Data protection declaration
The legal provisions for the protection of your data can be found in the General Data Protection Regulation and in the Federal Data Protection Act. Responsible in terms of data protection regulations is Wange GmbH, Johannes-Schriefers-Weg 72, 47877 Willich, Germany represented by the managing director Mr. Matthias Runge.
Below you will find information about which personal data – this is all data that identify you or make it identifiable, such as Name, address, e-mail address or user behavior – we record during your visit to our site and how these are used. If you have any questions, please feel free to contact us at datenschutz@wange.eu.
You also have the right to complain to a supervisory authority if the data is used unlawfully. The one responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany
Tel.: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle@ldi.nrw.de
1. Server data collection
When you visit our site, various server statistics are automatically saved, which your browser transmits to the server of our provider. The name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system and the requesting provider are logged.
This data is used for the statistical analysis of visits to our site and cannot be assigned to specific people.
The legal basis for data collection is Art. 6 Para. 1 lit. f) GDPR. This data will not be merged with other data sources. The IP address is anonymized. Our legitimate interest in the collection of this data is based on the fact that we can use the data to optimize our offer for users by e.g. Prevent access from malicious sites or optimize access via certain browsers, and the log of the IP address enables the delivery of the page to the visitor.
In principle, you have the right to object to this data collection. As an exception, this does not actually come into consideration here, since otherwise it would be impossible to use the site.
The data will be deleted as soon as it is available for the o.a. Purposes are no longer needed.
1a. Data transmission security
We use a secure server with SSL technology (Secure Socket Layer) with 128-bit encryption to transmit your data. In this way, your data is transmitted to us securely and unreadable for unauthorized persons.
Your passwords are hashed, i.e. stored cryptologically, and are thus protected from access by third parties and those responsible.
2. Use and disclosure of personal data
2a. General
If you have provided us with personal data, we will use it to answer your inquiries, to advise and process contracts concluded with you and for technical administration. With the exception of the cases explicitly mentioned in this declaration, your personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of contract processing, this is necessary for billing purposes or you have given your prior consent. You have the right to revoke your consent at any time with effect for the future, see also Section 7 on your rights as a data subject.
2 B. Contract processing
In the context of contracts concluded with you, we collect and save the personal data you have transmitted, such as Name, address, for the purpose of contract processing or also for invoicing and implement this in the merchandise management system “JTL Wawi” of JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven.
The data is passed on as part of the billing process to banks or tax advice. The accounting data is transferred to the tax office within the framework of the tax law.
The legal basis for the collection, processing and forwarding of the data in the context of contract processing is Art. 6 Para. 1 lit. b) GDPR. The legal basis for the transfer of the data to the tax office is Art. 6 Para. 1 lit. c) GDPR.
This data is deleted after the applicable statutory retention requirements have expired. If we are not subject to any statutory retention requirements, the data will be deleted when the purpose no longer applies.
You have the right to information and objection to your data stored by us at any time, see below. Section 7 on your rights as a data subject.
2c. Contact form and request by email
When you use our contact form, we collect and save your first and last name and your email address for the purpose of answering your request.
If you send us a contact request by e-mail, we will collect and save the e-mail address and the data contained in the e-mail.
The legal basis is Art. 6 Para. 1 lit. a) GDPR, because when you use the form and send an email to the above Consent to the processing of your data. If a contractual relationship develops from the request or if the request relates to an existing contractual relationship, the legal basis also results from Art. 6 Para. 1 lit. b) GDPR, as the storage of the data is necessary for the fulfillment of a pre-contractual or contractual obligation.
The data is deleted when the purpose of storage no longer applies, i.e. after you have answered your email / contact form request or when the matter related to the request has been finally clarified. In the event of a contractual relationship that may result from this, the statutory retention periods apply.
You have the right to revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent.
For the right to deletion and information, s. 7 below on your rights as a data subject.
2d. Registration
When you register on our website or create a user account, we collect your email address. We will then send you the associated password by email. Further personal data as mandatory information must only be given when placing an order. We store the data permanently.
The legal basis for the collection and storage of data as part of the registration is Article 6 Paragraph 1 lit. a) and Art. 6 Para. 1 lit. b) GDPR as part of the performance of the contract.
The deletion takes place when you log off from our side or revoke your consent to the use of this data, without affecting the legality of the processing carried out on the basis of the consent, unless statutory retention periods, e.g. for accounting documents, intervene. In these cases, the blocking takes the place of the deletion.
You have the right to information about your data stored by us at any time, see below. Section 7, also on your other rights as a data subject.
3. Cookies
The Internet pages use so-called cookies in several places. They serve to make our offer more user-friendly, more effective and safer. A cookie is text information that our website places via the web browser on the device you are using. Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. We also use cookies that recognize your browser when you log into the customer account and make it easier for you to access the stored content.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest arises from the fact that with the aforementioned cookies we only make it easier for you to access the page, do not collect any tracking data and thus do not interfere with your personal rights and fundamental freedoms.
You can exclude the acceptance of cookies in your web browser. However, this can lead to impairments in functionality. For your further rights as a data subject, see point 7 below.
These cookies are only valid for the duration of your browser session and are deleted when you finish visiting our site.
4. Google Tools
We use the following “Google services”. The responsible body is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Data is transferred from Google Ireland to Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, to which we always draw attention.
Further information on whether and which data is collected by Google through the use of these services can be found in Google’s data protection declaration.
4a. Google Analytics with Cookiebot
To obtain your consent, we use cookiebot (https://www.cookiebot.com/de/), a product from Cybot A / S
Havnegade 39, 1058 Copenhagen, Denmark. If you give your consent, the following data will automatically be logged by Cybot by cookiebot (https://www.cookiebot.com/de/privacy-policy/):
The end user’s IP number in anonymized form (the last three digits are set to ‘0’).
Date and time of consent.
User agent of the end user’s browser.
The URL from which consent was sent.
An anonymous, random and encrypted key.
The end user’s consent status, which serves as evidence of consent.
The stored data is used to ensure that web analysis services only collect data with your consent and to document this consent and to create and display cookie statements for end users.
The key and the consent status are also stored in the end user’s browser in the cookie “CookieConsent”, so that the website can automatically read and follow the end user’s consent for all subsequent page requests and future end user sessions for up to 12 months.
The legal basis for processing your data is Art. 6 Para. 1 lit. c) and f) GDPR, because we are legally obliged to be able to prove consent and our legitimate interest arises from the fact that we can only obtain the necessary consent in this way.
Google Analytics
This website uses the web analysis service Google Analytics. Google Analytics uses so-called “cookies” for the purpose of analyzing user behavior on the website and for measuring range.
When you visit our website, the user is informed about the use of cookies for analysis purposes and his consent to the processing of the personal data used in this context is obtained. In this context, there is also a reference to this data protection declaration. The so-called “Consent Tool”, with which your consent was obtained, is provided elsewhere in this data protection declaration.
An overview of how Google uses cookies and which cookies are used can be found in this overview.
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 Para. 1 lit. a) GDPR.
We have added the code “gat._anonymizeIp ();” to Google Analytics on our website in order to guarantee an anonymous collection of IP addresses (so-called IP masking). It is therefore not possible for us to assign the collected analysis data to a specific person.
Data transfer to third countries: The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there. Due to the activated IP anonymization on this website, your IP address will be shortened beforehand by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
We have concluded an order processing agreement with Google LLC, with which Google Inc. demonstrates compliance with appropriate and suitable technical and organizational measures to protect your personal data.
Revocation and deletion:
You can also revoke your consent at any time by deleting all set (consent) cookies in your browser.
You can basically prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by using the browser add-on available under the following link. on download and install.
The aforementioned add-on may not be available when you access our site via the browser of mobile devices. In this case, as in general, you can therefore alternatively prevent the use and disclosure of the data to Google by clicking on this link. Please note that this is a so-called opt-out cookie that is only valid for www.vonwange.com/de and the browser used. If you delete the cookies in your browser history, you will have to click the link again when you visit our site again to object to the use of data. The same applies if you call up the page with a different browser.
The data stored by Google are automatically deleted within 14 months.
For more information on data protection at Google Analytics, see https://support.google.com/analytics/answer/6004245?hl=de. You have the right to information and objection to your data stored by us at any time, see below. Section 7 on your rights as a data subject.
5. Sendinblue newsletter
a. General
With our newsletter we regularly inform you about new products and current offers. If you would like to receive the offered newsletter, we need a valid email address from you in addition to ticking the corresponding option when registering in our newsletter form. We will then send you a confirmation email with which you can verify your email address and the wish to receive the newsletter. To verify your registration, we save the IP address, both when registering and when activating the confirmation link.In addition, we save the date and time of registration, the specified e-mail address and the date and time of activation of the link in the confirmation email.
You can also unsubscribe from the newsletter in the log-in area.
The legal basis for the collection and processing of your data for newsletter marketing is Art. 6 Para. 1 lit. a) GDPR. The conditions for consent and its revocation have their legal basis in Art. 7 GDPR.
b. Passing on the data
We use the “Sendinblue” newsletter tool from Sendinblue SAS, 55 rue d’Amsterdam, 75008 Paris, France. An invisible graphic is built into the newsletter to track the opening rate. As soon as the newsletter is opened, this graphic is called up and it becomes clear who viewed the newsletter when and from where. To measure the click rate, the recipients are directed via a tracking link for a fraction of a second before they get to the actually linked page. This tracking link usually runs via a domain of the provider.
We have also concluded an order processing agreement (data processing agreement) with Sendinblue, with which this company documents compliance with appropriate technical and organizational measures.
You can read how Sendinblue stores and processes the data in the privacy policy of Sendinblue SAS at https://de.sendinblue.com/legal/privacypolicy/.
The legal basis for the collection and processing of your data for newsletter marketing is Art. 6 Para. 1 lit. a) GDPR. The conditions for consent and its revocation have their legal basis in Art. 7 GDPR.
The data will be deleted immediately after you unsubscribe from our newsletter.
You have the right to information and objection to your data stored by us at any time, see below. Section 7 on your rights as a data subject.
6. Payment service providers
6a. Paypal
As part of the PayPal payment method as well as PayPal via direct debit, PayPal credit card and PayPal via purchase on account, your data will be passed on to PayPal (Europe) S.à r.l. in the payment process. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. By using one of these payment options, you agree to the collection of data by PayPal. You can find out which data PayPal collects from you in their data protection principles https://www.paypal.com/de/webapps/mpp/ua/privacy-full. With the payment options direct debit, credit card or purchase on account via PayPal, a credit check is also carried out by PayPal S.à r.l. et Cie, S.C.A. You can find more information on this, as well as on the credit agencies commissioned by PayPal, in the appendix to the PayPal data protection principles https://www.paypal.com/de/webapps/mpp/ua/privacy-full Please note in particular that PayPal is used for payment will carry out an identity and credit check https://www.paypal.com/de/webapps/mpp/ua/creditchk without a PayPal account.
The legal basis for forwarding your data to PayPal is Art. 6 Para. 1 lit. a) and Art. 6 Para. 1 lit. b) GDPR, because on the one hand you consent to the use of the data by PayPal and on the other hand it is necessary to fulfill the contract when selecting the payment methods mentioned.
For your rights as a data subject, see below. Section 7.
6b. Stripe
To pay the booking fees, you must provide your credit card details or account information (SEPA). We use the payment service provider Stripe for this. Stripe is a service of Stripe Payments Europe Ltd. in Ireland or the US American Stripe Inc. Information on the type, scope and purpose of data processing by Stripe can be found in Stripe’s global data protection declaration. We do not store any credit card or account information from you. Only the Stripe customer ID is stored as a token in the user account, through which the proper receipt of payment can be traced.
The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR, as the data is necessary for the fulfillment of the booking contract that has been concluded.
7. Rights of data subjects
a) Right to object
If we process your data to safeguard legitimate interests (Art. 6 (1) (f) GDPR), you can object to this processing for reasons that arise from your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.
b) Right to information
You have the right to request confirmation from us as to whether we are processing personal data concerning you and, if so, a right to information about the personal data and related information in accordance with Art. 15 GDPR.
c) Right to rectification
According to Art. 16 GDPR, you have the right to request us to correct or complete any incorrect or incomplete personal data relating to you.
d) Right to cancellation
You have the right to request the immediate deletion of personal data concerning you and we are obliged to delete it immediately if one of the reasons stated in Art. 17 GDPR applies.
e) Right to restriction of processing
You have the right to request that we restrict personal data relating to you if one of the conditions specified in Art. 18 GDPR is met.
f) Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and you have the right to request that we transfer the data to another person responsible, as far as this is technically feasible is.
