Privacy Policy
1) Information on the collection of personal data and contact details of the data controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is DAE-YANG, ASIAN FOODS GmbH, Bei der Immermannstraße 21, 40210 Düsseldorf, Telephone no.: +49(0)211161567, E-mail address: daeyang@t-online.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 This website uses cookies for security reasons and to protect the transmission of personal data and other confidential content (z.B. Orders or inquiries to the data controller are transmitted using SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.
2) Data collection when visiting our website
When you simply use our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed this page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.
3) Hosting & Content Delivery Network
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying our online shop, based on data processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services provided by Shopify, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. for further processing on our behalf. In the event of data transfer to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify's data protection practices can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned above by Shopify will only take place within the scope outlined below.
4) Cookies
To make your visit to our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of your browser session, i.e., after you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information, such as browser and location data, as well as IP addresses, to varying degrees. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You can find the storage duration of each cookie in your web browser's cookie settings.
In some cases, cookies are used to simplify the ordering process by saving settings (z.B. (Remembering the contents of a virtual shopping cart for a later visit to the website). If any of the cookies we use also process personal data, this processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the website visit.
Please note that you can configure your browser to notify you when cookies are being set, allowing you to decide whether to accept them individually, or to block cookies in certain cases or entirely. Each browser manages cookie settings differently. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find this information for the respective browsers at the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Making contact
5.1 Own review reminder (not sent via a customer review system)
We use your email address to send you a one-time reminder to submit a review of your order for our rating system, provided you have given us your explicit consent to do so during or after your order in accordance with Art. 6 para. 1 lit. a GDPR.
You can withdraw your consent at any time by sending a message to the data controller.
5.2 When contacting us (z.B. Personal data is collected when you contact us (via contact form or email). The specific data collected via a contact form is indicated on the form itself. This data is stored and used solely for the purpose of responding to your inquiry, contacting you, and for the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry, pursuant to Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after your inquiry has been fully processed.This is the case if it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations exist.
6) Data processing when opening a customer account and for contract processing
In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The specific data collected is evident from the respective input forms. You can delete your customer account at any time by sending a message to [email address/contact information]. o.g. The address of the data controller will be provided. We store and use the data you provide for contract processing. After complete contract processing or deletion of your customer account, your data will be blocked in accordance with tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use your data as permitted by law.
7) Use of customer data for direct marketing
7.1 Subscribe to our email newsletter
When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send you the newsletter is your email address. Providing any further information is voluntary and is used to personalize our communications with you. We use the double opt-in procedure for sending our newsletter. This means that we will only send you an email newsletter after you have explicitly confirmed that you consent to receiving it. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive the newsletter in the future.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a of the GDPR. When you subscribe to the newsletter, we store your IP address, which is registered by your internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for sending you promotional material via the newsletter. You can unsubscribe from the newsletter at any time via the unsubscribe link provided in the newsletter or by sending a corresponding message to the data controller named above. After you unsubscribe, your email address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, about which we inform you in this privacy policy.
7.2 Sending the email newsletter to existing customers
If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our product range via email. According to Section 7 Paragraph 3 of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. The data processing is based solely on our legitimate interest in personalized direct marketing pursuant to Article 6 Paragraph 1 Letter f of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the data controller named at the beginning of this document. You will only incur transmission costs at the basic rates for this. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.
8) Data processing for order processing
8.1 To process your order, we work with the following service providers, who support us in whole or in part in fulfilling concluded contracts. Certain personal data is transmitted to these service providers in accordance with the information below. The personal data we collect is shared with the transport company commissioned with delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We share your payment data with the commissioned bank as part of the payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly below. The legal basis for the transfer of data is Article 6 Paragraph 1 Letter b GDPR.
8.2 Transfer of personal data to shipping service providers
- DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will forward your email address to DHL before delivery in accordance with Article 6 Paragraph 1 Letter a of the GDPR for the purpose of coordinating a delivery date or providing delivery notification, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Article 6 Paragraph 1 Letter b of the GDPR, we will only forward the recipient's name and delivery address to DHL. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
Consent can be withdrawn at any time with effect for the future by contacting the controller named above or the transport service provider DHL.
- DPD
If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will forward your email address and telephone number to DPD before delivery in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR, we will only forward the recipient's name and delivery address to DPD. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DPD or delivery notification is not possible.
Consent can be withdrawn at any time with effect for the future by contacting the controller named above or the transport service provider DPD.
8.3 Use of payment service providers (payment services)
- Apple Pay: If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is handled via the "Apple Pay" function of your iOS, watchOS, or macOS device by charging a payment card stored with "Apple Pay." Apple Pay uses security features built into your device's hardware and software to protect your transactions.To authorize a payment, you must enter a code you previously set and verify it using your device's "Face ID" or "Touch ID" function. For payment processing, the information you provide during the ordering process, along with your order details, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay. This encryption ensures that only the website where the purchase was made can access the payment data. After the payment is processed, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the payment. If personal data is processed during these transmissions, it is processed solely for the purpose of payment processing in accordance with Article 6(1)(b) GDPR. Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successful. Anonymization completely eliminates any possibility of identifying individuals. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made through Safari on your Mac, your Mac and the authorizing device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone's settings. Go to "Wallet". & Select "Apple Pay" and disable "Allow Payments on Mac". Further information about data privacy with Apple Pay can be found at the following web address: https://support.apple.com/de-de/HT203027 - Google Pay If you choose the payment method “Google Pay” from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, If Ireland (“Google”) decides, payment processing will be carried out via the “Google Pay” application of your mobile device running at least Android 4.4 (“KitKat”) and equipped with NFC functionality by charging a payment card stored with Google Pay or a payment system verified there (z.B. PayPal). To authorize a payment via Google Pay exceeding €25, you must first unlock your mobile device using your chosen verification method (such as facial recognition, password, fingerprint, or pattern). For payment processing purposes, the information you provide during the ordering process, along with your order details, will be shared with Google. Google will then transmit your payment information stored in Google Pay to the originating website in the form of a unique transaction number, which verifies the payment. This transaction number contains no information about the actual payment details of your payment method stored in Google Pay; instead, it is generated and transmitted as a unique numerical token. In all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction is executed exclusively between the user and the originating website through the debiting of the payment method stored in Google Pay.If personal data is processed during the described transfers, this processing is carried out exclusively for the purpose of payment processing in accordance with Article 6(1)(b) GDPR. Google reserves the right to collect, store, and analyze certain transaction-specific information for each transaction made via Google Pay. This includes the date, time, and amount of the transaction, the merchant's location and description, a description of the purchased goods or services provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction. According to Google, this processing is carried out exclusively in accordance with Article 6(1)(f) GDPR on the basis of the legitimate interest in proper accounting, the verification of transaction data, and the optimization and maintenance of the service. Google Pay service. Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when you use other Google services. The Google Pay Terms of Service can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt =googlepaytos&ldl=de Further information on data protection at Google Pay can be found at the following web address: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=pri vacynotice&ldl=de
- PayPal: When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal, we will transmit your payment data to PayPal (Europe) as part of the payment processing. S.a.r.l. et Cie, S.C.A. , 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). This transfer is carried out in accordance with Article 6 Paragraph 1 Letter b GDPR and only to the extent necessary for payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be transferred to credit agencies in accordance with Article 6 Paragraph 1 Letter f GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to offer the respective payment method. The credit check may contain probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data is one of the factors, but not the only one, used to calculate the score values. For further information regarding data protection, including the credit reference agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments. - Shopify Payments We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, payment processing is handled by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we transmit the information you provided during the ordering process, along with information about your order (name, address, account number, bank code, possibly other details).
Credit card number, invoice amount, currency, and transaction number) will be shared in accordance with Article 6(1)(b) GDPR. Your data will be shared solely for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on Shopify Payments' privacy policy can be found at the following web address: https://www.shopify.com/legal/privacy. You can find information on data protection regarding Stripe Payments Europe Ltd. here: https://stripe.com/de/privacy - Stripe: If you choose a payment method offered by the payment service provider Stripe, payment processing will be handled by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will transfer the information you provided during the ordering process, along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) in accordance with Article 6(1)(b) GDPR. Further information on Stripe's data protection practices can be found at the following URL: https://stripe.com/de/privacy#translation. Stripe reserves the right to conduct a credit check based on mathematical-statistical methods to protect its legitimate interest in determining the user's creditworthiness. Stripe may transmit the personal data necessary for a credit check and obtained during payment processing to selected credit agencies, which Stripe will disclose to users upon request. The credit report may contain probability values (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is among the data used, but not the only data, in calculating the score values. Stripe uses the result of the credit check regarding the statistical probability of payment default to decide on the eligibility to use the selected payment method. You can object to this processing of your data at any time by contacting Stripe or the commissioned credit agencies. However, Stripe may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
9) Online Marketing
9.1 Facebook Pixel for Creating Custom Audiences (with Cookie Consent Tool) Our website uses the so-called "Facebook Pixel" of the social network Facebook, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). When a user clicks on one of our advertisements displayed on Facebook, the Facebook Pixel adds a parameter to the URL of our linked page. If our page allows data sharing with Facebook via the Pixel, this URL parameter is stored in the user's browser via a cookie. A cookie is registered, which our linked page itself sets. This cookie is then read by the Facebook Pixel and enables the data to be forwarded to Facebook. With the help of the Facebook Pixel, Facebook is able to identify visitors to our website as a target group for displaying advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads we place only to those Facebook users who have also shown an interest in our website or who possess certain characteristics (z.B. Interests in specific topics or products, determined based on the websites visited), which we transmit to Facebook (so-called "Custom Audiences").With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users and are not perceived as intrusive. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). The data collected is anonymous to us, meaning we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible, and Facebook uses the data for its own advertising purposes in accordance with the Facebook Data Policy (https://www.facebook.com/about/privacy/The data can be used by Facebook and its partners to display advertisements on and off Facebook. Data processing associated with the use of the Facebook Pixel only takes place with your explicit consent in accordance with Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, remove the checkmark next to the "Facebook Pixel" setting in the "Cookie Consent Tool" integrated on the website.
9.2 - Google AdSense This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called cookies, which are text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses so-called “web beacons” (small, invisible graphics) to collect information. These web beacons allow simple actions, such as website traffic, to be recorded, collected, and analyzed. The information generated by the cookie and/or web beacon about your use of this website (including your IP address) is generally transmitted to and stored on a Google server. This may also involve transmission to the servers of Google LLC in the USA. Google uses the information obtained in this way to evaluate your usage patterns with regard to AdSense ads. The IP address transmitted by your browser within the context of Google AdSense will not be merged with other Google data. Information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on Google's behalf. All processing described above, in particular the reading of information on your device via cookies and/or web beacons, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. Further information about Google's privacy policy can be found at the following web address: https://www.google.de/policies/privacy/
10) Web analytics services
Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called..."Cookies" are text files that are stored on your device and enable an analysis of your website usage. The information generated by the cookie about your use of this website (including your truncated IP address) is generally transmitted to and stored on a Google server; this may also involve transmission to the servers of Google LLC in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and prevents direct identification of individuals. With this extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server. LLC.in The information is transferred to the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics offers a special feature called "demographics," which allows for the creation of statistics about the age, gender, and interests of website visitors based on an analysis of interest-based advertising and third-party information. This enables the definition and differentiation of website user groups for the purpose of targeted marketing efforts. However, data collected via "demographics" cannot be attributed to any specific individual.
Details about the processing initiated by Google Analytics and how Google handles website data can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for reading information on your device, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to our website.
You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obligates Google to protect the data of our website visitors and not to disclose it to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
11) Page functionalities
11.1 - Adobe Fonts (Typekit)
This website uses web fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA ("Adobe") for the consistent display of fonts. When you access a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Adobe's servers.This may also involve the transfer of personal data to Adobe's servers in the USA. In this way, Adobe learns that our website was accessed via your IP address. The use of Adobe Fonts is in the interest of a consistent and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font from your computer will be used.
For more information about Adobe Fonts, see [link to Adobe Fonts website]. https://fonts.adobe.com/ and in Adobe's privacy policy: https://www.adobe.com/de/privacy.html
11.2 Google reCAPTCHA
This website also uses the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function primarily serves to distinguish whether an entry is made by a natural person or is being misused through automated processing. The service involves sending the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google, and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in establishing individual accountability on the internet and preventing misuse and spam. When using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC in the USA.
Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/
Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above.
12) Tools and other items
12.1 - DATEV
For our accounting, we use the cloud-based accounting software of DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg (“DATEV”).
DATEV processes incoming and outgoing invoices as well as, if applicable, our company's bank transactions in order to automatically record invoices, match them to the transactions and create the financial accounting from this in a semi-automated process.
If personal data is processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in an efficient organization and documentation of our business processes.
Further information about DATEV, the automated processing of data and the data protection regulations can be found at https://www.datev.de/web/de/m/ueber-datev/datenschutz/
- Lexoffice
We use the cloud-based accounting software "lexoffice" from Haufe-Lexware GmbH to handle our accounting. & Co. KG, Munzinger Straße 9, 79111 Freiburg.
Lexoffice processes incoming and outgoing invoices and, if applicable, also our company's bank transactions in order to automatically record invoices, match them to transactions, and create the financial accounting from this in a semi-automated process.
If personal data is processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in an efficient organization and documentation of our business processes.
Further information about lexoffice, the automated processing of data and the data protection regulations can be found at https://www.lexoffice.de/datenschutz/
12.2 - Google Maps
On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive maps to visually represent geographical information. Using this service allows us to show you our location and makes it easier for you to find us.
Even when accessing those subpages where the Google Maps map is embedded, information about your use of our website (such as z.B. Your IP address will be transmitted to and stored on Google servers, which may also involve transmission to the servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account that you are logged into or whether a user account exists at all. If you are logged into Google, your data will be directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. The collection, storage, and analysis are carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of Google's legitimate interest in displaying personalized advertising, conducting market research, and/or designing Google websites to meet user needs. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transfer of your data to Google in connection with the use of Google Maps, you can also completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then be unavailable.
You can find Google's terms of service at https://www.google.de/intl/de/policies/terms/regional.html You can view the additional terms of service for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on Google's website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/
Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above.
13) Rights of the data subject
13.1 The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data, about which we inform you below:
- Right of access pursuant to Article 15 GDPR: You have, in particular, the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if they were not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable,meaningful information about the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed about the safeguards that exist pursuant to Article 46 GDPR when your data is transferred to third countries;
- Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of incomplete data stored with us;
- Right to erasure pursuant to Article 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Article 17(1) GDPR are met. However, this right does not exist, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
- Right to restriction of processing pursuant to Article 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you have contested, is being verified; if you object to the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data; if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data for the purposes for which it was collected; or if you have objected to processing on grounds relating to your particular situation, pending the verification whether our legitimate grounds override yours.
- Right to information pursuant to Article 19 GDPR: If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obligated to inform all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller, insofar as this is technically feasible;
- Right to withdraw consent pursuant to Article 7(3) GDPR: You have the right to withdraw your consent to the processing of your data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing is permitted by another legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint pursuant to Article 77 GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
13.2 RIGHT OF OBJECTION
If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.
If you exercise your right to object, we will cease processing the data in question. However, further processing remains possible if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the purpose of establishing, exercising or defending legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your right to object as described above.
If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.
14) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the processing purpose and – if applicable – additionally by the respective statutory retention period (z.B. Commercial and tax law retention periods).
When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws his or her consent.
If statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance of a contract or for initiating a contract and/or we no longer have a legitimate interest in its continued storage.
When processing personal data on the basis of Article 6(1)(f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims.
When processing personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.