DATA PROTECTION DECLARATION

Status: 07.05.2020

Content

1. About us
2. Why do we process your data? 
3. What data about you do we collect and process?
4. Who has access to your data and to whom do we disclose your data?
   1. Access
   2. Disclosure to third countries and legal basis
   3. Disclosure to criminal enforcement and investigation authorities
5. Storage periods
6. Your rights
   1. Right to information and data portability 
   2. Right to rectification, restriction and erasure
   3. Rights to object
   4. Right of withdrawal
   5. Right of complaint to the supervisory authority
   6. Contact details
7. Use of our website – profiling, cookies and web tracking
   1. Basic information about cookies and opting out
   2. Google Analytics
8. Further information and rules regarding individual services
   1. Contact
   2. Online shop
   3. Payment method PayPal
   4. Other payment methods: Prepayment and vouchers
9. Cookie overview

 

1. About us

We, the company primoteamsport Backnang, owner Ralf Schöpflin, are the data controller for the collection, processing and storage of your data. You can find details about us at any time in our <Legal notice>. 

The careful handling of your personal data has our top priority. When processing your data, we comply with the statutory provisions, e.g. the General Data Protection Regulations (GDPR) and the associated national provisions. This privacy policy applies to all of our company’s websites accessible via our domain (https://teamshop.liqui-moly.com/). If, when exploring our offering, you change to websites administered by other operators, other data protection rules will apply, for which the individual operators will be responsible. As we wish to give you a full overview of the processing of personal data in our group of companies, you will find below a summary of all our services in which we collect and process personal data. If, in the case of particular services, special or additional conditions apply or we ask you for your consent, we will inform you of this separately prior to use of the respective service (e.g. a purchase in our online shop). In addition, we take many different security precautions for protecting your personal data. For instance, transfer of data between your web browser and our servers is always encrypted for transport, and we also have a large number of technical and organizational measures designed to protect your data at all times.

 

2. Why do we process your data?

Generally speaking, you may use our website without disclosing your identity. If you wish to use our online shop, we ask you for your name and other personal information. It is your decision whether to provide this (extended) data. Mandatory data which we need to obtain from you for providing our services are noted as such.

The collection and processing of your personal data is done for the following purposes and on the following legal bases: Contract initiation pursuant to GDPR Art. 6(1) a) and b)

• Contract implementation pursuant to GDPR Art. 6(1) b)
• Customer management pursuant to GDPR Art. 6(1) b), c) and f)
• Communication and data exchange pursuant to GDPR Art. 6(1) a), b), c), f)
• Public image and advertising pursuant to GDPR Art. 6(1) a), f)
• Implementation of declarations of consent pursuant to GDPR Art. 6(1) a)
• Ensuring the proper operation of a data processing system pursuant to GDPR Art. 6(1) c) and f) 

3. What data about you do we collect and process?

We collect various categories of personal data from you. Personal data means all information which can be referred to an identified or identifiable natural person; natural persons will be deemed identifiable if they can be identified directly or indirectly, especially by correlation with an identifier, such as a name. Personal data include information such as your name, address, telephone number and date of birth (if provided). Statistical information that cannot be directly or indirectly associated with you – such as the popularity of individual websites operated by us or the number of users of a site – is not personal data. This includes directly and indirectly collected data. In both cases, data are only collected to the necessary extent; data are processed solely for the purposes given in point 2. Deciding whether to transfer data to us that will optimize the use of our services for you, but is not absolutely necessary, is a matter for you. Such data fields are known as ‘voluntary’.

Directly collected data comprise:

• Salutation and name, e.g. to personalize your user account or for ordering in our online shop
• E-mail address and, if applicable, a password chosen by you, e.g. for the purpose of using your customer account 
• Address data, e.g. for the purpose of order processing (delivery) within the scope of our online shop
• Payment data, for processing the payment of your order
• Data that you actively and consciously transmit to us in the course of using our services
• Further data that you transmit to us voluntarily, e.g. data fields filled in by you and marked as 'voluntary’

In addition, data about you is indirectly collected when you use our services:

• Technical connection data, e.g. the requested page on our website, your IP address, shortened by the last three digits, data and time of your request, terminal device used, browser configuration data.
• Data collected in the context of website tracking
• Data that we receive from our service providers within the scope of order processing in the online shop, e.g. information on payment probabilities and payment disruptions or delivery notifications

Minors:
Our website is not directed at minors and we do not knowingly collect personal data from minors. If persons under 16 years of age transmit personal data to us, this is only permitted if the parent or legal guardian has given his or her own consent or has agreed to the consent of the young person. Pursuant to GDPR Art. 8(2), the contact details of the parent or legal guardian must be communicated to us as evidence of the consent or the approval of the parent or legal guardian. These data and the data of the minor will then be processed in accordance with this privacy policy. If we determine that a minor under the age of 16 has sent us personal data without the actual consent of parents or legal guardians or their approval of the consent of the minor, we will erase the data immediately.

4. Who has access to your data and to whom do we disclose your data?

a) Access
Access to your personal data stored by us is limited to our employees and the service providers commissioned by us, who have to work with this personal data to fulfill their assignments. If third parties gain access to your data, we have obtained your permission or there is a legal basis for this. In order to provide services and process your data, we also use service providers (including for hosting, delivery of ordered goods, payment processing, sending letters or e-mails as well as the maintenance and analysis of databases, securing our web servers or for website tracking). If special rules apply here, we have subsequently performed them in connection with the individual service. These service providers process the data exclusively on our instructions and are obliged to comply with the applicable data protection regulations. All contract processors have been carefully selected and are given access to your data only to the extent and for the period which is necessary for performing the services or to the extent to which you have consented to the processing and use of the data.

b) Disclosure to third countries and legal basis
The servers of some of the service providers used by us are located in the USA and other countries outside the European Union. Companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as is the case in the Member States of the European Union. If your data are processed in a country without a recognized high data protection level such as the European Union has, we ensure by contractual provisions or other recognized instruments that your personal data are appropriately protected. Within the individual services we again expressly refer to this. If disclosure of personal data takes place in third countries, this will be on the basis of the EU Commission’s adequacy decision regarding the EU-U.S. Privacy Shield pursuant to GDPR Art. 45 or the EU Standard Treaty 2010 pursuant to GDPR Art. 46(2) c) in conjunction with the EU Commission’s decision of 02/05/2010 (2010/87/EU) or pursuant to your consent under GDPR Art. 49(1) a).

c) Disclosure to criminal enforcement and investigation authorities
In exceptional cases we disclose personal data to criminal enforcement and investigation authorities. This is done on the basis of corresponding legal obligations, e.g. from the German Code of Criminal Procedure, the Fiscal Code, the Money Laundering Act or state police laws.

5. Storage periods
We store personal data within the scope of legal regulations or your consent. 

We use the following criteria to determine the specific storage period: 

We save personal data until the purposes for which they were collected expire (e.g. upon the termination of a contractual relationship or with the last activity, if no continuing obligation exists, or in the case of a withdrawal of your consent for specific data processing). 

Any other storage will only take place if

• there is a statutory duty of retention (e.g. according to the German Tax Code or Commercial Code);
• the data are still needed for the enforcement and exercise of legal claims or for defense against legal claims, e.g. as a result of technological and forensic requirements for fending off attacks on or monitoring of our web servers;
• erasure would be against such interests of the data subjects as merit protection;
• or
• there is some other exception under GDPR Art. 17(3).

6. Your rights
You have a number of legal rights which we will point out in the following. In addition, our data protection officer (DPO) is naturally also at your disposal for all questions on data about your person that are collected and processed by us. The DPO can be contacted using the contact details given below. 

a) Right to access and data portability
You have at all times the right to access the personal data relating to you which have been processed by us. If the data processing is based on your consent or on a contract pursuant to GDPR Art. 6(1) b), you may, pursuant to GDPR Art. 20(1), also request that you receive the personal data stored about you in a structured, commonly used and machine-readable format. At your request, we will also transfer these data directly to a recipient determined by you.

b) Right to rectification, restriction and erasure
Furthermore, pursuant to GDPR Art. 16 to 18, you may request that we rectify, restrict (block) or erase your personal data if we have processed the data incorrectly, if there are grounds for restricting further data processing, or if the data processing has become unlawful for various reasons, or if its storage is inadmissible for other legal reasons. We would like to point out that your right to erasure may be restricted by legal retention periods.

c) Rights to object
If our data processing is justified solely by our legitimate interests according to GDPR Art. 6(1) f), you may raise an objection to this processing in accordance with GDPR Art. 21(1). We will then stop processing your data unless we can show grounds for processing that are worthy of protection and which override your interests, rights and freedoms, or the processing serves to enforce, exercise or defend a legal claim. Furthermore, you always have the right to withdraw the use of your data for the purpose of direct advertising with future effect, as per GDPR Art. 21(2).

d) Right to withdraw consent
If you have permitted the processing of your personal data by your consent, you have according to GDPR Art. 7(3) a right to withdraw your consent with future effect.

e) Right to complain to the supervisory authority
You are at liberty to lodge a complaint with a supervisory authority, if you are of the opinion that our processing of your personal data infringes the European General Data Protection Regulation or other national and international data protection legislation. 

The contact details of the supervisory authority responsible for us are as follows:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Königstrasse 10a
70173 Stuttgart

Phone: +49 711 615541-0
Fax: +49 711 615541-15
E-mail: poststelle@lfdi.bwl.de

Contact data
To exercise your rights, you can send us an informal message at the contact details below. Please also address the withdrawal of your consent to the contact details below, indicating which declaration of consent you wish to withdraw:

Data controller

primoteamsport Backnang, owner Ralf Schöpflin  Münchener Str. 6 71522 Backnang Phone: +49 7191 954295 E-mail: info@liqui-moly-teamsport.de

7. Use of our website – profiling, cookies and web tracking

a) Basic information about cookies and opting out
In certain areas of our website, we use so-called cookies, e.g. for recognizing the preferences of visitors and optimizing the website accordingly. This simplifies navigation and enables a high degree of website user-friendliness. Cookies also help us to identify particularly popular areas of our website. Cookies are small files that are stored on a visitor’s hard drive. They allow information to be stored for a certain period of time and permit the identification of the visitor’s computer. For better user guidance and individual service presentation, we use permanent cookies.

We also use so-called session cookies, which are automatically erased when you close your browser. You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. This takes place in order to check the authorization of actions and authentication of the requesting user of our services. The legal bases are GDRP Art. 6(1) c) in conjunction with GDPR Art. 32 and Art. 6(1) f). Our legitimate interest is the safeguarding of our webserver, in order to defend itself against attacks, for example, and ensuring the functionality of our services.

Cookies that are not technically required are only used after your express consent, which you can, of course, withdraw at any time.

As part of our cookie information on our website, you have agreed to the following declaration concerning this matter:

We use cookies to personalize content and ads, to provide social media functions, and to analyze traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the services.  [Allow cookies or allow selection of cookies]

If you completely exclude the use of cookies, you will not be able to use individual functions of our website – including the possibility of a cookie-based opt-out of tracking. If applicable, please allow the opt-out cookies of the services for which you would like to prevent the tracking.

Please also consider that deleting all cookies leads to the opt-out cookies also being deleted. You will therefore have to reset these. Furthermore, cookies are associated with the browser, which means that they have to be specially set in each browser used by you on each device used by you. The necessary links can be subsequently found in the description of the service in question.

The following cookies – assuming you have permitted them and not set one or more opt-out cookies – are used for the further described purpose:

Name of the cookie	Purpose of use	Storage period	Technically necessary	Option to withdraw consent (if cookie not technically necessary)
_gat_UA-XXX	This cookie is used by Google Analytics to control inquiry frequency.	1 day	no	see below
_gid	This cookie is used by Google Analytics to differentiate between users.	1 day	no	see below
_ga	This cookie is used by Google Analytics to differentiate between users.	2 years	no	see below

 

b) Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC (“Google”). Google Analytics uses cookies, i.e. text files which are stored on your computer and which allow an analysis of your use of the website. The information generated by the cookie concerning your use of this website is generally passed on to a Google server in the USA and saved there. In the event that IP anonymization should be activated on this website, your IP address is first abbreviated by Google within member states of the European Union or in other signatories to the agreement regarding the European Economic Area. Only in exceptional circumstances is the full IP address transferred to a Google server in the USA and abbreviated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to the use of the website and of the Internet to the website operator. The IP address transferred from your browser as part of Google Analytics is not added to other Google data. One way to object to web analysis by Google Analytics is to set an opt-out cookie that instructs Google not to store or use your data for web analysis purposes. Please note that in this solution the web analysis will not take place only for as long as the browser stores the opt-out cookie. If you would like to set the opt-out cookie, please click https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable.

You can avoid the saving of cookies by adjusting your browser software appropriately; however, we would like to point out that in this case it is possible that you will not be able to use all the functions of this website. Furthermore, you can prevent the recording of the data created by the cookie and related to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link. The current link is:

http://tools.google.com/dlpage/gaoptout?hl=de.

Data recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Privacy-Shield:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

 

8. Further information and rules regarding individual services

a) Contact
You can contact us by phone or e-mail. Data which you disclose to us will be processed for purposes of communication and data exchange, i.e. in order to answer your specific inquiry. These data are stored as long as their processing is required for these purposes or until the expiry of any subsequent retention periods.

b) Online shop
We offer you an online shop on our website where you can purchase fan products from LIQUI MOLY and other manufacturers. Here you will be asked to create a personal customer account. The customer account enables you to use and link the services you have selected from our website in a personalized way and to save your preferred settings.

We use the data collected from you there to implement the contract, in particular to enable you to purchase and take delivery of products and to carry out payment. 

If necessary, we may also process your data in this context to check your creditworthiness, insofar as this is also necessary for the implementation of the contract, GDPR Art. 6(1) b), or we have a legitimate interest in doing so, GDPR Art. 6(1) f). We have a legitimate interest if the conclusion of a contract with you is imminent, so that a financial default risk is associated for us (as, for example, in the case of installment payment contracts, order/delivery on account) and the conclusion of the contract is then only dependent on your creditworthiness.

We also transfer the data necessary for processing the payment and, if applicable, risk management to the payment service provider you have chosen. The following additional information and provisions apply: 

c) Payment method PayPal
In our online shop, we enable you to pay by means of the payment service provider PayPal. The processing of the payment takes place either via your PayPal or via your credit card or bank account using PayPal. Furthermore, PayPal offers buyer protection and trust services.

When you select the payment service provider PayPal in the online shop, data is automatically transferred to PayPal. You hereby expressly consent to this transfer of personal data (first and last name, address, e-mail address, IP address, phone number(s), order data, delivery data) for the purpose of processing the payment as well as fraud prevention if you decide upon the PayPal payment type.

The exchange of data does not only take place for the purpose of processing the payment, but also for identification, fraud prevention and the reduction of a default risk; in this respect, data on your economic situation and on past purchase and payment behavior may also be exchanged. In this context, data is also exchanged with credit agencies by PayPal, if there is a legitimate interest for this and it does not run counter to the interests of affected persons worth protecting.

Forwarding of the data to associated companies can occur; this also applies to downstream service providers (processors, mutual data controllers and third parties, if required for contract implementation).

You can withdraw existing consent from PayPal at any time with future effect. A withdrawal has no effect on the transfers carried out in the past.

PayPal’s current data protection regulations can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Data recipient: PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg

d) Other payment methods: Prepayment and vouchers
We also enable you to pay in advance or redeem vouchers in our online shop. The payments received by prepayment will be compared with the respective orders by us to track the payment and the use of vouchers will be stored accordingly.

 

 9. Cookies