Privacy Policy
PRIVACY POLICY
The following privacy policy applies to the use of our online offer [www.cofila.de]
(hereinafter "Website").
We attach great importance to privacy. The collection and processing of your
Personal data is done in compliance with the applicable data protection law
Regulations, in particular the General Data Protection Regulation (DSGVO).
1 person responsible
Responsible for the collection, processing and use of your personal data in
Meaning of Art. 4 No. 7 GDPR
Cofila UG
Mr. Tino Schultz
Bocksberg 11
21279 Appel
Unless you are collecting, processing or using your data by us in accordance with this
Privacy Policy as a whole or for individual measures may object
You address your objection to the person responsible.
You can save and print this privacy policy at any time.
2 General purposes of processing
We use personal information for the purpose of operating the website and for the preparation of offers and invoices.
3 What data we use and why
3.1 Hosting
The hosting services we use are for the purpose of providing the
following services: infrastructure and platform services, computing capacity, storage space
and database services, securities and technical maintenance we provide for
Use the purpose of operating the website.
Here we, or our hosting provider, process inventory data, contact data, content data,
Contract data, usage data, meta and communication data of customers, prospects and
Visitors of this website based on our legitimate interests in an efficient and
secure provision of our website acc. Art. 6 para. 1 p. 1 f) GDPR in conjunction with Art. 28
DSGVO.
3.2 access data
We collect information about you when you use this website. We automatically record
Information about your usage behavior and your interaction with us and registering your data
Computer or mobile device. We collect, store and use data about every access to ours
Website (so-called server log files). Access data includes:
Name and URL of the retrieved file
Date and time of the call
transferred amount of data
message about successful retrieval (HTTP response code)
Browser type and browser version
operating system
Referer URL (ie the previously visited page)
Websites that are accessed by the user's system through our website
Internet service provider of the user
IP address and the requesting provider
We use this log data without assignment to you or other profiling for
Statistical evaluations for the purpose of operation, safety and optimization of our
Website, but also for the anonymous recording of the number of visitors to our website (traffic)
as well as the extent and nature of the use of our website and services, as well
Billing purposes to measure the number of clicks received from cooperation partners.
Based on this information we can provide personalized and site related content
Provide and analyze traffic, troubleshoot and fix our services
improve.
This is also our legitimate interest in accordance with Article 6 paragraph 1 p. 1 f) GDPR.
We reserve the right to check the log data retrospectively, if due to specific
Clues the legitimate suspicion of unlawful use exists. Save IP addresses
We will log files for a limited period if required for security purposes or
for the provision of services or the billing of a service is necessary, for. If you are one of our
Use offers. After canceling the process of order or after payment cleared
the IP address if it is no longer required for security purposes. IP addresses
We save even if we have a concrete suspicion of a crime in connection with the
Use our website. We also save the date of yours as part of your account
last visit (eg when registering, login, clicking links etc.).
3.3 Cookies
We use so-called session cookies to optimize our website. A session cookie
is a small text file sent by the respective servers when visiting a website
and cached on your hard disk. As such, this file contains a so-called
Session ID, with which different requests of your browser of the common session
can be assigned. This will allow your computer to be recognized when you visit our website
to return. These cookies are deleted after you close your browser. They serve z.
For example, you can use the shopping cart feature across multiple pages.
We also use persistent cookies to a limited extent (also small text files based on
Stored on your device), which remain on your device and allow us, your
Recognize browser on next visit. These cookies will be on your hard drive
stored and delete themselves after the given time. Their lifetime is 1
Month to 10 years. So we can make our offer more user-friendly, effective and secure
and, for example, provide you with information tailored to your interests at the
Show page.
Our legitimate interest in the use of cookies in accordance with Article 6 para. 1 p. 1 f) DSGVO lies
to make our website more user-friendly, effective and secure.
The cookies store about the following data and information:
- Log-in information
- Language settings
- entered search terms
- Information about the number of visits to our website and use of individual
Functions of our website.
When the cookie is activated, it is assigned an identification number and an assignment
Your personal data for this identification number will not be provided. Your name,
Your IP address or similar data that would allow the cookie to be associated with you,
will not be inserted in the cookie. Based on the cookie technology we only receive
pseudonymised information, for example about which pages of our shop visited
were, which products were viewed, etc.
You can set your browser to inform you in advance about setting cookies
will be able to decide on a case by case basis if you accept cookies for certain cases
or exclude in general, or that cookies are completely prevented. This allows the
Functionality of the website will be restricted.
3.4 Data to fulfill our contractual obligations
We process personal data that we use to fulfill our contractual obligations
require, such as name, address, e-mail address, products ordered, billing and
Payment data. The collection of this data is required for the conclusion of the contract.
The deletion of the data takes place after expiration of the warranty periods and legally
Retention periods. Data associated with a user account (see below) will remain in
in any case, for the time of keeping this account.
The legal basis for the processing of these data is Art. 6 (1) sentence 1 b) GDPR, because these
Data is needed so that we can fulfill our contractual obligations to you.
3.5 user account
You can create a user account on our website. Do you wish this, we need the
at the login requested personal data. When logging in later, only your email will be sent
or username and the password you have selected.
For the new registration we collect master data (eg name, address), communication data (eg.
B. e-mail address) and payment details (bank details) and access data (username u.
Password).
To ensure your proper registration and unauthorized third-party registrations
After registering, you will receive an activation link via e-mail to your
Activate account. Only after the registration we will save the submitted by you
Data permanently in our system.
You can have a user account created at any time deleted from us without this
other than the transmission costs under the base rates arise. A message in text form
the contact details mentioned in section 1 (eg e-mail, fax, letter) are sufficient. We will then
Your stored personal data delete, as far as we are not yet to process
of orders or due to statutory retention requirements.
The legal basis for the processing of this data is your consent in accordance with Art. 6 (1) sentence 1.
DSGVO.
3.6 Newsletter
To register for the newsletter, the data requested in the registration process is required. The
Registration for the newsletter will be logged. After registration you will get to the specified
Email address a message asking you to confirm the registration ("Double
Opt-in "). This is necessary so that third parties can not register with their email address.
You can revoke your consent to receive the newsletter at any time and thus the
Unsubscribe Newsletter.
We save the log-in details as long as they are needed for sending the newsletter. The
Logging of the registration and the shipping address we save, as long as an interest in the
Evidence of the originally given consent existed, as a rule, these are the
Limitation periods for civil claims, thus a maximum of three years.
Legal basis for sending the newsletter is your consent acc. Art. 6 para. 1 sentence 1 a) in conjunction with
Art. 7 DSGVO in conjunction with § 7 (2) no. 3 UWG. Legal basis for logging the application
our legitimate interest in proving that the shipment is made with your consent
has been.
You can undo the registration at any time, without this other than the
Transmission costs according to the base rates arise. A communication in writing to the one in point 1
contact information (eg e-mail, fax, letter) is sufficient. Of course you will find too
in every newsletter an unsubscribe link.
3.7 Product recommendations
Regardless of the newsletter, we will send you regular product recommendations by e-mail. On
this way we will send you information about products from our offer for which
You are interested in us based on your recent purchases of goods or services
could. We comply strictly with the legal requirements. You can do that at any time
without any other than the transmission costs according to the basic tariffs
arise. A message in writing to the contact details referred to in point 1 (eg e-mail, fax,
Letter) is sufficient for this. Of course, you will also find an unsubscribe link in every e-mail.
The legal basis for this is the statutory permission according to Art. 6 (1) sentence 1 f) DSGVO in conjunction with § 7 (3)
UWG.
3.8 E-Mail contact
When you contact us (eg via contact form or e-mail), we process yours
Information on the processing of the request as well as in case connecting questions arise.
Data processing is performed to carry out pre-contractual action, which is at your request
or, if you are already our customer, for the execution of the contract
Legal basis for this data processing Art. 6 para. 1 p. 1 b) GDPR.
We only process further personal data if you consent (Art. 6 (1) sentence 1 a)
DSGVO) or we have a legitimate interest in the processing of your data (Art. 6 para. 1 p. 1
f) GDPR). A legitimate interest lies z. For example, respond to your email.
4 Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics
uses so-called "cookies", text files that are stored on your computer and the one
Analysis of the use of the website by you. The generated by the cookie
Information about the use of this website by the site visitors are usually sent to one
Transfer server from Google in the US and store it there.
This is also our legitimate interest in accordance with Article 6 paragraph 1 p. 1 f) GDPR.
Google has joined the Privacy Shield Agreement between the European Union and the US.
Agreed and certified. As a result, Google is committed to the standards and
Comply with European data protection legislation. More information you can
take the following linked entry:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
We have activated IP anonymization on this website (anonymizeIp). This will be your IP address
by Google, however, within Member States of the European Union or in others
Contracting States to the Agreement on the European Economic Area previously shortened. Only in
Exceptionally, the full IP address will be transmitted to a Google server in the US and
cut there. On our behalf, Google will use this information to monitor the use of
Evaluate your website to compile and report on website activity
other services related to website and internet usage
to provide.
The IP address transmitted by Google Analytics as part of Google Analytics is not included
other data merged by Google. You can save the cookies by a
prevent appropriate setting of your browser software; however, we point out that
In this case, you may not be able to fully access all functions of this website
to be able to use.
You may also transfer the information generated by the cookie and your use of it
Website-related data (including your IP address) to Google and the processing of this data
Google by using the browser plug-in available at the following link
Download and install: http://tools.google.com/dlpage/gaoptout?hl=de.
5 storage duration
Unless specifically stated, we store personal information only as long as we do
Fulfillment of the pursued purposes is necessary.
In some cases, the legislator provides for the retention of personal data, such as
in tax or commercial law. In these cases, the data from us will only be for this
stored for legal purposes, but not otherwise processed and after the expiration of
legal retention period deleted.
6 Your rights as a data controller
Under applicable laws, you have different rights with respect to yours
personal data. If you want to assert these rights, please submit your request
please by e-mail or by post with a clear identification of your person to the one referred to in paragraph 1
Address.
Below is an overview of your rights.
6.1 Right to confirmation and information
You have the right to clear information about the processing of your personal information
Dates.
In detail:
You have the right at any time to receive confirmation from us whether you are concerned
personal data is processed. If so, you have the right to choose one from us
Free information about the personal data stored with you and a copy
to demand this data. Furthermore, there is a right to the following information:
1. the processing purposes;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom the personal
Data has been disclosed or yet to be disclosed, in particular to recipients
in third countries or international organizations;
4. if possible, the planned duration for which the personal data are stored,
or, if this is not possible, the criteria for determining that duration;
5. the existence of a right to rectification or erasure of you
personal data or restriction of processing by the
Responsible or a right of objection to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. If your personal information is not collected from you, all available
Information about the origin of the data;
8. the existence of automated decision-making including profiling according to Art.
22 Abs. 1 and 4 DSGVO and - at least in these cases - meaningful information
on the logic involved and the implications and implications of a
such processing for you.
Be personal information to a third country or to an international organization
transmitted, you have the right to dispose of the appropriate guarantees according to Art. 46 GDPR in
Related to the transmission.
6.2 Right to rectification
You have the right to rectify and, if necessary, to complete the correction
to request personal data.
In detail:
You have the right to correct us incorrectly regarding the correction without delay
to request personal data. Taking into account the purposes of processing
You the right to complete incomplete personal data - including by means of a
supplementary declaration - to request.
6.3 Right to be deleted ("Right to be forgotten")
In a number of cases, we are required to delete your personal information.
In detail:
According to Art. 17 (1) GDPR, you have the right to demand that you concern yourself
Personal information will be deleted immediately and we are required to provide personal information
To delete data immediately if one of the following is true:
1. Personal data is for the purposes for which it was collected or otherwise
Were processed, no longer necessary.
2. You revoke your consent, to which the processing pursuant to Art. 6 para. 1 sentence 1
DSGVO or Art. 9 (2) (a) GDPR and there is no other alternative
Legal basis for processing.
3. In accordance with Art. 21 (1) GDPR, they object to the processing and
There are no legitimate reasons for the processing, or you lay
objection to the processing pursuant to Art. 21 (2) DSGVO.
4. The personal data was processed unlawfully.
5. The deletion of personal data is to fulfill a legal obligation
required under Union or national law to which we are subject.
6. Personal data has been provided in relation to the services offered
Information society pursuant to Art. 8 para. 1 DSGVO.
Have we made the personal data public and are we in accordance with Art. 17 para. 1
DSGVO committed to their deletion, so we take into account the available
Technology and implementation costs, including appropriate technical measures
Data controllers, who process the personal data about it
inform you that you have deleted all links to these personal data or
of copies or replicas of such personal data.
6.4 Right to restriction of processing
In a number of cases, you are entitled to a limitation of your processing
to request personal data.
In detail:
You have the right to demand that we restrict the processing if any of the
given the following conditions:
1. The accuracy of your personal information is contested by you, for one
Duration, which allows us to verify the accuracy of your personal information,
2. the processing is unlawful and you delete the personal data
refused and instead restricted the use of personal data
have requested;
3. we no longer need the personal data for the purposes of processing,
You, however, the data for the assertion, exercise or defense of
Legal claims need, or
4. You objected to the processing pursuant to Art. 21 (1) GDPR,
as long as it is not certain that the legitimate reasons for our company
outweigh yours.
6.5 Right to Data Portability
You have the right to receive personal data concerning you in a machine-readable manner
submit, or transmit from us to read.
In detail:
You have the right to the personal data that you provide us
have to get in a structured, popular and machine-readable format, and you have
the right to transfer this data to another person without hindrance,
provided
1. processing on consent pursuant to Art. 6 (1) sentence 1 a) GDPR or Art. 9 (2)
a) DSGVO or based on a contract pursuant to Art. 6 para. 1 p. 1 b) GDPR; and
2. the processing is done by automated means.
In exercising your right to data portability in accordance with paragraph 1, you have the right to
to obtain that personally identifiable information directly from us to another person in charge
as far as technically feasible.
6.6 Right to object
You have the right to know from a lawful processing of your personal information by
to contradict us if this is based on your particular situation and ours
Interests in processing do not outweigh.
In detail:
You have the right, at any time for reasons that arise from your particular situation
the processing of personal data relating to you which, on the basis of Article 6 (1) (1) (e)
or f) DSGVO takes an objection; this also applies to one of these provisions
supported profiling. We no longer process the personal data, unless we
can prove compelling legitimate grounds for processing your interests,
Rights and freedoms prevail, or the processing is the assertion, exercise or
Defense of legal claims.
If personal data is processed by us to operate direct mail, you have
the right to object at any time to the processing of personal data concerning you
for the purpose of such advertising; this also applies to profiling, as far as it is concerned with such
Direct mail is related.
You have the right, for reasons that arise from your particular situation, against you
concerning personal data relating to scientific or technical matters
historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR,
Objection, unless the processing is in the public interest to fulfill one's
lying task required.
6.7 Automated decisions including profiling
You have the right, not one solely on an automated processing -
including profiling - based decision to be subjected to you
legal effect or similarly affect you in a similar way.
An automated decision-making based on the personal data collected
Data does not take place.
6.8 Right to revoke a data protection consent
You have the right to consent to the processing of personal data at any time
withdraw.
6.9 Right to complain to a supervisory authority
You have the right to complain to a supervisory authority, especially in the Member State
Your place of residence, your place of work or the place of alleged infringement, if you
The view is that the processing of your personal data is unlawful.
7 data security
We are committed to the security of your information under the applicable data protection laws and regulations
maximum technical endeavors.
Your personal data is transmitted encrypted with us. This applies to your orders and
also for the customer login. We use the encoding system SSL (Secure Socket Layer)
However, it should be noted that the data transfer on the Internet (eg in communication by e-mail)
Vulnerabilities may have. A complete protection of data from access by third parties
not possible.
To safeguard your data, we maintain technical and organizational security measures
according to Art. 32 DSGVO, which we always adapt to the state of the art.
We also do not warrant that our offer will be available at specific times;
Disturbances, interruptions or failures can not be excluded. The one of us
used servers are regularly backed up carefully.
8 Disclosure of data to third parties, no data transfer to non-EU countries
Basically, we only use your personal data within our company.
If and insofar as we involve third parties in the performance of contracts (such as logistics
Service providers) receive this personal data only to the extent to which the
Transmission is required for the appropriate performance.
In the event that we outsource certain parts of the data processing ("order processing"),
We contractually obligate the processor to provide personal information only in accordance with
to use the requirements of the data protection laws and the protection of the rights of the
to ensure the person concerned.
A transfer of data to entities or persons outside the EU outside of this
Declaration mentioned in point 4 If this does not take place and is not planned.
9 Data Protection Officer
If you have any questions or concerns about privacy, please contact
our data protection officer:
Mr. Tino Schultz
info@cofila.de
(As of: 24.05.2018)
Cofila UG