Data protection declaration

1) Introduction and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how your personal data is handled when you use our website. Personal data is all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Göbel & Kunz GmbH, Kasseler Strasse 60, 34246 Vellmar, Germany, Tel.: +49561 2029854, Email: info@goebel-kunz.com. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

2) Data collection when you visit our website

2.1 When just; For informational use of our website, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the site server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our website visited
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if necessary: in anonymized form)

The processing takes place in accordance with Art. 6 Paragraph 1 Letter f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can create an encrypted connection using the string “https://“ and the lock symbol in your browser line.

3) Contact us

When you contact us (e.g. via contact form or email) – exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose - personal data processed.

The legal basis for processing this data is our legitimate interest in answering your request in accordance with the above. Art. 6 Paragraph 1 Letter f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Article 6 (1) (b) GDPR. Your data will be deleted if it can be seen from the circumstances that the matter in question has been finally clarified and provided that there are no legal retention obligations to the contrary.

4) Comment function

As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commentator name you chose will be saved and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address is done for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content through a comment made. We need your email address to contact you if a third party should complain about your published content as being illegal.

The legal basis for storing your data is Article 6 Paragraph 1 Letters b and f GDPR. We reserve the right to delete comments if they are criticized by third parties as being unlawful.

5) Use of customer data for direct advertising

5.1 Subscription to our email newsletter

If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally. To send the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter if you have expressly given us your consent by clicking on a verification link sent to the email address provided have confirmed receipt of the newsletter

By activating the confirmation link, you give us your consent to use your personal data in accordance with the terms and conditions. Art. 6 Paragraph 1 Letter a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later point in time. The data we collect when registering for the newsletter is used strictly for a specific purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person responsible mentioned at the beginning. Once you have unsubscribed, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and ;about which we inform you in this statement.

5.2 Goods availability notification via email

For items that are temporarily unavailable, you can sign up to receive email stock availability notifications. We will send you a one-off email via email about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. Providing further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure to send emails, which ensures that you only receive a notification if you expressly give us your consent by clicking on a verification link sent to the email address provided have confirmed.

By activating the confirmation link, you give us your consent to use your personal data in accordance with the terms and conditions. Art. 6 Paragraph 1 Letter a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later point in time. The data we collect when you register for our email notification service about product availability is used strictly for the intended purpose.

You can unsubscribe from availability notifications at any time by sending a message to the person responsible mentioned at the beginning. Once you have unsubscribed, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond what is permitted by law and about which we inform you in this declaration.

6) Data processing for order processing

6.1 Transmission of image files for order processing via email

On our website we offer customers the opportunity to order the personalization of products by sending image files via email. The submitted image motif is used as a template for personalizing the selected product.

The customer can send one or more image files from the memory of the device used to us via the email address provided on the website. We then collect, store and use the files transmitted in this way exclusively to produce the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the preparation and processing of the order, you will be explicitly informed about this in the following paragraphs. No further distribution will take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all of the processing operations mentioned above are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Paragraph 1 Letter b GDPR.

After the order has been processed, the transmitted image files will be automatically and completely deleted.

6.2 Transmission of image files for order processing via upload function

On our website we offer customers the opportunity to order the personalization of products by transmitting image files via an upload function. The submitted image motif is used as a template for personalizing the selected product.

Using the upload form on the website, the customer can send one or more image files from the memory of the device used directly to us via automated, encrypted data transfer. We then collect, store and use the transmitted files exclusively to produce the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. No further distribution will take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all of the processing operations mentioned above are carried out exclusively for the purpose of processing your online order in accordance with the terms and conditions. Art. 6 Paragraph 1 Letter b GDPR.

After the order has been processed, the transmitted image files will be automatically and completely deleted.

6.3 To the extent necessary for contract processing for delivery and payment purposes, the personal data we collect will be processed in accordance with Art. 6 Para. 1 lit. b GDPR passed on to the commissioned transport company and the commissioned credit institution.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact details you provided when ordering (name, address, email address) in order to inform you Within the scope of our legal information obligations in accordance with Art. 6 Para. 1 lit. c GDPR to inform you personally about upcoming updates within the legally stipulated period of time by an appropriate means of communication (e.g. by post or email). Your contact details will be used strictly for the purpose of communicating updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

6.4 To fulfill our contractual obligations to our customers, we work with external shipping partners. We pass on your name and delivery address and, if necessary for delivery, your telephone number, exclusively for the purposes of delivering goods in accordance with Art. 6 Para. 1 lit. b GDPR to a shipping partner selected by us.

6.5 Use of payment service providers (payment services)

- Amazon Pay

One or more online payment methods from the following provider are available on this website: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg

If you choose a payment method from the provider where you pay in advance (e.g. credit card payment), the payment details you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) and information will be sent to them about the contents of your order in accordance with Art. 6 Paragraph 1 Letter b GDPR passed on. In this case, your data will be passed on exclusively for the purpose of processing payments with the provider and only to the extent that it is necessary for this purpose.
- Apple Pay

If you choose the payment method “Apple Pay” of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the “Apple Pay” function of your iOS, watchOS or macOS-operated device through the debit one at “Apple Pay“ stored payment card. Apple Pay uses security features built into your device's hardware and software to protect your transactions. In order to release a payment, you must enter a code you have previously specified and verify it using the “Face ID” or “Touch ID”. - Function of your device required.

For the purpose of payment processing, the information you provided during the ordering process, along with the information about your order, will be passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to make the payment. Encryption ensures that only the website through which the purchase was made can access the payment data. After payment is made, Apple will send your device account number and a transaction-specific, dynamic security code to the originating website to confirm payment success.

If personal data is processed during the transfers described, the processing takes place exclusively for the purpose of payment processing in accordance with Art. 6 Paragraph 1 Letter b GDPR.

Apple retains anonymized transaction information, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve “Apple Pay“ and other Apple products and services.

When you use Apple Pay on iPhone or Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate over an encrypted channel on Apple servers. Apple does not process or store any of this information in a format that can be used to identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone's settings. Go to "Wallet & Apple Pay," and turn off "Allow payments on Mac."

Further information on data protection with Apple Pay can be found at the following internet address: https://support. apple.com/de-de/HT203027
- bancontact

One or more online payment methods from the following provider are available on this website: Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium

One or more online payment methods from the following provider are available on this website: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2,1200 Vienna, Austria

One or more online payment methods from the following provider are available on this website: paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany

If you choose the payment method “Google Pay“ Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google“), payment processing is carried out via the “Google Pay“ application of yours with at least Android 4.4 ( “KitKat”) operated mobile device with an NFC function by charging a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). For releasing a payment via Google Pay in the amount of more than €25; The prior unlocking of your mobile device is required using the verification measure that has been set up (e.g. facial recognition, password, fingerprint or pattern).

For the purpose of payment processing, the information you provided during the ordering process, along with the information about your order, will be passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the originating website, which is used to verify a payment made. This transaction number does not contain any information about the real payment details of your payment methods stored with Google Pay, but is created and transmitted as a one-time valid numerical token. For all transactions via Google Pay, Google only acts as an intermediary to process the payment process. The transaction is carried out exclusively between the user and the source website by debiting the payment method stored with Google Pay.

If personal data is processed during the transfers described, the processing takes place exclusively for the purpose of payment processing in accordance with the terms and conditions. Art. 6 Paragraph 1 Letter b GDPR.

Google reserves the right to collect, store and evaluate certain process-specific information for every transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, photos you included with the transaction, name and email -Address of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction and, if applicable, the offer associated with the transaction.

According to Google, this processing takes place exclusively in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, the verification of transaction data and the optimization and maintenance of the functionality of the Google Pay service.

Google also reserves the right to combine the processed process data with other information that is collected and stored by Google when you use other Google services.

The Google Pay terms of use can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection with Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- GoPay

One or more online payment methods from the following provider are available on this website: GoPay s.r.o.,Planá 67, 370 01 Planá, Czech Republic

One or more online payment methods from the following provider are available on this website: Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you choose a payment method in which the provider pays in advance (e.g. purchase on account or installments or direct debit), you will also be asked to provide certain personal data during the ordering process (first and last name, street, house number, Postal code, city, date of birth, email address, telephone number, if applicable, information about an alternative means of payment).

In order to protect our legitimate interest in determining the solvency of our customers, we will process this data in accordance with Art. 6 Para. 1 lit. f GDPR will be forwarded to the provider for the purpose of a credit check. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment history), the provider checks whether the payment option you have selected is appropriate with regard to payment and/or default risks ;can be heard.

In addition to the provider's internal criteria, the decision can be made as part of the application review. Art. 6 Para. 1 lit. f GDPR also includes identity and creditworthiness information from the following credit agencies:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report can contain probability values (so-called score values). To the extent that score values are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Masterpayment

One or more online payment methods from the following provider are available on this website: Masterpayment LTD, 483 Green Lanes, London, N13 4BS, Great Britain

CCreditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, Germany Tel.: +49 (0)2131-109-501, Fax: -557
CRIF GmbH, Friesenweg 4, Haus 12, 22763 Hamburg, Germany Tel.: +49 (0)40-89803-0, Fax: -419
SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Germany Tel.: +49 (0)611-9278-0, Fax: -109

When data is transferred to the provider location, an adequate level of data protection is guaranteed by an adequacy decision by the European Commission.
- Paydirekt

One or more online payment methods from the following provider are available on this website: paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you choose a payment method from the provider with which you pay in advance, the payment details you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the Contents of your order according to Art. 6 Paragraph 1 Letter b GDPR passed on. In this case, your data will be passed on exclusively for the purpose of processing payments with the provider and only to the extent that it is necessary for this purpose.

If you choose a payment method in which we pay in advance, you will also be asked to provide certain personal data during the ordering process (first and last name, street, house number, postal code, city, date of birth, email address , telephone number and, if necessary, data on an alternative means of payment).

In order to protect our legitimate interest in determining your solvency in such cases, we will process this data in accordance with Art. 6 Para. 1 lit. f GDPR will be forwarded to the provider for the purpose of a credit check. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment history), the provider checks whether the payment option you have selected is appropriate with regard to payment and/or default risks ;can be heard.

One or more online payment methods from the following provider are available on this website: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

One or more online payment methods from the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland

7) Page functionalities

Youtube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. Here, certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.

If you are logged into a user account with the provider during your site visit, your data will be assigned directly to your account when you click on a video. If you do not want it to be associated with your account, you must log out before pressing the play button.

All of the above-mentioned processing, in particular the setting of cookies for reading information on the device used, will only take place if you have given us your express consent in accordance with Article 6 (1) (a) GDPR have granted. You can revoke your consent at any time with effect for the future by using this service using the “Cookie Consent Tool“ provided on the website. deactivate.

For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission. ensures.

8) Rights of the person concerned

8.1 Applicable data protection law grants you the following data subject rights (rights of information and rights of intervention) vis-à-vis the person responsible for the processing of your personal data, subject to the respective exercise requirements reference is made to the legal basis stated:

Right to information in accordance with Art. 15 GDPR;
Right to rectification in accordance with Art. 16 GDPR;
Right to deletion in accordance with Art. 17 GDPR;
Right to restrict processing in accordance with Art. 18 GDPR;
Right to information in accordance with Art. 19 GDPR;
Right to data portability in accordance with Art. 20 GDPR;
Right to revoke consent given in accordance with Art. 7 Paragraph 3 GDPR;
Right to complain in accordance with Art. 77 GDPR.

8.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCE OF INTERESTS BASED ON OUR OVERWHELMING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT F Ü R TO INSERT THE FUTURE.

IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN PROOF COMPULSORY REASONS FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING DOES NOT MATCH THE CLAIM. EXERCISE OR DEFENSE OF LEGAL CLAIM ;CHEN SERVES.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.

9) Duration of storage of personal data

The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing and - if relevant - Additionally, based on the respective legal retention period (e.g. commercial and tax retention periods).

When processing personal data based on express consent in accordance with 6 Para. 1 lit. a GDPR, the affected data will be stored until you revoke your consent.

If there are statutory retention periods for data that are processed within the framework of legal or similar legal obligations on the basis of Art ;’will be deleted unless they are no longer necessary for the fulfillment of the contract or the initiation of a contract and/or we have no legitimate interest in further storage.

When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data will be stored until you exercise your right to object in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Article 6 (1) (f) GDPR, this data will be stored until you exercise your right to object in accordance with Article 21 (2) GDPR /p>

Unless otherwise follows from the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted if they are no longer necessary for the purposes for which they were collected or processed in any other way are no longer necessary.