This is a courtesy translation. Only the German version of this page is legally binding.
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Echt Bärig
Webergasse 29
96450 Coburg
Germany
Telephone: +49 9561 799090
E-mail: info@echt-bärig.de
Thank you for your interest in our bear shop. Protecting your personal data matters to us. Below we explain what data we collect, what we use it for, and what rights you have.
Contact form
Our website offers you a contact form for getting in touch. Using it involves the collection of personal data. We collect only the data needed to record your enquiry and respond to it.
The data is collected and processed for the purpose of answering your enquiry. The legal basis for the processing is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time. This does not affect the lawfulness of the processing carried out up to the point of withdrawal. Please send your withdrawal by e-mail to info@echt-bärig.de.
How long we store your data depends on the nature of your enquiry or request. Where no statutory retention or archiving obligation applies to it, the data is deleted as soon as your enquiry has been dealt with.
Only those people authorised to deal with your enquiry have access to your data.
Use of cookies
(1) We use “cookies” on our website in the form of so-called “session cookies”, which are stored only for as long as you are using our site. Cookies are small text files that allow us to store specific information relating to you on your computer while you visit our pages. Cookies help us to establish how often our website is used and how many people use it, and to make what we offer you as secure, convenient and efficient as possible. Cookies allow our systems to recognise the user’s device and to make any preferences available immediately. As soon as a user accesses the platform, a cookie is transferred to the hard drive of that user’s computer. Cookies help us to improve our website and to offer you a better and more tailored service. They allow us to recognise your computer when you return to our website.
A cookie usually contains the name of the domain from which the cookie data was sent, together with information about the age of the cookie and an alphanumeric identifier.
The cookies we use store only the data about your use of the website explained above. This is not linked to you personally, but by assigning an identification number to the cookie (“cookie ID”). The cookie ID is not combined with your name, your IP address or similar data that would make it possible to link the cookie to you.
(2) If you would rather cookies were not used, you can set your browser so that it does not accept the storage of cookies, restricts it to certain pages, or informs you whenever a cookie is about to be set. Please note that you may then be able to use our website only to a limited extent, or not at all. If you want to accept only our own cookies and not those of our service providers and partners, you can choose the “block third-party cookies” setting in your browser.
Server log files
To guarantee that the website works, the website’s provider collects information in so-called server log files, which your browser transmits automatically, and stores it for three days. This information is:
- IP address
- Time
- “Request”
- Status code
- Bytes transferred
- “Useragent”
This data cannot be attributed to any particular person, and it is not combined with other sources of data. We reserve the right to have it checked after the fact if we have concrete grounds to suspect unlawful use.
Fonts
The fonts used on this website are served exclusively from our own server. No connection to third-party servers is made in the process, and in particular none to Google Fonts. Your IP address is not transmitted to anyone for this purpose.
Finding parcel shops and packing stations
During checkout you can choose a DHL Packstation, a DHL branch or a parcel shop as your delivery address. To show the map we use OpenStreetMap (OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). When the map loads, your IP address is transmitted to OpenStreetMap. The map is not loaded until you open the location search yourself.
The location search itself runs through an interface provided by DHL (Deutsche Post DHL Group). The legal basis is Art. 6(1)(b) GDPR, because choosing a collection point is part of performing the contract.
Processing your order
When you order from us, we process the data needed to do so: your name, your delivery and billing address, your e-mail address, your telephone number where applicable, and the details of the order and the payment. Without this data we cannot perform the contract.
The legal basis is Art. 6(1)(b) GDPR (performance of a contract). For retention under tax and commercial law, Art. 6(1)(c) GDPR also applies: we keep invoices and accounting records for ten years in accordance with § 147 AO and § 257 HGB (German tax and commercial codes). Once that period has expired, the data is deleted.
Payment service providers
We work with external service providers for payment. Which data is passed on depends on the payment method you choose.
- PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg). When you pay via PayPal, we transmit your name, your address, your e-mail address and the amount payable to PayPal. PayPal processes that data as a controller in its own right; PayPal’s own privacy policy applies.
- Advance payment by bank transfer. Here we pass no data to third parties. Your bank handles the transfer itself.
- Credit and debit card via Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). For this payment method we transmit your name, your address, your e-mail address and the amount payable to Stripe. The card details themselves you enter directly with Stripe; we neither see nor store them. Stripe processes that data as a controller in its own right; Stripe’s own privacy policy applies. To prevent fraud, Stripe loads a script from js.stripe.com on the checkout page and may collect information about your device; for this, and for any transfer to Stripe Inc. in the United States, the European Commission’s standard contractual clauses apply.
The legal basis is Art. 6(1)(b) GDPR.
Shipping
To deliver your order we pass your name and your delivery address to Deutsche Post DHL Group (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany).
If, when ordering, you release your e-mail address or telephone number for shipment notifications, we pass those to DHL as well, so that you can be told when your parcel is due. That disclosure is made only with your consent under Art. 6(1)(a) GDPR and can be withdrawn at any time. Passing on your name and address, by contrast, is necessary in order to perform the contract (Art. 6(1)(b) GDPR).
Customer account and wishlist
You can create a customer account with us, but you do not have to — ordering as a guest works just as well. In the account we store your address details and your order history, so that you do not have to enter everything again next time. If you put items on a wishlist, we store that in your account too.
The legal basis is Art. 6(1)(b) GDPR. You can have your customer account deleted at any time; data covered by a statutory retention obligation stays stored until that period has expired.
Withdrawing from an order
If you declare a withdrawal using the form on our website, we process the data you enter there in order to handle the withdrawal and to send you the confirmation required by law. We record the time of your declaration, because the deadlines depend on it. The legal basis is Art. 6(1)(b) and (c) GDPR.
Your rights
You have the right at any time:
- to request information about the data stored about you (Art. 15 GDPR),
- to have inaccurate data corrected (Art. 16 GDPR),
- to request the erasure of your data, unless a retention obligation stands in the way (Art. 17 GDPR),
- to request that processing be restricted (Art. 18 GDPR),
- to receive your data in a portable format (Art. 20 GDPR),
- to object to processing where we base it on a legitimate interest (Art. 21 GDPR),
- to withdraw consent you have given, at any time (Art. 7(3) GDPR).
A message to info@echt-bärig.de is enough. It costs you nothing.
Right to complain to the supervisory authority
If you believe that we are not processing your data lawfully, you can complain to a data protection supervisory authority. The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
No automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
Changes to this notice
We update this privacy notice when our website or the legal position changes. The version published here is the one that applies.