data protection

Privacy Statement


The use of this website may involve the processing of personal data. In order for you to be able to understand these processing operations, we would like to provide you with the following information to give you an overview of these processing operations. In order to ensure fair processing, we would also like to inform you about your rights under the European Data Protection Basic Regulation (DSGVO) and the Federal Data Protection Act (BDSG).

Responsible for data processing is A-Z GartenHaus GmbH, Bahrenfelder Chaussee 49, Haus B, 22761 Hamburg (hereinafter referred to as "we" or "us").

Table of Contents


General information

a. Contact us

b. General information on data processing

c. Duration of storage

d. Technical service providers

Processing Server Log Files

Contact possibilities and inquiries

Data processing for purchase processing

Data processing for opening a customer account

Cookies & Web Analytics Services

Newsletter & Postal Advertising

Tracking & Retargeting

sweepstakes

social plugins

About our Facebook page

Integrated services and contents of third parties

Send review reminders by email

applications

Revocation of consent

your rights

right of objection

data protection officer

Complaint to a supervisory authority


1. general information


a. Contact us
If you have any questions or suggestions regarding this information, or if you would like to contact us to assert your rights, please address your inquiry to

A-Z GartenHaus GmbH
Bahrenfelder Chaussee 49, House B
22761 Hamburg, Germany
Germany (German)
Phone: +49 40 5379978-50
Fax: +49 40 5379978-99
E-mail: datenschutz@gartenhaus-gmbh.de

b. General information on data processing
When using this website, personal data may be processed. The data protection term "personal data" refers to all information relating to a specific or identifiable individual. The IP address can also be a personal date. An IP address is assigned to each device connected to the Internet by the Internet provider so that it can send and receive data. When you use the Site, we collect information that you yourself provide. We also automatically collect certain information about your use of the Site during your visit to the Site. Even in the case of an application, the data transmitted is processed for the purposes of the selection process.

We process personal data in compliance with the relevant data protection regulations, in particular the DSGVO and the BDSG. Data processing by us will only take place on the basis of legal permission. When you use this website, we process personal data only with your consent (Art. 6 para. 1 sentence 1 a) DSGVO), to fulfil a contract to which you are a party, or at your request to carry out pre-contractual measures (Art. 6 para. 1 sentence 1 b) DSGVO), to fulfil a legal obligation (Art. 6 para. 1 sentence 1 a) DSGVO), to fulfil a legal obligation (Art. 6 para. 1 sentence 1 a) DSGVO), to fulfil a contract to which you are a party. 6 para. 1 sentence 1 c) DSGVO) or if the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail (Art. 6 para. 1 sentence 1 f) DSGVO).

c. Duration of storage
Unless otherwise stated in the following notices, we will only store the data for as long as is necessary to achieve the processing purpose or to fulfil our contractual or statutory obligations. Such statutory storage obligations may arise in particular from commercial or tax law regulations. If data cannot be deleted due to storage obligations, they will be blocked for further processing.

d. Technical service providers
Unless otherwise stated in the following information, the data will be processed on the servers of technical service providers commissioned by us for this purpose. These service providers process the data only according to express instructions and are contractually obliged to guarantee sufficient technical and organisational measures for data protection.

2. Processing of server log files

When using our website for purely informative purposes, general information is initially stored automatically (i.e. not via registration), which your browser transmits to our server. This includes by default: browser type/version, operating system used, page accessed, previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code.

Processing is carried out to safeguard our legitimate interests and is based on the legal basis of Art. 6 Para. 1 S. 1 f) DSGVO. This processing serves the technical administration and security of the website. The stored data will be deleted after fulfilment of the purpose unless there is a justified suspicion of illegal use on the basis of concrete indications and further examination and processing of the information is necessary for this reason.


3. Contact possibilities and inquiries


If you contact us by telephone, e-mail or via a contact form, the data you provide will be stored by us on the basis of Art. 6 para. 1 lit. a DSGVO in order to answer your enquiry. The establishment of contact is logged in order to be able to prove this according to the legal requirements. By submitting a request on our website, you consent to the processing necessary to fulfill that request. We use a customer service platform of Zendesk Inc. to collect and organize e-mails and contact requests. (1019 Market St San Francisco, CA 94103, USA). All incoming e-mails and inquiries are managed via this platform. For this purpose, necessary data such as surname, first name, postal address, telephone number, e-mail address are transmitted to Zendesk in order to answer your support ticket. For more information on data processing by Zendesk, please refer to Zendesk's Privacy Policy at: https://www.zendesk.de/company/customers-partners/privacy-policy. In this case, the data processing will take place on the basis of our legitimate interests in receiving and processing your inquiry, Art. 6 Para. 1 lit. f DSGVO.
You have the right to revoke your consent at any time with effect for the future.


Zendesk Chat Widget:
The Zendesk Chat Widget, which is provided by Zendesk Inc (1019 Market St San Francisco, CA 94103, USA), is used to contact our Customer Support Team. The personal data transmitted when using the widget will be processed by us to respond to your request. Contact via the widget constitutes consent pursuant to Art. 6 Para. 1 lit. a DSGVO. Zendesk stores personal data in the USA; DSGVO-compliant processing is ensured by Privacy Shield certification. Further information about the Privacy-Shield can be found here:
https://www.privacyshield.gov/participant?id=a2zt0000000TOjeAAG&status=Active


4. Cookies & web analysis services


Cookies:
We use cookies on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and allows our web server to recognize other services.
If this use of cookies results in the processing of personal data, this is based on the legal basis of Art. 6 Para. 1 S. 1 f) DSGVO. This processing serves our legitimate interest in making our website more user-friendly, effective and secure.
In particular, we use permanent cookies ("persistent cookies") in order, for example, to make the contents of your shopping basket available across sessions. These cookies are not deleted automatically. However, you can delete the cookies in the security settings of your browser at any time. You can also object in principle to the use of cookies by your browser settings. Further information can be obtained from the Federal Office for Information Security at https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmassnahmen/Cookies/cookies_node.html.
Please note that when you delete all cookies in your browser, any opt-out cookies that have been set will also be removed. In addition, the use of the incognito/private mode of your browser and the use of another browser may result in data being collected again.

Web analytics services:
Google Analytics:
We use the Google Analytics service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") to evaluate our website visitors. Google uses cookies. The information generated by the cookie about users' use of the website is generally transmitted to and stored by Google on servers in the United States. Google will use this information on our behalf to evaluate the use of our website by users, to compile reports on activities within this website and to provide us with other services relating to the use of this website and the Internet. Pseudonymous user profiles can be created from the processed data.


We use Google Analytics only with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.


The IP address transmitted by the user's browser is not merged with other data held by Google. Users may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if you do this you may not be able to use the full functionality of this website.
The legal basis for the use of this service is Art. 6 para. 1 sentence. 1 f DSGVO. As a user, you can prevent the collection of information generated by the cookie by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
If you visit our website via a mobile device, you can deactivate Google Analytics by clicking on this link.
Google is certified under the Privacy Shield Agreement, which guarantees compliance with European data protection laws. (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).


Hotjar:
In order to ensure the functionality and user-friendliness of our website, we use the "Hotjar" service of Hotjar Ltd ("Level 2, St Julians Business Centre, 3, Elia Zammit Street St Julians STJ 1000, Malta) due to legitimate interest pursuant to Art. 6 Para. 1 lit. f. Hotjar uses cookies. You can prevent the collection of data by Hotjar Ltd. at any time by following this link and activating the Hotjar opt-out. By clicking on "Deactivate Hotjar" no more data will be collected by Hotjar as long as the cookie is active.


trbo:
We use "trbo" (trbo GmbH, Römerstraße 6, 80801 Munich, Germany) to show users personalized content (such as "recently viewed products"). In this way, we ensure that we only show you content that is of interest to you. trbo uses cookies stored in your browser for this purpose. User profiles are collected in accordance with the provisions of the German Telemedia Act and created on the basis of user IDs (pseudonyms). In the event of revocation, trbo undertakes to immediately delete the personal data, unless mandatory statutory storage obligations preclude deletion. The revocation and the request for information may be sent informally by post to trbo GmbH, Römerstraße 6, 80801 Munich, Germany, or by e-mail to the electronic mailbox info@trbo.com at any time. You can also opt out of trbo tracking at any time by using an opt-out cookie. Simply click on the following link: http://track2.trbo.com/optout.php As long as the cookie is active, trbo will then no longer collect any data.


epoq:
On this website we use technologies from epoq internet services GmbH (www.epoq.de). This involves the collection and storage of data from which user profiles are created using pseudonyms. These user profiles are used to analyse visitor behaviour and are evaluated to improve and tailor our services. Cookies can be used for this purpose. With the Epoq service, neither we nor the operators of the respective analysis tool can directly collect personal information that allows conclusions to be drawn about the identity of the user. Further information on data protection at Epoq can be found here. If you want to prevent pseudonymised user profiles from being created as part of a web analysis, you can explain this using the settings of your web browser. You can set your web browser so that it notifies you when cookies are set or generally rejects cookies. However, this may prevent the use of various services offered by our website.

5. Newsletter & Postal Advertising


You can object to this use of your e-mail address at any time by sending a message to the contact option described above or via a link provided for this purpose in the order confirmation or advertising e-mail, without incurring any costs other than the transmission costs according to the basic tariffs. Alternatively, you can unsubscribe via the following links:
Germany: https://seu.cleverreach.com/f/30858-115911/wwu/
Austria: https://seu.cleverreach.com/f/30858-116213/wwu/
Switzerland: https://seu.cleverreach.com/f/30858-116214/wwu/
The newsletter is sent as part of a processing on our behalf by a service provider to whom we forward your e-mail address for this purpose.
This service provider is located within a country of the European Union or the European Economic Area.
E-mail advertising with newsletter registration
If you subscribe to our newsletter, we will use the data required for this purpose or provided separately by you in order to send you our e-mail newsletter regularly on the basis of your consent pursuant to Art. 6 Para. 1 S. 1 lit. a DSGVO.


You can unsubscribe from the newsletter at any time and either by sending a message to the contact person described above or via a link in the newsletter provided for this purpose. After you have unsubscribed, we will delete your e-mail address unless you have expressly consented to the further use of your data or we reserve the right to use your data for other purposes, which is permitted by law and about which we will inform you in this declaration.


Use of data for postal advertising and your right of objection


Furthermore, we reserve the right to store your first and last name, your postal address and - insofar as we have received this additional information from you within the framework of the contractual relationship - your title, academic degree, year of birth and your professional, branch or business name in summarised lists pursuant to Art. 6 Para. 1 lit. f and to use them for our own advertising purposes, e.g. to send you interesting offers and information on our products by post. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact person described above.

6. Tracking & Retargeting


Google AdWords Remarketing
We use Google Adwords to advertise this website in Google search results and on third-party websites. When you visit our website, Google sets a remarketing cookie, which automatically uses a pseudonymous cookie ID and the pages you visit to enable interest-based advertising. This serves to safeguard our predominantly legitimate interests in optimum marketing of our website within the framework of a weighing of interests pursuant to Art. 6 Para. 1 S. 1 lit. f DSGVO. The data collected in this context will be deleted after we have ceased to use Google AdWords Remarketing for the intended purpose and at the end of its use.


Further data processing will only take place if you have agreed to Google linking your web and app browser history to your Google account and using information from your Google account to personalize ads you see on the web. In this case, if you are logged in to Google while browsing our site, Google will use your information in conjunction with Google Analytics data to create and define cross-device remarketing audience lists. Google will temporarily link your personal data to Google Analytics data in order to create target groups.


Google AdWords Remarketing is a service provided by Google LLC (www.google.de). The Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Due to this agreement between the USA and the European Commission, the latter has determined an appropriate level of data protection for companies certified under the Privacy Shield.


You can deactivate the remarketing cookie via this link. You can also contact the Digital Advertising Alliance to find out how to set cookies and to configure your settings.


Criteo
We also work with the advertising network "Criteo" (Criteo SA, 32 Rue Blanche, 75009 Paris, France) to tailor displayed advertising to the interests of the user. Criteo uses cookies to recognize users. It is also not possible to deduce the identity (e.g. name) of the user. If you no longer wish to see our personalised product banners or would like more information about this technology, please click on the following link: http://www.criteo.com/de/datenschutzrichtlinie. On this page you will find under point three the possibility for an opt-out.


Taboola
This website uses technology from Taboola Inc., 28 West 23rd St. 5th fl., New York, NY 10010, USA. Taboola uses cookies to determine which offers you use and which of our pages you visit. This service helps you discover content on third-party websites. The cookie enables us to create pseudonymous user profiles by collecting device-related data and log data. Tracking (i.e. the collection of data generated by the cookie and related to the use of the website) can be deactivated at any time. Please follow the instructions on https://www.taboola.com/privacy-policy for this purpose.


Facebook Website Custom Audiences

We use communication tools of the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, in particular the product "Website Custom Audiences". This serves to safeguard our predominantly legitimate interests in optimal marketing of our website within the scope of a weighing of interests pursuant to Art. 6 Para. 1 S. 1 lit. f DSGVO. In principle, only pseudonymised data is transmitted to Facebook for analysis and marketing purposes. The Facebook cookie is used for the Custom Audiences website product. Further information about the purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your setting options for the protection of your privacy can be found in Facebook's data protection guidelines, which can be found at https://www.facebook.com/ads/website_custom_audiences/ and https://www.facebook.com/privacy/explanation, among other places. If you wish to object to the use of Facebook's Custom Audiences website, you can do so at https://www.facebook.com/ads/website_custom_audiences/ .

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

 

Bing Ads
We use Bing Ads, a service of Microsoft Corporation, Microsoft Way Redmond, WA 98052-7329, USA, due to a justified interest in the optimal marketing of our website according to Art. 6 Para. 1 S. 1 lit. f DSGVO. For this purpose, a cookie is set on the website visitor's computer in order to play out personalised advertising. Data is collected and stored in anonymous form. You can call up Microsoft's data protection conditions for handling collected data under the following link: https://privacy.microsoft.com/de-de/privacystatement/. Bing Ads can be deactivated at any time. Please follow the instructions at http://choice.microsoft.com/de-DE/opt-out.
Microsoft is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active).


Pinterest
This website uses technologies of Pinterest Inc., 635 High Street, Palo Alto, CA, USA, ("Pinterest") in the form of a tag. This tag is included on the pages of our website and is used for the analysis of our switched Pinterest campaigns as there is an interest in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO. The collected data is transferred pseudonymised to Pinterest and does not allow us to assign it to the identity of the respective user. How the collected data is used by Pinterest can be read in the privacy policy of Pinterest: https://policy.pinterest.com/de/privacy-policy . Should you wish to object to the processing of your data, you can do so in the settings of your Pinterest account: https://help.pinterest.com/de/article/edit-account-privacy
Pinterest is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law https://www.privacyshield.gov/participant?id=a2zt00000008VVzAAM&status=Active


7. Raffles


We process personal data (names, e-mail addresses, contact data) if you send them to us electronically or by post as part of competitions. Personal data in connection with sweepstakes will be used exclusively for the purpose of contract processing pursuant to Art. 6 Para. 1 lit. b.


8. Social Plugins


So-called social plugins ("plugins") from social networks are used on our website.
When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook, Google, Twitter or Instagram servers. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has called the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider (possibly to the USA) and stored there. If you are logged in to one of the services, the providers can assign the visit to our website directly to your profile in the respective social network. If you interact with the plugins, for example by pressing the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published in the social network and displayed there to your contacts. This serves to protect our predominantly legitimate interests in an optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO.
The purpose and scope of the data collection and the further processing and use of the data by the providers as well as a contact option and your rights in this regard and setting options to protect your privacy can be found in the data protection information of the providers.
http://www.facebook.com/policy.php
https://twitter.com/privacy
<font color="#ffff00">-=http://www.google.com/intl/de/=- proudly presents
https://help.instagram.com/155833707900388
https://about.pinterest.com/de/privacy-policy
If you do not want social networks to directly associate the information collected through our website with your profile on that service, you must log out of that service before visiting our website. You can also use add-ons for your browser to completely prevent plugins from loading, e.g. the script blocker "NoScript" (http://noscript.net/).

 

9. Notes about our Facebook page


In addition to this website, we also operate the Facebook page https://www.facebook.com/GartenHausGmbH/, on which we present our company, inform about our offers and communicate with our customers and interested parties. In principle, we only process personal data when you interact with our Facebook page, e.g. when you make a comment, click a like button or send us a message. The legal basis for data processing by us in this regard is, on the one hand, Art. 6 Para. 1 Letter b) DSGVO (e.g. if you send us a request relevant to the contract). On the other hand, data processing can also take place on the basis of your consent in accordance with Art. 6 Para. 1 Letter a) DSGVO (e.g. if you "link" a contribution from us, comment on it or upload content to our site). You can revoke your consent at any time with effect for the future by deleting the comment or the relevant content. A revocation does not affect the legality of the processing carried out on the basis of the consent up to the revocation. We also analyze the views and interactions on our Facebook page. For this purpose, Facebook creates user profiles and makes anonymous data available to us exclusively.


Please note that when using and accessing our Facebook page, your personal data will also be processed by the operating companies of "Facebook". These are Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, based in Ireland, and Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, based in the USA. In addition to the processing described above, Facebook also processes your data for analysis and advertising purposes or to play out personalised advertising. To the best of our knowledge, Facebook also uses cookies to store your usage behavior (even across different devices). This enables Facebook to play targeted advertising on its own platform and on third-party sites. Further information can be found in Facebook's privacy policy, which can be downloaded here: https://www.facebook.com/about/privacy/ . Facebook also offers the ability to opt out of certain data processing; see https://www.facebook.com/settings?tab=ads for notices and opt-out options. Please note that in accordance with Facebook Privacy Policy, user data is also processed in the United States or other third countries. Facebook only transfers user data to countries for which a European Commission adequacy decision pursuant to Art. 45 DSGVO has been issued or on the basis of suitable guarantees pursuant to Art. 46 DSGVO. Facebook Inc. is certified under the EU-US Privacy Shield and thus offers an appropriate level of data protection in accordance with Art. 45 DSGVO (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).


With regard to data processing via our Facebook page, you have the option of asserting your data subject rights (see "Your rights" below) against Facebook as well. Further information can be found in Facebook's Privacy Policy.


10. Third party integrated services and content


We use services and content provided by third parties on our website. For such an integration a processing of personal data is partly necessary, so that the contents can be sent to your browser. This data is therefore transmitted to the respective third party providers.


These data processing operations are carried out to safeguard our legitimate interests in the optimisation and economic operation of our website and are based on the legal basis of Art. 6 Para. 1 S. 1 f) DSGVO.


The programming language JavaScript is regularly used to integrate the content. You can therefore object to data processing by deactivating JavaScript in your browser or by installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.

 

YouTube:
This content is provided by Google LLC ("Provider"). YouTube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
For videos from YouTube that are embedded on our site, personal data is transmitted to YouTube at the latest when they are played. You can find out which data YouTube collects by clicking on the following link: https://policies.google.com/privacy/update?hl=de
The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options for the protection of your privacy can be found in Google's data protection information: https://policies.google.com/privacy/update?hl=de


Google Maps:
To facilitate the input of address data, we use an address validation in connection with "Google Maps" from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).


11. Sending review reminders by email


If you have given us your express consent to this during or after your order in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO, we will use your e-mail address as a reminder to submit an evaluation of your order via the evaluation system used by us.
This consent can be revoked at any time by sending a message to the contact option described above.
Rating reminder by Trusted Shops
If you have given us your express consent to this during or after your order in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO, we will send your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you an evaluation reminder by e-mail.
This consent can be revoked at any time by sending a message to the contact option described above or directly to Trusted Shops.


12. Applications


For the purpose of handling application procedures, the persons responsible for this process process the applicant's personal data in accordance with § 26 Para. 1 S. 1 BDSG. If the application is rejected, the application documents will be destroyed after two months from receipt of the rejection. In exceptional cases, the documents will only be stored for legal reasons or for reasons of evidence.


13 Revocation of consent


If you have given us a separate consent to data processing, you can revoke this consent at any time in accordance with Art. 7 para. 3 DSGVO. Such a revocation does not affect the legality of the processing, which took place until the revocation on the basis of the consent.

 

14. Your personal rights


As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
- Pursuant to Art. 15 DSGVO and § 34 BDSG, you have the right to request information as to whether and, if so, to what extent we process personal data relating to you or not. 
- You have the right to demand that we correct your data in accordance with Art. 16 DSGVO.
- You have the right to demand that we delete your personal data in accordance with Art. 17 DSGVO and § 35 BDSG.
- You have the right to have the processing of your personal data restricted in accordance with Art. 18 DSGVO.
- You have the right, in accordance with Art. 20 DSGVO, to receive the personal data concerning you which you have provided to us in a structured, common and machine-readable format and to forward this data to another person responsible.


15. Right of objection


Pursuant to Art. 21 DSGVO, they have the right to object to any processing which is based on the legal basis of Art. 6 (1) sentence 1 e or f DSGVO. If we process personal data about you for the purpose of direct marketing, you may object to such processing pursuant to Art. 21 Para. 2 and Para. 3 DSGVO.
16. data protection officer
You can reach our data protection officer at the following contact details:
dsb@gartenhaus-gmbh.de


17. Complaint to a supervisory authority


If you are of the opinion that the processing of your personal data violates the provisions of the DSGVO, you have the right to complain to a supervisory authority in accordance with Art. 77 DSGVO.