Privacy Policy

1. Information about collection of personal data

(1) In the following we tell you about the collection of personal data when you use our website. Personal data are all data which refer to you personally, for example your name, address, email addresses and user behaviour.

(2) The responsible party under Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) is Ujeta GmbH, represented by Managing Director Drita Schneider, Hasberger Str. 9c, 87757 Kirchheim, phone: +49 (0) 8266 86 12 0, fax: +49 (0) 8266 86 12 15, info@ujeta.com

Our Data Protection Officer can be contacted at the following address:

Ljubica Mihic
Hasberger Straße 9c
87757 Kirchheim
Germany

Tel.: +49 (0) 49 8266 86 12 29
E-Mail: ljubica.mihic@ujeta.com

(3) We use SSL encryption for security reasons and to protect the transmission of personal data and other confidential content (for example purchase orders or enquiries to the responsible party). You can identify an encrypted connection by the sequence of characters “https://” and the padlock symbol in your browser line.

(4) Personal data are collected when you make contact with us (for example using the contact form or email). Which data are collected if a contact form is used, is shown in the relevant contact form. These data are saved and used exclusively for responding to your concern or for making contact and the technical administration linked to this. The legal basis for processing the data is our justified interest in responding to your concern under Art. 6 Para. 1 Letter f of the GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing the data is provided by Art. 6 Para. 1 Letter b of the GDPR. Your data will be deleted after their final processing. This will be the case if the circumstances show that the relevant matter has been fully clarified and that there are no statutory archiving duties to prevent their deletion.

(5) If we use the services of contracted service providers for individual functions of our offering or wish to use your data for marketing purposes, we will notify you in detail at the bottom about the processes involved. We will also tell you about the defined criteria for the duration of the data storage.

 

2. Your rights

(1) You have the following rights in your dealings with us relating to the personal data referring to you:

  • the right to information,
  • the right to correction or deletion,
  • the right to restrict processing,
  • the right to object to processing,
  • the right to data transferability.

(2) You are also entitled to complain to a Data Protection Monitoring Authority about the processing of your personal data by us.

The relevant Data Protection Monitoring Authority is the Bavarian State Department for Data Protection Monitoring, Promenade 27 (Schloss), 91522 Ansbach, phone: 0049 (0) 981 53 1300, fax: 0049 (0) 981 53 98 1300, email: poststelle@lda.bayern.de

 

3. Duration of storage of personal data

The duration of the storage of personal data depends on the relevant statutory archiving period (for example archiving periods under commercial and fiscal law). After the elapse of the period, the relevant data are routinely deleted as long as they are no longer required to fulfil the contract or to initiate a new contract and/or we have no justified interest in continuing to store them.

 

4. Collection of personal data when visiting our website

(1) If you visit our website for purely information purposes, in other words if you do not register or otherwise send us any information, we will only collect the personal data that your browser sends to our server (so-called server log files). If you wish to view our website, we will collect the following data which are technically required by us to display our website to you and to ensure that it is stable and secure. The legal basis for this is Art. 6 Para. 1 Sentence 1 Letter f of the GDPR:

  • IP adress
  • Date and time of the enquiry
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (actual page)
  • Access status/HTTP status code
  • Volume of data transferred
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of browser system.

(2) In addition to the above data, cookies will be saved to your computer when you use our website. Cookies are small text files which are saved on your hard disk drive assigned to the browser you use and through which the party which sets the cookie (in this case us) certain information flows. Cookies cannot run any programs or transfer viruses to your computer. They are used to make the website more user friendly and effective overall.

(3) Use of cookies:

a) This website uses the following types of cookies whose scope and function are explained in the following:

  • Transient cookies (see b)
  • Persistent cookies (see c).

b) Transient cookies are deleted automatically when you close your browser. These particularly include session cookies. These save a so-called session ID with which various enquiries from your browser can be assigned to a single session. This enables your computer to be recognised again if you return to our website. The session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified period which may differ depending on the cookie. You can delete the cookies at any time in the security settings for your browser.

d) You can configure your browser settings to suit your wishes and, for example, refuse to accept third party cookies or all cookies. We would like to point out that this may result in you not being able to use all the functions of this website.

If individual cookies implemented by us result in personal data being processed, this processing takes place pursuant to Art. 6 Para. 1 Letter b of the GDPR either to fulfil the contract or pursuant to Art. 6 Para. 1 Letter f of the GDPR to maintain our justified interests in the best possible functionality of the website and to ensure a customer-friendly, effective configuration for the website visit.

 

5. Other functions and offerings on our website

(1) In addition to using our website for purely information purposes, we also offer various services which you can use if you are interested. To do so, you must generally enter additional personal data which we use to provide the service and to which the data processing principles set out above apply.

(2) In some cases, we use external service providers to process your data. These have been carefully selected and engaged by us, are bound by our instructions and are inspected at regular intervals.

(3) Furthermore, we may forward your personal data to third parties if participation in promotions, contract conclusions or similar services are offered by us in collaboration with partners. Further information on this is provided when you enter your personal data or underneath in the description of the offering.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this situation in the description of the offering.

 

6. Objection to or revocation of consent for processing your data

(1) If you have granted consent for your data to be processed, you can revoke it at any time. Any such revocation will affect the legality of the processing of your personal data after it has been declared to us.

(2) If we base the processing of your personal data on the weighing of interests, you may object to said processing. This is the case, in particular, if the data do not have to be processed to fulfil a contract with you as set out by us in the subsequent description of the functions. If you exercise this right to object, we would be grateful if you would set out the reasons why we should not process your personal data as we intend. If your objection is justified, we will examine the situation and will either cease processing the data or adjust it or notify you of the binding reasons, which merit protection, why we intend to continue said processing.

(3) Naturally, you can object to your personal data being processed for marketing and data analysis purposes at any time. You can notify us of this marketing objection using the contact details set out above.

 

7. Use of our web shop

(1) If you wish to place an order in our web shop, in order to conclude the contract, you must enter your personal data which we require to complete your order. The mandatory information required to fulfil the contracts is specially marked, the other details are voluntary. The data entered by you will be processed by us to complete your order. We may also forward your payment details to our business bank. The legal basis for this is Art. 6 Para. 1 Sentence 1 Letter b of the GDPR:

You can voluntarily create a customer account using which we can save your data for additional purchases you may make at a later date. If you create an account in “My Account”, the data you enter will be saved on a revocable basis. Your customer account may be deleted at any time if you send notification to this effect to the contact details set out above.

(2) As a result of commercial and fiscal law, we are obliged to save your address, payment and ordering details for a period of 10 years. However, after two years we restrict their processing, in other words your data will only be used to comply with our statutory duties.

(3) The ordering process is encrypted using SSL technology to prevent unauthorised access by third parties to your personal data, particularly your financial details.

 

8. Data processing to complete an order

We work with the service providers set out below to complete your order. Personal data are sent to these service providers on the basis of the following information. The personal data collected by us as part of the contract fulfilment are also forwarded to the transport contractor engaged for delivery if required to deliver the goods. Your payment data will be forwarded to the financial institution engaged to process the payment, if this is required for payment purposes. If payment service providers are used, we will explicitly inform you of this. The legal basis for forwarding the data is Art. 6 Para. 1 Letter b of the GDPR.

 

9. Use of payment providers

We use external payment service providers, using whose platforms you, the user, and we can complete payment transactions (for example with a link to the privacy policy,

To fulfil contracts, we use payment service providers on the basis of Art. 6 Para. 1 Letter b of the GDPR. We also use external payment service providers on the basis of our justified interests under Art. 6 Para. 1 Letter b of the GDPR to provide you with an effective and secure method of payment.

The data processed by the payment service providers include stock data such as names and addresses, banking details, such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, totals and details relating to the recipient. These details are required to complete the transactions. The entered data are only processed by the payment service providers, however, and saved by them. In other words, we do not receive any information relating to accounts or credit cards, but only receive information to confirm the payment or otherwise. In certain circumstances, the data may be forwarded to credit reference agencies. They are forwarded to them for an identity and creditworthiness check. In this respect, we refer your attention to the GTCs and privacy policies of the payment service providers.

The terms of business and privacy policies of the relevant payment service providers apply to the payment transactions and can be viewed on the relevant websites or transaction applications. We also refer your attention to them for further information and for exercising your rights of cancellation, information and other data subject rights.

 

10. Direct marketing

a) Subscription to our email newsletter

If you subscribe to our email newsletter, we will send you regular information about our special offers. The only mandatory information required for sending the newsletter is your email address. You may enter other data on a purely voluntary basis and they will only be used to contact you personally. We use the so-called double opt-in method to send our newsletter. This means that we will not send you an email newsletter until you have expressly confirmed to us that you consent to the newsletter been sent to you. We will then send you a confirmation email in which you are asked to click on the link to confirm that you wish to receive newsletters in the future. By clicking on the confirmation link, you grant us your consent for the use of your personal data under Art. 6 Para. 1 Letter a of the GDPR. When you subscribe to the newsletter, we save your IP address entered by your internet service provider (ISP) and the date and time of the subscription so that we can provide evidence at a later date in the event of the possible abuse of your email address. The data collected by us when you subscribe to the newsletter will be used exclusively for marketing purposes in the form of the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending notification to the responsible party named above. After you have unsubscribed, your email address will immediately be deleted from our newsletter mailing list unless you have expressly consented to your data being used elsewhere or we reserve the right to use data for other purposes permitted by law and about which we notify you in this privacy policy.

b) Sending the email newsletter to existing customers

If you have provided your email address when purchasing goods or services, we reserve the right to send you regular offers for goods or services similar to those you have already purchased from our range of products and services by email. Under § 7 Para. 3 of the Unfair Competition Law, we do not require separate consent from you for this purpose. The data are therefore processed solely on the basis of our justified interest in personalised direct marketing pursuant to Art. 6 Para. 1 Letter f of the GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you an email. You are entitled to object to the use of your email address for the above marketing purposes at any time with effect for the future by sending a notification to the responsible party named above. You will only incur the transmission costs under the basic tariffs for sending this notification. On receipt of your objection, the use of your email address for marketing purposes will be stopped immediately.

c) Sending newsletter via MailChimp

Our email newsletters are sent out by our technical service provider, The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to which we forward the data you provide when you subscribe to our newsletter. These data are forwarded pursuant to Art. 6 Para. 1 Letter f of the GDPR and this serves our justified interest in the use of a secure, user-friendly newsletter system providing effective marketing. Please note that your data are generally sent to a MailChimp server in the USA where they are saved. MailChimp uses this information to send out the newsletter and for the statistical evaluation of the newsletter on our behalf. For evaluation purposes, the emails contain so-called web beacons or tracking pixels, which constitute single-pixel image files which are saved on our website. This enables us to establish whether a newsletter has been opened and which links, if any, have been clicked. Furthermore, we collect technical information (for example time of opening, IP address, browser type and operating system). The data are collected exclusively in pseudonymised form and are not linked to your other personal data so as to rule out the possibility of any immediate personal reference. These data are used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to tailor future newsletters better to the interests of the recipients. If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter. Furthermore, MailChimp may use these data under Art. 6 Para. 1 Letter f of the GDPR itself on the basis of its own justified interest in the needs-based design and improvement of the service and for market research purposes, for example to determine the countries from which the recipients come. MailChimp does not use the data from our newsletter recipients, however, to contact them itself and does not disclose them to third parties. To protect your data in the USA, we have concluded a data processing agreement with MailChimp on the basis of the standard contract clauses of the European Commission to allow your personal data to be sent to MailChimp. If you are interested, this data-processing agreement can be viewed at the following internet address: http://mailchimp.com/legal/forms/data-processing-agreement/. MailChimp is also certified under the “Privacy Shield” US-European Data Protection Treaty, which means that it undertakes to comply with the EU data protection regulations. You can view MailChimp’s privacy policy here: https://mailchimp.com/legal/privacy/

 

11. Use of Google Analytics

(1) We use Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files which are saved on your computer and allow your use of the website to be analysed. The information generated by the cookie about your use of this website is generally sent to a Google server in the USA where it is saved. If IP anonymisation is enabled on this website, your IP address will first be shortened by Google, but this will take place within member countries of the European Union or in other countries which are party to the Treaty on the European, economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide additional services to the website operator related to the website use and internet use.

(2) The IP address sent by your browser as part of Google Analytics will not be linked to other data by Google.

(3) You can prevent cookies being saved by making an appropriate setting in your browser software. However, we would like to point out that in this case you may not be able to use all the functions of this website in full. Furthermore, you can prevent the collection of the data generated by the cookie relating to your use of the website (including your IP address) by Google and the processing of these data by Google by downloading and installing the browser plug-in available using the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the suffix “_anonymizeIp()”. This means that IP addresses will be processed in shortened form so as to rule out the possibility of any reference to a specific person. If a personal reference is created through the data collected from you, this will immediately be ruled out and your personal data will therefore be deleted immediately.

(5) We use Google Analytics to analyse the use of our website so that we can regularly improve it. The statistics we obtain enable us to improve our offering and make it more interesting for you, the user. Google has signed up to the EU-US Privacy Shield to cover the exceptional cases in which personal data are transferred to the USA, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 Sentence 1 Letter f of the GDPR:

(6) Information about the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Terms and conditions for users: http://www.google.com/analytics/terms/de.html, information about privacy: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

 

12. Use of Facebook

On the basis of our justified interests (in other words interest in the analysis, improvement and commercial operation of our online offering as described in Art. 6 Para. 1 Letter f. of the GDPR), we use social plugins (“Plugins”) of the social network facebook.com, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). This plugin may consist of interaction elements or content (for example videos, graphics or text articles) and can be identified by the Facebook logo (a white “f” on a blue tile, the words “Like” or a “thumbs up” icon) or are marked with the suffix “Facebook Social Plugin”. The list and appearance of Facebook social plug-ins can be viewed here: https://developers.facebook.com/docs/plugins/. Facebook is certified under the Privacy Shield Treaty and therefore guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). If you open a function of this website which contains a plugin of this type, your device will connect directly to Facebook servers. The content of the plugin is sent directly buy Facebook to your device and is integrated into the website by the device. This enables user profiles to be created from the processed data. We therefore have no influence on the volume of data which Facebook collects using this plugin and can therefore only provide you with the information we hold.

By including the plugin, Facebook receives the information that you have opened the relevant page of the website. If you are logged into Facebook, Facebook can assign your visit to your Facebook account. If you interact with the plugins, for example if you click on the Like button or write a comment, the relevant information will be sent direct from your device to Facebook where it will be saved. If you are not a member of Facebook, it is nevertheless possible that Facebook will discover your IP address and save it. According to Facebook, only an anonymised IP address will be saved in Germany. The aim and scope of the data collection and further processing and use of the data by Facebook and the rights and possible settings relating to this to protect your privacy are described in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

If you are a Facebook member and do not want Facebook to collect data about you from this website and link it to your membership details stored by Facebook, you must log out of Facebook before using our website and delete your cookies. Other settings and objections to the use of data for marketing purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads  or using the American site http://www.aboutads.info/choices/  or the EU site http://www.youronlinechoices.com/. The settings are made regardless of the platform, in other words they will apply to all devices such as desktop computers and mobile devices.

 

13. Inclusion of YouTube videos

(1) We have included YouTube videos on our website, which are saved on http://www.youtube.com and can be played direct from our website. [These have all been included in “extended data protection mode”, in other words no data about you are sent to YouTube if you do not play the videos. Only if you play the videos will the data described in paragraph 2 be transferred. We have no influence on this data transfer.

(2) When you visit the website, YouTube receives the information that you have opened the relevant page on our website. Furthermore, the data listed in point 4 of this privacy policy will be transferred. This is done regardless of whether YouTube provides a user account on which you are logged in or if you do not have a user account. If you are logged into Google, your data will be directly assigned to your account. If you do not want this assignment with your profile at YouTube, you must log out before clicking on the button. YouTube saves your data in the form of user profiles and uses them for marketing purposes, market research and/or to design its website to make it more suitable to use. This evaluation takes place, in particular (even for users who are not logged in), to provide relevant advertising and to inform other users of the social network about your activities on our website. You are entitled to object to the formation of these user profiles. You must contact YouTube to exercise this right.

(3) Further information about the purpose and scope of the data collection and processing by YouTube is available in its privacy policy. This policy also contains further information about your rights and possible settings to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

14. Inclusion of Google Maps

(1) We use Google Maps on this website. This means that we can display interactive maps on the actual website and enable you to use the map function with these.

(2) When you visit the website, Google receives the information that you have opened the relevant page on our website. Furthermore, the data listed in point 4 of this privacy policy will be transferred This is done regardless of whether Google provides a user account on which you are logged in or if you do not have a user account. If you are logged into Google, your data will be directly assigned to your account. If you do not want this assignment with your profile at Google, you must log out before clicking on the button. Google saves your data in the form of user profiles and uses them for marketing purposes, market research and/or to design its website to make it more suitable to use. This evaluation takes place in particular, even for users who are not logged in, to provide relevant advertising and to inform other users of the social network about your activities on our website. You are entitled to object to the formation of these user profiles. You must contact Google to exercise this right.

(3) Further information about the purpose and scope of the data collection and processing by the plugin provider is available in the provider’s privacy policy. This policy also contains further information about your rights and possible settings to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.