Skip to content

data protection

data protection

Data protection

With this data protection declaration we would like to inform you about the type, scope and purpose of the processing of personal data on our website. Personal data is all data that has a personal connection to you, e.g. E.g. name, address, email address or user behavior.

Who is responsible for data processing at our company

Responsible for data processing is:

JoeFrex GmbH
here
Joerg Rexroth
Dientzenhoferstr. 72
90480 Nuremberg
0911 5430056
info@joefrex.de
https://www.joefrex.de/impressum

Web hosting

To maintain our online presence, we use an Internet service provider on whose server the website is stored (hosting) and who makes our site available on the Internet. The Internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Name and address of the Internet service provider: STRATO AG Pascalstraße 10 10587 Berlin D You can view its data protection regulations here: https://www.strato.de/datenschutz/ Legal basis: The internet service provider processes the aforementioned data on our behalf, Art. 28 GDPR. The data processing is carried out on the basis of our legitimate interest in the efficient and secure provision of our internet offering, Art. 6 Para. 1 lit. f) GDPR.

 

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored and saved on the device you use. Cookies are primarily used to exchange information between the device you are using and our website. These include, among other things: the language settings on a website, the login status or the location where a video was watched.

Two types of cookies are used when you visit our websites:

  • Temporary cookies (session cookies): These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. The session cookies are deleted when you log out or close your browser.
  • Permanent cookies: Permanent cookies remain stored even after the browser is closed. This means our website recognizes your computer when you return to our website. These cookies store, for example, information about language settings or log-in information. These cookies can also be used to document and store your surfing behavior. This data may be used for statistical, marketing and personalization purposes.

In addition to the above classification, cookies can also be differentiated according to their purpose:

  • Necessary cookies: These are cookies that are absolutely necessary for the operation of our website, to save logins or shopping carts for the duration of your session, or cookies that are used for security reasons be set.
  • Statistics, marketing and personalization cookies: These are cookies that are used for analysis purposes or to measure reach. Such “tracking” cookies can be used to store information about search terms entered or the frequency of page views. In addition, the surfing behavior of an individual user (e.g. viewing certain content, using functions, etc.) can also be saved in a user profile. Such profiles are used to show users content that matches their potential interests. If we use services that store cookies on your device for statistical, marketing and personalization purposes, we will inform you about this separately in the following sections of our data protection declaration or when obtaining your consent.

Legitimate interest: Unless we obtain your consent to set cookies, we base the processing of your data on our legitimate interest, the quality and user-friendliness of our website, in particular to improve the content and functions, Art. 6 Para. 1 f) GDPR. You have the security settings of your browser to object to the use of cookies set by us within the scope of our legitimate interest. There you have the opportunity to determine whether you want to Do not accept cookies in advance or only accept them upon request, or you can specify that cookies are deleted every time you close your browser. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

 

Storage duration/deletion

We delete or block your personal data as soon as the purpose of storage has been achieved or no longer applies. Storage beyond this will only take place if we are required to do so by national or European regulations. In this case, the data will be blocked or deleted when the storage period specified in the relevant regulations has expired, unless we need your data to fulfill a contract concluded between us or if this is necessary to assert, exercise or defend legal claims .

Information about the contact options we provide

If you contact us via email, social media, telephone, fax, post, our contact form or otherwise and provide us with personal data such as your name, telephone number or email address or other information about yourself If you answer your request, this data will be stored and further processed in our company to process your request. Legal basis: If you make your request within the framework of contractual or pre-contractual relationships with us, the legal basis for the processing of your data is Art. 6 Para. 1 lit. b. GDPR. If your request does not fall into one of the aforementioned categories, our legitimate interest in processing your data lies in answering your request properly and in your interests, Article 6 Paragraph 1 Letter f of the GDPR. Deletion: The personal data we collect will be deleted unless it is no longer required. We check the necessity every 2 years. You can also revoke data processing at any time.

Registration

You have the option to register on our website and create a user account in order to access specific content on our website. For this purpose, it is necessary to provide personal data that results from the input mask. The data requested there includes, in particular, your name, password and email address. This data is stored and processed by us to give you access to your user account. The data can be changed or deleted by you at any time. The data will not be passed on to third parties unless they are used to process the contract. In order to protect you and us from abusive registrations, we store the IP address used during registration as well as the date and time of registration. This data will not be passed on to third parties. Legal basis: We process your data on the basis of Art. 6 Para. 1 lit. b GDPR for the purposes of providing your user account. Deletion: The personal data, as well as the IP address, date and time, are stored until the purpose no longer applies. The data collected during registration will be deleted as soon as the associated account on our website is deleted or changedYou can delete your account at any time or request deletion by the above-mentioned data controller.

Online-Shop

If you use our online shop to place orders, we need certain data in order to process your order. This includes, in particular, your name as well as your address and electronic contact details, information on processing the payment process and the services used. This data is stored by us. The information you provide in the mandatory fields of the order form is absolutely necessary to establish and fulfill the contract. In particular, we use the data you provide to us

  • to identify you as our customer,
  • Process, fulfill and process your order,
  • to get in touch with you,
  • to invoice you,
  • to be able to handle any liability claims,
  • to be able to assert contractual claims against you.

Legal basis: The legal basis for the processing of your data with regard to the processing of your order is Art. 6 Para. 1 lit. b GDPR. This also applies to the processing operations that are necessary to carry out pre-contractual measures.

We will only share your personal information with third parties if:

  • the disclosure in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
  • There is a legal obligation to do this in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR,
  • This is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR for the processing of the contract concluded with you (e.g. passing on the data to the logistics company commissioned with the delivery or for the purpose of payment processing).

Furthermore, your personal data will not be passed on to third parties without your express consent. If we pass on your personal data to third parties, we will limit the scope of the data transmitted to the necessary minimum.

We can also use the data you provide to inform you by post or email about other interesting products and/or services.

When you place an order, register for a user account or log in again, we store your IP address and the time of the respective user action. The purpose of storage is our, but also your, legitimate interests in protecting against misuse and other unauthorized use. Legal basis: The legal basis for this is Article 6 (1) (f) GDPR. This data will not be passed on to third parties unless the transfer is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 Paragraph 1 Letter c GDPR.

Deletion: Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of 10 years. However, after the statutory warranty rights have expired (2 years), we will restrict processing so that your data will only be used to comply with legal obligations.

Your rights under the GDPR

According to the GDPR, you are entitled to the following rights, which you can assert at any time with the person responsible named in Section 1 of this data protection declaration:

  • Right to information: According to Art. 15 GDPR, you can request confirmation as to whether and which personal data we process about you. In addition, you can obtain information from us free of charge about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection , the existence of a right to complain and the origin of your data if it was not collected by us. You also have the right to information as to whether your personal data has been transmitted to a third country or to an international organization. If this is the case, you have the right to receive information about the appropriate safeguards in connection with the transfer.
  • Right to rectification: According to Art. 16 GDPR, you can request the correction of incorrect or incomplete personal data stored by us and concerning you.
  • Right to deletion: According to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, provided that we do not process it for the following purposes need:
    • to fulfill a legal obligation,
    • to assert, exercise or defend legal claims,
    • to exercise the right to freedom of expression and information or
    • for reasons of public interest mentioned in Article 17 Paragraph 3 Letters c and d GDPR.
  • Right to restriction: According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if
    • the accuracy of the data is disputed by you, for a period that enables us to verify the accuracy of the personal data,
    • the processing of your data is unlawful, but you refuse its deletion and instead request that the use of the data be restricted,
    • we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims
    • You have objected to the processing of your data in accordance with Art. 21 GDPR, but it is not yet clear whether the legitimate reasons that entitled us to continue processing despite your objection outweigh your rights.
  • Right to information: If you have asserted the right to rectification, deletion or restriction of processing against us, we are obliged to inform all recipients of the data concerning you personal data has been disclosed, to inform you of the correction or deletion of the data requested by you or the restriction of processing, unless this proves to be impossible or involves disproportionate effort. You have the right to be informed by us about these recipients.
  • Right to data portability: According to Art. 20 GDPR, you can request that we process the personal data concerning you that you have provided to us in a structured, common and machine-readable format format or to request transmission to another person responsible.
  • Right to complain: According to Art. 77 GDPR, you have the right to complain to a supervisory authority. To do this, you can contact the supervisory authority at your usual place of residence, your place of work or our company headquarters.

Right of withdrawal

According to Art. 7 Para. 3 GDPR, you have the right to revoke your consent to the processing of your data at any time. The revocation you have declared does not change the lawfulness of the processing of your personal data prior to the revocation.

Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on a balance of interests (Art. 6 Para. 1 lit. f GDPR). This is particularly the case if data processing is not necessary to fulfill a contract. If you exercise your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling legitimate reasons for data processing outweigh your interests and rights.

Regardless of the above, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes.

Please send your objection to the contact address of the person responsible given above.

Our online presence on social networks

We operate online presences within the social networks listed below. If you visit one of these sites, your usage data will be collected and processed by the respective provider. This is usually done through cookies that are stored on the device you use. For the term cookie, see the relevant heading above. Cookies are used to store your usage behavior and interests and create corresponding usage profiles. Data can also be stored in the usage profiles regardless of the device you use. This is particularly the case if you are a member of the respective platform and logged in to it.

 

The data collected is generally used by the provider for the purposes of advertising and market research by creating usage profiles based on your usage behavior. These in turn can be used by the providers to show you interest-based advertising. You have the right to revoke the creation of user profiles. In order to exercise this, you must contact the respective provider. If you have an account with the provider, your usage data can be linked to it. To prevent your data from being linked in this way, you can log out of the provider's service before visiting our site.

You can find out for what purpose and to what extent data is collected by the provider in the respective data protection declarations of the providers provided below. We ourselves have no influence on which data is collected and how this data is used by the provider. If you would like to request detailed information or make use of your rights as a data subject, the most effective way to do this is to contact the respective provider yourself, as only the respective provider has access to your data.

We would like to point out that your user data may be transferred and processed outside the European Union. In this case, there is a risk that the enforcement of your data subject rights may be made more difficult. Those US providers who are certified under the Privacy Shield are committed to complying with EU data protection standards. You can find information about whether the respective provider has such a certificate in the information about the providers listed below.

Legal basis: If you have been asked by one of the providers listed below for your consent to data processing, the legal basis for the processing is Art. 6 Para. 1 lit. a GDPR . Otherwise, the processing of your data is based on our legitimate interests in contacting you and communicating with you, Art. 6 Para. 1 lit. f. GDPR. Prevention: For the respective objection options (opt-out), we refer to the information provided by the providers linked below.

We maintain online presences on the following social networks:

Twitter

Twitter is a service of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107 - USA

Headquarters in the EU: Twitter Inc., 26 Fernian St, Dublin - Ireland

instagram

Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 - USA

Pinterest

Pinterest is a service of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2 - Ireland

Facebook

Facebook is a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 – USA.

Sitz in der EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 – Irland

Google Analytics

On our website we use “Google Analytics”, a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

We use Google Analytics to record and statistically evaluate visitor flows on our website. Among other things, Google Analytics records data about the website you came to our website from (so-called referrers), which subpages of the website you accessed, how often and for how long a subpage was viewed, and which interactions you carried out. To record and store this data, Google Analytics sets a cookie on the device you use (see the term above under the heading Cookies). We use the AnonymizeIP function to anonymize your IP address so that it is shortened and can no longer be assigned to your visit to our website. Other transmitted information is not assigned to the anonymized IP address by Google or linked to it. The information generated in this way is transferred to Google servers in the USA and stored there. Google may pass this personal data collected via the technical process on to third parties. We have concluded a data processing agreement with Google. Google is then entitled and obliged to evaluate the information obtained for us and to compile statistical reports for us on the type and extent of website usage. These statistics enable us to continually improve our offering, carry out a cost-benefit analysis of our internet marketing and make our website more interesting and user-friendly for you as a user. Legal basis: We use Google Analytics due to our legitimate interest in the analysis, optimization and economic operation of our online offering, Art. 6 Paragraph 1 Letter f GDPR. Deletion: The data we collect and transfer in this way is automatically deleted after 26 months. Prevention: You can prevent cookies from being saved by downloading and installing the browser add-on provided by Google. This is available at https://tools.google.com/dlpage/gaoptout?hl=de . However, you may then no longer be able to fully use all of the functions of our website. Alternatively, you can prevent cookies from being saved by setting a so-called opt-out cookie, which will prevent your data from being collected on our website in the future. To do so, please click on the following You also have the option of preventing cookies from being saved by selecting the appropriate settings in your browser . Cookies that have already been saved can be deleted at any time.

Information about third-party providers:

Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

PayPal

We offer payment processing on our website via the payment service provider PayPal (PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg).

If you have decided to pay via PayPal, the following of your data will be transmitted to PayPal as part of the order: first and last name, address, date of birth, email address, telephone number, IP address and the data necessary to process the respective order . This data is transmitted so that PayPal can carry out an identity check to process your purchase. This makes it possible, among other things, to detect fraudulent activities and prevent the misuse of data. In addition, the data is transmitted so that PayPal can estimate your creditworthiness if necessary or PayPal can pass on the data to credit reporting agencies to estimate your creditworthiness in the form of a credit check. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The data collected can also be used by PayPal for analysis purposes, in particular for customer analysis, risk analysis, data analysis for the purposes of developing and improving the services offered by PayPal. Legal basis: The legal basis for the above-described use of the data is Art. 6 Para. 1 lit b GDPR. Deletion: The data we collect and transfer in this way will be automatically deleted after 26 months. Revocation: You can revoke your consent to the use of personal data to PayPal at any time. Despite revocation, PayPal may continue to be entitled to process, use and transmit personal data that is absolutely necessary for contractual payment processing.

Information about third-party providers:

Skrill

We offer payment processing on our website via the payment service provider Skrill Limited (Floor 27, 25 Canada Square, London, E14 5LQ, United Kingdom).

If you have decided to pay via Skrill, the following data will be transmitted to Skrill as part of the order: first and last name, address, date of birth, email address, billing address, user name, password, account details, information about the purchase made, IP address and the data necessary to process the respective order. Purpose : This data is transmitted so that Skrill can carry out an identity check to process your purchase. This makes it possible, among other things, to detect fraudulent activities and prevent misuse of data. The data is also transmitted so that Skrill can assess your creditworthiness if necessary or so that Skrill can pass the data on to credit agencies to assess your creditworthiness in the form of a credit check. The data collected can also be used by Skrill for analysis purposes, in particular for customer analysis, risk analysis and data analysis for the purposes of developing and improving the services offered by Skrill. Legal basis : The legal basis for the use of the data described above is Art. 6 (1) (b) GDPR. Deletion: The data we collect and transfer in this way is automatically deleted after 26 months. You can find more information about Skrill's terms of use and data protection at https://www.skrill.com/de/fusszeile/datenschutzbestimmungen/ Prevention: You can revoke your consent to Skrill using your personal data at any time. Despite revocation, Skrill may still be entitled to process, use and transmit the personal data that is absolutely necessary for contractual payment processing.

safety measures

We also take state-of-the-art technical and organizational security measures to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties.

Currentness and changes to this data protection declaration

This data protection declaration is currently valid and is dated December 2019. Due to changes in legal or official requirements, it may become necessary to adapt this data protection declaration.

This privacy statement was created with the help of SOS Recht . You can find the data protection declaration generator here. SOS Recht is an offer from Mueller.legal Rechtsanwälte Partnerschaft based in Berlin.