. 20 of the General Data Protection Regulation, you have the right to have personal data concerning you made available to you and to have this data transmitted to another controller ("right to data portability").

Revocation of consent: See section “Right of Withdrawal” in this privacy policy.

Right to object: See the “Right to object” section in this privacy policy.

You have the right to complain to the competent supervisory authority.

08.) Right of withdrawal

You can revoke your consent to the processing of your personal data at any time, e.g. by sending an email to the email address mentioned above. This does not affect the legality of the processing carried out on the basis of the consent until the revocation.

09.) Right of objection

To the extent that our data processing is based on Article 6 paragraph 1 f) GDPR (“legitimate interests”), you have the right to object to the processing of your personal data in accordance with Article 21 GDPR.

10.) Sharing your data

Unless already stated elsewhere in this privacy policy, we will pass on your personal data to the following additional recipients or categories of recipients

Sendcloud GmbH

Fürstenrieder Str. 70

80686 Munich

DHL Paket GmbH,Sträßchensweg 10

53113 B Telephone: +49/ (0) 228/ 18 20

Hermes Europe GmbH Essener Strasse 89 D-22419 Hamburg

General Logistics Systems Germany GmbH & Co. OHG, GLS-Germany-Straße 1-7, 36286 Neuenstein

DPD Deutschland GmbH Wailandtstrasse 1 63741 Aschaffenburg Germany

Klarna Bank AB, German Branch, a branch of Klarna Bank AB (publ) Chausseestraße 117 10115 Berlin

Germany

PayPal (Europe) S.à rl et Cie, SCA 22-24 Boulevard Royal L-2449 Luxembourg

Pinterest Europe Ltd. Palmerston House, 2nd Floor Fenian Street Dublin 2, Ireland

Unless already stated elsewhere in this privacy policy, we intend to transfer your personal data to the following third country or international organization.