0 ArticlePrivacy Policy
Your data
When you visit our website, no personal information is collected generally. You can find out about our products without having to enter any personal details for example.
For some services however, we require the provision of your personal information in order to be able to process your respective request. This occurs for example
- if you create a customer account,
- by sparking an online order or
- if you contact us by e-mail or telephone to forward aninquiry to us (for example for offers, information about our website or product advice).
Data transfer
Your data will only be forwarded if this is necessary for the processing of your order. For example, we provide our shipping partners with your address in order to have your order delivered.
We do not share your information for advertising or marketing purposes.
Definitions
Our privacy policy is based on the terminology used by the European directive and regulatory body when issuing the General Data Protection Regulation (DS-GVO). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.
We use the following terms among others in this privacy policy:
a) Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter the "person affected"). A natural person is considered to be identifiable directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, which express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
b) The affected person
The person affected is any identified or identifiable natural person whose personal data is processed by the controller.
c) Processing
Processing means any process or series of operations related to personal data, such as collecting, capturing, organizing, arranging, storing, adapting or modifying, reading, querying, using, with or without the aid of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.
d) Restriction of processing
Restriction of the processing is the marking of stored personal data with the aim to limit their future processing.
e) Profiling
Profiling is any kind of automated processing of personal data that consists in using that personal information to evaluate and predict certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or relocation of that natural person.
f) Pseudonymisation
Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a specific affected person without the need for additional information, provided that such additional information is kept separate and is subject to technical and organizational measures to ensure that the personal data cannot be assigned to an identified or identifiable natural person.
(g) Controller or controller of processing
The controller or controller of processing is the natural or legal person, public authority, authority or facility that, alone or in concert with others, decides on the purposes and means of processing personal data. Were the purposes and means of such processing determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union law or law of the Member States.
h) Processor
The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
i) Receiver
The receiver is a natural or legal person, authority, facility or other entity which is Personal Data disclosed to, whether or not it is a third party. Authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as receivers however.
j) Third parties
Third parties are natural or legal persons, public authorities, authorities or facilities other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or the processor to process the personal data.
k) Consent
Consent is any voluntarily given and unambiguously expressed will in the form of a statement or other unambiguously confirmatory act by the affected person, by which the affected person indicates that they are consenting to the processing of their personal data.
Name and contact details of the controller
Handschuh-Express, Wilhelm Alexander Sträwe, Springemarkt 1, 45894 Gelsenkirchen
Telephone: 0209/3864020
E-Mail: info [at] handschuh-express.de
Credit check and scoring
When using the payment method on account a successful credit check is required, which is obtained on the basis of mathematical-statistical procedures at the following companies:
Creditreform Gelsenkirchen
Sprenger + Main KG
Kamp Street 26
44899 Gelsenkirchen
Creditsafe Germany GmbH
Schreiberhauer Straße 30
10317 Berlin
To do this, we will provide your personal data required for a credit check to these companies and will use the information we receive about the statistical probability of default for a balanced decision on the creation, conduct or termination of the contractual relationship. The credit information includes probability values (score values), which are calculated on the basis of scientifically recognized mathematical-statistical methods and whose calculation includes address data for example. We take into account your legitimate concerns in accordance with statutory provisions.
Use of cookies
Our website uses cookies. Cookies are text files that are stored and saved on a computer system via an Internet browser. Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a definite identifier of the cookie. It consists of a character string which enables Internet pages and servers to be assigned to the specific Internet browser in which the cookie was stored. This allows visited websites and servers to distinguish the individual's browser from other internet browsers that contain other cookies. A particular internet browser can be recognized and identified by the unique cookie ID.
By using cookies our company can provide users of our website with more user-friendly services that would not be possible without the use of cookies.
By means of a cookie the information and offers on our website can be optimized in the sense of the user. Cookies allow us, as already mentioned, to recognize the users of our website. The purpose of this recognition is to make it more comfortable for users to use our website. The user of a website that uses cookies does not need to reenter their login credentials each time they visit the website, as this is done by the website and the cookie stored on the user's computer system for example. Another example is the cookie of a shopping cart in the online shop. The online shop remembers the items a customer has placed in the virtual shopping cart via a cookie. Examples of cookies on our website are:
- Session cookie (shop functionalities such as contents of the shopping cart or state of the shopping cart)
- Google Analytics (can be blocked with the official browser add-on on all pages: https://tools.google.com/dlpage/gaoptout or via the so-called opt-out cookie for our website. To block Google Analytics only on our Website please click here )
- PayPal (if used as payment method)
Collection of general data and information
Our website collects a series of general data and information with each call made by one person or an automated system. This general data and information is stored in the log files of the server. The gathered data contains (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the internet page from which an accessing system accesses our website (so-called referrers), (4) the sub-web pages which can be accessed via our internet page, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information used for defense in the case of attacks on our information technology systems.
When using this general data and information, we will not draw any conclusions about the person affected. This information is rather required to (1) correctly deliver the contents of our website, (2) to optimize the content of our website and the advertisement for it, (3) to ensure the continued functionality of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber-attack. This anonymously collected data and information is therefore statistically and further evaluated with the aim of increasing data protection and data security in our company in order to ultimately ensure the best possible level of protection for the personal data we process. The anonymous data of the server log files is stored separately from all personal data provided by an affected person.
SSL encryption
Our website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as operator of the site. An encrypted connection can be recognized by the preceding https: // in the address bar of your browser and by the lock symbol in your browser line.
If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.
Registration on our website
The data subject has the possibility to register on the website of the controller by providing personal data. The personal data being sent to the controller is derived from the respective input mask used for the registration. The personal data entered by the person affected shall be used solely internally by the controller as well as collected and stored for his own purposes. The controller may arrange for the transfer to one or more processors, such as a parcel service, who also uses the personal data only for internal use attributable to the controller.
Registration on the controller's website also records the date and time of registration. The storage of this data takes place against the background that this data strain can prevent the misuse of our services and makes it in case of need possible to clarify committed offenses. In this respect, the storage of this data is required to secure the controller. Generally a disclosure of this data to third parties does not happen, unless there is a legal obligation to pass on or the disclosure to serve law enforcement.
By registering the affected person voluntarily provides personal data, the data controller serves to provide the affected person with content or services that, due to the nature of the case, can only be offered to registered users. Registered persons are free to modify the personal data given by the time of registration at any time by sending a request to the controller by e-mail or calling him via the telephone or to have it deleted completely from the database of the controller.
The controller shall, at any time upon request, provide information to each affected person as to which personal data about the data subject is stored. Furthermore the data controller corrects or deletes personal data at the request or reference of the affected person, insofar as this does not conflict with any statutory storage requirements. Every employee of the controller is available as a contact person to the affected person in this context.
Contact via the website
Due to legal regulations, our website contains information that enables quick electronic contact to our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If an affected person contacts the controller by e-mail or by contact form, the personal data provided by the affected person will be saved automatically. Such personal data, voluntarily transmitted by an individual to the controller, is stored for the purpose of processing or contacting the data subject. There is no disclosure of this personal data to third parties.
Subscription to our newsletter
On our website, users are given the opportunity to subscribe to the newsletter of our company. The personal data transmitted to the controller when ordering the newsletter results from the input mask used for this purpose and additionally the first name and the name of the registered user account.
We inform our customers and business partners at regular intervals by means of a newsletter about offers of the company. The newsletter of our company can only be received by the affected person if (1) the affected person has a valid email address and (2) the affected person registers for the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered by an affected person, for the first time of newsletter mailing using the double-opt-in procedure. This confirmation email is used to check whether the owner of the e-mail address, as the person concerned, authorized the receipt of the newsletter or not.
When registering for the newsletter, we also save the date and time of registration. The collection of this data is necessary in order to reconstruct the (possible) misuse of an affected person's e-mail address at a later date and therefore serves as legal safeguard for the controller.
The personal data collected in the context of registering for the newsletter will be used exclusively in order to send our newsletter. Subscribers to the newsletter may also be notified by e-mail, if this is necessary for the operation of the newsletter service or registration, as might be the case in the event of changes to the newsletter or technical changes. There will be no transfer of the personal data collected as part of the newsletter service to third parties. Subscription to our newsletter may be terminated by the affected person at any time. The consent to the storage of personal data that the affected person has given to us for the newsletter dispatch can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the controller's website or to inform the controller in a different way.
Newsletter tracking
Our newsletters contain so-called counting pixels. A counting pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. By means of the embedded pixel it is possible to detect if and when an e-mail was opened by an affected person and which links in the e-mail were called up by the affected person.
Such personal data collected via the counting pixels contained in the newsletters will be stored and evaluated by the controller in order to optimize the delivery of newsletters by adapting the content of future newsletters to the interests of the affected person. This personal data will not be disclosed to third parties. Affected persons are at any time entitled to revoke the separate declaration of consent made via the double-opt-in procedure. After revocation this personal data will be deleted by the controller. A deregistration from the receipt of the newsletter will be interpreted as a revocation automatically.
Routine deletion and blocking of personal data
The controller shall process and store the personal data of the affected person only for the period necessary to achieve the purpose of the storage or, as the case may be, by the European directives and regulations or by any other legislator in laws or regulations which the controller provided for.
If the storage purpose is omitted or if a storage period prescribed by the European directives and regulations or any other relevant legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
Rights of the affected person
a) Right to confirmation
Each affected person has the right, as granted by the European directives and regulations, to require the controller to confirm whether personal data relating to him / her is being processed. If an affected person wishes to make use of this right to confirmation, they can contact an employee of the controller at any time.
b) Right to information
Any affected person by the processing of personal data shall have the right, granted by the European directives and regulations, to obtain information on the personal data stored about him and a copy of that information free of charge from the controller at any time. Furthermore the European directives and regulations have to provide the affected person with the following information:
- the purposes of the processing
- the categories of personal data being processed
- the recipients or categories of recipients to whom the personal data has been disclosed or has yet to be disclosed, in particular to recipients in third countries or to international organizations
- if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration
- the existence of a right to rectification or erasure of the personal data concerning him or of a restriction of the processing by the person responsible or of a right to revoke to such processing
- the existence of a right to appeal to a supervisory authority
- if the personal data is not collected from the affected person: Every piece of information available on the source of the data
- the existence of automated decision-making including profiling under Article 22 (1) and (4) of the General Data Protection Regulation (GDPR) and - at least in these cases - meaningful information on the logic involved and the scope and intended impact of such processing for the affected person
If an affected person wishes to exercise this right to information, they may at any time contact an employee of the controller.
c) Right to rectification
Any person affected by the processing of personal data has the right granted by the European directives and regulations to demand the immediate correction of inaccurate personal data concerning him / her. Furthermore the affected person has the right to demand the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.
If an affected person wishes to exercise this right of rectification, they may contact an employee of the controller at any time.
d) Right to cancellation (right to be forgotten)
Any person affected by the processing of personal data shall have the right granted by the European directives and regulations to require the controller to immediately delete the personal data concerning him, provided that one of the following reasons is satisfied and the processing is not required:
- The personal data has been collected for such purposes, or has been processed otherwise, for which they are no longer necessary.
- The data subject withdraws the consent on which the processing was based on in accordance with Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR and lacks any other legal basis for the processing.
- The affected person objects to the processing in accordance with Art. 21 (1) of the GDPR and there are no legitimate reasons for the processing or the data subject objects according to Art. 21 (2) of the GDPR.
- The personal data were processed unlawfully.
- The erasure of personal data is necessary to fulfill a legal obligation under Union or national law to which the controller is subject to.
- The personal data were collected in relation to services offered by the information society pursuant to Article 8 (1) of the GDPR.
If the personal data has been made public by us and our company is responsible for deleting personal data as the person responsible pursuant to Article 17 (1) of the GDPR, we shall take appropriate measures, including technical ones, taking into account the available technology and the costs of implementation to inform other controllers processing the published personal data that the affected person has requested that these other data controllers delete all links to such personal data or copies or replications of such personal data, as far as the processing is not required.
e) Right to restriction of processing
Any person affected by the processing of personal data has the right granted by European directives and regulations, to require the controller to restrict the processing if one of the following conditions applies:
- The accuracy of the personal data is contested by the affected person for a period of time that enables the controller to verify the accuracy of the personal data.
- The processing is unlawful, but the affected person refuses to delete the personal data and instead requests the restriction of the use of the concerned personal data.
- The controller does not longer need the personal data for the purposes of processing, but the affected person requires them for assertion, exercise or to defend legal claims.
- The affected person has revoked the processing acc. Article 21 (1) GDPR and it is not clear yet, whether the legitimate reasons of the controller outweigh those of the affected person.
f) Right to data transferability
Any person affected by the processing of personal data shall has the right conferred by the European directives and regulations to obtain the personal data concerning him / her, provided to a controller by the affected person, in a structured, common and machine-readable format. The affected person also has the right to transfer this data to another controller without hindrance by the controller to whom the personal data was provided to originally, provided that the processing is based on the consent pursuant to Article 6 (1) (a) of the GDPR or Article 9 (1) (b) (2) (a) of the GDPR or on a contract pursuant to Article 6 (1) (b) of the GDPR and processing by means of automated processes which have been assigned to the original controller, unless the processing is necessary for the performance of a task of public interest or in the exercise of public authority.
Furthermore, in exercising their right to data transferability under Article 20 (1) of the GDPR, the affected person has the right to demand the personal data being transmitted directly from one controller to another, insofar as this is technically feasible and if this does not affect the rights and freedoms of others.
In order to assert the right to data portability, the data subject may contact an employee of the controller at any time.
g) Right to revoke
Every person concerned by the processing of personal data shall have the right conferred by the European directives and regulations, for reasons arising from his / her particular situation against the processing of personal data pursuant to Article 6 (1) (e) of the GDPR to revoke at any time. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process personal data unless we can establish compelling legitimate reasons for processing that outweigh the interests, rights and freedoms of the affected person or the processing is for the purpose of asserting, exercising or defending legal claims,
If we process personal data in order to operate direct advertising, the affected person has the right to object the processing of his / her personal data for the purpose of such advertising at any time. This also applies to profiling, as far as it is associated with such direct advertising. If the affected person revokes to our company for the purpose of direct advertising we will no longer process the personal data for this purpose.
In addition the affected person has the right to object to the processing of personal data for scientific, historical or statistical research purposes pursuant to Article 89 (1) of the GDPR, for reasons arising from his / her particular situation, unless such processing is necessary to fulfill a task of public interest.
In order to exercise the right to revoke the affected person may directly contact an employee of the controller. The affected person is also free, in the context of using services of the information society, notwithstanding Directive 2002/58 / EC, to exercise his / her right to revoke by means of automated procedures using technical specifications.
h) Automated decisions in individual cases including profiling
Any person affected by the processing of personal data shall have the right, as granted by the European directives and regulations, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on it or in a similar manner significantly affects it, unless the decision (1) is necessary for the conclusion or performance of a contract between the affected person and the controller, or (2) is permitted by Union or Member State legislation, to which the controller is subject to, that legislation provides appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the affected person, or (3) with the expressed consent of the affected person.
If the decision (1) is required for the conclusion or performance of a contract between the affected person and the controller or (2) it is done with the expressed consent of the affected person we shall take appropriate measures to safeguard the rights, freedoms and legitimate interests of the affected person, including at least the right to effect the intervention by any person of the controller, to express his / her own position and to contest the decision.
If the affected person wishes to claim rights in relation to automated decision-making they can contact an employee of the controller at any time.
i) Right to revoke the consent related to data protection
Any person affected by the processing of personal data has the right granted by the European directives and regulations, to revoke his / her consent to the processing of personal data at any time.
If the affected person wishes to assert their right to withdraw consent, they may contact an employee of the controller at any time.
Payment: Privacy Policy for PayPal as payment
The controller has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are made through so-called PayPal accounts, which are virtual private or business accounts. In addition PayPal has the ability to process virtual payments through credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also takes on trustee functions and offers buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If the affected person selects "PayPal" or "PayPal Plus" as a payment method during the process of ordering in our online shop data of the affected person will be transmitted to PayPal automatically. By selecting this payment method the affected person consents to the transfer of personal data required for payment processing.
The personal data sent to PayPal usually includes the first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing. For the execution of the purchase contract such personal data which is in connection with the respective order, is necessary.
The purposes of the transmission of the data are payment processing and fraud prevention. The controller will provide PayPal with personally identifiable information, particularly if there is a legitimate interest in the transfer. The personal data exchanged between PayPal and the controller may be transferred by PayPal to credit reporting agencies. This transmission aims at the identity and credit check.
PayPal may disclose personal information to affiliates and service providers or subcontractors, to the extent necessary to fulfill its contractual obligations or to process the data on behalf of.
The affected person has the option to revoke the consent to the handling of personal data against PayPal at any time. A revocation has no effect on personal data which must be processed, used or transmitted for (contractual) payment processing.
PayPal's applicable privacy policy is available at https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
Payment: Privacy Policy for Sofortüberweisung as payment method
The controller has integrated components of Sofortüberweisung on this website. Sofortüberweisung is a payment service that enables cashless payment for products and services on the Internet. Sofortüberweisung represents a technical procedure which allows the online retailer to receive a payment confirmation immediately. This enables the online retailer to deliver goods, services or downloads to the customer immediately after ordering.
The operating company of Sofortüberweisung is the SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany.
If the affected person selects Sofortüberweisung as payment option during the order process in our online shop, data of the affected person will be transferred to Sofortüberweisung automatically. With a selection of this payment option the affected person consents to a transfer of personal data required for payment processing.
During the purchase via Sofortüberweisung the buyer transmits the PIN and the TAN to the Sofort GmbH. Sofortüberweisung then executes a transfer to the online retailer after a technical check of the account balance and retrieval of further data to check the account funds. The successful execution of the financial transaction is then communicated to the online retailer automatically.
The personal data exchanged with Sofortüberweisung are the first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. The purpose of the transmission of the data is payment processing and fraud prevention. The controller will provide Sofortüberweisung with other personal information if there is a legitimate interest in the transfer. The personal data exchanged between Sofortüberweisung and the controller may, under certain circumstances, be transmitted to credit reference agencies by Sofortüberweisung. This transmission aims at the identity and credit check.
Sofortüberweisung may transfer the personal data to affiliates and service providers or subcontractors as far as this is necessary to fulfill the contractual obligations or the data is to be processed in the order.
The affected person has the option to revoke the consent to the handling of personal data in relation to Sofortüberweisung at any time. A revocation has no effect on personal data which must be processed, used or transmitted for (contractual) payment processing.
The applicable data protection provisions of Sofortüberweisung can be found at https://www.sofort.com/ger-DE/datenschutzerklaerung-sofort-gmbh/.
Privacy Policy on Use and Application of Google AdWords
The controller has integrated Google AdWords on this website. Google AdWords is an Internet advertising service which allows advertisers to display advertisements in the Google search engine and the Google Network. Google AdWords allows an advertiser to pre-set keywords that will display an ad on Google's search engine results only when the search engine retrieves a keyword-related search result. In the Google Network ads are distributed on topical web pages using an automated algorithm combined with the pre-defined keywords.
The operating company for the services of Google AdWords is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to promote our website by displaying interest-based advertisement on third-party websites and in the search engine results of Google's search engine and by displaying advertisements on our website.
If an affected person arrives on our website via a Google ad a so-called conversion cookie will be stored on the affected person’s information technology system by Google. The meaning of cookies has already been explained above. A conversion cookie expires after thirty days and is not used to identify the affected person. If the conversion cookie has yet to expire it traces whether certain sub-pages, such as the shopping cart from an online shop system, were accessed on our website. The conversion cookie allows Google and us to understand whether an affected person, who came to our website via an AdWords ad, generated revenue by for example completing or canceling a purchase.
The data and information collected through the use of the conversion cookies are used by Google to create visitor statistics for our website. These visitor statistics are used by us to determine the total number of users who have been sent to our website through AdWords ads, in order to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future. Neither our company nor any other Google AdWords advertiser receives any information from Google that could identify the affected person.
The conversion cookie stores personally identifiable information, such as the websites visited by the affected person. Every time you visit our website, your personal information including the IP address of your Internet connection will be transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer this personal data collected through the technical process to third parties.
The affected person can prevent the setting of cookies through our website, as illustrated above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the affected person. In addition a cookie already set by Google AdWords can be deleted via the Internet browser or other software programs at any time.
Furthermore the affected person has the opportunity to object to Google's interest-based advertising. In order to use this opportunity the affected person must access the link www.google.com/settings/ads from each of the Internet browsers they use and change the concerned settings there.
Additional information and Google's privacy policy can be found at https://www.google.com/intl/en/policies/privacy/.
Submission of purchase evaluations with eKomi
In order to offer our customers the possibility of a purchase evaluation and thus to improve our internal quality management, we have included the evaluation software from the independent evaluation service provider eKomi on our website. After ordering and receiving the goods eKomi will send you an e-mail with a link to a purchase evaluation page. To fulfill this purpose it is necessary that we pass on data of the order such as name, e-mail address and order number to eKomi following your purchase. Only this way authentic and unvarnished customer reviews can be guaranteed. eKomi receives your data just for the purpose of obtaining purchase evaluations for handschuh-express.de. eKomi has committed itself to the privacy-compliant handling regarding the provided data in the sense of the Federal Data Protection Act and also takes all necessary measures that serve the security of your data. Technical reasons may cause an delay of up to 24 hours for your rating to appear on our website. You can revoke your consent to the receipt of the e-mails and the forwarding of the order data by sending an e-mail to mailing@handschuh-express.de at any time.
Web analytics with Google Analytics
Our website uses Google Analytics. Google Analytics, the web analytics service provided by Google Inc. ("Google"), uses cookies that are stored on your computer, allowing an analysis of your use of our website. The information collected by the cookie about your use of this website is normally transmitted to a Google server in the USA and stored there. However, as IP anonymization is enabled on this website, your IP address will be shortened by Google beforehand within the member states of the European Union or other parties to the Agreement on the European Economic Area. The full IP address will only be transmitted in exceptional cases to a Google server in the USA and then be shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics will not be matched with any other data provided by Google. You always have the option to prevent the storage of cookies by the appropriate setting of your browser software. In addition you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available with the following link:
http://tools.google.com/dlpage/gaoptout?hl=en . You can also prevent the entry by setting an opt-out cookie. If you wish to prevent the collection of your data while visiting this website from now on, then please click here: Deactivate Google Analytics .
Legal basis of processing
Article 6 (I lit. a) of the GDPR serves our company as the legal basis for processing operations where we obtain a consent for a particular processing purpose. If the processing of personal data is necessary to fulfill a contract which the affected person is a party of, as is the case for example in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on Article 6 (I lit. b) of the GDPR. This also applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Article 6 (I lit. c) of the GDPR. In rare cases the processing of personal data may be required to protect the vital interest of an affected person or another natural person. This would be the case for example, if a visitor to our premise would be injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Article 6 (I lit. d) of the GDPR. Ultimately processing operations could be based on Article 6 (I lit. f) of the GDPR. On this legal basis, processing operations not covered by any of the legal bases above are required to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the affected person prevail. Such processing operations are particularly allowed to us because they have been specifically mentioned by the European legislator. In that regard it considered that a legitimate interest could be assumed if the affected person is a customer of the controller (recital 47, second sentence, GDPR).
Authorized interests in the processing that are being pursued by the controller or a third party
Is the processing of personal data based on Article 6 (I lit. f) of the GDPR lies our legitimate interest in conducting our business for the benefit of all our employees and our shareholders.
Duration for which the personal data is stored
The criterion for the duration of the storage of personal data is the respective statutory retention period. With the passing of the deadline the corresponding data will be routinely deleted, if it is no longer required to fulfill the contract or to initiate a contract.
Legal or contractual regulations for the provision of personal data; necessity for the conclusion of the contract; obligation of the affected person to provide the personal data; possible consequences of non-provision
We clarify that the provision of personal data is partly required by law (for example tax regulations), but can also result from contractual regulations (for example information about the contracting party). Occasionally it may be necessary for a contract to be concluded, that an affected person provides us with personal data that must subsequently be processed by us. The affected person is required to provide us with personal information when our company enters into a contract with him or her for example. Failure to provide the personal data would mean that the contract with the person concerned could not be concluded. Prior to any personal data being provided by the affected person, the affected person has to contact our data controller. Our controllers will inform the affected person on a case-by-case basis whether the provision of the personal data is required by law or contract or is required to conclude the contract, whether there is an obligation to provide the personal data and the consequences of the non-provision of the personal data.
Data protection in applications and in the application process
The controller collects and processes the personal data of applicants for the purpose of processing the application process. The processing can also be done electronically. This is particularly the case if an applicant submits the corresponding application documents by electronic means, for example by e-mail, to the controller. If the controller concludes a contract of employment with an applicant, the data transmitted will be stored for the purpose of the employment relationship in accordance with the law. If no employment contract is concluded with the candidate by the controller, the application documents will be automatically deleted two months after the announcement of the decision to reject the applicant, unless deletion precludes other legitimate interests of the controller. Other legitimate interest in this sense could for example be a burden of proof in a procedure under the General Equal Treatment Act (AGG).