Privacy Policy
Status: 09/2021
We process personal data (hereinafter "data") of users only to the extent necessary to provide a functional and user-friendly website, as well as our content and services.
"Processing" means the collection, use, disclosure and/or storage. "Personal data" according to the EU General Data Protection Regulation (hereinafter "GDPR") generally means all data by which a natural person can be identified. The exact definitions of the terms are specified in Art. 4 GDPR.
The following explanations provide you with information, in particular, about the nature, scope, purpose, duration and legal basis of the processing of personal data, regarding which we alone or jointly with others determine the purposes and means of processing, as well as about any third-party components we use to optimize and improve usability, which process data under their own responsibility:
- A) Information about the Controller
- B) User Rights
- C) Information on Data Processing
- A) Information about the Controller
The Controller (hereinafter "Provider") within the meaning of the GDPR and other national data protection laws of the Member States as well as other data protection provisions is:
Polyment GmbH
Feldstraße 90
25421 Pinneberg
Mobile phone: +49/ (0)17657854923
Email: info@polyment-shop.de
- B) User Rights
The user has the right, with regard to the processing of their personal data as described by the Provider below,
- to request confirmation as to whether data concerning them is being processed and to receive precise information about this data, as well as further information and copies of the data in accordance with Art. 15 GDPR;
- to demand the immediate rectification of inaccurate data concerning them or the completion of this data in accordance with Art. 16 GDPR;
- to demand that the data concerning them be deleted without undue delay in accordance with Art. 17 GDPR, alternatively, if further processing is necessary, for example, in accordance with Art. 17 Para. 3 GDPR, to demand a restriction of the processing of the data in accordance with Art. 18 GDPR;
- to receive the data concerning them and provided by them in accordance with Art. 20 GDPR and to demand its transmission to other controllers;
- to lodge a complaint with the supervisory authority pursuant to Art. 77 GDPR if the user believes that the processing of their data by the Provider violates the GDPR.
- The user can object to the future processing of data concerning them, which is carried out by a controller on the basis of Art. 6 para. 1 lit. f GDPR, at any time in accordance with Art. 21 GDPR. The objection can be raised in particular against processing for direct marketing purposes.
- The Provider is also obliged to communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16 GDPR, Article 17 Paragraph 1 GDPR and Article 18 GDPR to all recipients to whom the data has been disclosed by him. This obligation does not apply if such communication proves impossible or involves disproportionate effort. The user has the right to be informed about these recipients.
- C) Information on Data Processing
Unless detailed information is provided below for individual data processing operations, the user's data processed by the provider will be deleted or blocked as soon as the purpose of storage ceases to apply and no legal retention obligations prevent deletion.
Server data
For communication and security reasons, during a visit to the website, among other things, the following data, which the user's internet browser transmits to the provider or to their webspace provider, are collected (so-called server log files):
- Browser type and version;
- Operating system used;
- Website from which the user navigated to the provider's website (referrer URL);
- Website the user visits;
- Date and time of access;
- Internet Protocol (IP) address of the user.
The data is also temporarily stored. This data is not stored together with other personal data of the user. The legal basis for the temporary storage is Art. 6 Para. 1 lit. f GDPR, based on the legitimate interest in improving the stability, functionality and security of the website.
The data will be deleted after seven days at the latest. Data that must be retained for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.
Cookies
- a) Cookies
The controller uses so-called cookies on its website. Cookies are small text files or other storage technologies that the internet browser used by the user places and stores on the end device. These cookies process certain user information to an individual extent, such as browser and location data and IP address values.
Their use allows the controller to make its website more user-friendly, effective and secure.
The "persistent" cookies allow the website to recognize the user via their browser during a repeated visit to the website in order to not have to display or query the user's previously made settings regarding cookies again.
The processing serves the legitimate interest of the controller in improving the functionality of the website and fulfilling legal requirements, and is based on the legal basis of Art. 6 para. 1 lit. f GDPR.
"Session" cookies are deleted when the user closes their browser. "Persistent" cookies are automatically deleted after 12 months. This period varies depending on the cookie, but does not exceed a period of 12 months.
- b) Third-party cookies
Cookies from third-party providers may also be used on the provider's website. These third-party providers are partner companies with whom the provider cooperates for advertising, analysis, or website functionalities. If this is the case, the purposes and legal bases of the corresponding processing operations are given in the following explanations.
- c) Removal option
The user can prevent or restrict the installation of cookies by making a corresponding setting in their browser. Cookies already stored can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the browser settings, but by making the corresponding setting in the Flash Player. If the user prevents or restricts the installation of cookies, this may result in not all functions of the website being fully usable.
Cookie Manager
To obtain consent for the use of technically non-essential cookies on the website, the provider uses the cookie manager "Beeclever" from beeclever GmbH, Universitätsstraße 3, D-56070 Koblenz,
.
When the website is accessed, a cookie with the setting information is placed on the user's end device, so that the consent request does not have to be made again on a subsequent visit. This cookie has a lifespan of 12 months.
The cookie is necessary to obtain legally compliant consent from the user.
The user can prevent or stop the installation of cookies by adjusting their browser settings. More information on this can be found above under the "Cookies" section.
Contract processing
- a) Processing
The personal data provided by the user for the purpose of purchasing goods or services will be processed by the provider for the purpose of contract execution. The provision of data is necessary for the conclusion of the contract; without the provision of data, the conclusion of the contract is not possible. The legal basis for the processing is Art. 6 para. 1 lit. b GDPR. After complete execution of the contract, the user's data will be deleted, taking into account tax and commercial law retention periods.
- b) Disclosure
The user's personal data will be passed on to the financial service provider or the shop software service provider as part of the contract processing, insofar as this is necessary. The legal basis for the disclosure of data is Art. 6 para. 1 lit. b GDPR.
- c) Credit checks
If the customer selects PayPal, Amazon, Shopify Payments or Klarna as payment service providers, credit checks may be carried out by the respective payment service provider for certain payment methods also selected by the customer. The customer will be informed of this by the respective payment service provider at the latest before the payment process begins.
Customer Account
If the user registers for a customer account with the provider, the data entered during this registration (e.g., name, address, email address) will be collected and stored exclusively for the fulfillment of a contract or the implementation of pre-contractual measures, as well as for the general administration of the customer relationship (e.g., retrieval of past orders or wishlist function). Upon registration, the IP address and the date and time of registration are also stored. No data is passed on to third parties.
The legal basis is Art. 6 para. 1 lit. a GDPR, provided that the user has given their consent. During the registration process, the user's consent to the aforementioned processing may be obtained and reference made to this privacy policy. The data collected in this way will be used exclusively for the aforementioned purpose. No data is passed on to third parties.
If the opening of the customer account serves to fulfill a contract or to carry out pre-contractual measures, an additional legal basis is Art. 6 para. 1 lit. b GDPR.
The user can revoke any given consent for the customer account at any time by notifying the provider in accordance with Art. 7 para. 3 GDPR. The data processed in this context will be deleted as soon as their processing is no longer necessary. If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, the user's data will be deleted upon expiry of the tax and commercial law retention periods.
Shopify
- a) Use of Shopify Shop Software
The provider uses the "Shopify" shop system for presenting offers, processing contracts and hosting.
The legal basis for this is contract initiation and/or contract processing in accordance with Art. 6 para. 1 lit. b GDPR.
"Shopify" is an association of Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., Shopify (USA) Inc., Shopify Commerce Singapore Pte. Ltd., and Shopify International Limited.
If the user is resident in the European Economic Area (EEA), processing is carried out by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter "Shopify").
Due to the association, it cannot be ruled out that processing also takes place outside the EEA (Canada and USA). In the event of data transfer to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
"Shopify" processes the following user data on behalf of the provider:
Name, email address, shipping and billing address, payment details, company name, possibly telephone number, IP address, information about orders, information about the merchant shops supported by "Shopify" that the user visits, as well as information about the device and browser used.
Further information about data processing by Shopify International Limited can be found at the following link:
https://www.shopify.de/legal/datenschutz .
- b) Shopify Web Analytics
Through the use of Shopify, cookies are also used on the website for web analysis. Information such as the time, location and frequency of the user's website visit is transmitted to a Shopify server and evaluated via the cookies.
The legal basis for this is Art. 6 para. 1 lit. a GDPR. The user can revoke this consent at any time for the future by adjusting the cookie settings on the website, in accordance with Art. 7 para. 3 GDPR.
Contact inquiries
In the event of a user contacting us, the personal data entered on this occasion will be used to process the inquiry.
If the contact inquiry serves the fulfillment of a contract or the implementation of pre-contractual measures, such as a price inquiry, the legal basis is Art. 6 para. 1 lit. b GDPR.
The user's data will be deleted as soon as the user's inquiry has been conclusively answered and no legal retention obligations, such as for subsequent contract processing, stand in the way.
The legal basis may also be the user's consent in accordance with Art. 6 Para. 1 lit. a GDPR.
The user can revoke any given consent for the contact inquiry at any time by notifying the provider in accordance with Art. 7 para. 3 GDPR. The data processed in this context will be deleted as soon as their processing is no longer required.
Newsletter
If the user subscribes to the provider's free newsletter, the data requested in the input mask (email address) will be transmitted to the provider. In addition, the IP address and the date and time of registration are stored. During the registration process, the user's consent is obtained and the content is precisely described. At the same time, reference is made to this data protection declaration. The data collected in this way is used exclusively for the purpose of receiving the newsletter. No data is passed on to third parties.
The legal basis is Art. 6 para. 1 lit. a GDPR. The user can revoke this consent at any time for the future by notifying the provider or by using the unsubscribe link included in the newsletter, in accordance with Art. 7 para. 3 GDPR.
Direct marketing
The provider reserves the right to use the data collected during an order for direct marketing by email or post in accordance with Section 7 (3) of the Act Against Unfair Competition (UWG), unless the user objects to this use. Direct marketing exclusively includes offers for similar products or services as those already purchased by the user from the provider. In this case, the legal basis is Art. 6 (1) lit. f GDPR. The legitimate interest of the provider lies in the economic interest of sales and improving its services.
Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter "Google".
Google Analytics is used by the provider to analyze website usage. The legal basis for this is Art. 6 para. 1 lit. a GDPR. The user can revoke this consent at any time in the future by adjusting the cookie settings on the website, in accordance with Art. 7 para. 3 GDPR.
Information, such as the time, location, and frequency of the user's website visit, including their IP address, is transferred to a Google server in the USA and stored there.
However, according to the data protection supervisory authorities, the USA currently does not have an adequate level of data protection. However, there are so-called standard contractual clauses between the provider and Google:
https://privacy.google.com/businesses/compliance/#!#gdpr
However, these are private law agreements and therefore have no effect on the access possibilities of authorities in the USA.
The provider uses Google Analytics with an anonymization function. Due to this addition, the IP address in this case is shortened by Google already within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Google will use the data collected to evaluate the user's visit to the website and to compile reports on website activities for the provider. In addition, the data will be used to provide further services associated with website use and internet use. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google.
According to its own statements, Google will under no circumstances link the user's IP address with other Google data. Google offers further information, in particular on how to prevent data usage, under the following link:
https://www.google.com/intl/de
Google also offers a deactivation add-on for the most common browsers, which gives the user more control over what data is collected by Google about the website accessed by the user. The add-on tells Google Analytics' JavaScript (ga.js) that no information about the website visit should be sent to Google Analytics. However, the Google Analytics browser deactivation add-on does not prevent information from being sent to the provider or to other web analysis services used by the provider and listed in this privacy policy. Further information on installing the browser add-on can be found at the following link:
Browser add-on for deactivating Google Analytics
Bugsnag
To immediately detect errors or malfunctions on the website, the provider uses the Bugsnag component. Bugsnag is a product of Bugsnag Inc. at 939 Harrison St, San Francisco, CA 94107, USA.
In the event of a malfunction or error, the anonymized IP address and other technical data (e.g., browser settings) of the user are transmitted to Bugsnag for error analysis as part of the use of Bugsnag. Bugsnag also uses cookies for this purpose.
Bugsnag offers further information at the following link:
https://docs.bugsnag.com/legal/privacy-policy
If the user does not agree to this processing, it is possible to prevent the installation of cookies by making a corresponding setting in the browser. Further details can be found above under the heading "Cookies".
Social Media Integration
The provider uses a link to the social networks listed below on the website.
The legal basis for this is Art. 6 Para. 1 lit. f GDPR. The legitimate interest of the provider lies in improving the usability of the website.
The plugins are integrated via a linked graphic. Only by clicking on the corresponding graphic will the user be redirected to the service of the respective social network.
After the customer has been redirected, the respective network collects information about the user. This initially includes data such as IP address, date, time and visited page. If the user is logged into their user account of the respective network at the same time, the network operator may be able to assign the collected information from the user's specific visit to the user's personal account. If the user interacts via a "Share" button of the respective network, this information can be stored in the user's personal user account and possibly published. If the user wants to prevent the collected information from being directly assigned to their user account, the user must log out before clicking on the graphic. In addition, it is possible to configure the respective user account accordingly.
The following social networks are linked by the provider:
Facebook - Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Privacy Policy: https://www.facebook.com/policy.php
Twitter - Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. Operator within the EU: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
Privacy Policy: https://twitter.com/de/privacy
Pinterest - Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA. Operator within the EU: Pinterest Europe Ltd., Palmerston House, 2nd Floor Fenian, Street, Dublin 2, Ireland.
Privacy Policy: