Privacy
STOCK & STEIN GmbH manages its websites according to the following principles. STOCK & STEIN GmbH commits to complying with the legal provisions on data protection and always strives to observe the principles of data avoidance and data minimization.
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies provided that no other information is given in the subsequent processing operations.
Definitions
"Personal data" means any information relating to an identified or identifiable natural person. Data is "personal" if it contains individual details about the personal or material circumstances of a specific or identifiable person; this includes, in particular, name and address as well as username, password, and IP address. The "collection" of data refers to the acquisition of data. "Processing" means the storage, alteration, transmission, blocking, and deletion of data. The term "use" refers to any further utilization that does not fall under processing.
Server Log Files
You can visit our websites without providing any personal information. With every access to our website, usage data is transmitted by your internet browser and stored in protocol data (server log files). This stored data includes, for example, the name of the page accessed, the date and time of the request, the amount of data transferred, and the requesting provider. This data serves exclusively to ensure the trouble-free operation of our website and to improve our offering. It is not possible to assign this data to a specific person.
Collection and Processing when using the Contact Form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact. By submitting your message, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. We only use your email address to process your request. Your data will then be deleted, provided you have not consented to further processing and use, and subject to the regulation in the following paragraph.
If you send us a legally relevant declaration regarding the contractual relationship (e.g., a revocation or a complaint), the legal basis for the processing, regardless of the transmission method, is also Article 6 (1) lit. b GDPR. In such a case, we will delete the data associated with your declaration as soon as all mutual claims from the contractual relationship have been definitively settled and the commercial and tax retention periods have expired.
Collection and Processing when sending an Email
If you send us a message via email, we store your message with the sender data transmitted with it (name, email address, and optionally other information added by your email program and the transmitting servers). To receive, store, and send emails, we use an email provider who acts as a processor for us in accordance with Article 28 GDPR and is based within a country of the European Union or the European Economic Area.
The legal basis for this data processing is our legitimate interest in answering your message and also being able to respond to any follow-up questions from you (Article 6 (1) lit. f GDPR). We delete the data collected with your message no later than twelve months after the last communication with you regarding your concern, subject to the regulation in the following paragraph.
If you send us a legally relevant declaration regarding the contractual relationship (e.g., a revocation or a complaint), the legal basis for the processing, regardless of the transmission method, is also Article 6 (1) lit. b GDPR. In such a case, we will delete the data associated with your declaration as soon as all mutual claims from the contractual relationship have been definitively settled and the commercial and tax retention periods have expired.
Customer Account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.
Collection, Processing, and Use of Personal Data for Orders
When you place an order, we collect and use your personal data only insofar as this is necessary for the fulfillment and processing of your order as well as for handling your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you. Your data will not be passed on to third parties without your explicit consent. Exceptions to this are only our service partners whom we need to process the contractual relationship or service providers we use within the scope of order processing. In addition to the recipients named in the respective clauses of this privacy policy, these include, for example, recipients in the following categories: shipping providers, payment providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers, and dropshipping retailers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.
Data Collection when writing a comment
When you comment on an article or a post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling a comment and displaying comments. By submitting the comment, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke this consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your personal data will then be deleted.
When your comment is published, only the name you entered will be displayed.
Use of the Email Address for sending Newsletters
Regardless of contract processing, we use your email address exclusively for our own promotional purposes for sending newsletters, provided you have explicitly consented to this. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke the consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.
Disclosure of the Email Address to Shipping Companies for Information on the Shipping Status
We pass on your email address to the transport company within the scope of contract processing, provided you have explicitly consented to this during the ordering process. The transfer serves the purpose of informing you about the shipping status via email. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke the consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
Hosting Services by a Third-Party Provider
As part of processing on our behalf, a third-party provider provides us with hosting and website presentation services. This serves to protect our legitimate interests in correctly presenting our offer, which outweigh our interests in a balancing of interests. All data collected as part of using this website or in the forms provided in the online shop as described below are processed on its servers. Processing on other servers only takes place within the framework explained here.
This service provider is located within a country of the European Union or the European Economic Area.
Use of an Enterprise Resource Planning (ERP) System in Cloud Hosting
We use an enterprise resource planning system for contract processing within the scope of order processing. For this purpose, the personal data collected from you as part of the order is transmitted in encrypted form to a service provider located within a country of the European Union or the European Economic Area.
Use of PayPal
All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=en_US
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal, we pass your payment data on to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 (1) lit. b GDPR and only insofar as this is necessary for payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR based on PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check regarding the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). Insofar as score values flow into the result of the credit report, these are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but is not limited to, address data. Further data protection information, including the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to be entitled to process your personal data if this is necessary for contractual payment processing.
Use of Amazon Pay
If you select the "Amazon Pay" payment method, the payment processing is carried out via the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter: "Amazon Payments"), to whom we pass on the information provided during the ordering process along with information about your order in accordance with Art. 6 (1) lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this. Further information on the data protection regulations of Amazon Payments can be found at the following internet address: https://pay.amazon.com/de/help/201751600
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables a unique identification of the browser when the website is accessed again. We use cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
We also use cookies on our website for the purpose of enabling an analysis of the surfing behavior of our page visitors.
Furthermore, we use cookies for the purpose of subsequently addressing page visitors with targeted, interest-based advertising on other websites.
The processing is carried out on the basis of § 15 (3) TMG as well as Art. 6 (1) lit. f GDPR based on the legitimate interest in the purposes mentioned above.
The data collected from you in this way is pseudonymized through technical precautions. An assignment of the data to your person is therefore no longer possible. The data is not stored together with your other personal data.
You have the right to object at any time to this processing of your personal data based on Art. 6 (1) f GDPR for reasons arising from your particular situation.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can prevent the storage of cookies and the transmission of the data contained therein. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.
You can find out how to manage (and disable) cookies on the major browsers at the following links:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Use of NOSTO
This website uses Nosto, a web analysis service of Nosto Solutions GmbH | Schützenstr. 6 | 10117 Berlin or Nosto Solutions Ltd, Bulevardi 21 00180 Helsinki, Finland ("Nosto"). Nosto's services make it possible to specifically target visitors to our online shop who have already shown an interest in our shop and our products with personalized, interest-based advertising. Nosto collects and analyzes the behavior of customers in online shops and thus enables the automatic calculation and display of various types of intelligent product recommendations and other advertisements. Nosto uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Nosto server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be truncated by Nosto beforehand. Only in exceptional cases will the full IP address be transmitted to a Nosto server in the USA and truncated there. On behalf of the operator of this website, Nosto will use this information to evaluate your use of the website, to show you personalized recommendations, to compile reports on website activity, and to provide other services related to website usage and internet usage to the website operator.
Use of Google reCAPTCHA
We use the reCAPTCHA service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. The query serves the purpose of distinguishing whether the input is made by a human or by automated, machine processing. The query includes sending the IP address and optionally other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and further used there. However, your IP address will be truncated by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser within the scope of reCaptcha will not be merged with other Google data. Your data may also be transmitted to the USA in this process. For data transfers to the USA, an adequacy decision by the European Commission, the "Privacy Shield", is in place. Google participates in the "Privacy Shield" and has submitted to its guidelines. By pressing the query, you consent to the processing of your data. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
Further information on Google reCAPTCHA as well as the associated privacy policy can be found at: https://www.google.com/privacy/ads/
Use of Google Analytics
We use the web analysis service Google Analytics from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. The data processing serves the purpose of analyzing this website and its visitors. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.
Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated on this website. As a result, your IP address is truncated by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Your data may be transmitted to the USA. For data transfers to the USA, an adequacy decision by the European Commission is in place. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR based on the legitimate interest in the demand-oriented and targeted design of the website. You have the right to object at any time to this processing of your personal data based on Art. 6 (1) f GDPR for reasons arising from your particular situation.
You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link [https://tools.google.com/dlpage/gaoptout?hl=en]. To prevent tracking by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when visiting this website. You must perform the opt-out on all systems and devices used for this to have a comprehensive effect. If you click here, the opt-out cookie will be set: Disable Google Analytics.
Further information on the terms of use and data protection can be found at https://marketingplatform.google.com/about/analytics/terms/us/ or at https://policies.google.com/?hl=en.
Use of Google Adwords Conversion Tracking
We use the online advertising program "Google AdWords" on our website and, in this context, conversion tracking (visitor action evaluation). Google Conversion Tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have limited validity, do not contain any personal data, and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Every Google AdWords customer receives a different cookie. Therefore, there is no way that cookies can be tracked across the websites of AdWords customers.
The information obtained using the conversion cookie serves the purpose of creating conversion statistics. Here we learn the total number of users who clicked on one of our ads and were redirected to a page provided with a conversion tracking tag. However, we do not receive any information that personally identifies users. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR from the legitimate interest in targeted advertising and the analysis of the impact and efficiency of this advertising.
You have the right to object at any time to this processing of your personal data based on Art. 6 (1) f GDPR for reasons arising from your particular situation.
To do this, you can prevent the storage of cookies by selecting the appropriate technical settings in your browser software. However, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You will then not be included in the conversion tracking statistics.
Furthermore, you can disable personalized advertising in the settings for advertising on Google. Instructions on how to do this can be found at https://support.google.com/ads/answer/2662922?hl=de In addition, you can disable the use of cookies by third-party providers by visiting the deactivation page of the Network Advertising Initiative at [suspicious link removed] and implementing the further opt-out information mentioned there.
Further information as well as Google's privacy policy can be found at: https://policies.google.com/privacy?hl=en
Use of Pinterest
The controller has integrated components from Pinterest Inc. on this website. Pinterest is a so-called social network. A social network is a social meeting place operated on the internet, an online community that usually allows users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or allows the internet community to provide personal or company-related information. Pinterest allows users of the social network to publish, among other things, image collections and individual images as well as descriptions on virtual pinboards (so-called pinning), which can then in turn be shared (so-called repinning) or commented on by other users.
The operating company of Pinterest is Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA.
Each time one of the individual pages of this website, which is operated by the controller and on which a Pinterest component (Pinterest plug-in) has been integrated, is accessed, the internet browser on the information technology system of the data subject is automatically triggered by the respective Pinterest component to download a display of the corresponding Pinterest component from Pinterest. More information about Pinterest is available at https://pinterest.com/. As part of this technical procedure, Pinterest gains knowledge of which specific subpage of our website is visited by the data subject.
If the data subject is logged into Pinterest at the same time, Pinterest recognizes with each access to our website by the data subject and for the entire duration of the respective stay on our website, which specific subpage of our website the data subject is visiting. This information is collected by the Pinterest component and assigned by Pinterest to the respective Pinterest account of the data subject. If the data subject clicks on one of the Pinterest buttons integrated on our website, Pinterest assigns this information to the personal Pinterest user account of the data subject and stores this personal data.
Pinterest receives information via the Pinterest component that the data subject has visited our website whenever the data subject is logged into Pinterest at the same time as calling up our website; this occurs regardless of whether the data subject clicks on the Pinterest component or not. If such a transmission of this information to Pinterest is not intended by the data subject, they can prevent the transmission by logging out of their Pinterest account before calling up our website.
The privacy policy published by Pinterest, which is available at https://about.pinterest.com/privacy-policy, provides information on the collection, processing, and use of personal data by Pinterest.
Use of YouTube
We use the function to embed YouTube videos from YouTube LLC. (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube") on our website.
YouTube is a company affiliated with Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos stored on YouTube in an iFrame on the website. The "Extended Data Protection Mode" option is activated. This means that YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there.
Further information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in the YouTube privacy policy (https://www.youtube.com/t/privacy).
Duration of Storage
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial retention periods, and then deleted after the deadline expires, unless you have consented to further processing and use.
Rights of the Data Subject
If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, and data portability. Furthermore, according to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) f GDPR as well as to processing for the purpose of direct marketing.
Please contact us upon request. The contact details can be found in our imprint.
Right to lodge a complaint with the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.
AS OF: May 24, 2018