Privacy policy

Information on data protection


Data collection and data use


Personal data is information that can be used to identify a person as such. This includes, for example, your name, your address, your email address or your telephone number.

(1) Collection of personal data when using the website

When you use the website purely for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:



• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• amount of data transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.
• The legal basis for storing the data is Article 6 Paragraph 1 Letter f GDPR.


(2) Collection of personal data upon registration

We offer you the opportunity to register on our website by providing personal data. Depending on the type of contract concluded, we store the following data:


• Names, first names
• Address
• Billing address
• E-mail address
• Telephone number


As part of the registration process, you will be asked whether you have read the data protection declaration and agree to its validity, which you confirm by clicking on the field and ticking the appropriate box. By doing so, you consent to your personal data being used for the following purposes:



• Processing orders
• Sending direct advertising, e.g. by email, package insert or post, sending offers and vouchers
• Sending review requests
• Sending our newsletter

If you give your consent, the legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, if the registration serves to fulfill a contract or carry out pre-contractual measures with you, additionally Art. b GDPR.

 

Name and contact details of the person responsible

(3) The person responsible for the management of personal data is

VONDIEM GmbH
Springeltwiete 1
20095 Hamburg

Managing Directors: Christian Quaas & Dominik Heydecke

 

(4) Contact details of the data protection officer

You can reach our data protection officer at: Email: info@vondiem.com

 

Purposes of processing personal data

(5) We only store your data for the following purposes:

To process orders (including payment processing and, if necessary, credit checks), to send us advertising and for customer service. We store and process your personal data at our central company headquarters. Your personal data will only be transferred to third parties if the transfer is necessary as part of contract processing or for billing or debt collection purposes (e.g. shipping companies or payment service providers) or if you have expressly consented. The legal basis for the transmission of data to third parties for the purpose of contract processing or for billing purposes is Article 6 Paragraph 1 Letter b GDPR and for the transfer in the context of legally mandated cases Article 6 Paragraph 1 Letter c GDPR.

 

Duration of data storage


We store your data for as long as the respective purpose requires, taking into account your legitimate interests. If there is a tax retention period for certain data that is processed for the processing of sales contracts, the data will be stored for 6 or 10 years. During this period, the processing of data is restricted after 2 years, i.e. the data will only be used to comply with legal obligations. The retention obligation begins at the end of the calendar year in which the order was placed by the customer or the contract was fulfilled.

Transfer of personal data to third parties
We may share your personal data with the following companies/categories of people in accordance with legal requirements:


Tax, audit and other authorities

External service providers and professional consultants such as lawyers, auditors, accountants, credit agencies for credit checks, debt collection service providers,
Postal/shipping service providers, freight forwarders e.g. UPS, DHL, Deutsche Post
Payment providers such as PayPal (Europe) S.à r.l. et Cie, S.C.A, 22-24 Boulevard Royal, L-2449 Luxembourg; Klarna AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, (Amazon Pay) Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg; (Apple Pay) Apple Distribution International, Hollyhill Industrial Estate, Hollyhill Cork, Ireland; Shopify Payments, 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5; Google Pay (Europe), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

 

E-commerce platform Shopify

To operate our online shop, we use Shopify, a service provided by Shopify Inc., 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5. This service provides an e-commerce platform through which we offer our goods for sale. The data transmitted as part of your order is stored on a Shopify server in the USA. Shopify is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. For further information on data protection, please see Shopify's data protection information at http://www.shopify.com/legal/privacy.

The legal basis for the transmission of data to third parties for the purpose of contract processing or for billing purposes is Article 6 Paragraph 1 Letter b GDPR and for the transfer in the context of legally mandated cases Article 6 Paragraph 1 Letter c GDPR.




Your rights

To exercise your rights, please contact the data protection officer or the person responsible or contact us by email: info@vondiem.com

You have the following rights:

1. Revocation of consent
You can revoke your consent to the processing of personal data at any time with future effect.
The contact options above are available to you for this purpose.


Further rights
You also have the following rights towards us with regard to your personal data:
• right to information,
• right to rectification,
• Right to deletion or restriction of processing,
• Right to object to processing,
• Right to data portability,

You also have the right to complain to a data protection supervisory authority about our processing of your personal data. The Hamburg Commissioner for Data Protection and Freedom of Information is:



Thomas Fox
Ludwig-Erhard-Strasse 22
20459 Hamburg
mailbox@datenschutz.hamburg.de