Data protection
Personal data (usually referred to as "data" below) is only processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data, such as collecting, recording, organizing, arranging, storing, adapting or changing, reading out, querying, using, disclosing through transmission, distribution or any other form of provision, comparison or linking, restricting, deleting or destroying.
With the following data protection declaration we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or together with others. In addition, we will inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as controllers
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as controllers
Responsible provider of this website in terms of data protection is:
miracle glass
Pontstrasse 117
52062 Aachen
Germany
Email: info@wunderglas.shop
II. Rights of users and data subjects
With regard to the data processing described in more detail below, the users and those affected have the right
- for confirmation as to whether data relating to them is being processed, for information about the data processed, for further information about data processing and for copies of the data (cf. also Art. 15 GDPR);
- to correct or complete incorrect or incomplete data (see also Art. 16 GDPR);
- to the immediate deletion of the data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is required in accordance with Art. 17 (3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
- to receive the data relating to them and provided by them and to transmit this data to other providers/responsible parties (cf. also Art. 20 GDPR);
- to complain to the supervisory authority if you believe that the data concerning you is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any correction or deletion of data or the restriction of processing that takes place on the basis of Articles 16, 17 para. 1, 18 DSGVO teach. However, this obligation does not exist if this notification is impossible or involves a disproportionate effort. Irrespective of this, the user has a right to information about these recipients.
According to Art. 21 GDPR, users and data subjects also have the right to object to the future processing of the data concerning them, provided that the data is processed by the provider in accordance with Art. 6 (1) lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data does not conflict with any statutory storage requirements and no other information on individual processing methods is subsequently given.
server data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted to us or to our web space provider by your internet browser. These so-called server log files record, among other things, the type and version of your Internet browser, the operating system, the website from which you switched to our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the Internet connection from which our website is used.
The data collected in this way is stored temporarily, but not together with other data from you.
This storage takes place on the legal basis of Article 6 (1) (f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data will be deleted after seven days at the latest, provided that no further storage is required for evidentiary purposes. Otherwise, the data is completely or partially excluded from deletion until the final clarification of an incident.
cookies
a) Session cookies/session cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are stored and stored on your end device by the Internet browser you use. These cookies process certain information about you, such as your browser or location data or your IP address, to an individual extent.
This processing makes our website more user-friendly, effective and secure, since the processing enables, for example, our website to be displayed in different languages or to offer a shopping cart function.
The legal basis for this processing is Art. 6 Para. 1 lit b.) GDPR, insofar as these cookies are used to process data for contract initiation or contract execution.
If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Article 6 Paragraph 1 Letter f) GDPR.
These session cookies are deleted when you close your internet browser.
b) Third Party Cookies
If necessary, our website also uses cookies from partner companies with whom we work for the purpose of advertising, analysis or the functionalities of our website.
For details on this, in particular on the purposes and legal basis for processing such third-party cookies, please refer to the information below.
c) Possibility of disposal
You can prevent or restrict the installation of cookies by setting your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, the processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player in this respect. The steps and measures required for this also depend on the Flash player you are using. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.
contract execution
The data transmitted by you to make use of our range of goods and/or services will be processed by us for the purpose of contract processing and are necessary in this respect. Contract conclusion and contract execution are not possible without providing your data.
The legal basis for processing is Art. 6 (1) (b) GDPR.
We delete the data upon completion of the contract, but must observe the retention periods under tax and commercial law.
As part of the contract processing, we pass on your data to the transport company commissioned with the delivery of the goods or to the financial service provider, insofar as the transfer is necessary for the delivery of the goods or for payment purposes.
The legal basis for the transfer of the data is Article 6 Paragraph 1 Letter b) GDPR.
Customer account / registration function
If you create a customer account with us via our website, we will use the data you entered during registration (e.g. your name, address or e-mail address) exclusively for pre-contractual services, for the fulfillment of the contract or for the purpose of Customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called notepad function) and save. At the same time, we then save the IP address and the date of your registration along with the time. Of course, this data will not be passed on to third parties.
As part of the further registration process, your consent to this processing will be obtained and reference will be made to this data protection declaration. The data we collect is used exclusively to provide the customer account.
If you consent to this processing, Art. 6 (1) (a) GDPR is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or the fulfillment of the contract, the legal basis for this processing is also Article 6 (1) (b) GDPR.
You can revoke the consent given to us to open and maintain the customer account at any time with effect for the future in accordance with Art. 7 Para. 3 DSGVO. All you have to do is inform us of your revocation.
The data collected in this respect will be deleted as soon as the processing is no longer necessary. In doing so, however, we have to observe tax and commercial law retention periods.
Newsletter
If you register for our free newsletter, the data requested from you, i.e. your e-mail address and - optionally - your name and address will be transmitted to us. At the same time, we save the IP address of the Internet connection from which you access our website as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to the sending of the newsletter, describe the content specifically and refer you to this data protection declaration. We use the data collected in this way exclusively for sending the newsletter - it is therefore in particular not passed on to third parties.
The legal basis for this is Art. 6 (1) (a) GDPR.
You can revoke your consent to the newsletter dispatch at any time with effect for the future in accordance with Art. 7 Para. 3 DSGVO. All you have to do is inform us of your revocation or click on the unsubscribe link contained in every newsletter.
Contact requests / contact option
If you contact us via the contact form or e-mail, the data you provide will be used to process your request. Providing the data is necessary for processing and answering your request - without providing it, we cannot answer your request at all or only to a limited extent.
The legal basis for this processing is Article 6 Paragraph 1 Letter b) GDPR.
Your data will be deleted if your request has been answered conclusively and the deletion does not conflict with any statutory retention requirements, such as in the case of any subsequent contract processing.
User Submissions, Comments and Ratings
We offer you the opportunity to publish questions, answers, opinions or ratings, hereinafter referred to as “posts”, on our website. If you make use of this offer, we will process and publish your contribution, the date and time of submission and the pseudonym you may have used.
The legal basis for this is Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR. All you have to do is inform us of your revocation.
In addition, we also process your IP and e-mail address. The IP address is processed because we have a legitimate interest in initiating or supporting further steps if your contribution infringes the rights of third parties and/or is otherwise unlawful.
In this case, the legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in any legal defense that may be necessary.
Google Analytics
We use Google Analytics on our website. This is a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Through certification under the EU-US Privacy Shield ("EU-US Privacy Shield")
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the data protection regulations of the EU are also observed when processing data in the USA.
The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this function, Google already shortens the IP address within the EU or the EEA.
The data collected in this way is in turn used by Google to provide us with an evaluation of the visit to our website and the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.
Google states that it does not associate your IP address with other data. In addition, Google entertains
https://www.google.com/intl/de/policies/privacy/partners
Further data protection information is available for you, e.g. also on the possibilities of preventing the use of data.
In addition, Google offers under
https://tools.google.com/dlpage/gaoptout?hl=de
a so-called deactivation add-on along with further information on this. This add-on can be installed with the most common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the Google Analytics JavaScript (ga.js) that information about the visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You can of course also find out whether and which other web analysis services we use in this data protection declaration.
Google Fonts
We use Google Fonts to display external fonts on our website. This is a service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Through certification under the EU-US Privacy Shield ("EU-US Privacy Shield")
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the data protection regulations of the EU are also observed when processing data in the USA.
In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.
The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.
By connecting to Google when you visit our website, Google can determine from which website your request was sent and to which IP address the display of the font is to be sent.
Google offers under
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information, in particular on the possibilities of preventing the use of data.
"Facebook" social plug-in
We use the plug-in of the social network Facebook on our website. Facebook is an internet service provided by facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is in turn operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, hereinafter both referred to as “Facebook”.
Through certification under the EU-US Privacy Shield ("EU-US Privacy Shield")
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Facebook guarantees that the data protection regulations of the EU are also observed when processing data in the USA.
The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in improving the quality of our website.
Facebook provides further information about the possible plug-ins and their respective functions
https://developers.facebook.com/docs/plugins/
ready for you.
If the plug-in is stored on one of the pages of our website you visit, your Internet browser downloads a representation of the plug-in from the Facebook servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, however, the date and time of the visit to our website are also recorded.
If you are logged in to Facebook while you are visiting one of our websites with the plug-in, the information collected by the plug-in from your specific visit will be recognized by Facebook. Facebook may assign the information collected in this way to your personal user account there. For example, if you use the Facebook "Like" button, this information will be stored in your Facebook user account and, if necessary, published on the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting our website or use an add-on for your Internet browser to prevent the Facebook plug-in from being blocked from loading.
Facebook provides further information about the collection and use of data as well as your rights and protection options in this regard in the
https://www.facebook.com/policy.php
retrievable data protection information.
MailChimp - Newsletter
We offer you the opportunity to register for our free newsletter via our website.
We use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as “The Rocket Science Group” to send newsletters.
Through certification under the EU-US Privacy Shield ("EU-US Privacy Shield")
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
The Rocket Science Group guarantees that the data protection regulations of the EU are also observed when processing data in the USA. In addition, The Rocket Science Group offers under
http://mailchimp.com/legal/privacy/
further data protection information.
If you register to receive our newsletter, the data requested during the registration process, such as your e-mail address and, optionally, your name and address, will be processed by The Rocket Science Group. In addition, your IP address and the date of your registration together with the time will be saved. As part of the further registration process, your consent to the sending of the newsletter will be obtained, the content will be specifically described and reference will be made to this data protection declaration.
The newsletter then sent via The Rocket Science Group also contains a so-called tracking pixel, also known as a web beacon. With the help of this tracking pixel, we can evaluate whether and when you read our newsletter and whether you followed any further links contained in the newsletter. In addition to other technical data, such as the data from your IT system and your IP address, the data processed is stored so that we can optimize our newsletter offer and respond to the wishes of the readers. The data is therefore used to increase the quality and attractiveness of our newsletter offer.
The legal basis for sending the newsletter and for the analysis is Art. 6 (1) (a) GDPR.
You can revoke your consent to the newsletter dispatch at any time with effect for the future in accordance with Art. 7 Para. 3 DSGVO. All you have to do is inform us of your revocation or click on the unsubscribe link contained in every newsletter.
Google AdWords with conversion tracking
On our website we use the advertising component Google AdWords and the so-called conversion tracking. This is a service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Through certification under the EU-US Privacy Shield ("EU-US Privacy Shield")
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the data protection regulations of the EU are also observed when processing data in the USA.
We use conversion tracking for targeted advertising of our offer. The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
If you click on an ad placed by Google, the conversion tracking we use will store a cookie on your device. These so-called conversion cookies lose their validity after 30 days and are not used to identify you personally.
If the cookie is still valid and you visit a specific page on our website, both we and Google can evaluate that you clicked on one of our ads placed by Google and that you were then redirected to our website.
With the information obtained in this way, Google creates statistics for us about the visit to our website. This also gives us information about the number of users who clicked on our ad(s) and about the pages of our website that were subsequently accessed. However, neither we nor third parties who also use Google AdWords are able to identify you in this way.
You can also prevent or restrict the installation of cookies by making the appropriate settings in your Internet browser. At the same time, you can delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.
Furthermore, Google also offers under
https://services.google.com/sitestats/de.html
http://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
further information on this topic and in particular on the possibilities of preventing the use of data.
Google AdSense
On our website we use Google AdSense to integrate advertisements. This is a service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Through certification under the EU-US Privacy Shield ("EU-US Privacy Shield")
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the data protection regulations of the EU are also observed when processing data in the USA.
Google AdSense stores cookies and so-called web beacons on your end device via your Internet browser. This allows Google to analyze how you use our website. In addition to your IP address and the advertising formats displayed to you, the information collected in this way is transmitted to Google in the USA and stored there. Furthermore, Google can pass on this information to contractual partners. However, Google declares that your IP address will not be merged with other data from you.
The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. You can find details on this under “Cookies” above.
In addition, Google offers under
https://policies.google.com/privacy
https://adssettings.google.com/authenticated
further information, in particular on the possibilities of preventing the use of data.
Online job applications / publication of job advertisements
We offer you the opportunity to apply to us via our website. With these digital applications, your applicant and application data will be electronically collected and processed by us to process the application process.
The legal basis for this processing is Section 26 (1) sentence 1 BDSG in conjunction with Article 88 (1) GDPR.
If an employment contract is concluded after the application process, we will save the data you transmitted during the application in your personnel file for the purpose of the usual organizational and administrative process - of course in compliance with the further legal obligations.
The legal basis for this processing is also Section 26 (1) sentence 1 BDSG in conjunction with Article 88 (1) GDPR.
If an application is rejected, we automatically delete the data transmitted to us two months after notification of the rejection. However, the data will not be deleted if the data requires longer storage of up to four months or until the conclusion of legal proceedings due to legal provisions, e.g. due to the burden of proof according to the AGG.
In this case, the legal basis is Art. 6 (1) (f) GDPR and Section 24 (1) No. 2 BDSG. Our legitimate interest lies in legal defense and enforcement.
If you expressly agree to longer storage of your data, e.g. for your inclusion in an applicant or interested party database, the data will be processed based on your consent. The legal basis is then Article 6 (1) (a) GDPR. However, you can of course revoke your consent at any time in accordance with Art. 7 Para. 3 GDPR by declaring this to us with effect for the future.