Privacy policy - Superelf-Cards

and information on any consents you may have given

As the controller within the meaning of the data protection regulations, we inform you below about the processing of your personal data by us.

I. The concept of personal data and other important terms

In simple terms, personal data is all information that relates to you personally as a data subject. Provisions on what the term "personal data" means and what other terms important for the following data protection information mean can be found in Art. 4 of the GDPR (General Data Protection Regulation).

II. Name and contact details of the controller; contact details of the data protection officer

In simple terms, the controller is the person who alone or jointly with others decides on the purposes and means of processing personal data. The name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / our legal notice.

III Purposes of processing your personal data; legal bases for processing

We process your personal data as part of our activities for the purposes listed below in accordance with the legal bases stated in each case.

1. to safeguard our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analysing the use of our website, your personal data is processed on the basis of Article 6(1)(f) GDPR

2. in order to take steps at your request prior to entering into a contract, your personal data will be processed on the basis of Article 6(1)(b) GDPR

3. in order to safeguard our legitimate interest in responding to enquiries and in the implementation of other measures taken in response to an enquiry from you, your personal data will be processed on the basis of Article 6(1)(f) GDPR.

4. for the fulfilment of a contract to which you are a party, the processing of your personal data is carried out on the basis of Article 6 (1) (b) GDPR.

5. for the implementation of measures for the purpose of advertising, your personal data will be processed either on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.

6. in order to fulfil legal obligations to which we are subject, your personal data will be processed on the basis of Article 6(1)(c) GDPR

7. in order to safeguard our legitimate interest in the enforcement of our rights and in the defence against claims directed against us, your personal data is processed on the basis of Article 6 (1) (f) GDPR.

Our systems are secured by state-of-the-art technical and organisational measures to protect your personal data from access, modification or dissemination by unauthorised persons and from loss and destruction.

Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information in this privacy policy.

IV. Transfer of your personal data to third parties; categories of recipients of your personal data

Insofar as this is necessary to achieve the purposes of processing your personal data, we transfer your personal data to third parties within the framework of the legal requirements. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding further information in this privacy policy. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

V. Scope of the processing of your personal data for the individual processing purposes

In the following, we will inform you in detail about the processing of your personal data for the various processing purposes.

1. use of our website for information purposes

If you visit our website without providing us with information, we only process the personal data that your browser transmits to our server. This is the following data, which is technically necessary to display our website to you and to ensure stability and security:

- the page you have called up

- Date and time of the enquiry

- Amount of data transferred

- Source or reference from which you accessed the page

- the browser you are using

- the operating system you are using

- your IP address

Your personal data is processed on the basis of Article 6(1)(f) GDPR to protect our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analysing the use of our website.

Your personal data will be deleted after 6 months, unless they are still required for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case, the deletion will take place immediately after the conclusion of the corresponding proceedings.

You are not obliged to provide your personal data. However, failure to provide your personal data would mean that you would not be able to view our website.

2. processing of enquiries

If you contact us with an enquiry or request, we will process the personal data and information/documents you provide. Irrespective of the way in which you send us your enquiry or request, this may include

- Date and time of contact

- Name data

- contact details

- Data on the enquiry/concern

- Information/documents transmitted

Your personal data and the information/documents transmitted are processed - depending on the content of your enquiry or request - on the basis of Article 6(1)(b) GDPR for the performance of pre-contractual measures or on the basis of Article 6(1)(b) GDPR for the performance of a contract to which you are a party or on the basis of Article 6(1)(f) GDPR to safeguard our legitimate interest in responding to enquiries/requests and in carrying out other measures in connection with the processing of enquiries/requests.

Insofar as this is necessary for processing your enquiry/request, we will transfer your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum required.

Your personal data will be deleted once your enquiry/request has been resolved, but at the earliest after expiry of the retention periods under tax and commercial law of 6 or 10 years, unless we are permitted to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we would not be able to process your enquiry or request.

3. fulfilment of contracts

If you transmit personal data to us for the purpose of concluding a contract or in connection with a contract, we process the data you transmit for the fulfilment of the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. details of the products covered by the contract as well as payment and delivery information).

Your personal data is processed on the basis of Article 6(1)(b) GDPR for the fulfilment of a contract to which you are a party.

Insofar as this is necessary for the fulfilment of the contract with you, we will transfer your personal data to third parties within the framework of the legal requirements. This transfer takes place to the service providers involved in the fulfilment of the contract. These are the providers of the processing tools we use, the companies commissioned with transport and the payment service providers commissioned with payment matters.

If you use the payment service provider PayPal to process payment transactions, we expressly point out that the PayPal data protection declaration applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

If you use the payment service provider Mollie to process payment transactions, we expressly point out that the Mollie data protection declaration applies to all Mollie transactions: https://www.mollie.com/de/privacy

In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum required.

Your personal data will be deleted after expiry of the retention periods of 6 or 10 years under tax and commercial law, unless we are authorised to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

The provision of your personal data is required for the conclusion of a contract with us. You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we would not be able to conclude a contract with you.

4. advertising by newsletter

If you register for our newsletter, we will process the email address you provide - and, if you provide further personal data, this too - in order to send you information about our offers by email. In this respect, only the provision of your email address is mandatory. If you voluntarily provide further personal data, we may process this data in order to address you personally in the newsletter.

When you register for our newsletter, you give your consent with the following content: "I agree to be informed by email about interesting offers and therefore consent to the processing of my email address and the other personal data provided by me for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation."

The registration for our newsletter takes place in the so-called double opt-in procedure. This means: After registering, you will first receive an e-mail with a message about the registration for the newsletter together with a request for confirmation of the registration. Your confirmation of the registration is necessary to document the required consent to the sending of the newsletter and to be able to recognise registrations to third-party e-mail addresses. In connection with the registrations for the newsletter and the confirmations, the IP address as well as the date and time are logged in order to be able to prove the granting of consent in accordance with the legal requirements if necessary.

Your personal data is processed on the basis of the consent you have given in accordance with Article 6(1)(a) GDPR.

You can revoke your consent at any time and without giving reasons with effect for the future. All you need to do is send a corresponding message to the controller, whose contact details can be found in the information on the controller. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation.

If you revoke your consent or unsubscribe from our newsletter, your email address and any other data transmitted will be deleted immediately, unless we are permitted to continue processing the data for another purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

In order to receive our newsletter, it is at least necessary to provide your email address. You are not obliged to provide your email address. However, if you do not provide your email address, you will not be able to subscribe to our newsletter.

5. advertising by letter post

We may process the personal data you provide on your first name, surname and address to send you information about our offers by post.

In this respect, your personal data is processed on the basis of Article 6(1)(f) GDPR to protect our legitimate interest in carrying out advertising measures by post.

You can object to the processing of your personal data for the purpose of carrying out advertising measures by post at any time. All you need to do is send a corresponding message to the controller, whose contact details can be found in the information on the controller.

If you object to the processing of your personal data for the purpose of carrying out advertising measures by letter post, the personal data you have provided regarding your first name, surname and address will be deleted immediately, unless we are authorised to continue processing the data for another purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

You are not obliged to provide your personal data for the implementation of advertising measures by post. However, if you do not provide your personal data, we will not be able to send you any advertising by post.

6. fulfilment of legal obligations to which we are subject

We process your personal data to fulfil legal obligations to which we are subject within the framework of the relevant requirements.

To fulfil legal obligations to which we are subject, your personal data is processed on the basis of Article 6(1)(c) GDPR.

Insofar as this is necessary for the fulfilment of legal obligations to which we are subject, we will transfer your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

Your personal data will be deleted if it is no longer required for the fulfilment of legal obligations to which we are subject, unless we are permitted to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

7. enforcement of our rights and defence against claims made against us

If necessary, we process your personal data to protect our legitimate interest in the enforcement of our rights and in the defence against claims made against us.

In this case, your personal data will be processed on the basis of Article 6(1)(f) GDPR.

If this is necessary to safeguard our legitimate interests, we will transfer your personal data to third parties in accordance with the statutory provisions. This transfer takes place to the providers of debt collection services involved or to our lawyers.

In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the tax and commercial law retention periods of 6 or 10 years, unless we are authorised to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

8 Use of cookies and other technologies

We may use cookies on our website so that you can use the functions we offer, so that we can analyse the use of the functions we offer and, if necessary, so that we can present advertising that is as tailored as possible to your needs. Below we inform you about the cookies and other technologies we use.

Cookies are small files that are stored on your device and through which certain information is transmitted to us. Cookies are used to enable you to use certain functions and to make our website more user-friendly overall.

8.1 Technically required cookies and technologies:

In some cases, the use of cookies and technologies on our website is technically necessary in order to provide you with the functions of our service that you have requested and to document any consents you have given. For this reason, you cannot deselect the use of the corresponding cookies and technologies (opt-out). You can prevent the storage of cookies by selecting the appropriate settings in your browser software. You can delete stored cookies via the corresponding settings. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

8.1.1. Consent-Tool

We currently use the following so-called consent tool on our website:

Name/Description_______ Provider_____________________________ Duration

_dc_gtag_'AW-470832781 Google; https://policies.google.com/privacy?hl=de 1 minute

8.1.2 Technically necessary cookies:

Technically necessary cookies are cookies that are required so that you can use the functions of our service that you have requested (to complete an order). This concerns, for example, the storage of entries in connection with the use of the shopping basket function or the storage of entries after registration in connection with the creation of a customer account.

Controller:

Your personal data is processed by us as the controller. The name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / our legal notice. Information on whether the cookies are set by us (first-party cookies) or by a partner company (third-party cookies) can be found in the information on the individual cookies.

Purposes of processing and legal basis:

Your personal data is processed on the basis of Article 6(1)(b) GDPR for the performance of pre-contractual measures taken at your request as the data subject or on the basis of Article 6(1)(b) GDPR for the performance of a contract to which you are a party.

8.1.3 Preference cookies

The provider in each case is:

Telekom GmbH - https://geschaeftskunden.telekom.de/hilfe-und-service/self-services/dsgvo

Name/Term_______ Description_____________________________ Duration

session_ID_____________Content of shopping baskets of the customer________________Session

session_id.sig___________Validation of Cookies „session_id“______________ Session

sf-locale______________Chosen shop language by the customer________Session

Epagescookielawcookie____ Chosen Cookie settings by customer (should all

___________________Cookies be enabled or only the required ones?)_____Session

Shoplnit_______________Communication between shopping basket and ordering process__Session

SessionID______________Communication between shopping basket and ordering process__Session

8.2 Other cookies and technologies; right to withdraw consent given

In some cases, the use of cookies and technologies on our website is not technically necessary in order to provide you with the functions of our service that you have requested. These other cookies and technologies are only used on our website with your consent (opt-in). In order to enable you to make an informed decision in this respect, we will inform you below about the relevant cookies and technologies.

You can give your consent to the use of the relevant cookies and technologies via the consent tool we use.

You can revoke your consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation.

Controller:

The processing of your personal data is carried out by us as the controller. The name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / our legal notice. Information on whether the cookies are set by us (first-party cookies) or by a partner company (third-party cookies) can be found in the information on the individual cookies.

Processing purposes and legal basis:

Insofar as we use other cookies and technologies on our website, they are used to optimise the use of our website (preference cookies), to analyse the use of our website (statistics cookies) and to initiate advertising that is as tailored as possible to your needs (marketing cookies). In this respect, your personal data is processed on the basis of the consent you have given in accordance with Article 6(1)(a) GDPR

VI Duration for which your personal data will be stored or criteria for determining this duration

Your personal data will be deleted when it is no longer required for the respective processing purpose, unless we are authorised to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy. Information on the duration for which your personal data is stored or the criteria for determining this duration can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy.

VII. Your rights

1. overview

In order to ensure fair and transparent processing of personal data, you as a data subject have the following rights under data protection law:

the right of access under Article 15 GDPR,

the right to rectification in accordance with Article 16 GDPR,

the right to erasure in accordance with Article 17 GDPR,

the right to restriction of processing under Article 18 GDPR,

the right to data portability pursuant to Article 20 GDPR

the right to withdraw consent at any time in accordance with Article 7(3) GDPR

the right to object to processing in accordance with Article 21 GDPR, about which we will inform you separately below

and the right to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR, about which we will inform you separately below.

2. your right to object to the processing

THE PROCESSING OF PERSONAL DATA IS AUTHORISED IF THE PROCESSING IS NECESSARY FOR THE PURPOSES OF THE LEGITIMATE INTERESTS PURSUED BY THE CONTROLLER OR BY A THIRD PARTY, EXCEPT WHERE SUCH INTERESTS ARE OVERRIDDEN BY THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA SUBJECT WHICH REQUIRE PROTECTION OF PERSONAL DATA, IN PARTICULAR WHERE THE DATA SUBJECT IS A CHILD, ART. 6 ABS. 1 LETTER F) GDPR.

AS A DATA SUBJECT, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS BASED ON ART. 6 ABS. 1 LETTER F) GDPR; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS AS THE DATA SUBJECT OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU AS THE DATA SUBJECT HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU, AS THE DATA SUBJECT, OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THESE PURPOSES.

3. your right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or judicial remedy, as a data subject you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.

VIII. Information on the basis for the provision of your personal data and possible consequences of non-provision

Insofar as this is necessary to ensure fair and transparent processing, you will find information on the basis for the provision of your personal data and on possible consequences of non-provision in the information on the processing of your personal data for the individual processing purposes.