Privacy

2. Name and address of the controller

The person responsible within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union and other provisions of a data protection character is:

ueneu GmbH

Aachener Str. 44

10713 Berlin

Tel.: +49 (0)30 5490 7277

ueneu@posteo.de

3. Name and address of the data protection officer

The data protection officer of the responsible person is:

Herr Kilian Dunkel

ueneu GmbH

Aachener Str. 44

10713 Berlin

Tel.: +49 (0)30 5490 7277

ueneu@posteo.de

Any data subject can contact our data protection officer directly for questions and suggestions on data protection.

4. Cookies

Our homepage completely dispenses with “Tracking-Cookies” as well as the analysis of user data by service providers like Google or similar. Nevertheless our Online-Shop needs to use so called “Session-Cookies” that save data like on what page you have been on our Shop and what you put in the cart. After closing your browser those Cookies get deleted.

5. SSL encryption

Our website uses SSL encryption. Please make sure that the SSL-encryption is activated by your side during activities. The use of encryption is easy to recognize: the ad in your browser's address bar shows "https://". SSL encrypted data is not readable by third parties.

6. Collection of general data and information through the use of this website

The servers of our hoster Bitpalast GmbH, where our homepage is established, will record with each request by an affected person or an automated system a series of general data and information:

Access log files and error log files are stored on the server. These log files also contain the IP address of the visitor, and thus personal data. The following data will be recorded:

• visited website
• time at the time of access
• amount of data sent in bytes
• Source / reference from which you came to the page
• used browser
• used operating system
• used IP address

The IP address will be anonymized after 24 hours. The deletion of the same takes place after 7 days at the latest.

The log files are collected and stored to maintain server operation and statistical evaluation.

In addition to the log files, no further storage of data takes place on the part of our host Bitpalast GmbH.

As already mentioned under 1. Basic Information, otherwise no data or even personal data will be stored or processed when using our homepage on any other way within our sphere of activity. Except you register yourself by getting a shop-account or ordering something.

- no use of “Tracking-Cookies”, not even from e.g. Google, Facebook or similar
(Your provider, such as Vodafone, O2, T-Online, etc., is outside our sphere of activity.)

7. Contact via the website

Due to legal regulations, our website contains information that enables you to contact our company quickly and to communicate with us directly, which also includes a general address of the so-called electronic mail (e-mail address) and a contact form. If an affected person contacts us by e-mail or contact form, the personal data provided by the data subject will be automatically saved. Such personal data, voluntarily transmitted by an individual to the controller, is stored for the purpose of processing or contacting the data subject. There is no disclosure of this personal data to third parties.

Should there be no contract initiation or conclusion of a contract, we will not process or store this data (e-mail and e-mail address or telephone number and name) digitally or delete the stored e-mail at the latest after three months.

8. Deletion and blocking of personal data

The controller processes and stores the personal data of the data subject only for the period required to achieve the purpose of the storage or as provided for by law or regulation.

If the purpose of the storage is omitted or if a prescribed storage period expires, the personal data will be blocked or deleted in accordance with the statutory provisions.

9. Data processing for the purpose of contract initiation and fulfillment

ueneu GmbH collects and stores only personal data that is necessary for the provision of services and the processing of our contractual relationship with you and for payment purposes. These are:

• name
• date of birth
• address
• phone number
• e-mail address
• bank details
• payments (bills, costs, reminder fees, legal fees, etc.)
• correspondence
• contracts
• consumption data

We assure that your above data will be used by us only for the purpose of contract initiation and fulfillment. A passing on only takes place, if this is necessary and necessary for the fulfillment of the contract and for the rendering of our achievement as well as for payment purposes.
For the fulfillment of our contractual assignment is usually the transmission of your name, your address, your e-mail address and in rare cases also your telephone number to the responsible companies such as DHL, PayPal, Klarna (SOFORT), Lawyer etc.

10. Data protection in applications and in the application process

The controller collects and processes the personal data of candidates for the completion of the application process. The processing is in most cases done electronically. This is particularly the case if an applicant submits data by electronic means to the controller. If ueneu GmbH concludes a purchase contract with an applicant, the transmitted data will be stored for the purpose of processing the contractual relationship in compliance with legal requirements. If no contract with the applicant is concluded by ueneu GmbH, the application data will be deleted three months after notification of the rejection decision, provided that deletion does not prejudice any other legitimate interests of ueneu GmbH.

11. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing of personal data, is Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR (DSGVO)) the legal basis for the processing of personal data.

If processing of personal data is necessary for the performance of a contract to which the data subject is a party, is Art. 6 para. 1 lit. b GDPR (DSGVO) the legal basis. This also applies to processing operations required to carry out pre-contractual actions.

Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, is Art. 6 para. 1 lit. c GDPR (DSGVO) the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, is Art. 6 para. 1 lit. d GDPR (DSGVO) the legal basis.

If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, is Art. 6 para. 1 lit. f GDPR (DSGVO) the legal basis for processing.

12. Minors

Persons under the age of 18 should not submit any personal data to us without the consent of their parents or guardians.

13. Rights of the data subject

13.1 Right to confirm

Each data subject has the right, as granted by the European Regulators and Regulators, to request the responsible controller to confirm whether personal data relating to him / her is being processed. If an affected person that wishes to make use of this confirmation right, they can contact our data protection officer or another employee of the controller at any time.

13.2 Right to information

The European Directive and Regulatory Authority says that any person concerned by the processing of personal data shall have the right, at any time to obtain information from the controller about their personal data stored about him and a copy of that information free of charge. Furthermore, the European legislator and regulator has provided the data subject with the rights about Information about the following information:

• the processing purposes,
• the categories of personal data being processed,
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular for recipients in third countries or international organizations,
• if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration,
• the existence of a right to rectification or erasure of the personal data concerning him, or of limited processing by the person responsible or a right of objection against processing,
• the existence of a right to complain to a supervisory authority (https://datenschutz-berlin.de/),
• if the personal data are not collected from the data subject: all available information on the source of the data,
• the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR (DSGVO) and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.

In addition, the data subject has a right of access as to whether personal data has been transmitted to a third country or to an international organization. If that is the case, then the data subject has the right to obtain information about the appropriate guarantees in connection with the transfer.

If an affected person wishes to exercise this right to information, they can contact our data protection officer or another employee of the controller at any time.

13.3 Right to rectification

Any person affected by the processing of personal data has the right granted by the European legislator to demand the immediate correction of inaccurate personal data concerning him / her. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.

If an affected person wishes to exercise this right of rectification, they can contact our data protection officer or another member of the data controller at any time.

13.4 Right to cancellation (right to be forgotten)

Any person affected by the processing of personal data shall have the right granted by the European Directives and Regulators to require the controller to immediately delete the personal data concerning him, provided that one of the following reasons apply to and the processing is not required:

• The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
• The person concerned revokes the consent on which the processing was based on the provisions of Article 6 (1) (a) GDPR (DSGVO) or Article 9 (2) (a) GDPR (DSGVO) and lacks any other legal basis for the processing.
• According to Art. 21 (1) GDPR (DSGVO), the data subject submits an objection to the processing and there are no legitimate reasons for the processing, or the person concerned objects to the processing pursuant to Art. 21 (2) GDPR (DSGVO).
• The personal data were processed illegally.
• The erasure of personal data is necessary to fulfill a legal obligation under union- or national law to which the controller is subjected.
• The personal data were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR (DSGVO).

If one of the above reasons is correct and an affected person wishes to arrange for the deletion of personal data stored at ueneu GmbH, they may at any time contact our data protection officer or another employee. The data protection officer of ueneu GmbH or another employee will arrange that the request for deletion be fulfilled without delay.

If the personal data have been disclosed by ueneu GmbH and if our company is responsible for deleting personal data as the person responsible pursuant to Art. 17 (1) GDPR (DSGVO), ueneu GmbH shall take appropriate action, taking into account the available technology and the implementation costs the data controller to inform those who process the published personal data that the data subject has requested the deletion of all links to such personal data or copies or replications of such personal data from these other data controllers, as far as the processing is not required. The data protection officer of ueneu GmbH or another employee will arrange the necessary in individual cases.

13.5 Right to restriction of processing

Any person affected by the processing of personal data has the right, granted by the European directive and regulatory authority, to require the controller to restrict the processing if one of the following conditions applies:

• The accuracy of the personal data is contested by the data subject for a period of time that enables the controller to verify the accuracy of the personal data.
• The processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of personal data.
• The controller no longer needs the personal data for the purposes of processing, but the data subject requires them to assert, exercise or defend legal claims.
• The person concerned has objection to the processing acc. Art. 21 para. 1 GDPR (DSGVO) and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the data subject.

If one of the above conditions is met and an interested party wishes to request the restriction of personal data stored at ueneu GmbH, he or she may contact our data protection officer at any time or another member of the data controller. The data protection officer of ueneu GmbH or another employee will initiate the restriction of processing.

13.6 Data transferability

Any person affected by the processing of personal data shall have the right conferred by the European Directives and Regulations to obtain the personal data concerning him / her provided to a controller by the data subject in a structured, common and machine-readable format. It also has the right to transmit this data to another person without hindrance by the controller to whom the personal data was provided, provided that the processing is based on the consent pursuant to Art. 6 (1) (a) GDPR (DSGVO) or Art. 9 (2) Subparagraph (a) of the GDPR (DSGVO) or on a contract pursuant to Article 6 (1) (b) GDPR (DSGVO) and processing by means of automated procedures, unless the processing is necessary for the performance of a public-interest or public-authority task; which has been transferred to the responsible person.

Furthermore, in exercising their right to data portability under Article 20 (1) of the GDPR (DSGVO), the data subject has the right to obtain that the personal data are transmitted directly from one controller to another, insofar as this is technically feasible and if not so the rights and freedoms of others are affected.

In order to assert the right to data portability, the data subject may at any time contact the data protection officer appointed by ueneu GmbH or another employee.

13.7 Right to object

Any person concerned by the processing of personal data shall have the right conferred by the European directive and regulatory authority at any time, for reasons arising from its particular situation, against the processing of personal data relating to it pursuant to Article 6 (1) (e) or f GDPR (DSGVO) takes an objection.

ueneu GmbH will no longer process the personal data in the event of an objection, unless we can prove compelling legitimate reasons for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for assertion, exercise or defense of legal claims.

If ueneu GmbH processes personal data in order to operate direct mail, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. If the data subject objects to ueneu GmbH processing for direct marketing purposes, ueneu GmbH will no longer process the personal data for these purposes.

In order to exercise the right to object, the data subject may directly contact the data protection officer of ueneu GmbH or another employee. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EC, to exercise his right of opposition by means of automated procedures using technical specifications.

13.8 Right to revoke a data protection consent

Any person affected by the processing of personal data has the right, granted by the European directive and regulatory authority, to revoke consent to the processing of personal data at any time.

If the data subject wishes to assert their right to withdraw consent, they may at any time contact our data protection officer or another member of the data controller.