Data protection

Data protection

1. Privacy at a glance

General information

The following notes provide a simple overview of what is done with your personal data
happens when you visit this website. Personal data is all data with which you
can be personally identified. Find detailed information on the subject of data protection
Please see our data protection declaration listed under this text.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. Its contact details
You can refer to the section "Note on the responsible body" in this data protection declaration
remove.

How do we collect your data?

On the one hand, your data is collected when you communicate it to us. This can be z. B. um
Trade data that you enter in a contact form.
Other data is collected automatically or with your consent when you visit the website through our IT systems
recorded. This is primarily technical data (e.g. Internet browser, operating system or time
of the page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure that the website is provided without errors. Other
Data can be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your data free of charge at any time
to obtain stored personal data. You also have the right to have the rectification or
to request the deletion of this data. If you have given your consent to data processing,
you can revoke this consent at any time for the future. Also, you have the right under
to request the restriction of the processing of your personal data in certain circumstances.
You also have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time if you have any further questions on the subject of data protection.

Analysis tools and third-party tools

When you visit this website, your surfing behavior can be statistically evaluated. That happens before
especially with so-called analysis programs.

Detailed information about these analysis programs can be found in the following
Data protection.

2. Hosting and Content Delivery Networks (CDN)

External hosting

This website is hosted by an external service provider (hoster). The personal data that
on this website are stored on the servers of the hoster. This can be v.
a. to IP addresses, contact requests, meta and communication data, contract data, contact data,
Trade names, website hits and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and
existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient
Provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to fulfill his performance obligations
is required and follow our instructions in relation to that data.

We use the following hoster:

Hetzner Online Ltd
Industriestr. 25
91710 Gunzenhausen

Conclusion of a contract for order processing

In order to ensure data protection-compliant processing, we have a contract
Order processing with our hoster closed.

3. General information and mandatory information

data protection

The operators of these pages take the protection of your personal data very seriously. We treat yours
personal data confidentially and in accordance with the statutory data protection regulations
this privacy policy.

If you use this website, various personal data will be collected.
Personal data is data with which you can be personally identified. The present
Privacy Policy explains what data we collect and what we use it for. She also explains how
and for what purpose.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail)
may have security vulnerabilities. A complete protection of the data against access by third parties is not possible
possible.

Note on the responsible body

The responsible body for data processing on this website is:

Straub GmbH
Otto-Schott-Strasse 33
D-97877 Wertheim

Telephone: + 49 9342 - 88020
Email: shop@bettina-barty.de

Responsible body is the natural or legal person who alone or together with others over
the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.)
decides.

storage duration

Insofar as no specific storage period has been specified within this data protection declaration, remain
Your personal data with us until the purpose for data processing no longer applies. if you a
assert a legitimate request for deletion or revoke consent to data processing,
Your data will be deleted unless we have other legally permissible reasons for storing it
of your personal data (e.g. tax or commercial law retention periods); in the
In the latter case, the data will be deleted once these reasons have ceased to exist.

Legally required data protection officer

We have appointed a data protection officer for our company.

Simon Duke
Otto-Schott-Str. 33
97877 Wertheim

Telephone: + 49 (9342) 96791-00
Email: shop@bettina-barty.de

Note on data transfer to the USA

Our website includes tools from companies based in the USA. If
these tools are active, your personal data can be sent to the US servers of the respective companies
be passed on. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law
are. US companies are obliged to release personal data to security authorities,
without you as the person concerned being able to take legal action against this.
It can therefore not be ruled out that US authorities (e.g. secret services) may store your on US servers
process, evaluate and permanently store the data for monitoring purposes. We have
no influence on these processing activities.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can ... a
revoke consent already given at any time. The legality of the up to the point of revocation
Data processing remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR
DONE, YOU HAVE THE RIGHT AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR
SITUATION RESULTING AGAINST THE PROCESSING OF YOUR PERSONAL DATA
TO OBJECT; THIS ALSO APPLIES TO ANY SERVICE BASED ON THESE PROVISIONS
PROFILING. THE RESPECTIVE LEGAL BASIS ON WHICH A PROCESSING IS BASED,
PLEASE REFER TO THIS PRIVACY STATEMENT. IF YOU OBJECT,
WE WILL NO LONGER PROCESS YOUR CONCERNED PERSONAL DATA, IT
UNLESS WE CAN HAVE COMPELLING PROTECTIVE REASONS FOR PROCESSING
PROOF THAT OUTSTANDING YOUR INTERESTS, RIGHTS AND FREEDOMS OR THAT
PROCESSING IS FOR THE CLAIM, EXERCISE OR DEFENSE OF
LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 (1) GDPR).

YOUR PERSONAL DATA WILL BE PROCESSED FOR DIRECT ADVERTISING,
SO YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING AT ANY TIME
CONCERNING PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING
TO INSERT; THIS ALSO APPLIES TO PROFILING TO THE EXTENT INVOLVED WITH SUCH DIRECT ADVERTISING
CONNECTED. IF YOU OBJECT, YOUR PERSONAL DATA WILL
SUBSEQUENTLY NOT USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION
IN STYLE OF. 21 ABS. 2 GDPR).

Right of appeal to the competent supervisory authority

In the event of violations of the GDPR, those affected have the right to lodge a complaint with a
Supervisory authority, in particular in the Member State of your habitual residence, your place of work
or the location of the alleged infringement. The right to lodge a complaint exists without prejudice to anything else
administrative or judicial remedies.

Right to data portability

You have the right to data that we hold on the basis of your consent or in performance of a contract
process automatically, in itself or to a third party in a common, machine-readable format
to be handed over. If you want the data to be transferred directly to another person responsible
request, this will only be done to the extent that it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as
Example orders or inquiries that you send to us as the site operator, an SSL or TLS
encryption. You can recognize an encrypted connection by the fact that the address line of the browser
"http://" changes to "https://" and the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to us cannot
be read by third parties.

Encrypted payment transactions on this website

If there is an obligation to give us your payment data after the conclusion of a fee-based contract
(e.g. account number for direct debit authorization), this data is used for payment processing
needed.

Payment transactions are made using the usual means of payment (Visa/MasterCard, direct debit).
exclusively via an encrypted SSL or TLS connection. Detect an encrypted connection
Note that the address line of the browser changes from "http://" to "https://" and the lock symbol
in your browser line.

In the case of encrypted communication, your payment data that you transmit to us cannot be
be read by third parties.

Information, deletion and correction

Within the framework of the applicable legal provisions, you have the right to free of charge at any time
Information about your stored personal data, its origin and recipient and the
Purpose of the data processing and, if applicable, a right to correction or deletion of this data. For this as well
You can contact us at any time if you have further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data.
You can contact us at any time for this. The right to restriction of processing exists in
following cases:

- If you dispute the accuracy of your personal data stored by us, we need
usually time to check this. For the duration of the exam, you have the right to
Request restriction of processing of your personal data.
- If the processing of your personal data happened/is happening unlawfully, you can
request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need them to exercise,
defense or establishment of legal claims, you have the right instead of
Deletion to request the restriction of the processing of your personal data.
- If you have lodged an objection in accordance with Art. 21 Para. 1 GDPR, a balance must be struck between
are made in your and our interests. As long as it is not clear whose interests
prevail, you have the right to restrict the processing of your personal data
to demand.

If you have restricted the processing of your personal data, this data may - from
Apart from their storage - only with your consent or for the assertion, exercise or
Defending legal claims or protecting the rights of another natural or
legal person or for reasons of important public interest of the European Union or
of a Member State are processed.

Objecting to Promotional Emails

The use of contact data published as part of the imprint obligation for the transmission of
Advertising and information material that has not been expressly requested is hereby rejected. The
Operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of
Advertising information, such as spam emails.

4. Data collection on this website

cookies

Our website uses so-called "cookies". Cookies are small text files and set up
no damage to your end device. They will either be temporary for the duration of one session
(session cookies) or permanently (permanent cookies) stored on your end device. session cookies
are automatically deleted at the end of your visit. Permanent cookies remain on your end device
saved until you delete them yourself or until your web browser automatically deletes them.

In some cases, cookies from third-party companies can also be stored on your end device if you
enter our site (third party cookies). These enable us or you to use certain
Third-party company services (e.g. cookies for processing payment services).

Cookies have different functions. Numerous cookies are technically necessary because certain
Website functions would not work without them (e.g. the shopping cart function or the display
of videos). Other cookies are used to evaluate user behavior or to display advertising.

Cookies that are required to carry out the electronic communication process (necessary cookies) or to
Provision of certain functions you want (functional cookies, e.g. for the
shopping cart function) or to optimize the website (e.g. cookies for measuring the web audience)
are required are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless otherwise
legal basis is given. The website operator has a legitimate interest in the storage
of cookies for the technically error-free and optimized provision of its services. Unless one
Consent to the storage of cookies has been requested, the relevant cookies will be stored
Cookies exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR); the consent is
revocable at any time.

You can set your browser so that you are informed about the setting of cookies and
Allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general
and activate the automatic deletion of cookies when the browser is closed. In the
Disabling cookies may limit the functionality of this website.

If cookies are used by third-party companies or for analysis purposes, we will inform you about this
separately within the framework of this data protection declaration and, if necessary, request consent.

Cookie consent with Usercentrics

This website uses Usercentrics cookie consent technology to provide your consent to the
Storage of certain cookies on your end device or for the use of certain technologies
obtained and documented in accordance with data protection regulations. The provider of this technology is the
Usercentrics GmbH, Rosental 4, 80331 Munich, Website:
https://usercentrics.com/de/ (hereinafter "Usercentrics").

When you enter our website, the following personal data is transferred to Usercentrics:
  • Your consent(s) or withdrawal of your consent(s)
  • your IP address
  • Information about your browser
  • Information about your device
  • time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser in order to give you the consent you have given
or to be able to assign their revocation. The data collected in this way will be stored until you contact us
Request deletion, delete the Usercentrics cookie itself or the purpose for data storage
omitted. Mandatory statutory retention requirements remain unaffected.

The use of Usercentrics takes place in order to obtain the legally required consent for use
obtain certain technologies. The legal basis for this is Article 6 Paragraph 1 Clause 1 Letter c GDPR.

Contract for order processing

We have concluded an order processing contract with Usercentrics. This is it
a contract required by data protection law that ensures that Usercentrics
personal data of our website visitors only according to our instructions and in compliance
processed according to the GDPR.







Server log files

The provider of the pages automatically collects and stores information in so-called server log files.
Files that your browser automatically transmits to us. These are:
  • Browser type and browser version
  • operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of server request
  • IP address
This data is not merged with other data sources.

This data is collected on the basis of Article 6 (1) (f) GDPR. The website operator has
a legitimate interest in the technically error-free presentation and optimization of its website -
the server log files must be recorded for this purpose.

Inquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request will include all of it
resulting personal data (name, request) for the purpose of processing your request
stored and processed by us. We do not pass on this data without your consent.

The processing of this data takes place on the basis of Art. 6 Para. 1 lit. b DSGVO, provided that your request
is related to the fulfillment of a contract or to carry out pre-contractual measures
is required. In all other cases, the processing is based on our legitimate interest in the
effective processing of the inquiries addressed to us (Art. 6 Para. 1 lit. f DSGVO) or on your
Consent (Art. 6 Para. 1 lit. a GDPR) if this was requested.

The data you sent to us via contact requests will remain with us until you tell us to delete them
ask you to revoke your consent to storage or the purpose for data storage no longer applies
(e.g. after your request has been processed). Mandatory legal provisions –
in particular statutory retention periods - remain unaffected.

Registration on this site

You can register on this website to use additional functions on the site. The to
We only use the data entered for the purpose of using the respective offer or service,
for which you have registered. The mandatory information requested during registration must be complete
be specified. Otherwise we will refuse the registration.

Use for important changes, for example in the scope of the offer or for technically necessary changes
we use the e-mail address given during registration in order to inform you in this way.

The data entered during registration is processed for the purpose of carrying out the
through the registration established user relationship and, if necessary, to initiate further contracts (Art.
6 paragraph 1 lit. b GDPR).

The data collected during registration will be stored by us for as long as you are on this website
are registered and will then be deleted. Statutory retention periods remain unaffected.

5. Analysis Tools and Advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. Provider is Google Ireland
Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors.
The website operator receives various usage data, such as page views, length of stay,
operating systems used and origin of the user. This data may be stored by Google in a
Profile summarized, which is assigned to the respective user or their device.

Google Analytics uses technologies that allow the user to be recognized for analysis purposes
of user behavior (e.g. cookies or device fingerprinting). Those collected by Google
Information about the use of this website is usually sent to a Google server in the
transferred to and stored in the USA.

This analysis tool is used on the basis of Article 6 (1) (f) GDPR. The
The website operator has a legitimate interest in analyzing user behavior in order to be both
to optimize the website and its advertising. If a corresponding consent is requested
(e.g. consent to the storage of cookies), processing takes place exclusively on
Based on Article 6(1)(a) GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://privacy.google.com/businesses/controllerterms/mccs/ .

IP anonymization

We have activated the IP anonymization function on this website. This will remove your IP address from
Google within member states of the European Union or in other contracting states
Agreement on the European Economic Area before transmission to the USA. Only in
In exceptional cases, the full IP address will be transmitted to a Google server in the USA and there
shortened. On behalf of the operator of this website, Google will use this information to
Evaluate use of the website in order to compile reports on website activity and to
other services related to the use of the website and the Internet compared to the
to provide website operators. The IP address transmitted by your browser as part of Google Analytics
will not be merged with other Google data.

browser plug-in

You can prevent Google from collecting and processing your data by doing so under
Download and install the available browser plug-in from the following link:
https://tools.google.com/dlpage/gaoptout?hl=de .

You can find more information on how Google Analytics handles user data in the
Google privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de .

order processing

We have concluded an order processing contract with Google and implement the strict
Completely changes the requirements of the German data protection authorities when using Google Analytics.

storage duration

Data stored by Google at user and event level, which is linked to cookies, user identifiers (e.g. user
ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) are linked after 14
Months anonymized or deleted. You can find details on this under the following link:
https://support.google.com/analytics/answer/7667196?hl=en

6. Plugins and Tools

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon
House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, it is necessary to save your IP address. This
Information is usually transferred to a Google server in the USA and stored there.
The provider of this site has no influence on this data transfer.

Google Maps is used in the interest of an attractive presentation of our online
offers and to make it easy to find the places we have indicated on the website. This represents
represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR
Consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit
GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/ and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ .

More information on handling user data can be found in Google's data protection declaration:
https://policies.google.com/privacy?hl=de .

7. eCommerce and Payment Providers

Processing of data (customer and contract data)

We collect, process and use personal data only insofar as they are necessary for the justification,
content or changes to the legal relationship are required (inventory data). This
takes place on the basis of Art. 6 Para. 1 lit. b DSGVO, which requires the processing of data to fulfill a
Contract or pre-contractual measures permitted. Personal data about the use
We collect, process and use this website (usage data) only to the extent necessary
to enable the user to use the service or to bill for it.

The collected customer data will be processed after completion of the order or termination of the
Business relationship deleted. Statutory retention periods remain unaffected.

Data transmission upon conclusion of contract for online shops, dealers and goods dispatch

We only transfer personal data to third parties if this is part of the
Contract execution is necessary, for example to the companies entrusted with the delivery of the goods or
the bank responsible for processing the payment. Further transmission of the data
does not take place or only if you have expressly consented to the transmission. A transfer
Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 Paragraph 1 lit. b GDPR, which stipulates the processing of data for
Fulfillment of a contract or pre-contractual measures permitted.

payment services

We integrate payment services from third party companies on our website. When you make a purchase from us
make, your payment data (e.g. name, payment amount, account details, credit card number)
processed by the payment service provider for the purpose of payment processing. For these transactions
the respective contract and data protection provisions of the respective providers apply. The use of
Payment service provider takes place on the basis of Art. 6 Para. 1 lit. b GDPR (contract processing) and in
Interest in a payment process that is as smooth, convenient and secure as possible (Art. 6 Para. 1 lit. f
GDPR). Insofar as your consent is requested for certain actions, Art. 6 Para. 1 lit. a GDPR applies
Legal basis of data processing; Consent can be revoked at any time for the future.

We use the following payment services / payment service providers on this website:

Instant bank transfer

The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter referred to as
"Sofort GmbH"). With the help of the "Sofortüberweisung" procedure, we receive a real-time transfer
Payment confirmation from Sofort GmbH and can immediately start fulfilling our
liabilities begin. If you have decided to use the "Sofortüberweisung" payment method,
transmit the PIN and a valid TAN to Sofort GmbH, which they can use to log into your online banking
account can log in. Sofort GmbH automatically checks your account balance after logging in and manages it
make the transfer to us using the TAN you sent. Then send it to us
a transaction confirmation immediately. After logging in, your sales, the
Credit limit of the overdraft facility and the existence of other accounts and their holdings
checked automatically. In addition to the PIN and TAN, the payment data you enter will also be saved
as well as your personal data are sent to Sofort GmbH. Your personal data is
to first and last name, address, telephone number(s), e-mail address, IP address and, if necessary, other information
Data required for payment processing. The transmission of this data is necessary to establish your identity
to be determined without a doubt and to prevent attempts at fraud. Payment details with
Sofortüberweisung can be found in the following links:
https://www.sofort.de/datenschutz.html and
https://www.klarna.com/sofort/ .