Privacy policy

Privacy policy
--------------------
Privacy policy
--------------------
1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 Arne Forjahn Krzywa 28, 37-450 Stalowa Wola, Poland, Tel.WhatsApp: 017621232508, e-mail: info@saintbaby.de is responsible for the data processing on this website within the meaning of the General Data Protection Regulation (GDPR). The controller of personal data is the natural or legal person who decides, alone or jointly with others, on the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock icon in your browser line.
2) Data collection when visiting our website
When using our website in an informative way, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following information, which is technically necessary for us to show you the website:
- Our website visited
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- Ip address used (possibly: in anonymized form)
The processing is carried out in accordance with Art. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to check the server log files retrospectively if specific indications indicate illegal use.
3) Cookies
In order to make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). When cookies are set, they collect and process specific user information such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie.
In some cases, the cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). Insofar as individual cookies implemented by us also process personal data, the processing takes place in accordance with Art. b GDPR either for the implementation of the contract or in accordance with Article 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.
We may work with advertising partners to help us make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive (third-party cookies) when you visit our website. If we cooperate with the above-mentioned advertising partners, you will be informed individually and separately about the use of such cookies and the extent of the information collected in each case within the following paragraphs.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browsers under the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Safari: https://support.apple.com
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Please note that if cookies are not accepted, the functionality of our website may be limited.
4) Contacting
Personal data is collected as part of the contact with us (e.g. via contact form or e-mail). The data collected in the case of a contact form can be seen from the respective contact form. This data will be stored and used exclusively for the purpose of answering your request or for contacting and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. b GDPR. Your data will be deleted after final processing of your request, this is the case if it can be inferred from the circumstances that the affected facts have been finally clarified and provided that there are no legal retention obligations.
5) Data processing when opening a customer account and for contract processing
Pursuant to Art. b GDPR will continue to collect and process personal data if you provide it to us for the performance of a contract or when opening a customer account. The data collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the controller. We store and use the data you provide for the execution of the contract. After the complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and will be deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by our site, about which we inform you below.
6) Use of your data for direct marketing
Sign up for our e-mail newsletter
When you subscribe to our e-mail newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of additional data is voluntary and is used to address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will not send you an e-mail newsletter until you have expressly confirmed to us that you consent to the sending of newsletters. We will then send you a confirmation e-mail asking you to confirm by clicking on a corresponding link that you want to receive newsletters in the future.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of the registration in order to be able to understand a possible misuse of your e-mail address at a later time. The data collected by us when registering for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible above. After unsubscribing, your e-mail address will be deleted immediately in our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.
7) Data processing for order processing
7.1 In order to process your order, we cooperate with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery in the course of the contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution as part of the payment processing process, if this is necessary for payment processing. If payment service providers are used, we provide explicit information below. The legal basis for the transfer of the data is Art. b GDPR.
7.2 In order to fulfil our contractual obligations towards our customers, we cooperate with external shipping partners. We provide your name as well as your delivery address exclusively for the purpose of the delivery of goods Art. 6 sec. 1 lit. b GDPR to a shipping partner selected by us.
7.3 Disclosure of personal data to shipping service providers
- DHL
If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we provide your e-mail address in accordance with Art. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery to DHL, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of service in accordance with Art. b GDPR only passes on the name of the recipient and the delivery address to DHL. The transfer will only take place if this is necessary for the delivery of goods. In this case, it is not possible to pre-reconcile the delivery date with DHL or to announce the delivery.
Consent may be revoked at any time with effect for the future from the controller designated above or from the transport service provider DHL.
- DPD
If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we provide your e-mail address and/or telephone number before delivery of the goods in accordance with Art. a GDPR for the purpose of coordinating a delivery date or announcing the delivery to DPD, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of service in accordance with Art. b GDPR only passes on the name of the recipient and the delivery address to DPD. The transfer will only take place if this is necessary for the delivery of goods. In this case, it is not possible to pre-reconcile the delivery date with DPD or to announce the delivery.
Consent may be revoked at any time with effect for the future against the controller designated above or against the transport service provider DPD.
7.4 Use of payment service providers (payment service providers)
- Amazon Pay
If the payment method "Amazon Pay" is selected, payment is processed via the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg ('Amazon Payments'), to which we will provide your information provided during the ordering process, together with the information about your order in accordance with Art. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent that it is necessary for this purpose. For more information about Amazon Payments Privacy Policy, please visit the following Web address: https://pay.amazon.com/de/help/201751600
- Cash payment via cash payment
When selecting the payment method "cash numbers", we provide your personal data (first and last name, street, house number, postal code, place, date of birth, e-mail address and possibly telephone number) in accordance with Art. b GDPR to the payment service provider Cash Payment Solutions GmbH, Dircksenstr. 40, 10178 Berlin, so that Cash Payment Solutions GmbH can provide you with an individually generated number or barcode (so-called "payment slip") for the respective transaction. The transfer will only take place if this is necessary for the processing of the payment method "cash payments". With the help of the payment slip, you can pay the respective transaction costs by paying in cash in the business premises of partner companies of Cash Payment Solutions GmbH. The cash-pay partner company transmits the payment confirmation in real time, after which the shipping process can be started immediately if the goods are immediately available.
Cash Payment Solutions GmbH uses the credit institution NordFinanz Bank Aktiengesellschaft, Martinistraße 48, 28195 Bremen (hereinafter "NordFinanz") to process the payment method "cash payments" and enters your payment data in accordance with Art. b GDPR - to the extent necessary for the payment of cash - to this.

Both Cash Payment Solutions GmbH and NordFinanz use your personal data exclusively for the purposes of implementing the payment method "cash numbers" and for fulfilling money laundering regulations.

- Finepay

If you select the payment methods "Purchase by direct debit" and/or "Purchase by invoice" via finepay, you will be asked to provide your personal data (first and last name, street, house number, postal code, place, date of birth, telephone number and, when purchasing by direct debit, the specified account details) in the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, this data is transferred by us in accordance with Art. f GDPR forwarded to the payment service provider fine trade GmbH, Neuburgstraße 6a, 6840 Götzis/ Austria ("finepay") for the purpose of an identity and credit check.
On the basis of the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experience), Finepay checks whether the payment option you have selected can be granted with regard to payment and/or default risks. In addition to finepay internal criteria in accordance with Art. 6 sec. 1 lit. f GDPR identity and creditworthiness information from the following credit reporting agencies:
- infoscore Consumer Data GmbH (arvato), Rheinstraße 99, D-76532 Baden-Baden, tel.: +49 (0)7221-5040-1000, fax: -1001
The credit report can contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based in a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values, but not exclusively.
You can object to this processing of your data at any time by sending a message to the data controller or to finepay. However, finepay may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- GambioPay
If you choose a payment method from the payment service provider GambioPay, payment is processed via the checkout portal of Wirecard UK & Ireland Ltd, 1st Floor Ulysses House, Foley Street Dublin 1, Ireland, to which we will provide your information provided during the ordering process, together with the information about your order in accordance with Art. 6 sec. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider GambioPay and only to the extent that it is necessary for this purpose.
- Heidelpay
In the case of payment by credit card via Heidelpay, payment is processed via the payment service provider Heidelberger Payment GmbH, Vangerowstraße 18, 69115 Heidelberg (hereinafter "Heidelpay"), to which we provide your data communicated during the ordering process exclusively for the purpose of payment processing in accordance with Art. b GDPR. The transfer will only take place if it is actually necessary for the payment processing. Heidelpay transmits your data for the purpose of making the payment, if necessary for this purpose, in accordance with Art. b GDPR in turn to

HUELLEMANN & STRAUSS ONLINESERVICES S.A., 1, Place du Marché, 6755 Grevenmacher, Luxembourg.
If you select the payment method "Invoice purchase via Heidelpay" or "Direct debit via Heidelplay" you will be asked to provide your personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address and telephone number) during the ordering process. In order to safeguard our legitimate interest in determining the solvency of our customers, this data is transferred by us in accordance with Art. f GDPR forwarded to Heidelberger Payment GmbH, Vangerowstr. 18, 69115 Heidelberg (hereinafter "Heidelpay") for the purpose of a credit check. Heidelpay checks on the basis of the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option you have selected can be granted with regard to payment and/or default risks. In accordance with Article 6(1) of the Treaty, a decision on the establishment or implementation of a contractual relationship may be taken in accordance with Article 6(1) of the Treaty. f GDPR also includes identity or credit worth information from the following credit reporting agencies:
- SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
- CRIF Bürgel GmbH, Gasstraße 18, 22761 Hamburg
- Arvato Infoscore GmbH, Rheinstraße 99, 76532 Baden-Baden
- Deltavista GmbH, Kaiserstraße 217, 76133 Karlsruhe
- UNIVERSUM Business GmbH, Hugo-Junkers-Straße 3, 60386 Frankfurt am Main
- Bisnode International Group, Robert-Bosch-Straße 11, 64293 Darmstadt
- Regis24 GmbH, Wallstraße 58, 10179 Berlin
- Creditreform AG, Hellersbergstraße 12, 41460 Neuss
The credit report can contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based in a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values, but not exclusively.
You can object to this processing of your data at any time by sending a message to the data controller or to Heidelpay. However, Heidelpay may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- ipayment
If the payment method(s) "direct debit via ipayment" and/or "credit card via ipayment" is offered, we will provide your personal data in accordance with Art. b GDPR for payment processing purposes to 1&1 Internet AG, Elgendorfer Str. 57, 56410 Montabaur (hereinafter referred to as "1&1") insofar as this is necessary for payment processing. For more information on 1&1's handling of personal data, please refer to 1&1's privacy policy at http://www.1und1.de/Datenschutz

- Klarna
If the payment method "Klarna Invoice Purchase" or (if offered) the payment method "Klarna Installment Purchase" is selected, payment is processed via Klarna AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable payment to be processed, your personal data (first and last name, street, house number, postal code, location, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, mode of delivery) will be passed on to Klarna for the purpose of identity and credit check, provided that you use this in accordance with Art. a GDPR have expressly consented in the context of the ordering process. You can view to which information agencies your data can be forwarded here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report can contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based in a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values, but not exclusively. The information obtained on the statistical probability of a default is used by Klarna for a balanced decision on the establishment, implementation or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for the contractual payment processing.
Your personal data will be https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations for data subjects based in Germany https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf
or for those affected, who are based in Austria https://cdn.klarna.com/1.0/shared/content/policy/data/de_at/data_protection.pdf
Treated.
- Masterpayment
If you select the payment methods "direct debit" and/or "delivery by invoice" and/or "purchase of instalments" via master payment, you will be asked to provide your personal data (first and last name, street, house number, postal code, place, date of birth, e-mail address, telephone number and, in case of direct debit, the specified account details) in the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, this data is transferred by us in accordance with Art. f GDPR forwarded to Masterpayment LTD, 483 Green Lanes, London, N13 4BS, United Kingdom for the purpose of a credit check. Masterpayment checks on the basis of the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option you have selected can be granted with regard to payment and/or default risks. The decision in the context of the In addition to master payment internal criteria in accordance with Art. f GDPR also includes identity and credit worth information from the following credit reporting agencies:
- Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Tel.: +49 (0)2131-109-501, Fax: -557
- CRIF Bürgel GmbH, Gasstraße 18, D-22761 Hamburg, Tel.: +49 (0)40-89803-0, Fax: -777
- SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Tel.: +49 (0)611-9278-0, Fax: -109
The credit report can contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based in a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values, but not exclusively.
You can object to this processing of your data at any time by sending a message to the data controller or to Masterpayment. However, Masterpayment may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- Paydirekt
If you choose the payment method paydirekt, the payment is made via the payment service provider paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main. Here, your payment data (e.g. payment amount, details of the payee) as well as your confirmation that the payment data are correct are provided by paydirekt GmbH for the execution of the paydirekt payment in accordance with Art. 6 sec. 1 lit. b GDPR, processed and transmitted to your bank. Such processing shall only take place to the extent that it is actually necessary for the payment to be made. Paydirekt GmbH then authenticates the payment using the authentication procedure stored for you with your bank. For more information on the transfer and processing of your data, please refer to the paydirekt Privacy Policy, which can be found at the following link: https://www.paydirekt.de/agb/index.html
- Payever
If you choose a payment method of the payment service provider payever, payment is processed via the payment service provider payever GmbH, Simon-von-Utrecht Straße 1, 20359 Hamburg, to whom we will provide your information provided during the ordering process, together with the information about your order in accordance with Art. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider payever and only to the extent that it is necessary for this purpose.
For more information on payever's handling of personal data, please refer to payever's privacy policy: https://www.payever.de/schufa/datenschutz/
- PAYONE

If you choose a payment method from the payment service provider PAYONE, payment is processed via the payment service provider BS PAYONE GmbH, Lyoner Straße 9
60528 Frankfurt/Main, to which we will provide you with your information in the course of the ordering process, together with the information about your order in accordance with Art. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider PAYONE and only to the extent that it is necessary for this purpose.
- Paypal
In case of payment via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on invoice" or "instalment payment" via PayPal, we pass on your payment details to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. b GDPR and only to the extent that this is necessary for payment processing.
PayPal reserves the right to provide credit card information via PayPal, direct debit via PayPal or, if offered, "purchase on invoice" or "instalment payment" via PayPal. For this purpose, your payment data may be processed in accordance with Art. f GDPR based on PayPal's legitimate interest in determining your solvency. The result of the credit check in relation to the statistical probability of default is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based in a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values, but not exclusively. Further data protection information, including the information agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- Rakuten Checkout
If you have decided on the payment methods "invoice purchase" or "direct debit" via payment service provider Rakuten Checkout during the ordering process, you have consented to a credit check.
The personal data required for the processing of the payment method invoice purchase and a credit check are provided on the basis of the consent pursuant to Art. a GDPR and transmitted to Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (www.klarna.de).
For the processing of the payment type direct debit, your personal data will be processed on the basis of your consent given in the course of the ordering process in accordance with Art. 6 sec. 1 lit. A

GDPR of Rakuten Checkout for the purpose of credit check. The transfer of this data is carried out in compliance with the applicable data protection law and taking into account your legitimate interests. For the purpose of deciding on the establishment, implementation or termination of a contractual relationship, the above data may be transmitted to one or more of the following economic information agencies on the basis of your consent:
- Creditreform Boniversum GmbH, Hellersbergstraße 11 41460 Neuss
- CRIF GmbH, Dessauerstraße 9, 80992 Munich
- Arvato Infoscore Consumer Data GmbH
- Infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden
- SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
The credit report can contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based in a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values, but not exclusively. If, after this calculation, it turns out that your creditworthiness is not present, we will inform you immediately. For more information on Rakuten Checkout's privacy policy, please visit the following internet address: http://www.rakuten.de/info/datenschutz
You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- RatePay
If you have opted for the RatePay invoice or RatePay SEPA direct debit or RatePay installment purchase as a payment option, you will be asked to provide your personal information (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number and, in the case of SEPA direct debit, the account details) in the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, this data is transferred by us in accordance with Art. f GDPR forwarded to RatePay GmbH, Franklinstraße 28-29,10587 Berlin ("RatePay") for the purpose of a credit check. RatePay checks on the basis of the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option you have selected can be granted with regard to payment and/or default risks. For the decision in the context of the application examination, in addition to RatePay internal criteria in accordance with Art. f GDPR also includes identity and credit worth information from the following credit reporting agencies:
- Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Tel.: +49 (0)2131-109-501, Fax: -557

- infoscore Consumer Data GmbH (arvato), Rheinstraße 99, D-76532 Baden-Baden, tel.: +49 (0)7221-5040-1000, fax: -1001
- CRIF Bürgel GmbH, Gasstraße 18, D-22761 Hamburg, Tel.: +49 (0)40-89803-0, Fax: -777
- SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Tel.: +49 (0)611-9278-0, Fax: -109
- CRIF GmbH, Dessauerstraße 9, 80992 Munich, Tel.: +49 (0)721/ 255 11 0, Fax: - 22
The credit report can contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based in a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values, but not exclusively. For more information on RatePay's privacy policy, please visit the following Internet address: http://www.ratepay.com/zusaetzliche-geschaeftsbedingungen-und-datenschutzhinweis/
You can object to this processing of your data at any time by sending a message to the data controller or to RatePay. However, RatePay may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- Secupay
If you decide to pay the credit card from the payment service provider secupay, payment is processed via the payment service provider secupay AG, Goethestraße 6, 01896 Pulsnitz, to which we will receive your information provided during the ordering process, together with the information about your order in accordance with Art. 6 sec. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider secupay and only to the extent that it is necessary for this purpose.
If you select the payment methods "purchase invoice" via secupay or "direct debit" via secupay, you will be asked to provide your personal data (first and last name, street, house number, postal code, place, date of birth, e-mail address, telephone number, bank code and account number) in the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, this data is transferred by us in accordance with Art. f GDPR forwarded to secupay AG, Goethestr. 6, 01896 Pulsnitz ("secupay") for the purpose of a credit check. Secupay checks on the basis of the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option you have selected can be granted with regard to payment and/or default risks. For the purpose of deciding on the application examination, in addition to secupay internal criteria in accordance with Article 6 (1) lit. f GDPR also includes identity and credit worth information from the following credit reporting agencies:
- infoscore Consumer Data GmbH (arvato), Rheinstraße 99, D-76532 Baden-Baden, tel.: +49 (0)7221-5040-1000, fax: -1001
- Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Tel.: +49 (0)2131-109-501, Fax: -557 

- EOS Payment Solutions GmbH, Steindamm 80, 200 Hamburg
The credit report can contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based in a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values, but not exclusively.
You can object to this processing of your data at any time by sending a message to the data controller or to Secupay. However, Secupay may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- SOFORT
If the payment method "SOFORT" is selected, payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to which we receive your information provided during the ordering process, together with the information about your order in accordance with Art. 6 sec. 1 lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent that it is necessary for this purpose. For more information on SOFORT's privacy policy, please visit the following Internet address: https://www.klarna.com/sofort/datenschutz
- Skrill
If you choose a payment method from the payment service provider Skrill, payment is processed by the payment service provider Skrill Ltd., Floor 27, 25 Canada Square, London, E14 5LQ, England, to which we provide your information provided during the ordering process, together with the information about your order (name, address, account number, bank code, possible credit card number, invoice amount, currency and transaction number) in accordance with Art. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Skrill Ltd. and only to the extent that it is necessary for this purpose.
- Stripe
If you choose a payment method from the payment service provider Stripe, payment is processed by the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, to which we will provide your information provided during the ordering process, together with the information about your order (name, address, account number, bank code, possible credit card number, invoice amount, currency and transaction number) in accordance with Art. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. For more information about Stripe's privacy, see the URL https://stripe.com/de/terms
- Wirecard

If you choose one of the payment methods offered by the payment service provider checkoutportal by wirecard, Payment is processed via the payment service provider checkoutportal by wirecard, Wirecard UK & Ireland Ltd, 1st Floor Ulysses House,Foley Street Dublin 1, Ireland, to which we will pass on your information provided during the ordering process, together with the information about your order (name, address, possibly IBAN, possibly BIC, invoice amount, currency and possible transaction number). Your data will be processed in accordance with Art. b GDPR passed on exclusively for the purpose of payment processing with the payment service provider checkoutportal by wirecard. Your data will only be passed on if this is actually necessary for the processing of the payment.
8) Tools and miscellaneous
8.1 Google reCAPTCHA
On this website we also use the reCAPTCHA function of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or is abusive lynoted by machine and automated processing. The service includes the sending of the IP address and, if applicable, any other data required by Google for the service reCAPTCHA to Google and takes place in accordance with Art. 6 sec. 1 lit. f GDPR based on our legitimate interest in determining the individual will of actions on the Internet and avoiding abuse and spam.
Google LLC, based in the United States, is certified for the Us-European Privacy Shield Convention, which ensures compliance with the level of data protection applicable in the EU.
Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/
8.2 Google Maps
On our website we use Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive (land) maps to visualize geographic information. By using this service, you will be shown our location and any access will be made easier.
Information about your use of our website (e.g. your IP address) to Google's servers in the USA and stored there. This is done regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly associated with your account. If you do not want to be assigned to your google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 sec. 1 lit.f GDPR on the basis of Google's legitimate interests in the display of personalised advertising, market research and/or the design of its website according to requirements. You have the right to object against the creation of these user profiles, whereby you must address yourself to Google in order to exercise this.
Google LLC, based in the United States, is certified for the Us-European Privacy Shield Convention, which ensures compliance with the level of data protection applicable in the EU.
If you do not agree with the future transmission of your data to Google in the context of the use of Google Maps, it is also possible to completely deactivate the web service of Google Maps by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot then be used.
Google's Terms of Use can be viewed under http://www.google.de/intl/de/policies/terms/regional.html, and the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on Google's website ("Google Privacy Policy"): http://www.google.de/intl/de/policies/privacy/

9) Rights of the person concerned
9.1 The applicable data protection law grants you comprehensive data subjects' rights (information and intervention rights) with regard to the processing of your personal data, about which we inform you below:

- Right of access pursuant to Article 15 GDPR: In particular, you have the right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, opposition to processing, complaint to a supervisory authority, the origin of your data, if not collected by us from you, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the scope and the intended impact of such processing, and your right to be informed of the guarantees provided for in Article 46 GDPR in the case of forwarding your data to third countries;
- Right to rectification in accordance with Article 16 GDPR: You have the right to immediate rectification of any inaccurate data concerning you and/or completion of your incomplete data stored by us;
- Right to erasure in accordance with Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 sec. 1 GDPR are met. However, this right does not exist, in particular, where the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- Right to restrict processing in accordance with Article 18 GDPR: you have the right to to request the restriction of the processing of your personal data as long as the accuracy of your data is verified, if you refuse to delete your data due to improper data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims, after we no longer need this data after the purpose has been assigned, or if you have objected on grounds of your particular situation, as long as it is not yet established whether our legitimate reasons prevail;
- Right to be informs in accordance with Article 19 GDPR: If you have asserted the right to rectification, erasure or restriction of the processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. They have the right to be informed of these recipients.
- Right to data portability in accordance with Article 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller, insofar as this is technically feasible;
- Right to revoke consents given in accordance with Art. 7 sec. 3 GDPR: You have the right to revoke once a given consent to the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing is based on a legal basis for 

processing without consent. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation;
- Right to complain under Article 77 GDPR: If you consider that the processing of personal data concerning you is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
9.2 WIDERSPRUCHSRECHT
IF WE ARE IN THE FRAME OF AN INTEREST DEVELOPMENT YOUR PERSONAL DATA OF OUR EXPERIENCE OF INTEREST, YOU HAVE THE EVERY RIGHT, FROM THE RIGHT TO BE FROM YOUR SPECIAL SITUATION, AGAINST THIS PROCESSING AGAINST THE FUTURE.
USE OF YOUR DISCLAIMER, WE ARE ENDING THE PROCESSING OF THE RELATED DATA. A FURTHER STAY BUT RESERVED WHEN WE CAN USE RECOMMENDED REASONS FOR THE PROCESSING THAT YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR WHEN THE PROCESSING OF THE EXPERIENCE,
WILL BE YOUR PERSONAL DATA OF US PROCESSED TO USE DIRECT DATA, HAVE THE RIGHT TO AT ANY TIME AGAINST THE PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF THE PERSONAL DATA. YOU CAN EXERCISE THE CONTRADICTION AS DESCRIBED ABOVE.
USE OF YOUR RIGHT RIGHT, WE END THE PROCESSING OF THE RELATED DATA FOR DIRECT ADVERTISING PURPOSES.
10) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective statutory retention period (e.g. commercial and tax retention periods). After the expiry of the period, the corresponding data will be routinely deleted, provided that they are no longer necessary for the performance of the contract or initiation of the contract and/or if there is no legitimate interest in the further storage on our part.