1. Controller
The controller within the meaning of data protection laws, in particular the General Data Protection Regulation (GDPR), is:
Petra Becker
De-la-Fosse-Weg 7a
64289 Darmstadt
Germany
Email: perle@diesuesswasserperle.de
2. General Information on Data Processing
We process personal data of users only to the extent necessary to provide a functional website as well as our content and services.
Personal data is generally processed only with the user's consent or where permitted by legal regulations.
The legal bases for data processing may include in particular:
- Art. 6 (1) lit. a GDPR (consent)
- Art. 6 (1) lit. b GDPR (performance of a contract)
- Art. 6 (1) lit. f GDPR (legitimate interest)
3. Hosting
Our website is hosted by the following provider:
STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you access our website, information is automatically collected by the web server and stored in so-called server log files. This includes in particular:
- IP address
- Date and time of access
- Accessed page
- Referrer URL
- Browser type and version
- Operating system
This data is processed to ensure a secure and stable operation of the website.
The legal basis is Art. 6 (1) lit. f GDPR.
4. Cookies
Our website uses technically necessary cookies.
Our website uses only technically necessary cookies. These are required to provide basic shop functions, in particular the shopping cart, the display of products and navigation within the website, such as:
- Shopping cart
- Login
- Language settings
- Order process
These cookies contain no personal data, include no tracking or marketing functions and are not used to analyse user behaviour. Therefore, we have not implemented a cookie banner on our website.
The legal basis is Art. 6 (1) lit. f GDPR.
5. Customer Account and Orders
If you place an order in our shop or create a customer account, we process personal data such as:
- Name
- Address
- Email address
- Order information
- Payment information
This data is processed for the execution of the purchase contract and the handling of your order.
The legal basis is Art. 6 (1) lit. b GDPR.
The data is stored in accordance with statutory retention obligations.
6. Payment Service Providers
For payment processing, we offer, among others, PayPal.
Provider:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
If you choose PayPal as your payment method, the data required for payment processing will be transmitted to PayPal.
The processing is based on Art. 6 (1) lit. b GDPR (performance of a contract).
Further information on data protection at PayPal can be found at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
7. Transfer of Data to Shipping Service Providers
For the delivery of ordered goods, we pass on your data to the commissioned shipping company insofar as this is necessary for delivery.
The legal basis is Art. 6 (1) lit. b GDPR.
8. Rights of Data Subjects
You have the following rights at any time:
- Right of access to your stored data (Art. 15 GDPR)
- Right to rectification of incorrect data (Art. 16 GDPR)
- Right to erasure of your data (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
To exercise these rights, you may contact us at any time.
9. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
The competent supervisory authority in Hesse is:
The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden