You are here > Data Privacy Statement

Data privacy statement

 

Privacy has a high priority for woodandmore. The use of our website is basically possible without providing personal data. However, if a user wishes to make use of special offers via our website, processing of personal data may be necessary. If the processing of personal data is required and there is no legal basis for such processing, we generally seek the consent of the data subject.

 

 The processing of personal data (such as name, address, e-mail address or telephone number) always takes place in accordance with the General Data Protection Regulation (GDPR) and in accordance with the data protection regulations applicable in Germany. By means of this privacy policy, woodandmore wishes to inform about the nature, extent and purpose of the personal data we collect, use and process. Furthermore, users are informed about their rights under this privacy policy.

 

 Responsible for data processing
----------------------------
The person responsible within the meaning of the General  Data Protection Regulation is:

 

woodandmore - livable design from berlin
Petzak-v.Schwedler & v.Schwedler GbR
Ostendstraße 1- 14, Haus A
D-12459 Berlin
Germany

E-Mail: kontakt@woodandmore.de
Website: www. woodandmore.de

 

Cookies
----------------------------
The woodandmore website uses cookies. Cookies are small text files (typically made up of letters and numbers) that are placed in the memory of your browser or device when you visit a website. Cookies allow us to recognize a particular device or browser, for example to correctly display the website as a mobile or desktop version. Cookies are also needed to provide a filled shopping cart for a longer period of time for the user without the articles having to be added again and again.

 The Internet user can prevent the setting of cookies by our (and any other) website at any time by means of a corresponding setting of the browser used and thus permanently contradict the setting of cookies. Furthermore, already set cookies can be deleted at any time via the browser or other software programs. This is possible in all common browsers. If the user deactivates the setting of cookies in the Internet browser used, not all functions of the website may be usable.

 

Capture of technical data and information
----------------------------
Our website captures a range of general data and information with each invocation (by a person or an automated system such as a crawler). This general data and information is stored in the log files of the server. The data can include (a) browser types and versions used, (b) the operating system used by the accessing system, (c) the website from which an accessing system accesses our website (so-called referrers), (d) the sub-web pages which are accessed (e) the date and time of access to the website, (f) an Internet Protocol address (IP address), (g) the Internet service provider of the accessing system and (h) other similar data and information need to prevent danger in the event of attacks on our information technology systems.

When using this general data and information, woodandmore does not draw conclusions about the person concerned. Rather, this information is required to (a) properly deliver the contents of our website, (b) to optimize the content of our website and to promote it, (c) to ensure the continued functioning of our information technology systems and the technology of our website, and (d) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyberattack. This anonymously collected data and information is evaluated by woodandmore on the one hand statistically and further with the aim to increase the data protection and data security in our company, in order to ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.

 

Hosting
----------------------------
The hosting services we use are for the purpose of providing the following services: infrastructure and platform services, computing capacity, storage and database services, security and technical maintenance services we use to operate this online service.

 

We, or our hosting provider, collects on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR Data on every access to the server on which this service is located (so-called server log files). The access data includes name of the retrieved web page, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

 

Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of 7 days and then deleted. Data whose further retention is required for evidential purposes shall be exempted from the cancellation until final clarification of the incident.

 

Ordering, request for samples and information materials
----------------------------
When you place an order with us or request a free sample or information about our products, we collect, process and use a range of personal information. These are required to carry out your order and are therefore collected, recorded, processed and stored on the basis of Article 6 GDPR  Para. 1 b) "Performance of Contracts".

In doing so, we limit ourselves to the data necessary for the fulfillment of the contract, that is to say in particular names, first names, street, house number, postal code, city, e-mail address. In addition, it is possible to provide the telephone number for any queries regarding delivery.

The data will be forwarded to the shipping service provider and, if applicable, the shipping service broker for order fulfillment. If the payment is processed by an external provider (eg Paypal), the data will be forwarded to this service provider (see section "Payment service providers").

The data are kept for at least 10 years in accordance with tax regulations, then checked and possibly deleted.

 

 Newsletter
----------------------------
Visitors to woodandmore's website are given the opportunity to subscribe to a newsletter that informs irregularly about news, new products, promotions and offers from woodandmore.

 

The newsletter can in principle only be received if (a) the user has a valid e-mail address and (b) the user registers for the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered by an affected person for the first time using the double-opt-in procedure. This confirmation email is used to check whether the owner of the e-mail address has authorized the receipt of the newsletter. Registration for the newsletter is not complete until the link in the confirmation email has been clicked.

 

 When registering for the newsletter, we store the IP address of the computer system used by the person concerned at the time of registration, as well as the date and time of registration, as assigned by the Internet Service Provider (ISP). The collection of this data is necessary in order to be able to trace a (possible) misuse of the e-mail address of a data subject at a later date and therefore provide the legal safeguards for the data controller.

 

 The personal data (email address, name) collected in the course of registering for the newsletter are used exclusively to send our newsletter. It will not be passed on to third parties.

 

The newsletter subscription can be stopped at any time. The consent to the storage of personal data that the data subject has given us for the newsletter dispatch can be revoked at any time. It is also possible to unsubscribe directly from our newsletter at any time or to inform us in any other way.

 

The newsletter delivery data is stored for the period in which the woodandmore newsletter is offered.

 

Contact via website
----------------------------
Due to legal regulations, our website contains information that allows us to contact our company quickly and to communicate with us directly, which also includes a general e-mail address.

 

If the user is not an active customer with a customer account and contacts us via e-mail or via a contact form, the personal data will not be recorded centrally and only the e-mail correspondence will be stored and archived, provided it contains relevant information, such as prices, delivery times, warranty information, informed consent or similar. There is no aggregation of the data or inclusion in the customer file.

 

If the customer has an active account (for example, based on a previous order) and this account can be assigned on the basis data of the contact (for example based on customer number or email address), the relevant correspondence is linked to this account and stored.

 

There will be no disclosure of the personal data transmitted to third parties during the course of establishing contact.
The saved, relevant e-mail correspondence will be checked after 2 years at the latest and deleted if not relevant any more.

 

 Submission of customer pictures / customer photos
----------------------------
Users / customers can provide woodandmore self-created customer pictures (pictures of our furniture and accessories). The copyrights and rights of use for these images must lie with the sender. By submitting the pictures / image, the submitter grants woodandmore the right to use the image(s) on social media, on its own website and for other marketing purposes (newsletter, RSS feed, offline, print). The images are used only in direct relation with woodandmore and the presentation of the company or products. No personal data will be published about the imagesetter with the images.

The images are published for the purpose of marketing on external providers (flickr, facebook, google + and others) under the company profile. When used in the offline print, the images may be forwarded to a printing company. A transfer to third parties without a marketing context is not made.

 The images are stored internally together with the declaration of consent and the declaration of copyright and rights of use. Deletion after publication is not planned.

 

Submission of feedback via the feedback form
----------------------------
Users / customers have the opportunity to submit feedback to us at any time - either via the feedback form or informally by email. By using the feedback form, the sender gives the consent that the review will be published anonymously or pseudonymously on the website or other marketing channels. Feedback can be provided without providing personal information. If the customer number is entered, the feedback is supplemented by the information contained in the customer account for gender (Mr/Mrs) and location (from example city XY) and date (month / year) of the feedback submission.

The survey is based on the legitimate interest to improve the offer of woodandmore and communicate feedback transparently. A deletion is not planned.

 

Rights of Users
----------------------------
1) Right of confirmation
Each user has the right granted by the European Directives and Regulators to require confirmation from woodandmore as to whether or not we will process the personal information concerned. If an affected person wishes to use this confirmation right, they can contact a woodandmore employee at any time.

 

2) Right of information
Any person affected by the processing of personal data shall have the right, granted by the European directive and regulatory authority, to obtain information about the personal data held about him and a copy of such information at any time. Furthermore, the European legislator and regulator has granted the user the right to obtain the following information:

  • the processing purposes
  • the categories of personal data being processed
  • the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations
  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration
  • the right of rectification or erasure of the personal data concerning them, or the limitation of the controller's processing or the right to object to such processing
  • the existence of a right of appeal to a supervisory authority
  • if the personal data are not collected from the data subject: all available information about the origin of the data
  • the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) of the GDPR, and - at least in these cases - meaningful information about the logic involved and the scope and intended impact of such processing on the data subject

Furthermore, the data subject has a right of access as to whether personal data has been transmitted to a third country or to an international organization. If that is the case, then the data subject has the right to obtain information about the appropriate guarantees in connection with the transfer.
If an affected person wishes to exercise this right to information, they can contact a woodandmore employee at any time.

 

3) Right to rectification
Any person affected by the processing of personal data has the right granted by the European legislator to demand the immediate correction of inaccurate personal data concerning him / her. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing. If an affected person wishes to exercise this right to rectification, they can contact an employee of woodandmore at any time.

 

4) Right to cancellation (right to be forgotten)
Any person affected by the processing of personal data shall have the right granted by the European Directives and Regulators to require the controller to immediately delete the personal data concerning him, provided that one of the following reasons is satisfied and the processing is not required:

  • The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
  • The data subject revokes their consent, on which the processing was based in accordance with Article 6 (1) (a) of the GDPR or Article 9 (2) (a) GDPR, and lacks any other legal basis for the processing.
  • The data subject submits an objection to the processing pursuant to Art. 21 (1) GDPR, and there are no legitimate reasons for the processing, or the data subject appeals pursuant to Art. 21 (2) GDPR the processing.
  • The personal data were processed unlawfully.
  • The deletion of personal data is required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
  • The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.
  • If one of the above reasons is correct and an affected person wishes to initiate the deletion of personal data stored at woodandmore, they may, at any time, contact an employee of the controller. The employee of woodandmore will arrange that the extinguishing request be fulfilled immediately.

If the personal data of woodandmore have been made public and if our company is responsible for deleting personal data as the person responsible according to Art. 17 (1) GDPR, woodandmore will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs Inform other data controllers processing the published personal data that the data subject has requested that these other data controllers delete all links to such personal data or copies or replications of such personal data, as far as the processing is not required. Woodandmore will arrange the necessary in individual cases.

 

5) Right to restriction of processing
Any person affected by the processing of personal data has the right, granted by the European directive and regulatory authority, to require the controller to restrict the processing if one of the following conditions applies:

  • The accuracy of the personal data is contested by the data subject for a period of time that enables the person responsible to verify the accuracy of the personal data.
  • The processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of personal data.
  • The data controller no longer needs the personal data for the purposes of processing, but the data subject requires them to assert, exercise or defend their rights.
  • The data subject has objection to the processing acc. Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the person concerned.
  • If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored at woodandmore, they may contact a woodandmore employee at any time. Woodandmore will cause the restriction of processing.


6) Right to data portability
Any person affected by the processing of personal data shall have the right conferred by the European Directives and Regulations to obtain the personal data concerning him / her provided to a controller by the data subject in a structured, common and machine-readable format. It also has the right to transfer this data to another person responsible without hindrance by the controller to whom the personal data was provided, provided that the processing is based on the consent pursuant to Article 6 (1) (a) of the GDPR or Article 9 (1) (b) 2 (a) of the GDPR or on a contract pursuant to Article 6 (1) (b) of the GDPR and processing by means of automated processes, unless the processing is necessary for the performance of a task of public interest or in the exercise of public authority, which has been assigned to the responsible person. Furthermore, in exercising their right to data portability under Article 20 (1) of the GDPR, the data subject has the right to obtain that the personal data are transmitted directly from one controller to another, insofar as this is technically feasible and if so this does not affect the rights and freedoms of others. To assert the right to data portability, the data subject can contact woodandmore at any time.

7) Right to object
Any person concerned by the processing of personal data shall have the right conferred by the European directive and regulatory authority at any time, for reasons arising from its particular situation, against the processing of personal data relating to it pursuant to Article 6 (1) (e) or f GDPR takes an objection. This also applies to profiling based on these provisions. In the event of an objection, Woodandmore will no longer process personal data unless we can establish compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims , If Woodandmore processes personal data in order to operate direct mail, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to the profiling, as far as it is associated with such direct mail. If the data subject objects to Woodandmore's processing for direct marketing purposes, woodandmore will no longer process the personal data for these purposes. In addition, the data subject has the right, for reasons arising from his / her particular situation, to process personal data concerning him or her at Woodandmore for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR to object, unless such processing is necessary to fulfill a public interest task. In order to exercise the right of opposition, the data subject may directly contact woodandmore or an employee. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EC, to exercise his right of opposition by means of automated procedures using technical specifications.

8) Automated decisions on a case-by-case basis, including profiling
Any person concerned by the processing of personal data shall have the right, as granted by the European legislature and the legislature, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on it or, in a similar manner, significantly affects it; if decision (a) is not required for the conclusion or performance of a contract between the data subject and the controller; or (b) permitted by Union or Member State legislation to which the controller is subject, and that legislation provides for appropriate action to safeguard the rights and freedoms and the legitimate interests of the data subject; or (c) with the express consent of the data subject. If the decision (a) is required for the conclusion or performance of a contract between the data subject and the controller or (b) it takes place with the express consent of the data subject, woodandmore takes appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject person, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and to contest the decision. If the data subject wishes to assert any rights with respect to automated decisions, they can contact a woodandmore employee at any time. 

 

9) Right to revoke a data protection consent
Any person affected by the processing of personal data has the right, granted by the European directive and regulatory authority, to revoke consent to the processing of personal data at any time. If the data subject wishes to assert their right to withdraw consent, they can contact a woodandmore employee at any time. 

Privacy Policy on Use and Use of Facebook, Google+, Twitter, FlickR / SmugMug, Instagram, Pinterest
----------------------------
The woodandmore website contains components of the companies Facebook, Google+, Pinterset, Twitter, Instagram, FlickR / SmugMug and Twitter. These are social networks. Some of the components are disabled by default and are only activated by clicking on the user. Few components (image bar of flickr, Pinterest Pin-Button) are activated by default. In the case of the activation of the respective services, data (cookies, URL, IP, if necessary allocation of the respective profile of the user) are passed on to these networks.
 
These data are recorded on the basis of Article 6 GDPR para 1 f). There is a legitimate interest in collecting this information in order to optimize the design of the website (such as the inclusion of image galleries) and to facilitate the networking with the users’ social media (pinning of images, likes of web sites). If disclosure of the data is not desired, simultaneous log-on with the relevant services should be avoided. Furthermore, it is possible to refuse the use of cookies via the browser.

 

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Persons responsible for the processing of personal data, if an affected person lives outside the US or Canada, are Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. The data policy published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains which options Facebook offers to protect the privacy of the data subject.

 

The operating company of  Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
The data policy of Twitter ist available under https://twitter.com/privacy?lang=de

 

The operating company of Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Additional information and Google's privacy policy can be found at https://www.google.com/intl/en/policies/privacy/. Additional Google tips on the Google +1 button can be found at https://developers.google.com/+/web/buttons-policy.

Instagram's operating company is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. Additional information and Instagram's privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.  

 

Pinterest's operating company is Pinterest Inc., 808 Brannan St., San Francisco, CA 94103, USA. Pinterest's Privacy Policy, available at https://about.pinterest.com/privacy-policy, provides insight into the collection, processing and use of personal information by Pinterest.

 

Privacy Policy for implementation and use of Google Analytics (with anonymization feature)
----------------------------
The controller has integrated on this website the component Google Analytics (with anonymization function). Google Analytics is a web analytics service. Web analysis is the collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website an affected person has come to a website (so-called referrers), which subpages of the website were accessed or how often and for which length of stay a subpage was viewed. A web analysis is mainly used to optimize a website and cost-benefit analysis of Internet advertising.

 

The operating company of the Google-Analytics-component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

 

The controller uses the addition "_gat._anonymizeIp" for web analytics via Google Analytics. By means of this addendum, the IP address of the Internet access of the data subject will be shortened and anonymised by Google if the access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile for us online reports showing the activities on our websites, and to provide other services related to the use of our website.

 

Google Analytics uses a cookie on the information technology system of the user. What cookies are, has already been explained above. By using this cookie Google is enabled to analyze the usage of our website. Each time one of the pages of this website is accessed by the controller and a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically initiated by the respective Google Analytics component to submit data to Google for online analysis purposes. As part of this technical process, Google will be aware of personal data, such as the IP address of the person concerned, which serve, among other things, Google to track the origin of the visitors and clicks, and subsequently make commission settlements possible.

 

The cookie stores personally identifiable information, such as access time, the location from which access was made, and the frequency of site visits by the data subject. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.

 

The user can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

 

Furthermore, the data subject has the option of objecting to and preventing the collection of the data generated by Google Analytics for the use of this website and the processing of this data by Google. To do this, the affected person must have a browser add-on at the link


Download and install https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction. If the data subject's information technology system is later deleted, formatted or reinstalled, the data subject must re-install the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or any other person within their sphere of control, it is possible to reinstall or reactivate the browser add-on.

 

Additional information and Google's privacy policy can be found at https://www.google.com/intl/en/policies/privacy/ and http://www.google.com/analytics/terms/en.html. Google Analytics is explained in more detail at https://www.google.com/intl/de_de/analytics/.

 

Privacy Policy for implementation and use of Matomo (formerly Piwik)
----------------------------
The operator of this website has integrated the Matomo component on this website. Matomo is an open source software tool for web analysis. Web analysis is the collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis tool collects data on which website an affected person came to a website (so-called referrer), which subpages of the website were accessed or how often and for which length of stay a subpage was viewed. A web analysis is mainly used to optimize a website and cost-benefit analysis of Internet advertising.

The software is operated on the server of the website operator’s hosting service, the data protection sensitive log files are stored exclusively on this server.

The purpose of the Matomo component is to analyze visitor flows on our website. Among other things, the controller uses the data and information obtained to evaluate the use of this website in order to compile online reports showing the activities on our website. Matomo sets a cookie on the information technology system of the user. What cookies are, has already been explained above. By setting the cookie, we are enabled to analyze the use of our website. Each time you visit one of the individual pages on this website, the internet browser on the information technology system of the person concerned is automatically led by the Matomo component to transmit data to our server for the purpose of online analysis. In the course of this technical process, we gain knowledge of personal data, such as the IP address of the person concerned, which among other things serves to help us understand the origin of visitors and clicks.

 

The cookie stores personally identifiable information, such as access time, the location from which access was made, and the frequency of visits to our website. Each time you visit our website, this personal information, including the IP address of the Internet connection used by the data subject, is transmitted to our server. These personal data are stored by us. We do not share this personal information with third parties.

 

The affected person can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Matomo from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Matomo can be deleted at any time via an internet browser or other software programs.

 

 Furthermore, the data subject has the possibility of objecting to and preventing detection of the data generated by Matomo on the use of this website. For this the person concerned must set an opt-out cookie. If the information technology system of the data subject is deleted, formatted or reinstalled at a later date, the data subject must again set an opt-out cookie.
By setting the opt-out cookie, however, it is possible that the website of the controller for the data subject is no longer fully usable.

Further information and Matomo's applicable privacy policy can be found at https://matomo.org/privacy/.

 

Payment service provider: Privacy policy for PayPal as payment method
----------------------------
The operator of this website has integrated components from PayPal on this website. PayPal is an online payment service provider. Payments are made through so-called PayPal accounts, which are virtual private or business accounts. In addition, PayPal has the ability to process virtual payments through credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also takes on trustee functions and offers buyer protection services.  

 

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.  

 

 If the user selects "PayPal" as a payment option during the order process in our online shop, data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing.
 
The personal data sent to PayPal are usually first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing. For the execution of the purchase contract, also such personal data are necessary, which are in connection with the respective order.

 

The purpose of the transmission of the data is payment processing and fraud prevention. The controller will provide PayPal with personally identifiable information, in particular if there is a legitimate interest in the transfer. The personal data exchanged between PayPal and the controller may be transferred by PayPal to credit reporting agencies. This transmission aims at the identity and credit check.

 

PayPal may disclose personal information to affiliates and service providers or subcontractors, to the extent necessary to fulfill its contractual obligations or to process the data on behalf of. The data subject has the option to revoke the consent to the handling of personal data against PayPal at any time. A revocation has no effect on personal data which must be processed, used or transmitted for (contractual) payment processing.

 

PayPal's applicable privacy policy is available at https://www.paypal.com/webapps/mpp/ua/privacy-full.

Legal basis of processing
----------------------------
Unless otherwise stated, Art. 6 I lit. a GDPR functions as the legal basis for processing operations where we obtain consent for a particular processing purpose. If the processing of personal data is necessary to fulfill a contract of which the user is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on Art. 6 I lit. b GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR are based. On this legal basis, processing operations that are not covered by any of the above legal bases are required if processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned prevail. Such processing operations are particularly allowed to us because they have been specifically mentioned by the European legislator. In that regard, it considered that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence, GDPR).

Authorized interests in the processing that are being pursued by the operator or a third party
----------------------------
Is the processing of personal data based on Article 6 I lit. f GDPR is our legitimate interest in conducting our business for the benefit of all of our employees and our shareholders.

 

 

Duration for which the personal data is stored
----------------------------
Unless otherwise stated, the respective statutory retention period applies for the duration of the storage of personal data. After expiry of the deadline, the relevant data will be routinely checked and, if necessary, deleted, provided that they are no longer required for statistical purposes or for contract fulfillment or contract initiation.

 

Legal or contractual provisions for the provision of personal data; Necessity for the conclusion of the contract; Obligation of the data subject to provide the personal data; possible consequences of non-provision
----------------------------
We clarify that the provision of personal information is in part required by law (such as tax regulations) or may result from contractual arrangements (such as details of the contractor). Occasionally it may be necessary for a contract to be concluded that an affected person provides us with personal data that must subsequently be processed by us. For example, the data subject is required to provide us with personal information when our company enters into a contract with her. Failure to provide the personal data would mean that the contract with the person concerned could not be closed. Prior to any personal data being provided by the person concerned, the person concerned must contact one of our employees. Our employee will inform the individual on a case-by-case basis whether the provision of the personal data is required by law or contract or is required for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of the non-provision of the personal data.

 

Security of the data
----------------------------
During the transmission of personal data, modern SSL encryption techniques are used so that they do not fall into the wrong hands. Only the most necessary personal data is stored online. The databases are protected by encrypted passwords.

 

Public procedure directory
----------------------------
The BDSG stipulates in § 4g that the data protection officer must make the following information available to everyone in a suitable manner in accordance with § 4e:

 

  • Name of the responsible operator:

woodandmore – wohnbares Design aus Berlin
Petzak-v.Schwedler & v.Schwedler GbR

  • Managing Owners, Chief Data Processing Officer for Security:

Katharina von Schwedler
Felix Petzak-von Schwedler

  • Address of the responsible operator:

Ostendstraße 1-14
12459 Berlin

  • Zweckbestimmung der Datenerhebung, -verarbeitung oder -nutzung:

The object of the company is the trade in furniture, small furniture, flat-pack furniture, home accessories, home accessories, kitchenware. The collection, processing, transmission and use of data is for the purpose of performing the aforementioned purposes.

  • Description of the group of persons concerned and the related data or data categories:

Customer data, employee data as well as data from suppliers as well as other business partners, if these are necessary for the fulfillment of the purposes mentioned under 4. above. Upon request, we will be pleased to inform you about the procedure in which your data may be stored and what the data is.

  • Empfänger oder Kategorien von Empfängern, denen die Daten mitgeteilt werden können:

Public bodies in the case of priority legislation, external contractors in accordance with § 11 BDSG as well as external bodies and internal woodandmore departments to fulfill the purposes stated above.

  • Standard deadlines for deleting the data:

The legislature has issued a variety of storage obligations and deadlines. After expiration of these deadlines, the corresponding data will be routinely checked. If data are not affected by this, they will be deleted if the purposes mentioned in section 4 are omitted.

  • Planned data transfer to third countries:

A transfer to third countries is not planned. 


Status and adjustments of this privacy policy
----------------------------
This Privacy Policy is as of 14.05.2018. An adaptation of this privacy policy remains reserved.