The following data protection declaration applies to the use of our online offer www.phoenixbrands.co (hereinafter "website"). We attach great importance to data protection. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation
2. General purpose of the processed data
3. What data do we collect and why?
4. How long is the data stored?
5. Rights of data subjects
The following party is responsible for the processing of data in relation to the services, i.e., this is the person who determines the purposes and means of processing personal data:
If you wish to object to the collection, processing or use of your data by me in accordance with these data protection provisions as a whole or for individual measures, you can address your objection to the person responsible. You can save and print out this data protection declaration at any time.
We use personal data for the purpose of operating the website.
We process personal data that we need to fulfil my legal obligations, such as name, address, e-mail address, services ordered, invoice and payment data. The collection of these data is necessary for the conclusion of the contract. The data will be deleted after expiry of the warranty periods and statutory retention periods. The legal basis for the processing of this data is Art. 6 para. 1 lit. b GDPR, because this data is required so that I can fulfil my contractual obligations towards you.
If you contact me (e.g. via contact form or e-mail), we will process your data to process your request and in case follow-up questions arise. If the data processing is carried out to carry out pre-contractual measures which result in your enquiry or, if you are already a customer, to carry out the contract, the legal basis for this data processing is Art. 6 para. 1 lit. b GDPR.
We only process other personal data if you give your consent (Art. 6 para. 1 lit. a) GDPR) or if we have a legitimate interest in processing your data (Art. 6 para. 1 lit. f) GDPR). A legitimate interest lies, for example, in replying to your e-mail.
he data is erased once it is no longer required for the purpose for which it was originally collected. In some cases the legislator provides for the retention of personal data, for example in tax or commercial law. In these cases, the data will only be stored by me for these legal purposes, but will not be processed in any other way and will be deleted after expiry of the legal retention period.
Under applicable laws, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by e-mail or by post to the address mentioned in point 1, clearly identifying yourself. Below you will find an overview of your rights.
You also have the right, at any time with future effect and for reasons relating to your particular situation, to object to the processing of personal data concerning you which is based on Art. 6, subs. 1 e) or f), GDPR, including profiling based on these provisions.
You can reach me via the contact data mentioned under 1 or you can use the following way.
Via mail to: firstname.lastname@example.org
You have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed and, where that is the case, access to the personal data and the other information listed in Art. 15 GDPR .
You have the right to obtain from us the rectification of inaccurate personal data concerning you without undue delay (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
You have the right to obtain from us the erasure of personal data concerning you without undue delay if one of the reasons listed in Art. 17, subs. 1, GDPR is applicable and the processing operations are not required for one of the purposes approved in Art. 17, subs. 3, GDPR.
You are entitled to obtain from us the restriction of the processing of personal data if one of the conditions laid down in Art. 18, subs. 1 a) to d), GDPR is met.
Under the conditions set out in Art. 20, subs. 1, GDPR, you have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance on our part. In exercising your right to data portability, you have the right to have the personal data transmitted directly by us to another controller where technically feasible.
If the processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You have the right to lodge a complaint with the supervisory authority responsible for our company. The supervisory authority responsible for our company is: Landesamt für Datenschutzaufsicht, Promenade 27 (Schloss), 91522 Ansbach, http://www.lda.bayern.de