This website with the domain www.hanglage.com ("Website") is operated by the company: Hanglage, represented by Katrin Marten, Heinrich-Hertz-Str. 25, 22085 Hamburg, E-Mail: email@example.com ("company", "Controller", "we" or "us")
We take the protection and security of personal data very seriously.
For this reason, we have created this Privacy Statement, in which you can find out what personal data we collect about you and how we process it.
II. What personal data do we collect about you? And what is this data processed for?
The personal data can either be provided voluntarily by you when using the website or - in the case of usage data - is collected automatically when you use the website. The collection of some personal data may be necessary for the availability or proper functioning of the services or the website.
(1) Information you provide to us through the use of our website or services
In the case of simple informational use of the website, i.e. if you do not otherwise provide us with information, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure the stability and security of the website.
The following data is processed for this purpose:
The legal basis for this is Art. 6 para. 1 sentence 1 (f) GDPR and our legitimate interest in improving the stability and functionality of our website.
Storage duration: The above-mentioned data will be temporarily stored within the scope of this purpose only for the duration of the loading process of the website.
(2) Information that you provide us directly
We collect personal information about you when you actively provide it to us as part of the following functions.
(3) Shopping cart to enter into a contract
We process the following personal data for the performance of the ordering process and the subsequent fulfilment of your purchase:
Your payment data will be passed on to payment service providers commissioned by us to process the payment(s). If the products you have ordered are created by service providers, these service providers will also receive your personal data to implement the order and to transport the product. We will pass on information about your delivery address to logistics companies and shipping partners commissioned by us.
The legal basis for this is Art. 6 para. 1 sentence 1 (b) GDPR.
Storage period: We store your data, which we have collected for the purpose of processing the contract, for the duration of the contract as well as until the expiry of the statutory or possible contractual warranty rights. After this period, we store the information of the contractual relationship required by commercial and tax law for the legally specified periods. For this period, the data will be reprocessed solely in the event of a review by the tax authorities. Retention periods of 6 to 10 years apply, among others.
In order to send you the subscribed newsletter, we process personal data. By subscribing to our newsletter you consent to the processing of your personal data. For the registration to our newsletter we use the so-called Double-Opt-In-procedure. This means that after your registration, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can withdraw your consent by clicking on the link provided in each newsletter e-mail, by e-mail to [firstname.lastname@example.org] or by sending a message to the contact data provided in the imprint.
We process the following personal data for the performance of the ordering process and the subsequent handling of our newsletter service:
The legal basis for this is Art. 6 para. 1 (a) GDPR.
Storage period: After you have cancelled our newsletter and/or withdrawn your consent, we will delete your data.
(5) Contact form / Contact by e-mail
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, time of transmission, your name and telephone number, if applicable) will be stored by us to answer your questions. We delete the data arising in this connection after storage is no longer necessary or restrict processing if there are legal storage obligations.
If the contact is in connection with a contract or if you want to enter into a contract with us in this manner, the legal basis for this is: Art. 6 para. 1 (b) GDPR.
Storage period: We store your data that we have collected for the purpose of processing the contract for the duration of the contract and until the expiry of the statutory or possible contractual warranty and guarantee rights. After this period, we retain the information required under commercial and tax law for the contractual relationship for the legally specified periods. For this period, the data will be processed again solely in the event of a review by the tax authorities.
If the contact is not in connection with a contract, the legal basis for this is: Art. 6 para. 1 (f) GDPR and our legitimate interest in being able to contact customers, interested parties and other third parties.
Storage period: Your data will be deleted after the end of communication and clarification of your request.
III. How do cookies function?
In order to facilitate the use of our website, we use "cookies". Cookies are code snippets that are stored on your device so that we can collect data about your activities. Cookies enable us to store your preferences and preferences and login information, deliver customized content and marketing communications, determine which parts of our website and services are most popular, and analyze website activity.
You can set the cookie settings directly in the browser and - for example - prevent third parties from storing cookies. You can also delete the cookies already stored in your browser settings, including those that may have allowed the website to store cookies. Users can find help on cookie management in the most common browsers at the following addresses: Google Chrome, Mozilla Firefox, AppleSafari and Microsoft Internet Explorer.
IV. To whom do we transmit your personal data?
Apart from that, we do not transfer personal data to third parties, nor do we sell or lease data without your permission. However, we reserve the right to disclose information about you if we are legally obliged to do so or if we are required to do so by lawful authorities or law enforcement agencies.
Some personal data (see above) is collected by third parties for their own purposes. These third parties act as data controllers and their own privacy policies apply.
V. Do we transfer personal data to third countries or international organizations?
We are a company based in Hamburg, Germany, but process your personal data only within the European Economic Area.
Some of our service providers who may process your personal data on our behalf are located in the USA. The transfer of personal data to the USA is primarily based on the adequacy finding and the so-called "Privacy-Shield" [SM1] certification, a special legal framework,which is intended to ensure an adequate level of protection of personal data by US companies with this certification. Further information on the Privacy Shield can be found here.
VI. What do we do to store your personal data securely?
We have put in place organizational and technical measures (including physical, electronic and managerial procedures to safeguard and secure the personal information we collect about you through this site) to protect the information we collect and process from unauthorized access, alteration, disclosure or destruction. Please note that the protection of your personal data also depends on your own usage patterns.
VII. What data protection rights do you have?
If the legal requirements are met, you can exercise certain rights with regard to your personal data processed by us as the data controller:
VIII. How can you contact us and exercise your rights?
You can exercise your rights by contacting us either via the contact form here or by e-mail at email@example.com.
[SM1]Der EuGH hat mit dem Urteil in der Rechtssache „Schrems II“ (C-311/18) den EU-US-Privacy-Shield für unwirksam erklärt. Entsprechend können auf dieser Grundlage personenbezogene Daten nicht mehr in die USA übermittelt werden. Im Ergebnis kann Google Analytics aktuell nicht datenschutzkonform betrieben werden. Die Datenschutzaufsichtsbehörden haben zudem angekündigt, Websites dahingehend zu überprüfen. Es sollte daher geprüft werden, ob alternative Tracking-Methoden in Frage kommen. Matomo wäre ein vergleichbares Tool, welches datenschutzkonform eingesetzt werden kann.