Privacy Notice
Data protection declaration
We appreciate your interest in our online shop and company.
Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise. "Personal data" is any information relating to an identified or identifiable natural person.
Responsible in terms of the General Data Protection Regulation
The responsible contact for data processing on this website is:
Garnelenhaus GmbH
Ohlweg 8
22885 Barsbüttel
Germany
E-Mail: hallo@garnelenhaus.de
Phone: +49(0)40-38655110
Authorized Managing Director (CEO)
Carsten Logemann
Responsible contact is the natural or legal person who, alone or in concert with others, decides on the purposes and means of processing personal data (such as names, email addresses, etc.).
SSL and TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as a site operator, our website uses an SSL or TLS encryption. You can recognize an encrypted connection by changing the address line of the browser from "http: //" to "https: //" and the lock symbol in your browser line.
If SSL or TLS encryption is enabled, the data you submit to us can not be read by third parties.
Server log files
You can use our websites without submitting personal data. Every time you access our website, user data is transmitted by your internet browser and stored in protocol files (server log files). This stored data includes e.g. name of the site called up, date and time of the request, amount of data transferred and the provider making the request. This data serves exclusively to ensure smooth operation of our website and to improve our offering. It is not possible to assign this data to a particular person.
Customer account
When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.
Collection and processing when using the contact form
When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact. By submitting your message you agree to the processing of your transmitted data. Processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent.
You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. We will only use your email address to process your request. Finally your data will be deleted, unless you have agreed to further processing and use.
Data collection when you post a comment
When you comment on an article or a contribution, we collect your personal data (name, email address, comment text) only in the scope provided by you. The processing serves to allow you to comment and to display comments. By submitting the comment you agree to the processing of the transmitted data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent.
You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. You personal data will then be deleted.
On publication of your comment only the name you have entered will be published.
Collection, processing, and use of personal data in orders
When you submit an order, we only collect and use your personal data where this is necessary for the fulfilment and handling of your requests. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of art. 6 (1) lit. b GDPR and is required for the fulfilment of a contract with you. We will not forward your data to third parties without your explicit consent. This only excludes our service partners which we require in order to handle the contractual relationship or service providers we use to process an order. Along with the recipients named in the clauses of this data protection declaration, these may be recipients in the following categories: Shipping providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping dealers. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
Use of PayPal-Express
Our website uses the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal"). The processing of data enables us to offer you the option of paying via the PayPal Express payment service. To integrate this payment service it is essential that PayPal collects, stores, and analyses data when you access the website (e.g. IP address, device type, operating system, browser type, device location). Cookies may be used for this purpose. Cookies allow your internet browser to be recognised.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in a customer-oriented offer of different payment methods. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you.
By selecting and using "PayPal Express", the data required for payment processing will be submitted to PayPal to execute the agreement with you using the selected payment method. The data is processed on the basis of Article 6(1)(b) GDPR. Further information on data processing when using the Paypal Express payment service can be found here https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS in the associated data privacy policy.
Use of PayPal-Checkout
We use the PayPal Check-Out payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. With the selection and use of payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to fulfill the contract with you with the selected payment method. This processing is based on Art. 6 para. 1 lit. b DSGVO.
Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, PayPal reserves the right, if necessary, to obtain credit information on the basis of mathematical-statistical methods using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a weighed decision on the establishment, implementation or termination of the contractual relationship. The credit information may include probability values (score values), which are calculated on the basis of scientifically recognized mathematical-statistical methods and in the calculation of which, among other things, address data are included. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for a contract initiation. The processing is carried out on the basis of Art. 6 (1) lit. f DSGVO for our overriding legitimate interest in protecting against payment default when PayPal makes advance payments.
You have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) (f) DSGVO for reasons arising from your particular situation by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method requested by you. Failure to provide it will result in the contract not being concluded with the payment method you have chosen.
Local third-party providers via PayPal Checkout
When paying via the payment method of a local third-party provider, the data required for payment processing is transmitted to PayPal. This processing takes place on the basis of Art. 6 para. 1 lit. b DSGVO. For the execution of this payment method, the data may then be forwarded by PayPal to the respective provider. This processing takes place on the basis of Art. 6 para. 1 lit. b DSGVO. Local third-party providers may be, for example:
- Sofort (SOFORT GmbH, Theresienhoehe 12, 80339 Munich, Germany)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
- Trustly (Trustly Group AB, Rådmansgatan 40, 113 57 Stockholm, Sweden)
- Multibanco (SIBS, Rua Soeiro Pereira Gomes, lote 1, 1649 - 031 Lisboa, Portugal)
Purchase on account via PayPal
When paying via the payment method purchase on account, the data required to process the payment is first transmitted to PayPal. For the execution of this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to be able to fulfill the contract with you with the selected payment method. This processing is based on Art. 6 para. 1 lit. b DSGVO. Ratepay may conduct a credit check on the basis of mathematical-statistical methods using credit agencies according to the procedure already described above. The data processing serves the purpose of credit assessment for contract initiation. The processing is carried out on the basis of Art. 6 (1) lit. f DSGVO from our overriding legitimate interest in protecting against payment default when Ratepay makes advance payments. For more information on data protection and which credit agencies Ratpay uses, please visit https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/
For more information on data processing when using PayPal, please see the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of Amazon Payments
We use Amazon Payments payment service on our website, from Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; "Amazon Payments"). The processing of data enables you to pay using the Amazon Payments payment service. To integrate this payment service it is essential that Amazon Payments collects, stores, and analyses data when accessing the website (e.g. IP address, device type, operating system, browser type, device location). Cookies may be used for this purpose. Cookies allow your internet browser to be recognised. The use of cookies or comparable technologies is based on § 15 para. 3 p. 1 TMG.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in a customer-oriented offer of different payment methods. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you.
By selecting and using "Amazon Payments", the data required for payment processing will be submitted to Amazon Payments to execute the agreement with you using the selected payment method. The data is processed on the basis of Article 6(1)(b) GDPR. Further information on data processing when using the Amazon Payments payment service can be found in the associated data privacy policy at: https://pay.amazon.com/de/help/201212490
Use of an external merchandise management system
We use a merchandise management system in the course of order processing for the purposes of contractual processing. For this purpose your personal data as collected in the course of the order will be sent to VIISON GmbH, Goebelstr. 21, 64293 Darmstadt, Germany
Cookies
Our website uses cookies. Cookies are small text files which are saved in a user's internet browser or by the user's internet browser on their computer system. When a user calls up a website, a cookie may be saved on the user's operating system. This cookie contains a characteristic character string which allows the browser to be clearly identified when the website is called up again. We use cookies to make our offering more user-friendly, effective and secure. Cookies also allow our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognised again after a page change.
Our website also uses cookies to allow us to analyse the surfing behaviour of visitors to our website.
We also use cookies to address visitors to other websites with targeted marketing relating to their interests.
Processing is carried out on the basis of § 15 (3) TMG (Telemedia Act) as well as art. 6 (1) lit. f GDPR due to our justified interest in the purposes above.
The data collected in this way is pseudonymised using technological measures. It is therefore not possible to connect the data to your person. The data will not be stored together with other personal data pertaining to you.
You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation.
Cookies will be stored on your computer. You therefore have full control over the use of cookies. By choosing corresponding technical settings in your internet browser, you can prevent the storage of cookies and transmission of the data they contain. Cookies which have already been saved may be deleted at any time. We would, however, like to point out that this may prevent you from making full use of all the functions of this website.
Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Use of Google reCAPTCHA
Our website uses the reCAPTCHA service by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The request serves to distinguish whether the input was made by a human or automatic machine processing. The request includes the submission of the IP address and any other data required by Google for the reCAPTCHA service. For this purpose your input will be transmitted to Google and used further there. Google will, however, shorten your IP address beforehand within the Member States of the European Union or other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website in order to assess your use of this service. The IP address transmitted by your browser as part of reCAPTCHA is not associated with any other data held by Google. Your data may also be transmitted to the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission, the "Privacy Shield". Google participates in "Privacy Shield" and has submitted to its requirements. By activating the request you agree to the processing of your data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.
You can find more detailed information on Google reCAPTCHA and the associated data protection declaration at: https://policies.google.com/privacy
Use of Google Analytics
Our website uses the web analysis service Google Analytics by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The processing of data serves to analyse this website and its visitors. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website and internet use. The IP address communicated by your browser as part of Google Analytics is not associated with any other data held by Google. Google Analytics uses cookies, which make it possible to analyse your use of the website. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymisation is activated on this website (with the extension "_anonymizeIP()"). Google uses this to shorten your IP address beforehand within Member States of the European Union or in other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Your data may be transmitted to the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in needs-based and targeted design of the website.
You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation.
You can prevent the storage of cookies by choosing corresponding technical settings in your internet browser; we would, however, like to point out that this may prevent you from making full use of all the functions of this website. You can also prevent collection of the data (including your IP address) generated by the cookies and related to your use of the website by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link [https://tools.google.com/dlpage/gaoptout?hl=en]. You can set an opt-out cookie to prevent collection by Google Analytics across devices. Opt-out cookies prevent the future collection of your data when you visit this website. You need to opt-out on all systems and devices in use for this to work comprehensively. If you click here, the opt-out cookie is set: Disable Google Analytics.
You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms/ and at https://policies.google.com/?hl=en
Use of Google Adwords conversion tracking
Our website uses the online marketing programme "Google AdWords", including conversion tracking. Google conversion tracking is a service operated by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the advert and were forwarded to this page. Every Google AdWords customer receives a separate cookie. Therefore, it is not possible to track cookies relating to the websites of AdWords customers.
The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. However, they do not receive any information with which could be used to personally identify users. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in targeted marketing and analysis of the effectiveness and efficiency of this marketing.
You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation.
You can prevent the storage of cookies by choosing corresponding technical settings in your internet browser. We would, however, like to point out that this may prevent you from making full use of all the functions of this website. You will then not be included in the conversion tracking statistics.You can also deactivate personalised advertising in Google's advertising settings. You can find an introduction to this at https://support.google.com/ads/answer/2662922 You can also deactivate the use of cookies by third parties by calling up the Network Advertising Initiative deactivation page at https://www.networkadvertising.org/choices/ and following the opt-out instructions.
You will find more information as well as Google's data protection declaration at: https://www.google.de/policies/privacy/
Use of GoogleMaps
Our website uses Google Inc.'s feature for the embedding of Google Maps (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
This feature visually represents geographical information and interactive maps.
Google also collects, processes and uses data on visitors to the website when they call up pages with embedded Google maps. Further information on the data collected and used by Google, your rights and privacy can be found in Google's privacy policy at https://www.google.com/privacypolicy.html. You also have the option of changing your settings in the data protection centre, allowing you to administer and protect the data processed by Google.
Your data may also be transmitted to the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation.For this purpose you must turn off the JavaScript application in your browser. However, we wish to point out that doing this may prevent you from using all of the website's functions, for example the interactive map display, in full.
Google Web Fonts
This site uses so-called Web fonts provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, "Google") for consistent font representation. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. To do this, the browser you use must connect to Google's servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your browser does not support web fonts, a default font will be used by your computer.
For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/privacypolicy.html
Use of Share-Buttons social networks
On our website we use so-called "share buttons" of the social networks Facebook, Pinterest and Twitter in different places. With the help of these buttons you can share the content of our website with others. You can recognize the share buttons by the respective logos of the social networks on our site.
In order to ensure the best possible protection of your data when visiting our website, the share buttons are integrated into our site so that when you call up a page that contains such share buttons, no connection is established with the servers of the social networks. Only if you activate the share buttons with a click on the respective logos of the social networks and thus give your consent to the data transmission, a pop-up window opens and your browser establishes a direct connection to the respective social networks. Here are u.a. both your IP address and the information of which of our pages you have visited. If you are connected to one or more of your social network accounts at the same time, the collected information will also be associated with your corresponding profiles. You can only prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.
Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in needs-based and targeted easy sharing of our online services.
The following social networks are integrated. For more information on the scope and purpose of the collection and use of data, as well as your related rights and ways to protect your privacy, see the linked privacy policy of the provider.
Facebook der Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA) https://www.facebook.com/policy
Twitter der Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA) https://twitter.com/privacy
Pinterest der Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA) https://policy.pinterest.com/en/privacy-policy
Use of Facebook remarketing
Our website uses the remarketing function "Custom Audiences" by Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; "Facebook").
This function serves to address the visitor to the website with interest-related advertising on the social network Facebook.
We have implemented Facebook's remarketing tag on our website for this purpose. This tag sets up a direct connection to Facebook's servers when you visit our website. This informs the Facebook server which of our web pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook you will then be shown personalised, interest-related Facebook ads. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in the above purpose.
You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation.
For this purpose you can deactivate the remarketing function "Custom Audiences" here.
You can find more detailed information on Facebook's collection and use of data, your associated rights and options for protecting your privacy in Facebook's privacy policy: https://www.facebook.com/about/privacy/.
Use of YouTube
Our website uses YouTube LLC's function for the embedding of YouTube videos. (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube").
YouTube is an affiliated company of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
This feature shows YouTube videos in an iFrame on the website. The option "advanced privacy mode" is enabled here. This prevents YouTube from storing information on visitors to the website. It is only if you watch a video that information is transmitted to and stored by YouTube.
Further information on the data collected and used by YouTube and Google, your rights and privacy can be found in YouTube's privacy policy (https://www.youtube.com/t/privacy).
Use of ShopVote graphics
We have included ShopVote graphics on our websites to display our ShopVote rating seal and any ratings that may have been collected and/or aggregated.
This serves to safeguard our overriding legitimate interests in optimal marketing of our offer in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR. The ShopVote graphics and the services advertised with them are an offer from Blickreif GmbH, Alter Messeplatz 2, 80339 Munich.
When the ShopVote graphics are called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the call, amount of data transferred and the source of the call (access data) and documents the call. This access data is not evaluated and automatically overwritten no later than seven days after the end of your visit to the site. The ShopVote graphics do not record or store any other personal data.
Duration of storage
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.
Rights of the affected person
If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR.
If you got any question, please contact us at any time.
Our contact details can be found at the top of this declaration and in our legal notice.
Right to complain to the regulatory authority
You have the right to complain to the regulatory authority according to art. 77 GDPR if you believe that your data is not being processed legally.
Last update: 10.08.2022