The protection of personal data is taken very seriously by Sachsen Fahnen®. Compliance with legislation and other legal requirements is a matter of course for us. We have therefore taken technical and organisational measures to ensure that the data protection regulations are observed and complied with both by Sachsen Fahnen and by the third parties involved in the performance of the contract.

You can visit our websites without providing any personal information.

When you use this website, various personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) may have security gaps. Complete protection of the data against access by third parties is not possible.

Contents

Some of the data we collect on our website is provided by you yourself. For example, your data is collected as part of the ordering process or by entering into a contact form. We use this data exclusively to process your request or order.

Furthermore, when you visit our website, technical data is automatically collected, such as the Internet browser used, the operating system and the time of the page visit. This data is primarily used to ensure error-free provision of the website and to identify and resolve technical problems.

Another purpose of data collection on our website is to analyse user behaviour. This is information that we obtain from technical data, such as the duration of the visit to our website, the pages visited or the frequency of visits. This data helps us to improve our website and our offers and to tailor them to the needs of our customers.

We attach great importance to the protection of your data and adhere to the applicable data protection regulations. Your data will be used exclusively for the stated purposes and will not be passed on to third parties, unless this is required by law or necessary to fulfil your request or order.

2. Storage of access data in server log files

When you access our website, information of a general nature is automatically collected and stored in the log files of the server. This includes information such as the type of web browser and its version, the operating system used, the website from which you accessed our website (so-called referrer), the domain name of your Internet service provider, the date and time of access and the IP address.

This information is technically necessary to deliver the contents of our website correctly and to ensure the functionality of our information technology systems and our website. We use this anonymous data and information exclusively for statistical analysis in order to optimize our website and the technology behind it. The anonymous data of the server log files are stored separately from all personal data entered by a data subject.

The storage and evaluation of these access data serves in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR to safeguard our legitimate interests in a correct presentation of our offer and a trouble-free operation of the website.

3. Data collection and use for contract processing and when opening a customer account

When you place an order or contact us on our website, personal data is collected which you voluntarily provide. The respective input forms indicate which data must be collected in order to process your order or request. Mandatory fields are marked accordingly. Without this information it is not possible to order or contact us. We use the data provided by you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract processing and processing of your enquiries. After conclusion of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods, unless you have expressly consented to the further use of your data or we are legally obliged to retain the data. You can request the deletion of your customer account at any time by sending a message to the contact option described below.

4. Contact form requests

If you send us enquiries via the contact form your details from the enquiry form, including the contact details provided by you, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We treat your data confidentially and do not pass it on without your consent.

The data entered in the contact form will be processed solely on the basis of your consent pursuant to Article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR). You may revoke this consent at any time. An informal e-mail message to us is sufficient. The lawfulness of the data processing carried out up to the revocation remains unaffected by the revocation.

The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for the data storage ceases to exist (e.g. after the processing of your request has been completed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

5. Inquiries by e-mail or phone

If you contact us by e-mail or telephone, your personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass this data on to third parties without your consent.

The processing of your data takes place on the basis of Article 6 (1) lit. b GDPR, if your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR) and/or on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR), as we have a legitimate interest in the effective processing of the requests addressed to us.

6. Data transmission for the fulfillment of the contract

In order to process your order and deliver the goods you have ordered, we must pass on your personal data to the designated shipping company. This is done only to the extent required and for the fulfilment of our contractual obligations. Depending on which payment service provider you select during the ordering process, we transmit the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or the payment service selected. Some payment service providers collect this information themselves when you create an account there. In this case, you will need to log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies in this case.

The legal basis for the processing of your data is Article 6 (1) lit. b GDPR, which allows the processing of personal data for the performance of a contract or pre-contractual measures. The same applies to the transfer of your data to our manufacturers or wholesalers if they take over the shipping of the goods for us (long-haul business).

7. Use of data when registering for e-mail newsletter

If you subscribe to the newsletter offered on our website, we require an e-mail address from you as well as information that enables us to verify that you are the owner of the e-mail address and that you agree to receive the newsletter. Further data are not collected or only on a voluntary basis.
 
The data entered in the newsletter registration form will be processed solely on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You may revoke your consent to the storage of your data, your e-mail address and their use for sending the newsletter at any time, for example via theunsubscribelink in the newsletter.
 
We would like to point out that we carry out an evaluation of user behaviour in order to optimise our newsletter offer. Data is collected, such as whether the newsletter was opened and which links were clicked. The processing of this data takes place exclusively in anonymous form, so that it is not possible to trace the person of the recipient.
 
For the execution of the newsletter we use the service Inxmail, which is provided by Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg/Germany. The data you enter for the purpose of subscribing to the newsletter (e.g. e-mail address) will be stored on the servers of Inxmail in Germany. We have concluded a contract with Inxmail for order data processing, which ensures that your data is only processed within the scope of the legal requirements.

8. Use of data for postal advertising and your right to object

We use your data, which we have received from you as part of a contractual relationship, such as your first and last name, your postal address, your title, academic degree and your profession, industry or business title, to send you interesting offers and information about our products by post. We store this data in summarized lists and use it exclusively for our own advertising purposes.

You have the right to object to this use of your data at any time. Please send us a message to the contact option described below. We will then delete your data immediately and no longer contact you for advertising purposes.

This use of data serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in an advertising address of our customers pursuant to Article 6 paragraph 1 sentence 1 lit. f GDPR. We ensure that your data is always treated in accordance with the applicable data protection regulations and rely on secure storage and responsible use.

If you have any questions about this use of data, please contact our contact option below.

9. Comments and discussions on the blog

If you leave a post/comment or a review on the Vispronet® blog (https://www.vispronet.de/blog/), your IP address will be stored. This is done on the basis of our legitimate interests within the meaning of Article 6 paragraph 1 lit. f. GDPR and serves the security of us as a website operator As an operator, we are obliged to protect ourselves against illegal comments and contributions on our platform and to ensure that the author is identified if necessary. To leave a comment, you must provide a valid email address, a name and, if applicable, a valid website link. Your e-mail address and personal data will not be published or passed on to third parties.

We reserve the right to delete comments containing threats or insults, advertising or illegal content, obvious backlink comments (especially SPAM) with irrelevant context or invalid e-mail addresses and, if necessary, to exclude the user from further use. The use of our comment function for commercial purposes is prohibited. By submitting the comment you grant Sachsen Fahnen GmbH & Co. KG/Vispronet® an unlimited right of use for the publication on our blog.

10. Use of cookies

Cookies that are necessary for the electronic communication process or provide certain functions desired by you are stored in accordance with Article 6 paragraph 1 lit. f DSGVO stored. As the operator of this website, we have a legitimate interest in using cookies for the technically error-free and optimized provision of our services. Other cookies, such as cookies used to analyse your surfing behaviour, are dealt with separately in this privacy policy. Cookies are small text files that are stored on your device.

Some of the cookies we use are automatically deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain stored on your device and allow us to recognise your browser on your next visit (persistent cookies). You can configure your browser so that you are informed about the setting of cookies and can decide whether to accept them individually, or exclude cookies for certain cases or in general. The management of cookie settings varies depending on the browser. You can find information about this in the help menu of your browser, which explains how you can change your cookie settings. Please refer to the cookie settings of your web browser for the duration of the storage of cookies. These can be found for the respective browsers under the following links:

As part of the application of Google Analytics (see below), this website also uses the so-called DoubleClick cookie, which serves to recognize your browser when you visit other websites. This is done to protect our legitimate interests in the optimal marketing of our website pursuant to Article 6 paragraph 1 sentence 1 lit. f GDPR. The information automatically generated by the cookie about your visit to this website is usually transmitted to a Google server in the USA and stored there. However, the IP address is first truncated within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area by activating IP anonymisation on this website. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The anonymized IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google.

Google uses this information to compile reports on website activity and to provide other services related to the use of the website. This serves to safeguard our legitimate interests in the optimal marketing of our website in accordance with Article 6 paragraph 1 sentence 1 lit. f GDPR. Google may also pass on this information to third parties if this is required by law or if third parties process this data on behalf of Google. After the purpose and end of the use of Google DoubleClick by us, the data collected in this connection will be deleted.

Google Double Click is an offer of Google Ireland Limited, a company incorporated and operated under the laws of Ireland with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). Insofar as information is transmitted to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. For companies certified under the Privacy Shield, an adequate level of data protection has been determined on the basis of the agreements between the US and the European Commission and Switzerland.

You can deactivate the DoubleClick cookie via this link. In addition, the Digital Advertising Alliance provides you with information about the setting of cookies and settings. Finally, you can set your browser in such a way that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Please note that if you do not accept cookies, the functionality of our website may be limited.

11. Use of Google Tag Managers

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform independent analyses. It serves only to manage and display the tools integrated via it. However, Google Tag Manager collects your IP address, which may also be transmitted to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Article 6 paragraph 1 lit. f GDPR. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on its website. If a corresponding consent has been requested, the processing takes place solely on the basis of Article 6 paragraph 1 lit. a GDPR; consent can be revoked at any time.

12. Use of Google Analytics 4

This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), with which the use of websites can be analysed.

When using Google Analytics 4, so-called “cookies” are used by default. Cookies are text files that are stored on your device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your device, shortened to the last digits, see below) is usually transmitted to a Google server, stored and processed there. This may also involve a transfer of information to the servers of the company Google LLC based in the USA and further processing of the information there.

When using Google Analytics 4, the IP address transmitted by your terminal device when you use the website is collected and processed only in an anonymous manner by default and automatically, so that the information collected cannot be directly linked to a person. This automatic anonymisation takes place by truncating the IP address transmitted by your device by Google within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA).

On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports on your website activities and/or your usage behavior, and to provide us with other services related to your use of the website and the Internet. The IP address transmitted and abbreviated by your device in the context of Google Analytics 4 is not merged with other data held by Google. The data collected as part of the use of Google Analytics 4 is stored for 2 months and then deleted.

Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users via a special function, the so-called “demographic characteristics”, on the basis of an analysis of interest-based advertising and with reference to third-party information. This enables the identification and differentiation of user groups of the website for the purpose of target group-optimized targeting of marketing measures. However, data collected through the “demographic characteristics” cannot be assigned to a specific person and therefore not to you personally. Such data collected through the ‘demographic characteristics’ function shall be kept for two months and then deleted.

All processing described above, in particular the setting of Google Analytics cookies for the storage and retrieval of information on the terminal device used by you for the use of the website, takes place only if you request us to do so pursuant to Art. 6 para. 1 lit. a GDPR have given your explicit consent. Without your consent, Google Analytics 4 will not be used during your use of the website. You may revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service using the “Cookie Consent Tool” provided on the website.

In connection with this website, the Google Signals service is also used as an extension of Google Analytics 4. With Google Signals we can have cross-device reports created by Google (so-called “Cross Device Tracking”). If you have activated the “personalised ads” in your settings in your Google Account and linked your internet-enabled devices to your Google Account, Google may change your usage behavior when you give your consent to the use of Google Analytics 4 pursuant to Art. 6 para. 1 lit. a GDPR cross-device analysis and create database models based on this. The logins and device types of all website users who were logged in to a Google account and performed a conversion are taken into account. The data shows, among other things, on which terminal you clicked on an ad for the first time and on which terminal the corresponding conversion took place. We do not receive any personal data from Google, but only statistics based on Google Signals. You have the option to disable the “personalized ads” feature in your Google Account settings to opt out of cross-device analytics in connection with Google Signals. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de.

Further information on Google Signals can be found at this link: https://support.google.com/analytics/answer/7532985?hl=de.

We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, by which Google is obliged to protect the data of our website users and not to disclose it to third parties.

In order to ensure compliance with the European level of data protection also with regard to the possible transfer of data from the EU or the EEA to the USA and the possible further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.

Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link: https://policies.google.com/privacy?hl=de&gl=de.

Details of the processing initiated by Google Analytics 4 and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites.

13. Google Ads Remarketing and Google Ads Conversion Tracking

We use Google Ads to advertise this website in Google search results and on third-party websites. For this purpose, when you visit our website, the so-called remarketing cookie by Google is set, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. This serves to safeguard our overriding legitimate interests in the optimal marketing of our website in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. After the purpose expires and the use of Google Ads Remarketing by us, the data collected in this context will be deleted.
 
Enhanced data processing only takes place if you have given Google your consent to associate your web and app browsing history with your Google Account and to use information from your Google Account to personalize ads displayed to you on the web. If you are logged in to Google while visiting our website, Google uses your data in conjunction with Google Analytics data to carry out cross-device remarketing and create target group lists. In this case, your personal data is temporarily linked to Google Analytics data in order to define target groups.
 
Google Ads is an offer of Google Ireland Limited, a company incorporated and operated under the laws of Ireland, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www. google.com).
 
Insofar as information is transmitted to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield.
 
A current certificate can be viewed here. Based on this agreement between the US and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
 
You can deactivate the remarketing cookie via this link. You can also contact the Digital Advertising Alliance to find out about the use of cookies and adjust your settings accordingly.
 
As part of Google Ads, we use so-called conversion tracking. If you click on an ad placed by Google, a cookie for conversion tracking is set. Cookies are small text files that the Internet browser stores on the users computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user has clicked on the ad and has been redirected to this page. Each Google Ads customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in the tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your Internet browser under user settings. They are then not included in the conversion tracking statistics.
 
The storage of “conversion cookies” takes place on the basis of Article 6 paragraph 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behaviour in order to optimize both its website and its advertising. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

14. Use of Google ReCaptcha for bot protection

Our website uses “ReCaptcha” from Google Inc. to prevent spam. This service is used to check whether data is entered by an automated program (bot) or by a human. It monitors already stored Google cookies, previous browser interactions, the length of time spent on the website, as well as the number of mouse movements and keystrokes. Personal data such as IP address, date and time, geographical location, screenshot of the browser window, referrer URL, browser plugins, information about the operating system, cookies and settings of the user device are then forwarded for evaluation.
 
These cookies are stored on the basis of Article 6 paragraph 1 sentence 1 lit. f GDPR. The website operator has a legitimate interest in using ReCaptcha to prevent spam and thus ensure a frustration-free use of the website.

15. YouTube components with enhanced privacy mode

We use components (videos) of the company YouTube, LLC 901 Cherry Ave. , 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA on our website.
 
We use the so-called “Extended Data Protection Mode” of the provider to integrate videos. A cookie is only stored on your computer when the video is played. However, according to YouTube, no personal cookie information is stored for playback of embedded videos with enhanced data protection. If you want to make sure that no data about you is stored on YouTube, do not click on the embedded videos. YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information on the handling of user data can be found in YouTubes privacy policy at: https://www. google. de/intl/de/policies/privacy.

16. Bing Ads

This website uses Bing Ads, a program of Microsoft Corporation (Microsoft) that uses Universal Event Tracking (UET) to realize remarketing and financial tracking. This service is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
 
A cookie is set on your computer for this purpose when you access our website via Bing or Yahoo. In this text file, Bing Ads stores information about your use of our website, i. e. the pages you visit, for 180 days and then deletes it. This information includes, but is not limited to, the URL of the page visited, the URL of the referring page, and your IP address. By using the remarketing function, we can provide you with offers tailored to you when you later search on one of the above-mentioned search engines.
 
If you do not agree with the collection of information you can deactivate the setting of cookies via the settings of your Internet browser.
 
You can deactivate this behavior at http://choice.microsoft.com/de-de/opt-out.
 
By using the Network Advertising Initiative (NAI) consumer opt-out page http://www.networkadvertising.org/choices/ you can check which of the participating sites set cookies in your browser and disable them. The privacy policy of Microsoft for the handling of collected data can be accessed at the following link: https://privacy.microsoft.com/de-de/privacystatement/. For more information on Bing analytics services, visit the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/de/53056/2).
 
The storage of “conversion cookies” takes place on the basis of Article 6 paragraph 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behaviour in order to optimize both its website and its advertising.

17. Freshworks Freshchat

Our website uses the Freshchat service to provide our customers with a live chat option. Freshchat is a service of Freshworks Inc., 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA.
 
When you use our live chat, the data you enter is transmitted to Freshchat and stored there. This information usually includes your name and email address, as well as the messages you send via the chat. The data will only be used to process your enquiries and for statistical purposes.
 
Freshchat uses cookies to enable the chat functionality. These cookies are stored on your computer and allow you to resume the chat if you leave it and reopen it later. You can deactivate the use of cookies at any time via your browser settings.
 
The use of Freshchat is based on Article 6 paragraph 1 lit. f GDPR. Our legitimate interest is to be able to offer you a quick and uncomplicated way of communicating via our live chat.
 
For more information on Freshchat privacy, please refer to the Freshworks Privacy Policy at: Privacy Policy.

18. WhatsApp

For the purpose of customer communication, we use the live chat tool of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“WhatsApp”). This serves to safeguard our legitimate interests in effective and improved customer communication, which prevail in the context of a balancing of interests in accordance with Article 6 paragraph 1 sentence 1 lit. f GDPR. WhatsApp is acting on our behalf. The phone numbers we store on our mobile device are automatically stored on Meta Platforms, Inc. servers. , 1 Hacker Way, Menlo Park, California 94025, USA processed. We only store phone numbers of customers who have previously contacted us via WhatsApp and have therefore already accepted the WhatsApp Terms of Use and Data Protection. There is no adequacy decision of the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission.

19. Integration of the Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated on this website in order to display our Trusted Shops seal of approval and any reviews collected, as well as to offer Trusted Shops products to buyers after an order has been placed. This serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in optimal marketing by enabling a safe purchase in accordance with Article 6 paragraph 1 sentence 1 lit. f GDPR. The Trustbadge and the advertised services are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided by a CDN (Content Delivery Network) provider as part of order processing. Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured. Further information on data protection at Trusted Shops GmbH can be found here.
 
When the trust badge is called up, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Individual access data is stored in a security database for the analysis of security issues. The log files are automatically deleted no later than 90 days after creation.
 
Further personal data will be transmitted to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered for use. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you as a buyer are already registered for a product use is automatically checked on the basis of a neutral parameter, the e-mail address hashed via cryptological one-way function. The e-mail address is converted into this hash value that cannot be decrypted for Trusted Shops before transmission. After checking for a match, the parameter is automatically deleted.
 
This is necessary for the fulfilment of our and Trusted Shops’ predominant legitimate interests in the provision of the buyer protection linked to the specific order and the transactional valuation services pursuant to Article Art. 6 paragraph 1 sentence 1 lit. f GDPR required. Further details, including the objection, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.

20. Rating reminders by E-Mail

If you have given us your explicit consent to this during or after your order by activating a corresponding checkbox or clicking a button provided for this purpose, we will use your e-mail address to request you to submit an evaluation of your order via the evaluation system we have used. This consent can be revoked at any time by sending a message to the contact option described below.

21. Payments by VISA, MASTERCARD, Maestro and immediate transfer

For payment by Master, VISA and Maestrocard as well as for immediate transfer, Vispronet® uses a payment service provider to process your payment data, which takes over the processing of payment for orders. Vispronet® itself does not process payment information, such as account information or credit card data on its own systems. The payment service provider is Computop Wirschaftsinformatik GmbH, Schwarzenbergstr. 4, 96050 Bamberg. Computop is certified according to thePayment Card Industry (PCI) Data Security Standardof credit card companies. After you have placed a paid order, we provide Computop with the following information for the purpose of executing and processing the contract concluded with you: invoice amount, name, address, e-mail address, credit card number, cardholder, expiration date, CSV, individual items of the order and unit price of the item. Further information on data protection at Computop is available at https://computop.com/de/datenschutz.
 
The transmission of your data to Computop takes place on the basis of Article 6 paragraph 1 lit. a GDPR (consent) and Article 6 paragraph 1 lit. b GDPR (processing for the performance of a contract).

22. Payment by PayPal

If you choose to pay with the online payment service PayPal during the ordering process, your contact details will be sent to PayPal (Europe) S. Ah. r. l. & Cie. S. C. A. , 22-24 Boulevard Royal, L-2449 Luxembourg transmitted The transmission takes place in accordance with Article 6 paragraph 1 lit. b GDPR and only to the extent necessary for payment processing.
 
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or if offered purchase on accountorpayment by instalmentvia PayPal. For this purpose, your payment data may be processed in accordance with Article 6 paragraph 1 lit. f GDPR on the basis of PayPals legitimate interest in determining your solvency to credit agencies. The result of the credit check in relation to the statistical probability of default is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit rating information may include probability values (so-called score values). Insofar as score values are incorporated into the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, but is not limited to, address data. For further information on data protection, including information on the information agencies used, please refer to PayPals privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
 
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to be entitled to process your personal data insofar as this is necessary for the processing of payments in accordance with the contract.

23. Payment method Klarna purchase on account and Klarna direct debit

In cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, we offer the following payment options. Payment is made to Klarna:
 
  • Invoice: The payment period is 30 days from dispatch of the goods. You can find the terms and conditions here.
  • Direct debit: The debit takes place after dispatch of the goods. You will be informed of the time by e-mail.
The use of the payment methods invoice and direct debit requires a positive credit check. Further information and Klarnas terms of use can be found here. Your personal data will be handled by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarnas data protection regulations.
 
In order to be able to offer you the payment options of Klarna, we will transmit personal data, such as contact details and order details, to Klarna. This allows Klarna to assess whether you can make use of the payment options offered by Klarna and adapt the payment options to your needs. General information about Klarna can be found here. Your personal data will be processed in accordance with the applicable data protection regulations.

24. Payment in advance

If you choose one of these payment methods in our online shop, we do not collect any personal data from you that goes beyond the information that is required in the context of your order.

25. Our online presence on social platforms and networks

Our presence on social networks and platforms serves to better, active communication with our customers and prospects. We provide information about our products and current promotions. When you visit our online presence in social media, your data may be automatically collected and stored for market research and advertising purposes. From this data, so-called usage profiles are created using pseudonyms. These may be used, for example, to place advertisements inside and outside the Platforms that are supposed to be relevant to your interests. Cookies are usually used on your device for this purpose. These cookies store the visitor behaviour and the interests of the users. This serves acc. Article 6 paragraph 1 lit. f. GDPR to safeguard our legitimate interests in an optimized presentation of our offer and effective communication with customers and prospective customers, which prevail in the context of a balancing of interests. If you are asked for your consent (consent) to data processing by the respective social media platform operators, e.g. by means of a checkbox, the legal basis for data processing is Article 6 paragraph 1 lit. a GDPR.
 
Insofar as the aforementioned social media platforms are headquartered in the USA, the following applies: For the USA, an adequacy decision has been issued by the European Commission. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.
 
For detailed information on the processing and use of data by the providers on their pages, as well as a contact option and your rights in this regard and setting options to protect your privacy, in particular options for objecting (opt-out), please refer to the providersdata protection notices linked below. If you still need help in this regard, you can contact us.
Right to object to data collection in special cases and to direct advertising (Article 21 GDPR)
 
If the data processing on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data on grounds relating to your particular situation at any time; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).
 
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for the purpose of direct marketing (objection pursuant to Article 21 (2) GDPR).
Please address your claims in this regard to: dsb@sachsenfahnen.de

26. Your rights and contact options

As an affected person you have the following rights:

  • in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
  • in accordance with Art. 16 GDPR, the right to demand without delay the rectification of inaccurate or completion of your personal data stored by us;
  • in accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored with us, unless the further processing

    the exercise of the right to freedom of expression and information,
    to comply with a legal obligation;
    for reasons of public interest, or
    is necessary for the establishment, exercise or defence of legal claims,

  • pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as

    the accuracy of the data is disputed by you;
    the processing is unlawful, but you object to its deletion;
    we no longer need the data, but you need it for the assertion, exercise or defence of legal claims, or
    you have objected to the processing pursuant to Art. 21 GDPR;

  • in accordance with Art. 20 GDPR, the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
  • in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or of our company headquarters.

Deletion of data

The data stored with us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with statutory retention obligations. Unless the data of the users is deleted because they are necessary for other and legally permissible purposes, their processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to user data that must be kept for commercial or tax reasons.
 
According to legal requirements, the storage is for 6 years in accordance with section 257 paragraph 1 HGB (trading books, inventories, opening balance sheets, annual accounts, commercial letters, accounting documents, etc.) and for 10 years pursuant to section 147 paragraph 1 AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).

Right to information and contact options

You have the right to free information about your personal data stored by us and, if applicable, a right to correction, blocking or deletion of this data. If you have any questions about the collection, processing or use of your personal data, for information, correction, blocking or deletion of data as well as revocation of any consent granted or objection to a specific use of data, please contact our company data protection officer:
 

Data Protection Officer
Am Wiesengrund 2
01917 Kamenz
Germany

Telephone: +49 (0) 3578 359-0
E-mail: dsb@sachsenfahnen.de

In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority in data protection matters is the state data protection commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html