PRIVACY POLICY
Data protection instructions for the online shop Angletip.com
This data protection declaration applies to the collection, processing and use of your personal data (“data processing”) when using Angletip.com
The protection of your personal data is particularly important to us. We therefore collect and process your data exclusively on the basis of the legal provisions, in particular the provisions of the BDSG and the GDPR. In this data protection information we inform you about the most important aspects of data processing on our website.
Below we would like to inform you in detail about which data we collect, process and use for what purpose and how you can object to this data processing.
-
1 Data of the person responsible
The responsible body for data processing is:
Capsule Cxo Company, Gmünderstraße 79, 73614 Schorndorf
Email: Oezsu@capsule-cxo.com
contact form
If you use the contact form on our website, which can be used to contact us electronically, or contact us via our email address, the personal data you provide will be saved automatically. The storage serves solely for the purposes of processing or contacting the data subject. A transfer of data to third parties does not take place. The legal basis for the processing of the data, if the user has given his consent, is Article 6 (1) (a) GDPR.
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 (1) (b) GDPR.
- 2 Legal basis for processing personal data
To the extent that we obtain the consent of the data subjects for processing personal data, Article 6 paragraph applies. 1 lit. a of the EU General Data Protection Regulation (GDPR) as the legal basis.
When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Art. 6 Paragraph 1 lit.b GDPR serves as the legal basis. This also applies to the processing operations that are necessary to carry out pre-contractual measures.
If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Paragraph 1 Letter c GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 paragraph 1 lit. f GDPR serves as the legal basis for the processing.
- 3 Recipients of the data or categories of recipients
After entering and transmitting your data, it goes directly to the server of an external service provider via an encrypted connection
Recipients of the data are public bodies that receive data based on legal regulations (e.g. social security institutions, tax authorities), internal bodies that are involved in the execution of the respective business processes (human resources administration, accounting, banking institutions/payment service providers, accounting, customer service, marketing, sales), for shipping products to the transport company/shipping company, contractual partner, business partner commissioned by us, insofar as the legal provisions require or permit this.
-
We accept payments with PayPal. When processing payments, some of your information will be shared with PayPal, including information necessary to process or complete the payment, such as total purchase price and billing information.
Please read the PayPal Privacy Policy for more information.
Data will not be transferred to third parties, with the exception of the transfer of credit card details to the processing company for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us to deliver the goods and to our tax advisor to fulfill our tax obligations.
Visitor comments may be checked through an automated spam detection service.
- 4 Routine deletion and storage of personal data
We process and store personal data of the data subject only for the period necessary to achieve the storage purpose or if this has been provided for by the European legislator or another legislator in laws or regulations to which the data controller is subject .
If the storage purpose no longer applies or if a storage period prescribed by the European legislator or another responsible legislator expires, the personal data will be blocked or deleted routinely and in accordance with legal regulations.
If the data is collected to provide the website, this is the case when the respective session has ended.
In the case of a newsletter subscription, this is the case as long as the subscription is active.
In the case of a comment, it including metadata will be stored indefinitely. This way we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users who register on our website, we additionally store the personal information they provide in their user profiles. All users can view, change or delete their personal information at any time (the user name cannot be changed). Website administrators can also view and change this information.
- 5 Your rights
If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights towards the person responsible:
right of providing information
You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us.
If such processing occurs, you can request information from the person responsible about the following information:
a. the purposes for which the personal data are processed;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
- the planned duration of storage of the personal data concerning you or, if specific information is not possible, criteria for determining the storage period;
- the existence of a right to rectification or deletion of personal data concerning you, a right to restrict processing by the controller or a right to object to this processing;
- the existence of a right to lodge a complaint with a supervisory authority;
- all available information about the origin of the data if the personal data is not collected from the data subject;
H. the existence of automated decision-making including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.
Right to rectification
You have the right to request correction and/or completion from the person responsible if the personal data processed concerning you is incorrect or incomplete. The person responsible must make the correction immediately.
Right to restriction of processing
You can request the restriction of the processing of personal data concerning you under the following conditions:
- if you contest the accuracy of the personal data relating to you for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;
- the controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
- if you have objected to the processing in accordance with Article 21 Para. 1 GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.
Right to deletion
You can request that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:
- The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke your consent on which the processing was based in accordance with Article 6 Paragraph 1 Letter a or Article 9 Paragraph 2 Letter a GDPR and there is no other legal basis for the processing.
- You object to the processing in accordance with Article 21 Paragraph 1 of the GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Article 21 Paragraph 2 of the GDPR .
- Your personal data has been processed unlawfully.
- The deletion of personal data concerning you is necessary to comply with a legal obligation under Union or Member State law to which the controller is subject.
- The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 Para. 1 GDPR.
If the person responsible has made the personal data concerning you public and is obliged to delete it in accordance with Article 17 (1) GDPR, he will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs To inform those responsible for data processing who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.
There is no right to deletion if processing is necessary
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the field of public health in accordance with Article 9 Paragraph 2 Letters h and i and Article 9 Paragraph 3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 Para. 1 GDPR, to the extent that the law referred to in Paragraph 1 is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or
- to assert, exercise or defend legal claims.
Right to information
If you have asserted the right to rectification, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless: this turns out to be impossible or involves disproportionate effort.
You have the right to be informed about these recipients by the person responsible.
Right to data portability
You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided:
a. the processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR based and
b. the processing takes place using automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one person responsible to another person responsible, to the extent that this is technically feasible. The freedoms and rights of other people must not be impaired by this.
The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
If you have an account on this site or have written comments, you can request to export your personal data to us, including any data you have provided to us. In addition, you can request the deletion of any personal data we hold about you. This does not include data that we are required to retain for administrative, legal or security reasons.
Right to object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is carried out on the basis of Article 6 (1) (e) or (f) of the GDPR; This also applies to profiling based on these provisions.
The person responsible will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising.
If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes.
In connection with the use of information society services - regardless of Directive 2002/58/EC - you have the opportunity to exercise your right to object using automated procedures that use technical specifications.
Right to revoke the declaration of consent under data protection law
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation.
Automated decision-making in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
- is necessary for the conclusion or fulfillment of a contract between you and the person responsible,
- is permitted by Union or Member State law to which the controller is subject and such law contains appropriate measures to safeguard your rights and freedoms and your legitimate interests or
- with your express consent.
However, these decisions may not be based on special categories of personal data according to Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 Letters a or g applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests became.
Regarding the in a. and c. In the cases mentioned, the person responsible takes appropriate measures to protect the rights and freedoms as well as your legitimate interests, which includes at least the right to obtain the intervention of a person on the part of the person responsible, to express one's own point of view and to challenge the decision.
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you violates the DS -GMO violates.
The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.
- 6 Information, objection, correction and removal options
You have the option at any time to revoke your consent to the processing of personal data with future effect and to have your personal data deleted or changed. If the data is necessary to fulfill the contract or to carry out pre-contractual measures, early deletion of the data is only possible unless contractual or legal obligations prevent deletion.
Requests for information, correction and deletion as well as revocation or objection regarding the further use of the data of any consent that may have been given to us can be declared informally as follows:
by post: Capsule Cxo Company, Gmünderstraße 79, 73614 Schorndorf
by email: oezsu@capsule-cxo.com
- 7 cookies
We use so-called “cookies” on our websites. Cookies are small text files that are stored on your computer and saved by your browser. By setting cookies, our web server can recognize your browser, your individual settings on our websites and, if necessary, parts of your login data in encrypted form, making it easier for you to use our pages and enabling you to log in automatically.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing the page. The user data collected through technically necessary cookies is not used to create user profiles.
We use cookies in connection with the following functionalities:
9.1) Google Analytics
As part of website analysis, we use “Google Analytics”, a web analysis service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).
Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable your use of the website to be analyzed
The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. We use the stored information to evaluate your use of the website, to compile reports on website activity for the website operators and to provide other services related to website activity. We process the data received in this way due to our overriding interest in the optimal marketing of our online offering in accordance with Art. 6 Para. 1 f) GDPR. Under no circumstances will Google associate your IP address with other Google data.
We would like to point out that this website uses Google Analytics with the extension “anonymizeIp()”. This means that IP addresses are shortened before they are transmitted to a server in the USA. A direct personal reference in connection with the stored data is therefore generally excluded. Only in exceptional cases will the full IP address be transferred to a server in the USA and shortened there.
You can object to data collection at any time with future effect by using the Google Analytics deactivation add-on for browsers at
Use http://tools.google.com/dlpage/gaoptout?hl=de .
Please also note the information on the use of data from Google in the Google partner network at:
http://www.google.com/intl/de/policies/privacy/partners/
www.google.de/privacy_ads.html
Google is certified under:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information on data protection can be found at: https://policies.google.com/privacy?hl=de&gl=de
9.2) Facebook Remarketing/Retargeting: Facebook Custom Audiences (Pixels/Cookies)
We use a so-called tracking pixel on our website. When you visit certain pages, a cookie is stored on your device. The cookies remain permanently on your PC. The cookies are used to track which advertisements and third-party pages users use to reach our website. The process is used to optimize our advertising by evaluating the statistical data we receive using cookies. We process the data received in this way due to our overriding interest in the optimal marketing of our online offering in accordance with Art. 6 Para. 1 f) GDPR.
The cookies do not serve to identify you personally. The data is anonymous to us and does not allow us to draw any conclusions about the user. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Facebook server in the USA and stored there.
Facebook is certified under:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Further information on data protection can be found at:
https://www.facebook.com/help/568137493302217
You can object to data collection at any time with future effect by [insert opt-out option]
9.3) Integration of external content
We use external dynamic content to optimize the presentation and offering of our website. When you visit the website, a request is automatically made to the server of the respective content provider using an API, during which certain log data (e.g. the user's IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following functionalities:
9.4) Google Maps
We use Google's map service “Google Maps” to provide you with an interactive map. When the map is displayed, data including your IP address and your location are transmitted to Google servers in the USA and stored there. This processing is carried out due to our overriding legitimate interest in optimal marketing of our offer in accordance with Art. 6 Para. 1 f) GDPR.
Google is certified under:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information on data protection can be found at: https://policies.google.com/privacy?hl=de&gl=de
9.5) Social plugins
We use third-party plugins on our websites. This allows you to inform your contacts whether you like our website, point out content or share content. The plugins are identified by the logo of the respective third-party provider.
When you visit our site, your data will be transferred to the respective third party providers.
If you are also a user of a third-party provider, this data can be assigned to the corresponding user account with the provider.
This data may also be transferred to the third-party provider if you are not registered as a user with the third-party provider and do not click on the plugin on our website.
However, if a transmission is made without simultaneous registration with the third-party provider, it is not immediately possible to establish a direct personal connection to you via, for example, your IP address; This would only be possible with information from your provider.
The purpose and scope of data processing by the third-party provider can be found in the data protection information of the respective provider.
This data is processed based on our overriding legitimate interest in optimal marketing of our online offering in accordance with Art. 6 Para. 1 f) GDPR.
Our website uses plugins from the following providers:
- Facebook Connect, Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
You can log in to our site with Facebook Connect. In this case no additional registration is necessary. To register, you will be redirected to the Facebook page, where you can log in with your usage data.
When you register via Facebook, our services are linked to your Facebook user profile. Through the link, the following information is automatically transmitted to us by the respective social media service provider:
– Username
- E-mail address
This information is absolutely necessary for the conclusion of the contract in order to be able to identify you.
In addition, if you authenticate using these services, Facebook gives you the opportunity to access your contacts. However, we do not make use of this.
We would like to point out that using the Facebook login can lead to the collection of personal data and, if necessary, further use of it. However, this data collection and use is the responsibility of Facebook and we cannot influence it.
Certification at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Further information at: https://www.facebook.com/privacy/explanation https://www.facebook.com/full_data_use_policy
9.6) Facebook Custom Audiences (customer list)
We use the Custom Audience services of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook). Customer data is transferred to Facebook in lists. The data is sent to Facebook servers in the USA. The data is used to analyze user behavior on the Internet and to personalize advertising and, if necessary, linked to an existing user account on Facebook.
Certification at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Further information at: https://www.facebook.com/privacy/explanation
The legal basis for the processing of personal data using cookies is our legitimate interest, Article 6 (1) (f) GDPR.
Cookies are stored on the user's computer and transmitted from the user to our site. Therefore, as a user, you also have full control over the use of cookies. Through your browser settings you have the option of rejecting cookies, deleting cookies from your computer, blocking cookies or being prompted before a cookie is set. The cookies we set are deleted from your computer after each session. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
9.7) YITH Plugins / YITH WooCommerce Wishlist
As you visit our site, tracking data is collected:
Products you have added to your wishlist: We use this feature to show you and other users your favorite products and to create targeted email campaigns.
Wish lists you have created: We keep track of the wish lists you have created and make them visible to store staff
We also use cookies to track wish list content while you visit our website.
Who has access to your data
Members of our team have access to the information you provide to us. For example, both administrators and store managers can access:
Wishlist details such as products added, date added, name and privacy settings of your wishlists.
Our team members have access to this information to provide you with better deals on the products you prefer.
9.8) Woocommerce (shop system)
As you visit our website, we record the following:
– Viewed products: Here we show you products that you have recently viewed.
– Location, IP address and browser type. We evaluate this for purposes such as taxes and shipping.
– Shipping address: We will ask you to provide this, for example to determine shipping costs before you place an order and to ship the order to you.
We also use cookies to track the contents of your shopping cart while you visit our website.
When you make a purchase from us, we will ask you to provide information such as your name, billing and shipping addresses, email address and phone number, credit card/payment details, and optional account information such as username and password. We use this information for the following purposes:
- Sending you information about your account and order
- Responding to your inquiries, including refunds and complaints
- Process payments and prevent fraud
- Compliance with legal obligations, such as taxes.
- Marketing messages, if you wish to receive them and have agreed to them.
When you create an account with us, we store your name, address, email address and phone number. This information will be used to fill out payment information for future orders.
We typically retain information about you for as long as we need and are required to retain it for the purposes for which it was collected and used. For example, we store order information for 10 years for tax and billing purposes. This includes your name, email address, billing and shipping address.
We also store comments or reviews.
Who has access to your data
Members of our team have access to the information you provide to us. For example, both administrators and store managers can access:
- Order information such as products purchased, time of purchase, and buyer information. This includes your name, email address, billing and shipping address.
Our team members have access to this information to process orders, issue refunds and support you.
Payments
-
We accept payments with PayPal. When processing payments, some of your information will be shared with PayPal, including information necessary to process or complete the payment, such as total purchase price and billing information.
Please read the PayPal Privacy Policy for more information.
- 8 Protection of minors
Children and persons under the age of 18 should not provide us with personal information without the consent of their parent or guardian. We do not request, collect or share personal information from children.