Privacy policy

I. Introduction

This website with the domain www.hanglage.com ("Website") is operated by the company: Hanglage, represented by Katrin Marten, Heinrich-Hertz-Str. 25, 22085 Hamburg, E-Mail: weinregal@hanglage.com ("company", "Controller", "we" or "us")

We take the protection and security of personal data very seriously.

For this reason, we have created this Privacy Statement, in which you can find out what personal data we collect about you and how we process it.

II. What personal data do we collect about you? And what is this data processed for?

The personal data can either be provided voluntarily by you when using the website or - in the case of usage data - is collected automatically when you use the website. The collection of some personal data may be necessary for the availability or proper functioning of the services or the website.

(1) Information you provide to us through the use of our website or services

In the case of simple informational use of the website, i.e. if you do not otherwise provide us with information, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure the stability and security of the website.

The following data is processed for this purpose:

• · IP address
• · Date and time of the request
• · Time zone difference to Greenwich Mean Time (GMT)
• · Content of the request (concrete page)
• · Access Status/HTTP Status Code
• · Amount of data transferred in each case
• · Website from which the request comes
• · Browser
• · Operating system and its interface
• · Language and version of the browser software

The legal basis for this is Art. 6 para. 1 sentence 1 (f) GDPR and our legitimate interest in improving the stability and functionality of our website.

Storage duration: The above-mentioned data will be temporarily stored within the scope of this purpose only for the duration of the loading process of the website.

(2) Information that you provide us directly

We collect personal information about you when you actively provide it to us as part of the following functions.

(3) Shopping cart to enter into a contract

We process the following personal data for the performance of the ordering process and the subsequent fulfilment of your purchase:

• First name, last name,
• E-mail address or telephone number,
• billing and delivery address and
• Your payment details.

Your payment data will be passed on to payment service providers commissioned by us to process the payment(s). If the products you have ordered are created by service providers, these service providers will also receive your personal data to implement the order and to transport the product. We will pass on information about your delivery address to logistics companies and shipping partners commissioned by us.

The legal basis for this is Art. 6 para. 1 sentence 1 (b) GDPR.

Storage period: We store your data, which we have collected for the purpose of processing the contract, for the duration of the contract as well as until the expiry of the statutory or possible contractual warranty rights. After this period, we store the information of the contractual relationship required by commercial and tax law for the legally specified periods. For this period, the data will be reprocessed solely in the event of a review by the tax authorities. Retention periods of 6 to 10 years apply, among others.

(4) Newsletter

In order to send you the subscribed newsletter, we process personal data. By subscribing to our newsletter you consent to the processing of your personal data. For the registration to our newsletter we use the so-called Double-Opt-In-procedure. This means that after your registration, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can withdraw your consent by clicking on the link provided in each newsletter e-mail, by e-mail to [weinregal@hanglage.com] or by sending a message to the contact data provided in the imprint.

We process the following personal data for the performance of the ordering process and the subsequent handling of our newsletter service:

• first and last name
• e-mail address

The legal basis for this is Art. 6 para. 1 (a) GDPR.

Storage period: After you have cancelled our newsletter and/or withdrawn your consent, we will delete your data.

(5) Contact form / Contact by e-mail

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, time of transmission, your name and telephone number, if applicable) will be stored by us to answer your questions. We delete the data arising in this connection after storage is no longer necessary or restrict processing if there are legal storage obligations.

If the contact is in connection with a contract or if you want to enter into a contract with us in this manner, the legal basis for this is: Art. 6 para. 1 (b) GDPR.

Storage period: We store your data that we have collected for the purpose of processing the contract for the duration of the contract and until the expiry of the statutory or possible contractual warranty and guarantee rights. After this period, we retain the information required under commercial and tax law for the contractual relationship for the legally specified periods. For this period, the data will be processed again solely in the event of a review by the tax authorities.

If the contact is not in connection with a contract, the legal basis for this is: Art. 6 para. 1 (f) GDPR and our legitimate interest in being able to contact customers, interested parties and other third parties.

Storage period: Your data will be deleted after the end of communication and clarification of your request.

III. How do cookies function?

In order to facilitate the use of our website, we use "cookies". Cookies are code snippets that are stored on your device so that we can collect data about your activities. Cookies enable us to store your preferences and preferences and login information, deliver customized content and marketing communications, determine which parts of our website and services are most popular, and analyze website activity.

You can configure your browser to accept all cookies, block all cookies, or notify you when a cookie is sent. Please note that the design of the website includes the use of cookies; therefore, some website features or services may not function properly without cookies.

You can set the cookie settings directly in the browser and - for example - prevent third parties from storing cookies. You can also delete the cookies already stored in your browser settings, including those that may have allowed the website to store cookies. Users can find help on cookie management in the most common browsers at the following addresses: Google Chrome, Mozilla Firefox, AppleSafari and Microsoft Internet Explorer.

IV. To whom do we transmit your personal data?

It may be necessary for the processing of your request to transfer your personal data to external service providers within the EU (payment service providers, manufacturers, transport companies, IT service providers). Such service providers may, for example, be commissioned to send products to you and to process payment transactions. We require our external service providers to use your personal data exclusively in accordance with our instructions and in compliance with this privacy policy and the legal requirements for processing order data in accordance with Art. 28 GDPR.

Apart from that, we do not transfer personal data to third parties, nor do we sell or lease data without your permission. However, we reserve the right to disclose information about you if we are legally obliged to do so or if we are required to do so by lawful authorities or law enforcement agencies.

Some personal data (see above) is collected by third parties for their own purposes. These third parties act as data controllers and their own privacy policies apply.

V. Do we transfer personal data to third countries or international organizations?

We are a company based in Hamburg, Germany, but process your personal data only within the European Economic Area.

Some of our service providers who may process your personal data on our behalf are located in the USA. The transfer of personal data to the USA is primarily based on the adequacy finding and the so-called "Privacy-Shield" [SM1] certification, a special legal framework,which is intended to ensure an adequate level of protection of personal data by US companies with this certification. Further information on the Privacy Shield can be found here.

VI. What do we do to store your personal data securely?

We have put in place organizational and technical measures (including physical, electronic and managerial procedures to safeguard and secure the personal information we collect about you through this site) to protect the information we collect and process from unauthorized access, alteration, disclosure or destruction. Please note that the protection of your personal data also depends on your own usage patterns.

VII. What data protection rights do you have?

If the legal requirements are met, you can exercise certain rights with regard to your personal data processed by us as the data controller:

• · Access to information, Art. 15 GDPR: You can request at any time that we provide you with information about which of your personal data is processed by us and how, information about certain aspects of the processing and to receive a copy of the personal data.
• · Rectification, Art. 16 GDPR: You have the right to have incorrect personal data corrected and to request the completion of incomplete personal data.
• · Deletion, Art. 17 GDPR: Under certain circumstances, you have the right to have your personal data deleted by us. This right applies, for example, if you withdraw your consent or if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• · Restriction of processing, Art. 18 GDPR: Under certain circumstances, you have the right to request the restriction of the processing of your personal data. This right applies, for example, if you doubt the accuracy of your personal data or if the processing is unlawful.
• · Data transferability, Art. 20 GDPR: You have the right to receive the personal data you have provided us with in a structured, common and machine-readable format and to demand that we transfer this data to another responsible party without hindrance, if this is technically feasible. This provision applies if the processing of personal data is carried out by means of automated procedures and the processing is based on your consent (Art. 6 para. 1 (a) GDPR or Art. 9 para. 2 (a) GDPR or on a contract (Art. 6 para. 1 (b) GDPR).
• · Objection, Art. 21 GDPR: You have the right to object to the processing of your personal data for direct marketing purposes at any time. In addition, you may object to the processing of your data at any time for specific reasons, which is based on a legitimate interest.
• · Withdrawal of consent: You have the right to withdraw your consent to the processing of your personal data at any time without giving reasons. The withdrawal will not affect the lawfulness of the processing based on the consent given before its withdrawal.
• · Complaints: You have the right to lodge a complaint with the competent data protection authority if, for example, you believe that our data processing is unlawful or we have not granted the rights described above to the extent necessary.

VIII. How can you contact us and exercise your rights?

You can exercise your rights by contacting us either via the contact form here or by e-mail at weinregal@hanglage.com.