1. Name and contact details of the person responsible for processing and the company data protection officer
The following information on data protection applies to data processing by:
Linus Handelshaus GmbH
Telephone: +49 (0) 3337 490314
2. Collection and storage of personal data as well as type and purpose of use
The legal basis for processing operations in which we obtain consent for a specific processing purpose is always Art. 6 para. 1 sentence 1 lit. a GDPR. Insofar as the processing of personal data is necessary to fulfill a contract (dispatch of goods, provision of services) to which you are a party, the processing is based on Art. 6 Para. 1 S. 1 lit. b GDPR. The above legal basis also applies to the implementation of pre-contractual measures (e.g. inquiries about our products or services). If our company is subject to a legal (legal) obligation which requires the processing of personal data and which is based on Union law or the law of the Member State to which we are subject, the processing is based on Article 6 (1) sentence 1 lit. c GDPR. Furthermore, processing can be based on Art. 6 para. 1 sentence 1 lit. d GDPR are based if vital interests are affected (danger to life and limb and / or disasters). In addition, the legal basis for the processing of personal data of Art. 6 Para. 1 S. 1 lit. f GDPR. In this case we will inform you of our legitimate interest. Art. 6 para. 1 sentence 1 lit. f DSGVO separately.
a) Visit our website
When you visit our website, your browser automatically sends information to the server on our website that is temporarily stored in a so-called log file. This is the following information:
IP address of the requesting computer,
Date and time of access,
Name and URL of the file accessed,
Website from which access is made (referrer URL),
Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The data is saved until it is automatically deleted after seven days. We process this data for the following purposes:
Ensuring a smooth connection to the website,
Ensuring a comfortable use of our website,
Evaluation of system security and stability as well
for further administrative purposes.
b) Newsletter service
According to Art. 6 Para. 1 S. 1 lit. a GDPR, express consent is required if you would like to receive our newsletter. For the regular sending of the newsletter, we use the email address you provided for this purpose. You do not have to provide any further information to receive the newsletter. You can unsubscribe from our newsletter service at any time. At the end of each newsletter there is a link that you can use to unsubscribe. However, you do not have to use this, you can simply send us an email to firstname.lastname@example.org.
c) Contact form
There is a contact form on our website, which you can use for questions of any kind. This type of data processing is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR with your voluntary consent. A valid email address is required so that we know the sender of the request and can answer it. All other information is voluntary. All personal data collected by us using the contact form is automatically deleted as soon as your request has been dealt with.
3. Disclosure of data
In principle, your personal data will not be passed on to third parties. Forwarding takes place only in the following cases:
You have express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR for forwarding to third parties;
The disclosure is in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR to protect our legitimate interests or those of a third party, in particular to assert the exercise or defense of legal claims, and you have no overriding interest worthy of protection in not disclosing your data;
A legal obligation according to Art. 6 Para. 1 S. 1 lit. c GDPR exists; The data is processed in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of contractual relationships with you. In this case, your personal data will only be passed on to the service partners involved in the execution of the contract, such as the logistics company commissioned with the delivery, the credit institution commissioned with payment matters or the service company responsible for merchandise management and bookkeeping, provided this is for the fulfillment of the contract and Processing is imperative. In the case of disclosure to third parties, the scope of the information passed on is limited to the minimum required in the context of contract execution.
5. Social media plug-ins
On the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, we use social plug-ins from the social network Facebook to increase our awareness on our website. This advertising purpose is to be classified as a legitimate interest within the meaning of the GDPR. The respective provider of the plug-ins are responsible for data protection-compliant operation. We try to protect the visitor to our website in the best possible way by integrating the plug-ins using the so-called two-click method.
6. Data subject rights
Your rights have been significantly expanded by the new General Data Protection Regulation. These are listed below and briefly explained with reference to the legal basis.
Information, Art. 15 GDPR: You have the right to request information about your personal data processed by us. This includes, for example, information about processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint , the origin of your data, unless it was collected by us, and the existence of automated decision-making, including profiling and, if necessary, meaningful information about its details;
Right to correction, Art. 16 GDPR: You can immediately request the correction of incorrect or completion of your personal data stored by us;
Right to deletion ("Right to be forgotten"), Art. 17 GDPR: You have the right to have your personal data stored by us deleted, unless the processing to exercise the right to freedom of expression and information to fulfill a legal obligation Is necessary for reasons of public interest or for the establishment, exercise or defense of legal claims;
Right to restriction of processing, Art. 18 GDPR: You can request that the processing of your personal data be restricted. The prerequisite is that the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you in accordance with Art. 21 GDPR Have lodged an objection (item 8) to the processing;
Right to data transfer, Art. 20 GDPR: You can request that you receive your personal data that you have provided to us in a structured, common and machine-readable format or that it be transferred to another person responsible;
Revocation of consent, Art. 7 Para. 3 GDPR: You can revoke your consent given to us at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future. However, this does not affect the lawfulness of processing based on consent before its withdrawal;
Right to lodge a complaint, Art. 77 GDPR: You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. As a rule, you can contact the supervisory authority of your usual place of residence or work or our headquarters.
7. Right to object
You also have the right to object under Art. 21 GDPR. This applies to your personal data based on legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. e or f GDPR are processed, and insofar as there are reasons for an objection to the processing that arise from your particular situation. If the objection is directed against direct advertising, you have an unrestricted right to object, even without specifying a particular situation. You can exercise your right to object and also your other rights, for example, by e-mail to email@example.com.
8. Data security
We use the common SSL (Secure Socket Layer) procedure for our website in connection with the highest encryption level supported by your browser. As a rule, this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether a single page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser. It is important to us to protect your data. We therefore take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
9. Use of an external ERP system
10. Use of PayPal
11. Server log files
12. Existence of automated decision making
There is no automatic decision-making or profiling.