Privacy policy

We process your personal data exclusively for the provision of our offered services. For this purpose, your data (name, address, order information) will be forwarded to our service partners (payment, shipping) exclusively for the fulfilment of our offered services.

 

I. General information on the collection, transfer and storage period of personal data

1) We process your personal data in compliance with the provisions of the Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and all other applicable laws.

2) The primary purpose of data processing is to establish and fulfil a contractual relationship with you. The primary purpose of data processing is to establish and fulfil a contractual relationship with you. When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. The primary legal basis for this is Art. 6 para. 1 b) DSGVO. In addition, your separate consent pursuant to Art. 6 (1) a), 7 DSGVO may be used as a data protection permission provision. We also process your data in order to be able to fulfil our legal obligations, in particular in the area of commercial and tax law. This is done on the basis of Art. 6 (1) c) DSGVO. Where necessary, we also process your data on the basis of Art. 6 (1) f) DSGVO in order to protect the legitimate interests of us or of third parties.

3.) Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if you have given your express consent to do so in accordance with Art. 6 Para. 1 lit. a) DSGVO, if the transfer is necessary for the assertion, exercise or defence of legal claims in accordance with Art. 6 Para. 1 lit. f) DSGVO and there is no reason to assume that you have an overriding interest worthy of protection in not having your data passed on, in the event that the transfer is necessary in accordance with Art. 6 para. 1 lit. c) DSGVO as well as this is legally permissible and necessary for the processing of contractual relationships with you according to Art. 6 para. 1 lit. b) DSGVO. In addition to the recipients named in the respective clauses of this data protection declaration, these are, for example, recipients of the following categories: Shipping service providers, payment service providers, merchandise management service providers or service providers for order processing. In all cases, we strictly observe the legal requirements. The scope of the data transfer is limited to a minimum.

4.) We delete your personal data as soon as they are no longer required for the following purposes. After termination of the contractual relationship, your personal data will be stored as long as we are legally obliged to do so. This regularly results from legal obligations to provide proof and to keep records, which are regulated, among other things, in the German Commercial Code (Handelsgesetzbuch) and the German Fiscal Code (Abgabenordnung). The storage periods are then up to ten years. In addition, personal data may be stored for the period during which claims can be asserted against us (statutory limitation period of three or up to thirty years).

 

II. collection of personal data when contacting us by e-mail, by post and by telephone

1 Collection of personal data from customers, interested parties and suppliers

1.1 We only collect your personal data as a customer, interested party or supplier if you provide it to us voluntarily by e-mail, post or telephone. We then collect the information that comes about in the course of contacting you. This includes in particular names and transmitted contact data, date and reason for the contact. The personal data collected from you will only be used for the purpose of providing you with the requested products or services (legal basis Art. 6 para. 1 b) DSGVO), or for other purposes for which you have given your consent (legal basis Art. 6 para. 1 a) DSGVO) and which are described in this privacy policy. You have the option to revoke your consent to the processing of personal data at any time.

1.2 You are not obliged to provide the aforementioned personal data. The data provided may be necessary for the conclusion of a contract. Without the provision of the data, communication, the conclusion of a contract or the performance of a contract may not be possible.

1.3 A transfer of the data relevant in the respective individual case takes place on the basis of the legal provisions or a contractual agreement to public bodies in the presence of overriding legal provisions, to external service providers or other contractors and to other external bodies, insofar as you have given your consent or a transfer is permissible for predominant interest.

1.4 The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data provided, this is the case when the respective conversation with you has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. Insofar as the data provided is subject to retention obligations under tax and commercial law, it will be stored for the duration of the retention obligations of ten years and then deleted, unless you have consented to storage beyond this or the further processing of the data is necessary for the assertion, exercise or defence of legal claims. The legal basis for the processing of personal data for the purposes of fulfilling the legal archiving and retention obligations is Art. 6 para. 1 lit. c) DSGVO.

 

III Objection or revocation against the processing of your data

1. if you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

2. if we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the description of the functions above. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

3. you can of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details Email: info@d-light-full.de

IV. Your rights

1. you have the right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details.

2. in accordance with Art. 16 GDPR, you can immediately request the correction of incorrect or incomplete personal data stored by us. In accordance with Art. 17 GDPR, you have the right to demand the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

3. in accordance with Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR

4. pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller

5. in accordance with Art. 7 para. 3 GDPR, you have the right to revoke your consent to us at any time. As a result, we may no longer continue the data processing based on this consent in the future.

VII Up-to-dateness of this privacy policy

1. this privacy policy is currently valid and is dated July 2023.