Data Privacy Statement – Chocolatemoldsmuseum

Introduction

We, company Michael Lothar Wolf – Raritäten – Warenhandel as operator of the Online-Webshop are responsible in charge of the private data treatment of the personal user´s data. Our contact details you will find in the masthead of the online-Webshop.

We take the protection of your personal data and your privacy very seriously. We store and process your personal data only in accordance with the content of this Data Privacy Statement as well as with applicable laws on data privacy protection, especially in accordance with the European General Data Protection Regulation (GDPR) and the national data protection provisions.

With this Data Privacy Statement we would like to inform you, to what extent and for what reasons we collect, process and use personal data from visitors of our Website.

Personal data

Personal data are information about identified or identified natural persons. This includes information relating to their identity such as e.g. their name, email address or postal address. Information which is not taken in connection with your identity, (like for example statistical information like the number of users of the site), does not fall under this.

You can principally use our online services without having to disclose your identity. General information on visits to our website is captured and stored without visitors being identified. For some of the associated services nevertheless personal data are collected. These data are generally only collected for the purpose of the use of our online-offers, especially for making available the requested information. For the collection of personal data only this data is indicated, which would be mandatory. Furthermore there could be more details requested, which is voluntary information. We expressly point out, whether the data is compulsory or voluntary. We inform about the specific details in the relevant sections of this Data Privacy Statement.

An automated decision-making on basis of your personal data in connection with our online-offers do not take place.

Processing of personal information

Your information is saved on highly protected servers within the European Union, supported by the best possible technical and administrative protection against loss, deletion, access, alteration or the distribution of your data by unauthorized persons. Access to these data is only possible to a few, specifically authorized persons and external service providers who are involved with the technical, commercial or editorial management of these data. Despite constant control protection to the full extend against all risks will not be possible. Your personal data will be encrypted prior to being transferred via the Internet. We use the industry-standard Secure Sockets Layer (SSL) to transmit data

Personal data disclosed to third parties

We utilize your personal data exclusively to provide the services in relation you desired. If within the framework of the provision of services external service providers are required, access to data is exclusively carried out with a view to the provision of services. By means of technical and organizational measures we ensure that the regulations are in accordance with data protection law and also obligate all involved service providers.

Beyond that, we do not provide data to third party without your explicit assent especially to be used for any commercial purposes. Your personal data is only disclosed if you have consented to the transfer of data yourself or to the extent that we, due to legal regulations, laws and judicial orders are obliged to pass on your data. In particular this may include the provision of information for law enforcement purposes or the enforcement of the legal framework for protecting intellectual property rights .

Legal base for the data processing

As long as we seek consent for the processing of your personal data § 6 section 1 lit. a) General Data Protection Regulation (GDPR) is the legal base for data processing.

As far as we process personal data because it is necessary to comply with a contract or contract relationship, § 6 section 1 lit. b) General Data Protection Regulation (GDPR) is the legal base for data processing.

As long as we process your personal data to comply with a legal obligation, § 6 section 1 lit. c) General Data Protection Regulation (GDPR) is the legal base for data processing..

§ 6 section 1 lit. f) General Data Protection Regulation (GDPR) is also the legal base for data processing, if the processing of personal data is necessary to keep one of the entitled business interests of our company or a third party and your interest and basic rights are not mandatory.

In the scope of this Data Privacy Statement we always point out on which legal base we support the processing of your personal data.

Data delete and data memory

We delete or block your personal data if the purpose of storage ceases. Further a storage of your data could be carried out, due to legal requirements and obligations. In these cases we delete or block your personal data when the legal requirements and obligations do not exist anymore.

Use of our online service

Informations about your computer

On each of your visits to the Wolf website, we will automatically collect information about which IP address is assigned, the request from your browser, the date you visited, and for how long. We also request the status, volume of data transferred, as well as the product name and version number of the browser being used (User-Agent). We register as well the website from which access is made. We store until the time of automatic deletion: the IP address of the accessing computer, the other data are stored for a limited time only.

We aggregate this information and use it for the operation of the website, to improve quality and performance of the website. For these purposes we have a legitimate interest to process data according to § 6 section 1 lit. f) General Data Protection Regulation (GDPR) being the legal base .

Use of cookies

We use cookies on our website, like on many others. Cookies are small text files that are stored on your computer or equipment when you visit certain online pages that record your preferences. A cookie will typically contain the name of the domain from which the cookie has come, the “lifetime” of the cookie, and an alphanumeric identification code. Cookies may also be used to identify your computer and to ascertain whether an http data communication link with our site had already been established. Cookies also help us better analyze matters related to the operation of our Internet pages so that we can extend the range of services provided on our website. We process data according to § 6 section 1 lit. f) General Data Protection Regulation (GDPR)

Most of the cookies we use are so-called session cookies which are immediately and automatically deleted after your visit to our website. Cookies can also be saved for a longer period of time, e.g. for a website to recognize your user profile without the need to log in.

Most browsers are configured by default so that they accept cookies automatically, but they can be set so that either the storage of cookies is disabled. It is also possible to delete already stored cookies manually. Please pay attention to the fact, that it may be possible that you will not be able to use or fully use some websites or parts thereof, if you prevent the use of cookies.

Technically necessary cookies

Cookies are technically necessary for verifying you as a logged-on user and allow you the use of our online-offers. With the help of these cookies we collect, store and process the following personal data:

Language settings
Search settings
Content of online forms
Information for the identification and/or authentication of a user
problem-free playback of audio and video data
Products in your shopping cart
…

Cookies allow us to identify your computer and to make pre-settings immediately available. Cookies help us, constantly improve what we offer online and to provide a better service. The employment of the cookies is compellingly necessary to facilitate the service of our website-offers. This refers to all forms on the website, the online registration, the search on the website, the client account and the shopping cart. From this we conclude our legitimate interest to process data with the help of cookies based on §. 6 section 1 f General Data Protection Regulation (GDPR).

Registration

You can easily register for our online-offers. In this regard you should specify your data e.g. name, IP-address and email-address. We also collect date and time of your registration and the IP-Address. As part of the registration process we collect the agreement for the use of the data. This provides the particular advantage that you do not need to re-enter the data when placing an order.

The legal basis of the processing of the data if you consent is § 6 section 1 lit. a) General Data Protection Regulation (GDPR). Insofar as you register on our website for a fulfillment or performance of a contract, § 6 section. 1 lit. b) General Data Protection Regulation (GDPR) is the legal base.

Mandatory information, requested in the course of registration, is necessary data for a fulfillment or performance of a contract. However, it is not obligated to register, you may order as „guest“. In this case you are requested to fill in your data again for another order you may place in the future.

By registering as customer, you are not required to place any orders – you will just create a customer account with your data, including the email address. Your data is stored as long as a customer relationship is active. If over a time period of at least three years no activity is recorded the status is is set to inactive by the system control. You may always request the cancellation of your account at any time.

Order Processing

We will only use your personal information for orders placed within our company and affiliated companies as well as with the completion assigned third party.

Recording & Dissemination of data

For the order fulfillment we work with different companies, being responsible for payment and logistics. We make sure that our partners will also comply with the data protection regulations. Your data is provided to the transport company that will deliver your ordered product. Legal base in this case is § 6 section. 1 lit. b) General Data Protection Regulation (GDPR). The processing of your personal data is necessary to fulfill the contract.

The data is recorded with us, as long as necessary to fulfill the contract. Also, we store personal information you may provide to us after the contractual obligations due to the provisions of commercial and/or fiscal law, the storage period for certain data may be up to 10 years.

Payments execution, Paypal

depending on the payment method chosen, payment processing is made where appropriate by engaging of service companies.

In case of payment by credit card, all details (for example, card number or expiration date) will be sent to the credit card company in charge.

In case of payment through PayPal you are transferred to the link of the Paypal website. In this case personal data supplied by you will be processed, related to name, address, email-address, maybe your phone number as well as account or credit card details. Please pay attention to the General terms and conditions, the Privacy Policy and Terms & conditions of use of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg on the website www.paypal.com.

Legal base for the payment processing is §. 6 section 1 lit. b) General Data Protection Regulation (GDPR). The processing your personal data is necessary to fulfill the contract with you, whereas the payment method could be choosen by you.

Communication with us

You may contact us in different ways, among the rest using the contact form on our website. We also like to inform you with our Newsletter sent by email.

Contact form

As long as you want to use our contact form on our wesite, we collect your personal information provided to us, especially your name and email-address. We also record your IP-Address as well as date and time of your request. We process the data provided over the contact form only for this purpose to respond to your request.

You can decide on your own which information you want to provide over the contact form. The legal base for the processing of your data is §. 6 section 1 lit. a) General Data Protection Regulation (GDPR).

After your request was processed your data will be stored for the case of further requests. You may always request the cancellation of your data at any time, otherwise the cancellation will be made after the completion of the case, this will not interfere with further storage requirements due to regulatory or legal rules.

when logging on our newsletter your email address is used for our own advertising purposes, until you unsubscribe to the newsletter. By registering you will receive regular information on our products free of charge by e-mail. The emails could be based on our information about you and can be individualized and personalized.

For the registration to our newsletter we use the so-called Double-Opt-In-Verfahren, this means we would send you the newsletter by email only if you would have confirmed the we should activate the newsletter service for you. In this case we would send you a notification email and with a click on the link you confirm that you would like to receive the newsletter.

The legal base for the processing of the data is the consent to § 6 section 1 lit. a) General Data Protection Regulation (GDPR), if you expressively subcribe to the newsletter. Within the scope of the legal regulations it could be possible that you also receive a newsletter without your explicit authorization, because you ordered products and/or service, we received your email address in this content and you did not object the receipt of emails. In this case § 6 section. 1 lit. f) General Data Protection Regulation (GDPR) is to be seen as the legal base as legitimate interest for the supply of direct advertisement.

Should you not wish to receive any further email newsletters from us, then you can let us know at any time by revoking the receipt of the newsletter. You can deactivate this service by clicking on the unsubscribe hyperlink contained in every newsletter e-mail or by sending an email to our account privacy officer.

Your rights

We believe it is very important to explain the processing of your personal data very transparent and to inform you about your rights. If you wish more information about your rights or you want to exercise your rights, you may contact us at any time.

Rights of the persons affected

With regard to the processing of your personal data you are entitled to comprehensive rights. First you have the right to information of the data subject and could request the correction and/or deletion of your personal data. You may at any time advise us that you object to future processing and use of your data. As regard to the personal data transmitted to us you have the right of data portability.

If you claim your rights and/or request information about your personal data, please refer to our customer service and/or the privacy officer.

Revocation of consent and objection

You may, at any time, retract consent given regarding the processing of your data and future effects thereof. If you cancel your agreement to the future recording, processing and use of your personal data the legality of the processing of your data is given until the objection of the agreement. The main contact partner for this are customer service and/or the privacy officer.

As long as the processing of your personal data is not based on your consent, but on basis of a different legal basis, you may object the processing of your personal data. Your objection leeds to an internal control and where appropriate to the termination of the processing of your personal data. You will be informed about the outcome of the internal control and will be informed about the ligitimacy of the processing of your personal data.

Complaints

When you consider, that the processing of your personal data is not according to this Data Privacy Statement or according to the data protection regulations, you may complain to the privacy officer. The Privacy Officer will than investigate the case and inform you about the result. Der Datenschutzbeauftragte wird die Angelegenheit dann prüfen und Sie über das Ergebnis der Prüfung informieren. The right of appeal to a regulatory authority is also available to you.

More Information and changes

Links to other Websites

Our online-offers could include links to other websites. These links are usually marked as such. We have no influence on whether the linked websites observe the data protection regulations. Therefore we advise that you will inform yourself on the other websites about the Data Privacy Statement.

Changes to this Data Privacy Statement

The status of this Data Privacy Statement is marked with the date at the end of this declaration. We reserve the right to change this Data Privacy Statement any time with immediate effect to the future.. A change is accomplished specifically due to technical changes of the online-offers or due to the change of data protection requirements. Please always take note of the most current version of our data privacy statement available on our website. Therefore it is recommended that you regularly visit our website to be updated.

Date of the Data Privacy Statement : May 2018