DATA PROTECTION
With this privacy policy, we would like to inform you about the nature, extent and purpose of the processing of personal data in our web shop www.tunparts.de.
The protection of your personal data is very important to us. Therefore, we collect and process your data exclusively on the basis of the legal provisions, in particular the provisions of the GDPR (General Data Protection Regulation). In this privacy policy we inform you about the most important aspects of data processing within our website.
In the following, we would like to inform you in detail which data we collect, process and use for which purpose and how you can object to this data processing.
1. Name and contact details of the data controller
Responsible for the data processing is:
TunParts UG (haftungsbeschränkt)
Gerberstrasse 6
90461 Nürnberg
Germany
E-Mail: office@tunparts.de
Legal representatives:
Valentin Mollov, Managing Director
- Terms and Definitions
The privacy policy uses the following terms:
- Personal data
- Affected person
- Processing
- Restriction of processing
- Responsible
- Receiver
- Third
- Consent
These terms are all defined in Article 4 of the General Data Protection Regulation (GDPR).
- Extent of processing of personal data
In order to ensure the functionality of our website and the provision of our content and services, it is necessary that we collect and use personal data of our users.
Personal data is stored and processed exclusively on servers in the European Union.
All data is encrypted based on the SSL method.
Data processing takes place on the basis of the statutory provisions of Art. 6 (1) (a) (consent) and / or f (legitimate interest) of the GDPR. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f GDPR as legal basis for processing.
Any further use will only take place with the express consent of the customer. Specifically, data is collected and processed as follows.
In our server log-file data is automatically collected when visiting our website and stored in an internal log file, which are transmitted to us via your browser. These are the following data:
- Type and version of the browser you are using,
- Type and version of the operating system you are using,
- URL of the page where you came to us,
- Keywords you used to find our site,
- Date and time of retrieval of our website,
- Names of subpages you have accessed through our website.
We collect and process this data in an anonymous form, which means that it can not be assigned to a specific person. The purpose of the data collection and processing is the evaluation for internal system-related and statistical purposes. Furthermore, for the purpose of technical security, in particular to ward off attacks on our web server; in addition to the abuse control in suspicion and to clarify the suspicion of a criminally relevant use. The IP address will only be evaluated in case of attacks on our network infrastructure.
We use your e-mail address to complete a registration process on our pages via a confirmation e-mail and to send you confirmation e-mails about the orders you have placed.
The legal basis for processing the data is Article 6 (1) (b) (necessary to fulfill the contract) of the GDPR.
Payment Details – Account or credit card information is used to process paid orders.
If you pay via the method “purchase on account via PayPal” or “installment payments via PayPal”, the claim will be sent to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). Your personal data will be automatically transmitted by our website to PayPal, as far as this is necessary to process the payment.
By selecting the aforementioned payment methods, you consent to the transmission of your personal data to PayPal as well as the conduct of credit checks by PayPal or by credit reporting agencies to be determined by PayPal. Further details Information on this and on the credit bureaus used can be found in PayPal’s Privacy Policy, available at: www.paypal.com/webapps/mpp/ua/privacy-full?locale.x=en_US
The legal basis for processing the data is Article 6 (1) (b) (necessary to fulfill the contract) of the GDPR.
If you use the contact form on our website, which can be used for electronic contact or contact us via our e-mail address, the personal data you provide will be automatically saved. The storage serves solely for purposes of processing or contacting the person concerned. A transfer of data to third parties does not take place. Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
- Purpose of data processing
The processing itself is based on your order and serves to be able to process your order and the contract concluded between us. In particular, we use the data in particular
- To identify you as our customer,
- Process, fulfill and process your order
- to contact you,
- To give you bills,
- to be able to handle any liability claims,
- to assert contractual claims against you.
Insofar as we obtain the consent of the persons concerned for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as legal basis.
In the processing of personal data required for the performance of a contract of which the data subject is a party, Art. 6 (1) (b) of the GDPR serves as the legal basis. This also applies to the processing operations required to carry out pre-contractual measures.
Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c GDPR as legal basis.
If the processing is necessary to safeguard the legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as legal basis for processing.
- Transfer of data to third parties
We will only share your personal information with third parties if:
- According to Art. 6 para. 1 sentence 1 lit. a GDPR have expressly agreed to this
- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data,
- in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR there is a legal obligation,
- this according to Art. 6 para. 1 sentence 1 lit. b GDPR is required for the settlement of the contract concluded with you (eg passing on the data to the logistics company commissioned with the delivery).
In addition, your personal data will not be disclosed to third parties without your express consent. If we disclose your personal data to third parties, we limit the scope of the transmitted data to the minimum required.
- Legal basis
The processing of your personal data (hereinafter processing only) is based on the following legal basis:
- Insofar as we obtain your consent for processing, Art. 6 para. 1 lit. a GDPR as legal basis.
- In the processing for the fulfillment of a contract concluded with you, Art. 6 para. 1 lit. b GDPR Legal basis. This also applies to the processing operations required to carry out pre-contractual measures.
- Insofar as processing is necessary to fulfill a legal obligation to which we are subject, Art. 6 para. 1 lit. c GDPR as legal basis.
- In the event that vital interests make you or any other natural person subject to processing, Art. 6 (1) lit. d GDPR as legal basis.
- If the processing is necessary to safeguard one of our legitimate interests or a third party and your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as legal basis for processing.
- Storage duration and data deletion
Due to commercial and tax regulations, we are obliged to store your address, payment and order data for a period of 10 years. After expiry of the legal warranty rights (2 years), however, we limit the processing to the effect that your data will only be used to comply with legal obligations.
- Affected rights
According to the GDPR, you are entitled to the following rights, which you can assert at any time in the person named in section 1 of this privacy policy:
- Right to information: According to Art. 15 GDPR, you can request a confirmation as to whether and which personal data we process from you. In addition, you may provide us free of charge with information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed or the planned storage period, the right to rectification, deletion, limitation of processing or opposition , the existence of a right of appeal and the origin of their data, if they were not collected from us. You also have the right to know whether your personal data has been transmitted to a third country or to an international organization. If so, you have the right to obtain information about the appropriate guarantees in connection with the transfer.
- Right to correction: According to Art. 16 GDPR, you may request the correction of incorrect or complete incomplete personal data stored with us and you.
- Right to cancellation: According to Art. 17 GDPR, you have the right to demand the deletion of your personal data stored by us, as long as we do not process them
- to fulfill a legal obligation,
- to assert, exercise or defend legal claims,
- to exercise the right to freedom of expression and information; or
- for the reasons of the public interest referred to in Article 17 (3) (c) and (d) of the GDPR.
- Right to restriction: According to Art. 18 GDPR you have the right to demand the restriction of the processing of your personal data if
- The accuracy of the data is disputed by you for a period of time that allows us to verify the accuracy of your personal information,
- the processing of your data is unlawful, but you reject its deletion and instead demand the restriction of the use of the data,
- We no longer need your personal information for processing purposes, but you do need the information to assert, exercise or defend your rights,
- You have lodged an objection against the processing of your data in accordance with Art. 21 GDPR, but it is not yet certain whether the legitimate reasons that justified us despite your objection to further processing outweigh your rights.
- Right to information: If you have asserted the right of rectification, cancellation or limitation of the processing to us, we are obliged to notify all recipients who have been disclosed to you personal data concerning the correction or deletion of the data or their request Notify of limitation of the processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed by us about these recipients.
- Right to Data Portability: In accordance with Art. 20 GDPR, you may request that we obtain the personal data relating to you which you have provided to us in a structured, standard and machine-readable format or to request the transfer to another person responsible.
- Right of appeal: According to Art. 77 GDPR you have the right to complain to a supervisory authority. For this you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.
- Withdrawal: According to Art. 7 para. 3 GDPR you have the right to revoke your consent to the processing of your data at any time to us. The revocation you have declared does not alter the legality of the processing of your personal data until the revocation.
- Right to
You have the right at any time to object to the processing of the personal data concerning you, which is based on a balance of interests (Article 6 (1) (f) GDPR), for reasons that arise from your particular situation. This is especially the case if the data processing is not required to fulfill a contract. If you exercise your right of objection, we ask you to explain the reasons. We will then no longer process your personal data, unless we can prove to you that compelling legitimate reasons for data processing outweigh your interests and rights.
Regardless of the above, you have the right to object to the processing of your personal data for advertising and data analysis purposes at any time.
- Protection of minors
Children and persons under the age of 18 should not submit any personal data to us without the consent of their parents or guardians. We do not solicit personal information from children, do not collect them and do not share them with third parties.
- Up-to-dateness and change of this data protection explanation
This privacy policy is currently valid and is from April 2018.
Due to the further development of the website of our website or due to changed legal or regulatory requirements, it may become necessary to adapt this privacy policy.