PRIVACY POLICY DANCING QUEENS AG

TABLE OF CONTENTS

16. Use of our chat function 
17. Registering for a customer account 
18. Ordering products 
19. Online payment processing 
20. Submission of reviews

C. Special instructions for our store 
21. Opening a customer account 
22. Purchase or ordering products in the store 
23. Payment processing 
24. Use of customer services in the store 

A. CROSS-SALES CHANNEL NOTES

1. RESPONSIBLE PARTY AND CONTENTS OF THIS PRIVACY STATEMENT

We, Dancing Queens AG, Pilatusstrasse 30, CH-8330 Pfäffikon ZH, are the operator of the Dancing Queens shop and the website www.dancingqueens.ch and, unless otherwise stated, are responsible for the data processing listed in this privacy policy.
In order for you to know what personal data we collect from you and for what purposes we use it, please take note of the information below. In the area of data protection, we are primarily guided by the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (DSG), as well as the EU GDPR, the provisions of which may be applicable in individual cases.

Please note that the following information is reviewed and amended from time to time. We therefore recommend that you regularly consult this privacy policy. Furthermore, other companies are responsible under data protection law for individual data processing operations listed below or are jointly responsible with us, so that in these cases the information provided by these providers is also authoritative.

2. CONTACT PERSON FOR DATA PROTECTION

If you have any questions about data protection or would like to exercise your rights, please contact our data protection contact person by sending an e-mail to the following address:

contact@dancingqueens.ch
Our EU data protection representative can be reached at:
Dancing Queens AG
Pilatusstrasse 36
8330 Pfäffikon
Switzerland
Email: contact@dancingqueens.ch

3. Your rights

If the legal requirements are met, you have the following rights as a person affected by data processing:

Right to information: You have the right to request access to your personal data stored by us at any time free of charge when we process it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with the applicable data protection regulations.

Right to correction: You have the right to have incorrect or incomplete personal data corrected and to be informed about the correction. In this case, we will inform the recipients of the data concerned about the adjustments made, unless this is impossible or involves disproportionate effort.

Right to deletion: You have the right to have your personal data deleted under certain circumstances. In individual cases, in particular in the case of statutory retention obligations, the right to deletion may be excluded. In this case, the deletion may be replaced by a blocking of the data under certain conditions.

Right to restriction of processing: You have the right to request that the processing of your personal data be restricted.

Right to data transfer: You have the right to receive from us the personal data that you have provided to us free of charge in a readable format.

Right to object: You can object to data processing at any time, in particular to data processing in connection with direct advertising (e.g. advertising e-mails).

Right to withdraw consent: You have the right to withdraw your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your revocation.

To exercise these rights, please send us an email to the following address: contact@dancingqueens.ch

Right of complaint: You have the right to lodge a complaint with a competent supervisory authority, e.g. against the manner in which your personal data is processed.

4. Data security

We use suitable technical and organizational security measures to protect your personal data stored by us against loss and unlawful processing, in particular unauthorized access by third parties. Our employees and the service companies commissioned by us are obligated by us to maintain confidentiality and data protection. In addition, these persons are only granted access to the personal data to the extent necessary to fulfill their tasks.

Our security measures are continuously adapted to technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks and we cannot guarantee the security of information transmitted in this way.

5. Contact us

If you contact us via our contact addresses and channels (e.g. by e-mail, telephone or contact form), your personal data will be processed. The data you have provided to us will be processed, e.g. the name of your company, your name, your function, your e-mail address or telephone number and your request. In addition, the time of receipt of the request is documented. Mandatory information is marked with an asterisk (*) in contact forms.

We process this data exclusively in order to implement your request (e.g. provision of information about a product, support in the execution of the contract such as the return of products, inclusion of your feedback in the improvement of our services, etc.). The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR to the processing of your request or, if your request is aimed at the conclusion or execution of a contract, the necessity for the implementation of the necessary measures within the meaning of Art. 6 para. 1 lit. b EU GDPR.

6. Use of your data for marketing purposes

6.1 Central data storage and analysis in the CRM system

If a clear assignment to your person is possible, we will use the data described in this privacy policy, i.e. in particular storing and linking your personal data, your contacts, your contractual data and your surfing behavior on our websites in a central database. This is for the efficient management of customer data and allows us to adequately respond to your concerns and it enables us to efficiently provide the services you request and process the related contracts. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f of the EU GDPR on the efficient management of user data.

We evaluate this data in order to further develop our offers in a needs-oriented manner and to display and propose relevant information and offers to you. We also use methods that predict potential interests and future orders based on your use of the website. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR for the implementation of marketing measures.

6.2 Email marketing and newsletters

If you register for our email newsletter (e.g. when opening or within your customer account), the following data will be collected. Required information is marked with an asterisk (*) in the registration form:

• E-mail address
• First and last name

To avoid misuse and to ensure that the owner of an email address has actually given consent, we use the so-called double opt-in for registration. After sending the registration, you will receive an email from us containing a confirmation link. In order to subscribe to the newsletter, you must click on this link. If you do not click on the confirmation link within the specified period, your data will be deleted again and our newsletter will not be sent to this address.

By registering, you consent to the processing of this data in order to receive messages from us about our company, our dance shoes and sportswear offers as well as related products and services. This may also include invitations to participate in sweepstakes or to evaluate any of the aforementioned products and services. The collection of the name allows us to verify the assignment of the registration to a possibly already existing customer account and to personalize the content of the mails. Linking to a customer account helps us make the offers and content contained in the newsletter more relevant to you and better tailored to your potential needs.

We will use your data for sending emails until you withdraw your consent. A revocation is possible at any time, in particular via the unsubscribe link in all our marketing emails.

Our marketing emails may contain a so-called web beacon or 1x1 pixels (tracking pixels) or similar technical tools. A web beacon is an invisible graphic that is linked to the user ID of the respective newsletter subscriber. For each marketing email sent, we receive information about which addresses have not yet received the email, which addresses it was sent to, and which addresses failed to send it. It also shows which addresses opened the email, for how long, and which links they clicked on. Finally, we also receive information about which addresses have unsubscribed. We use this data for statistical purposes and to optimize the advertising emails in terms of frequency, time, structure and content of the emails. This allows us to better tailor the information and offers in our emails to the individual interests of the recipients.

The web beacon is deleted when you delete the email. To prevent the use of the web beacon in our marketing emails, please set the parameters of your email program so that HTML is not displayed in messages if this is not already the default. In the help sections of your email software you will find information on how to configure this setting, e.g. here for Microsoft Outlook.

By registering for the newsletter, you also consent to the statistical evaluation of user behavior for the purpose of optimizing and customizing the newsletter. This consent constitutes our legal basis for the processing of the data within the meaning of Art. 6 para. 1 lit. a EU GDPR  represents

We use the email marketing software Mailchimp from The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000. Atlanta, GA 30308 USA for marketing emails. Therefore, your data is stored in a Mailchimp database, which allows Mailchimp to access your data as necessary to provide the software and  assist you in using the software. The legal basis for this processing is our legitimate interest within the meaning of Article 6 para. 1 lit. f EU GDPR on the use of third-party services.

7. DISCLOSURE TO AND ACCESS BY THIRD PARTIES

Without the support of other companies, we would not be able to provide our services in the desired form. In order for us to be able to use the services of these companies, it is also necessary to share your personal data to a certain extent. Such disclosure is made by name to the extent necessary to fulfill the contract you have requested, i.e., for example, to the logistics or transportation companies that deliver the requested products or to a manufacturer that is to fulfill your warranty claim. In the case of these transfers, the necessity for the performance of the contract within the meaning of Art. 6 para. 1 lit. b of the EU GDPR.

The service will also be passed on to selected service providers and only to the extent necessary for the provision of the service. Various third-party service providers are also explicitly mentioned in this privacy policy, such as in the sections on marketing. These are, for example, IT service providers (such as providers of software solutions), advertising agencies, consulting companies. For this data transfer, our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in obtaining third-party services forms the legal basis for this data transfer.

In addition, your data may be passed on, in particular to authorities, legal advisers or collection agencies, if we are legally obliged to do so or if this is necessary to safeguard our rights, in particular to enforce claims arising from our relationship with you. Data may also be disclosed if another company intends to acquire our company or parts thereof, and such disclosure is necessary to conduct due diligence or to complete the transaction. For this data transfer, our legitimate interest within the meaning of Art. 6 para. 1 lit. f of the EU GDPR, in the protection of our rights and compliance with our obligations or the sale of our company forms the legal basis for this data transfer.

8. Transmission of personal data abroad

We are also entitled to transfer your personal data to third parties abroad if this is necessary to carry out the data processing mentioned in this privacy policy (see in particular Sections 12-15). Of course, the legal regulations for the disclosure of personal data to third parties are observed. If the country concerned does not have an adequate level of data protection, we ensure by contractual provisions that your data is adequately protected at these companies.

9. RETENTION PERIODS

We only store personal data for as long as is necessary to carry out the processing described in this privacy policy within the scope of our legitimate interest. In the case of contractual data, storage is required by statutory retention obligations. Requirements that oblige us to store data result from accounting regulations and tax law provisions. According to these regulations, business communications, concluded contracts and accounting records must be kept for up to 10 years. If we no longer need this data to perform the services for you, the data will be blocked. This means that the data may only be used if this is necessary to fulfill the retention obligations or to defend and enforce our legal interests. The data will be deleted as soon as there is no longer any obligation to retain it and no longer any legitimate interest in retaining it.

B. SPECIAL INSTRUCTIONS FOR OUR WEBSITE

10. Log file data

When you visit our website, the servers of our hosting provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") temporarily records each access in a log file. Further information on how Shopify uses your personal data can be found here: https://www.shopify.com/legal/privacy
The collection and processing of this data is carried out for the purpose of enabling the use of our website (establishing a connection), permanently ensuring system security and stability as well as for error and performance analysis and enables us to optimize our website (cf. also section 13 on the last points).
In the event of an attack on the network infrastructure of the website or in the event of a suspicion of other unauthorized or abusive use of the website, the IP address and the other data will be evaluated for the purpose of clarification and defense and, if necessary, used in the context of criminal proceedings for identification and for civil and criminal proceedings against the users concerned.
In the purposes described above, our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f EU GDPR.
Finally, when you visit our website, we use cookies as well as applications and tools that are based on the use of cookies. In this context, the data described here may also be processed. You will find further details in the following sections of this privacy policy, in particular section 11.

11. Cookies

Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our websites. Cookies are assigned identification numbers that identify your browser and enable the information contained in the cookie to be read out.

Cookies help, among other things, to make your visit to our website easier, more pleasant and more meaningful. We use cookies for various purposes, which are necessary for your desired use of the website, i.e. "technically necessary." For example, we use cookies in order to be able to identify you as a registered user after logging in, without you having to log in again when you navigate on the various subpages. The provision of the shopping cart and ordering function is also based on the use of cookies. Furthermore, cookies also take over other technical functions necessary for the operation of the website, such as load balancing, i.e. the distribution of the performance load of the page to different web servers in order to relieve the server load. Cookies are also used for security purposes, for example to prevent the unauthorized posting of content. Finally, we also use cookies in the context of the design and programming of our website, for example to enable the uploading of scripts or codes.

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR to the provision of a user-friendly and up-to-date website.

Most internet browsers automatically accept cookies. However, when accessing our website, we ask for your consent to the technically unnecessary cookies we use, in particular when using third-party cookies for marketing purposes. You can use the corresponding buttons in the cookie banner to enter the settings you want. You can find details about the services and data processing associated with the individual cookies within the cookie banner as well as in the following sections of this privacy policy.

You may also be able to configure your browser so that no cookies are stored on your computer or a message always appears when you receive a new cookie. On the following pages you will find explanations on how you can configure the processing of cookies with the most common browsers.

• Google Chrome
• Apple Safari

Deactivation of cookies can lead to not using all functions of our website.

12. Google Sitesearch / Google Custom Search Engine

This website uses the Google SiteSearch/Google Custom Search Engine of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This enables us to provide you with an efficient search function on our website.

When using our search fields, your browser may transmit the log file data listed under Section 10 (incl. IP address) as well as the search term provided by you to Google, if you have installed JavaScript in your browser. If you want to prevent data transmission, you can disable JavaScript in the browser settings (usually in the "Privacy" menu). Please note that the search function and other functions of the website may be impaired in this case.

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f of the EU GDPR in the provision of an efficient website search function.

For the further processing of data by Google, please observe the data protection regulations of Google: www.google.com/intl/de_de/policies/privacy.

13. Tracking and web analysis tools

13.1 General information on tracking

For the purpose of the needs-based design and continuous optimization of our website, we use the web analysis services listed below. In this context, pseudonymized user profiles are created and cookies are used (see also section 11). The information generated by the cookie about your use of this website is usually transmitted to a server of the service provider together with the log file data listed under section 10, and stored and processed there. This may also lead to a transfer to servers abroad, e.g. the USA (see, in particular, the guarantees taken, section 8).

By processing the data, we obtain, among other things, the following information:

• Navigation path that a visitor uses on the site (including viewed content and selected or purchased products),
• dwell time on the website or subpage,
• the page on which you leave the website,
• the country, region or city from where access is made,
• terminal device (type, version, color depth, resolution, width and height of the browser window) and returning or new visitor.
  

On our behalf, the provider will use this information to evaluate the use of the website, to compile reports on website activities for us and to provide other services related to the use of the website and the Internet for the purposes of market research and needs-based design of these Internet pages. For this processing, we and the providers can be considered jointly responsible for data protection to a certain extent.

The legal basis for this data processing with the following tools is your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time or refuse processing by rejecting or disabling the cookies in question in the settings of your web browser (see Section 11) or by making use of the service-specific options described below.

For the further processing of the data by the respective provider as the (sole) controller under data protection law, in particular also any disclosure of this information to third parties such as authorities on the basis of national statutory provisions, please note the respective data protection information of the provider.

13.2 Google Analytics

We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google").

The data described about the use of the website for the explained processing purposes (see Section 13.1) can be transmitted to the servers of Google LLC. in the USA. Through the activation of the IP anonymization on this website, the IP address is thereby reduced before transmission within the Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Users can prevent the collection of the data generated by the cookie and related to the website use by the user concerned (including the IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de. Click here for more information about our Privacy Policy.

14. Social media

14.1 Social Media Profile
On our website, we have incorporated links to our profiles in the social networks of the following providers:

• Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, USA;
• Instagram Inc. 1601 Willow Road, Menlo Park, CA 94025, USA;
• LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland.

If you click on the icons of the social networks, you will be automatically redirected to our profile in the respective network. A direct connection is established between your browser and the server of the respective social network. As a result, the network receives the information that you have visited our website with your IP address and clicked on the link.

If you click on a link to a network while you are logged into your user account with the network in question, the content of our website can be linked to your profile so that the network can directly associate your visit to our website with your account. If you want to prevent this, you should log out before clicking on the corresponding links. A connection between your access to our website and your user account takes place in any case when you log in to the respective network after clicking on the link. The respective provider is responsible for the associated data processing under data protection law. Please therefore note the information on the network's website.

The legal basis for any data processing attributed to us is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR on the use and promotion of our social media profiles.

14.2 Social Media Plugins

On our website, you can use social plugins from the providers listed below:

• Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, USA, data protection information;
• Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, data protection information;
• LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland, data protection information.

We use the social plugins to make it easier for you to share content from our website. The social plugins help us to increase the visibility of our content on the social networks and thus contribute to better marketing.

The plugins are deactivated by default on our websites and therefore do not send data to the social networks when simply calling up our website. To increase data protection, we have integrated the plugins in such a way that a connection to the servers of the networks is not automatically established. Only when you activate the plugins and thus grant your consent to the transmission of data and further processing by the providers of the social networks does your browser establish a direct connection to the servers of the respective social network.

The content of the plugin is transmitted directly from the social network to your browser and integrated into the website by the latter. As a result, the respective provider receives the information that your browser has accessed the corresponding page of our website, even if you do not have an account with this social network or are not currently logged in to it. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the USA and stored there. We have no influence on the scope of the data that the provider collects with the plugin, whereby we can be regarded as responsible together with the providers from a data protection point of view up to a certain extent.

If you are logged in to the social network, this can directly associate your visit to our website with your user account. When you interact with the plugins, the corresponding information is also transmitted directly to a server of the provider and stored there. The information (e.g. that you like a product from us) may also be published on the social network and may be displayed to other users of the social network. The provider of the social network may use this information for the purpose of advertising and the needs-based design of the respective offer. For this purpose, user, interest and relationship profiles could be created, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on the social network, to inform other users about your activities on our website and to provide other services associated with the use of the social network. The purpose and scope of the data collection and the further processing and use of the data by the providers of the social networks as well as your rights and settings options for protecting your privacy can be found directly in the privacy policy of the respective provider.

If you do not want the provider of the social network to associate the data collected via our website with your user account, you must log out of the social network before activating the plugins. In the case of the described data processing, your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR is the legal basis. You can revoke your consent at any time by declaring your revocation to the provider of the plugin in accordance with the information in its privacy policy.

15. Online advertising and targeting

15.1 in general

we use services of various companies to make you interesting offers online. In doing so, your user behavior on our website and websites of other providers is analysed in order to subsequently be able to display online advertising tailored to you individually.

Most technologies for tracking your user behavior and for the targeted display of advertising ("targeting") work with cookies (see also section 11), with which your browser can be recognized via various websites. Depending on the service provider, it is also possible for you to be recognized online even when using different devices (e.g. laptop and smartphone). This can be the case, for example, if you have registered for a service that you use with several devices.

In addition to the data already mentioned, which is generated when you visit websites ("log file data," see Section 10) and when using cookies (Section 11) and which can reach the companies involved in the advertising networks, the following data is included in the selection of the advertising that is potentially most relevant to you:

• Information about your person you have given when registering or using a service of advertising partners (e.g. your gender, your age group);
• User behavior (e.g. searches, interactions with advertising, types of websites visited, products viewed and purchased, subscribed newsletters).

We and our service providers use this data to determine whether you belong to the target group we are addressing and take this into account when selecting the advertisements. For example, after you have visited our site, you may be shown the products you have consulted when accessing other pages ("re-targeting"). Depending on the scope of the data, a profile of a user can also be created that is evaluated automatically and the advertisements are selected in accordance with the information stored in the profile, such as the affiliation to specific demographic segments or potential interests or behaviors. Such advertisements can be presented to you on various channels, which in addition to our website or app (in the context of on-site and in-app marketing), include advertisements that are conveyed via the online advertising networks we use, such as Google.

The data can then be evaluated for the purpose of billing the service provider and for assessing the effectiveness of advertising measures in order to better understand the needs of our users and customers and to improve future campaigns. This may also include the information that the performance of an action (e.g. visiting certain sections of our websites or sending information) is attributable to a particular advertisement. Furthermore, we receive aggregated reports from the service providers on advertising activities and information about how users interact with our website and our advertisements.

The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time by rejecting or deactivating the cookies in question in the settings of your web browser (see Section 11). Further options for blocking advertising can also be found in the information of the respective service provider, such as at Google.

15.2 Google Ads

This website uses the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for online advertising. Google uses cookies for this purpose, such as the so-called DoubleClick cookies, which enable your browser to be recognized when you visit other websites. The information generated by the cookies about your visit to these websites (including your IP address) will be transmitted to and stored by Google on servers in the United States (see also section 6). Further information on data protection at Google can be found here.

The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time by rejecting or deactivating the cookies in question in the settings of your web browser (see Section 11). More ways to block ads can be found here.

16. Use of our chat function

If you contact us via chat, your personal data will be processed. The data you have provided to us will be processed, e.g. the name of your company, your name, your function, your e-mail address or telephone number and your request. In addition, the time of receipt of the request is documented. Mandatory information is marked with an asterisk (*) in contact forms.

We process this data exclusively in order to implement your request (e.g. provision of information about a product, support in the execution of the contract such as the return of products, inclusion of your feedback in the improvement of our services, etc.). We use a WhatsApp Inc. tool to provide the chat function. (WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 , Ireland). Therefore, your data is stored in a database of WhatsApp Inc, which may allow WhatsApp Inc to access your data if this is necessary for the provision of the software and for support in the use of the software.

The legal basis for this data processing is our legitimate interest within the meaning of Article 6 para. 1 lit. f EU GDPR on the use of modern communication technologies or, if your request is aimed at the conclusion or processing of a contract, on the implementation of the necessary measures within the meaning of Art. 6 para. 1 lit. b EU GDPR.

17. Registration for a customer account

If you open a customer account on our website, we collect the following data, whereby mandatory information is marked with an asterisk (*) in the corresponding form:

• Personal details:
• Surname
• first name
• Login data:
• E-mail address
• password

We use the personal details to determine your identity and to check the conditions for registration. The email address and password serve together as login data and thus to ensure that the correct person uses the website under your details. We also need your email address to verify and confirm the account opening and for future communication with you necessary for the execution of the contract. In addition, this data is stored in the customer account for future contracts. For this purpose, we also enable you to store further information in the account (e.g. your preferred means of payment).

We also use the data to provide an overview of the products ordered and services purchased (cf. in particular Sections 18 and 23) and a simple way to manage your personal data, to administer our website and the contractual relationships, i.e. to establish, structure, process and amend the contracts concluded with you regarding your customer account.

The legal basis for the processing of your data for the preceding purpose is your consent in accordance with Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time by removing the information from the customer account or deleting your customer account or by notifying us and having it deleted.

To prevent abuse, you must always treat your login data confidentially and should close the browser window when you have ended communication with us, especially if you share the computer  with others.

18. Ordering products

If you wish to order products or book services on the website, we require certain data for the processing of the contract. If you do not log in with your customer account (see section 17), we collect the following data – depending on the product or service – with mandatory information marked with an asterisk (*) in the corresponding form:

• Last name
• first name
• Billing and shipping address
• Email address
• Date of birth
• Company, company address and VAT number for corporate customers
  

We use the data to determine your identity before concluding a contract. We also need your email address to confirm your order and for future communication with you that is necessary for processing the contract. We store your data together with the peripheral data of the order (e.g. time, order number, etc.), the data on the ordered/booked services (e.g. name, price and characteristics of the product; "product data"), the data on payment (e.g. chosen method of payment, confirmation of payment and time; see also section 19) as well as the information on the processing and fulfillment of the contract (e.g. return of products, use of service or warranty services, etc.) in our CRM database (see section 6.1) so that we can guarantee correct order processing and contract fulfillment.

If this is necessary for the fulfillment of the contract, we will also pass on the required information to any third-party service providers (e.g. transport companies).

The legal basis of this data processing is the fulfillment of the contract with you according to Art. 6 para.1 lit. b EU GDPR.

The provision of data that is not marked as mandatory data is voluntary. We process this data in order to tailor our offer to your personal needs in the best possible way, to facilitate the processing of the contracts, to contact you via an alternative means of communication with a view to fulfilling the contract if necessary, or for statistical collection and evaluation to optimize our offers. The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time by notifying us.

19. ONLINE PAYMENT PROCESSING

If you purchase services or products on our website for a fee, depending on the product or service and the desired payment method – in addition to the services or products listed in section 18 – the provision of further data is required, such as your credit card information or the login to your payment service provider. This information, as well as the fact that you have purchased a service from us for the relevant amount and time, will be forwarded to the respective payment service providers (e.g. providers of payment solutions, credit card issuers and credit card acquirers). Always observe the information of the respective company, in particular the privacy policy and the General Terms and Conditions. The legal basis for this transfer is the performance of a contract pursuant to Art. 6 para.

In order to avoid payment problems, the required data, in particular your personal details, may also be transmitted to a credit agency for the automated assessment of your creditworthiness. In this context, the credit agency can assign you a so-called score value. This is an estimate of the future risk of default, e.g. based on a percentage. The value is collected using mathematical-statistical methods and using data from the credit agency from other sources. We reserve the right, according to the information received, not to offer you the payment option "Invoice." The legal basis for this data processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f. EU GDPR on the prevention of payment defaults.

20. SUBMISSION OF EVALUATIONS

In order to help other users with their purchase decision and to support our quality management (in particular the processing of negative feedback), you have the opportunity to evaluate ordered products on our website. The data that you have provided to us will be processed and published on the website, i.e. in addition to your evaluation and the time at which it was given, possibly also a comment that you have added to your evaluation, or the name you have provided.

The legal basis for the data processing is your consent within the meaning of Art. 6 para. 1 lit a EU GDPR.

We reserve the right to delete unlawful reviews and to contact you in case of suspicion and to ask you to comment. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in the provision of the comment and evaluation function as well as the prevention of abuses in their use.

C. SPECIAL NOTES FOR OUR STORE

21. Opening of a customer account

If you open a customer account in our store, we collect the following data, whereby the mandatory information in the corresponding form is marked with an asterisk (*):

• Last name
• first name
• Billing and shipping address
• Email address
• Date of birth
• Company, company address and VAT number for corporate customers
•  Telephone number

We use the data to determine your identity and to check the conditions for opening the account. We collect your email address and telephone number for future communication with you that is needed for processing the contract. In addition, this data as well as the data on the purchase of products and the purchase of services (see Section 18) is stored under a customer number in the customer account in order to be able to provide you with an overview of your data at your request and to enable a future link with data from other channels. In this respect, your account and the stored data will also be linked to your online account (see Section 17), provided that the personal details are identical.

The legal basis for the processing of your data for the preceding purpose is your consent pursuant to Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time by asking us to delete the data.

22. PURCHASE OR ORDER OF PRODUCTS IN THE STORE

When buying and ordering our products, we also need your name in our business premises to handle the contract as well as various other data. Depending on the product or service, we collect the following data, whereby mandatory information in forms is marked with an asterisk (*):

• Last name
• first name
• Billing and shipping address
• Email address
• Date of birth
• Company, company address and VAT number for corporate customers
• Telephone number

We use the data to determine your identity before concluding a contract. We also need your email address for future communication with you that is necessary for processing the contract. We store your data together with the peripheral data of the order (e.g. time, order number, etc.), the data on the ordered/booked services (e.g. name, price and characteristics of the product; "product data"), the data on payment (e.g. chosen method of payment, confirmation of payment and time; see also section 19) as well as the information on the processing and fulfillment of the contract (e.g. return of products, use of service or warranty services, etc.) in our CRM database (see section 6.1) so that we can guarantee correct order processing and contract fulfillment.

If this is necessary for the fulfillment of the contract, we will also pass on the required information to any third-party service providers (e.g. transport companies).

The legal basis of this data processing is the fulfillment of the contract with you according to Art. 6 para.1 lit. b EU GDPR.

The provision of data that is not marked as mandatory data is voluntary. We process this data in order to tailor our offer to your personal needs in the best possible way, to facilitate the processing of the contracts, to contact you via an alternative means of communication with a view to fulfilling the contract if necessary, or for statistical collection and evaluation to optimize our offers. The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time by notifying us.

23. PAYMENT PROCESSING

If you purchase products in our store using electronic means of payment, the processing of personal data is required. By using the payment terminals, you transmit the information stored in your payment method, such as the cardholder's name and the card number, to the payment service providers involved (e.g. providers of payment solutions, credit card issuers and credit card acquirers). They also receive information that the payment method has been used in our location, the amount and the time of the transaction. Conversely, we only receive the credit for the amount of the payment made at the corresponding time, which we can assign to the corresponding document number, or information that the transaction was not possible or was cancelled. Always observe the information of the respective company, in particular the privacy policy and the General Terms and Conditions. The legal basis for this transfer is the performance of a contract pursuant to Art. 6 para.1 lit. b EU GDPR.

24. USE OF CUSTOMER SERVICES IN THE STORE

In our stores, you can use numerous customer services that may require the processing of personal data. This includes, for example, the collection of an ordered product, the return of products in the exercise of a right of return or a warranty claim, the complaint of a service, etc. In such cases, we collect the following data – depending on the product concerned or desired service – with mandatory information in forms marked with an asterisk (*):

• Last name
• first name
• Billing and shipping address
• Email address
• Date of birth
• Company, company address and VAT number for corporate customers
• Telephone number

***