Data protection

Responsible Website Owner:
Gute Marken Online GmbH
Christoph-Rapparini-Bogen 25
D-80639 Munich, Germany
E-mail: info@gutemarken.com Phone: +49 89 143 67 152-999

(hereinafter referred to as „We")

Represented by:
Thorsten Höllger (Managing Director)

Data Protection Supervisor:
Gerrit Guggenberger
E-mail: dataschutz@gutemarken.com
Tel: 089 143 67 152-521

Gute Marken Online GmbH operates under www.nicowa.com (hereinafter referred to as the „Site") an online shop with products made by NICOWA Europe GmbH, Birketweg 31 80639 München (hereinafter referred to as the „Manufacturer") and collects personal data. This data protection statement shall advise you to which extent and purposes we collect personal data and which rights you have.

Data subjects’ rights:
It should be noted that the following rights relating to our processing of your personal data can be asserted at any time free of charge:
Right of access Art. 15 GDPR (General Data Protection Regulation)
Right to rectification Art. 16 GDPR
Right to erasure (‘right to be forgotten’) Art. 17 GDPR
Right to restriction of processing Art. 18 GDPR
Right to data portability Art. 20 GDPR
In the event that processing is based on safeguarding justified interests: Right to object Art. 21 GDPR
In the event that processing is based on consent: Right to withdraw consent Art. 7 Para. 3 GDPR

Right of complaint:
It should also be noted that you have a right to lodge a complaint with a data protection authority when you believe that processing of your data violates data protection laws. Such complaints can be lodged, e.g., with the following supervisory authority:
Bavarian Data Protection Supervisory Authority
Promenade 606
D-91522 Ansbach, Germany

From this site you can subscribe to our newsletter which informs you about our latest interesting offers.

We use the so-called double opt-in process for subscriptions to our newsletter in which you are sent, after your subscription, an e-mail to the e-mail address you entered and are asked to confirm that you request reception of our newsletter. In addition, we will store the IP address from which the subscription was made and the times of subscription and clicking of the confirmation link. The purpose of this procedure is to document your subscription and prevent any potential abuse of your personal data.

Any further information that we request besides your e-mail address is voluntary data that we use exclusively in order to address you personally.

After your subscription to the newsletter we will use your e-mail address to send you the newsletter for which we will ask your consent during the registration process. You can revoke your consent at any time or unsubscribe the newsletter. We will store your data only until you unsubscribe the newsletter or revoke your consent. You can unsubscribe the newsletter at any time either by sending a message to the above-described contact option or via the relevant link in the newsletter.

You can visit our site without entering any personal details. We will only store access details without any personal references, such as the name of our Internet service provider, the site from which you visit us or the name of the requested file. This data is assessed exclusively for the purpose of improving our offers and cannot be traced back to you.

We collect the following data in this process:

• Browser type
• Visited sites in our website
• Operating system
• Anonymized IP address

Please, note: This data is only stored and used in anonymized/pseudonymized form.
This is usually done by using log files and cookies. More detailed information about the use of cookies is given below.

We use this data to safeguard our justified interests

• that the website can be displayed on your computer,
• to ensure the functionality of the website,
• to optimize our website,
• to ensure the security of our information technology systems.

The legal basis of our data processing is Art. 6 Para. 1 Lit. f GDPR.
The data will be erased when it is no longer required to achieve the purpose of its collection. Data that we collect for the purpose of providing the site will be erased when the respective session ends.

Personal data is collected when you make such data available to us while ordering goods or opening a customer account. All customer data is stored and processed by us in compliance with applicable data protection laws.

The following data is collected when an order is placed:

• Surname, first name, form of address
• Payment details
• Contact data (E-mail, phone)
• Address and order information

We use the data you make available to us without your separate consent exclusively for the fulfillment and processing of your order. The aforesaid also applies to the disclosure of your data to shipment service providers for the delivery of your order. If required for payment processing we will also make your data available to our principal bank or an external payment service provider. Obligatory data that is necessary for processing an order is marked separately. Further information can be stated on a voluntary basis.

You may create a customer account where we save your data for future purchases. If you create a customer account, the storage of the data provided by you for this purpose is revocable. Your customer account and the relevant data can be deleted at [please, add]. If your data is subject to a legal retention period its processing is restricted and such data is deleted at the end of the legal retention period.

The data will be blocked for further use upon completion of the contractual relationship and deleted as soon as the retention period under commercial or fiscal laws has expired.

Art. 6 Para. 1 Lit. b GDPR is the legal basis for processing such data for handling your order as well as creation and administration of your customer account. The legal basis for storing your data during retention periods under commercial or fiscal laws is Art. 6 Para. 1 Lit. c GDPR.

We will only disclose the data provided by you during the ordering process to the manufacturer when you have given your consent during the ordering process. The manufacturer will use your personal data for its own advertising purposes as well as for market and opinion research. You can revoke your consent completely or partly at any time with effect for the future.

Our company regularly checks customers for creditworthiness whenever contracts are concluded; if there is a legitimate interest, we also check existing customers. We therefore collaborate with Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Germany, which provides us with the relevant data. For this purpose, we pass on your name and your contact data to Creditreform Boniversum GmbH. Information about Art. 14 EU General Data Protection Regulation (GDPR) pursuant to which Creditreform Boniversum GmbH processes your data can be found here: www.boniversum.de/EU- GDPR

We conduct a creditworthiness check only when you choose for your order a method of payment where we will bear the payment default risk. In such case we process your personal data in relation to an automated decision whether a purchase contract can be concluded on the basis of your selected means of payment. This decision is exclusively reliant on the automated processing of your personal data during a creditworthiness check. If your creditworthiness check proves positive, you can complete your order with the selected means of payment. Thus, the decision is made without verification of your buying interest or any other impact on the decision-making process by our staff members.

Purpose der processing is the provision of information on your credit rating. This processing is required in order to conclude a contract with you and safeguard our legitimate interest to avoid payment defaults. Legal basis for this processing is Art. 6 Para.1 Lit. a, f GDPR.

Your personal data is encrypted in the order process 128bit SSL for transmission via the Internet. Credit card details are not stored but acquired directly from our payment service provider and processed. We protect our website and all other systems with technical and organizational measures against loss, destruction, access, manipulation or disclosure of your data by unauthorized persons. Access to your customer account is only possible after input of your personal password. You should always treat your access information confidentially and close the browser window after finalizing communication with us, notably if you use your computer together with third parties.

This website uses Google Analytics, a web analyzing service of Google Inc. („Google"). Google Analytics uses so-called „Cookies", these are text files which are saved on your computer and make it possible to analyze your use of the website. The information about your use of the website generated by the cookie is generally transmitted to a server of Google in the USA and stored there. However, if IP anonymization has been activated on this website, your IP address will previously be shortened by Google within the European Union Member States or the other Signatory States of the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be sent to a Google server in the USA and then shortened. Google will use this information on behalf of the operator of this website to analyze your use of the website, to gather reports about the website activities for the website operator and to render further services related to the use of the website and the internet. The IP address transferred from your browser within the framework of Google Analytics will not be merged with other Google data.

You can change the settings of your browser software to keep the cookies from being saved. However, we would like to point out that you may then not be able to use all the functions of this website. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of these data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

This website uses Google Analytics including the „_anonymizelp()‘‘ add-on. The IP addresses are shortened before being further processed; a direct reference to persons can thus be excluded. Hence, any personally identifiable elements in data collected about you are excluded at once and this personal data immediately deleted.

We use Google Analytics in order to analyze use of our website and make continual improvements. We use the generated statistics to improve our offer and make it more interesting for you as a user. For exceptional cases where personal data is transmitted to the USA Google has subjected itself to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. Legal basis for the use of Google Analytics is Art 6 Para. 1 S. 1 Lit. f GDPR.

In addition, this site uses Google Analytics reports in relation to demographic features and interests which save demographic features, such as age and gender, in a cookie. Such data cannot be traced back to a specific person and can be deactivated at any time in the display settings. Further details regarding Google’s terms of service can be found at: www.google.com/intl/de/privacy

If you not wish to be tracked by Google Analytics you can deactivate tracking here:deactivate now

Other web analysis services

ADTECH

This website uses the services ADTECH GmbH, Robert – Bosch-Str. 32, D-63303 Dreieich, Germany (hereinafter referred to as „ADTECH"). ADTECH facilitates delivery of banners on our website. ADTECH uses cookies to capture the below data:

• Browser type,
• Operating system,
• Date and time at which a certain banner was delivered.

ADTECH uses this information in order to measure the delivery of banners, such as the number of clicks on a banner or how often a specific banner has been delivered to an individual user.

ADTECH uses this data to generate a report for us and aggregates the data acquired in the individual networks internally for statistical purposes.

If you do not wish to participate in such measurements by ADTECH you can opt out by clicking the following link: deactivate now

We process this data in order to safeguard our legitimate interests of assessing the efficiency of our advertisements, to display banners to you that match your interests and avoid showing the same advertisements repeatedly to you. Legal basis for this processing is Art. 6 Para. 1 Lit. f GDPR.

Yahoo! Analytics

This website uses Yahoo! Analytics, a service of Oath (EMEA) Limited (previously known as Yahoo! EMEA Limited), 5-7 Point Square, North Wall Quay, Dublin 1, Ireland (hereinafter referred to as "Yahoo!"). Yahoo Web Analytics is a browser-based system used to collect information about visitors to our customers’ websites.

Information collection and use

Yahoo Web Analytics uses web beacons and cookies to collect data about visitors to our customer’s websites. This data is sent to Yahoo by your web browser as part of your interaction with a customer’s website. The data collected commonly includes IP address, time spent on webpages, links clicked, or advertisements viewed on those pages. This data is collected by Yahoo Web Analytics so that Yahoo can report statistical information. Yahoo Web Analytics cookies do not contain personally identifiable information such as name, age, or phone number.

Yahoo! collects this information on our behalf. We can also use only the browser data collected through Yahoo Web Analytics in order to improve our products and services and provide advertisements about goods and services of interest to users.

Your opt-out choices

Most browsers are initially set up to accept cookies. If you would prefer, you can set your browser to reject cookies, or to reject third party cookies only. If you reject cookies, you may not be able to sign in or use other features of websites that rely on cookies.

If you do not wish to have information about your above-described activities collected and processed by Yahoo, you can opt-out here: deactivate now

We use Yahoo! Analytics in order to safeguard our legitimate interests of matching the website to your needs and continually improve it. Legal basis of this data processing is Art. 6 Para. 1 Lit. f GDPR.

The Reach Group

On this website the web analysis service provider The Reach Group GmbH, Am Karlsbad 16, D-10785 Berlin, Germany, collects and stores data from which user profiles are created by using pseudonyms. The required information is stored and processed during your visits to the website. These user profiles are used to analyze visitor behavior for the purpose of improving and customizing our offerings and to deliver personalized advertisements. Reference to your person or your place of residence cannot be made at any time. Even now, such correlation is not possible. With effect for the future you can at any time revoke your consent to the collection and storage of your data for the purpose of web analytics by clicking on the following link: http://hal9000.redintelligence.net/retarqetinqmanaqer.php?c=491296&h=2486ce ac931d

We process this data in order to safeguard our legitimate interests of assessing the efficiency of our advertisements, to display banners to you that match your interests and avoid showing the same advertisements repeatedly to you. Legal basis for this processing is Art. 6 Para. 1 Lit. f GDPR

We use cookies on various pages in order to make visiting our website more attractive and to enable the use of certain functions. These concern small text files that are saved on your computer. Most of the cookies we use will be erased from your hard disk when the browser session ends (so-called session cookies). Other cookies will remain on your computer and help us to recognize your computer when you next visit our website (so-called persistent cookies). These cookies serve to greet you with your user name and save you from re-entering your password for subsequent orders or from filling out forms with your details. You can configure your browser so that you are advised of the setting of cookies and can decide on accepting cookies on a case-by-case basis or refuse to accept cookies in certain cases or generally. Non-acceptance of cookies may impair the functionality of our website.

We use cookies in order to safeguard our legitimate interests in improving the user-friendly design of our website and customizing and optimizing our services for you.

Legal basis for this processing is Art. 6 Para. 1 Lit. f GDPR.

This website uses Google Analytics, a web analysing tool from Google Inc. ("Google"). Google Analytics uses "cookies". These are text files that are stored on your computer and they make it possible to analyse your use of the website. The information that cookies generate about your use of this website is usually sent to a Google server in the USA and stored there. If IP-anonymisation has been enabled on this website, Google will first truncate your IP address within the area of the Member States of the European Union or in other countries that are contracting parties to the Agreement on the European Economic Area. Please note that IP-anonymisation has been enabled on this site.

The full IP address will only be sent to a Google server in the USA and truncated there in exceptional cases. Google will use this information on behalf of the operator of this website in order to analyse your use of the website, to compile reports on the website activities and to provide the website operator with additional services connected with the use of the website and the internet. The IP address forwarded by your browser within the context of Google Analytics is not combined with other Google data.

You can adjust your browser software accordingly to prevent cookies from being stored. However, we would like to point out that if you do so, you may not be able to fully utilise all functions of the website. You can also prevent the gathering of data generated by the cookie and relating to your use of the website (including your IP address) in Google, as well as the processing of this data by Google if you download and install the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Furthermore, this site uses Google analytics reports which store demographic features such as age and gender in a cookie and display performance in terms of demographic features and interests. This data cannot be attributed to a specific person and can always be disabled by means of the display settings. Further information about Google’s provisions is available at www.google.com/intl/de/privacy

There is no data transferred to countries outside of the European Union and such transfer is not planned.

• The legislation has imposed a number of data retention terms and periods, most of which make a retention period of ten (10) years mandatory but may also be shorter. In addition, there may deviations due to statutory or contractual retention periods.
• The relevant data is routinely deleted upon the expiry of these data retention periods if it is no longer necessary for contractual fulfillment.
• Any data not affected by the above will be deleted when the when the purpose ceases to apply.

As at: May 2018