Data Protection Statement 
As of: Feb 2019, Version no. 1

We take the protection of the personal information of our customers and persons interest in our offers very seriously, and we comply with all requirements of the data privacy acts. This document tells you how personal data of users and visitors to our website is handled. 

By agreeing to the following contents, consent is also given to the collection, use and processing of such data described therein.

1 Name and contact details of the person responsible

Building Home Ihn. Darrell Yeo
Nonnenweg 20
35394, Gießen
Germany
Tel: +49 159/ 06412912
Email: info@buildinghome.de 

2 Scope and purpose of the processing of personal data

2.1 Personal data

According to Art. 4 (1) EU GDPR, personal data covers all information relating to a directly or indirectly identified or identifiable natural person. This includes, for example, your name, your contact details, and the data you provide when registering a customer account, for processing your orders, or as part of an application.

2.2 Server statistics

Every time the website is visited, the user’s web browser automatically transmits data to the web server and stores it in log files. The following data is stored until it is deleted:

  • Name and URL of the visited web page
  • IP address at the time the respective web page is accessed
  • Date, time and success of the access to the web page
  • Website from which the visitor arrives at our site (so-called referrer URL)
  • Browser type and version 
  • Operating system of the mobile device used to open the web page

This data is processed for the following purposes: 

  • to enable a connection to be established to the website,
  • to enable an optimised presentation of the website,
  • to verify and safeguard the security and stability of the systems,

and

  • to enable and improve the administration of the website.

According to Art. 6 (1) Sentence 1  f) EU GDPR, we have a justified interest in the processing of the data. 

The stored data are not combined with any other data sources. In general, we cannot associate the data with any specific person. The data is fundamentally not processed for the purpose of obtaining further information about the respective visitors to our website.

2.3 Contact (telephone consultation, contact form)

Visitors can obtain advice by telephone, and send us messages via a contact form on the website. All data can be voluntarily transmitted to us by the person requesting information, who in doing so consents to the processing of his/her personal data. We require a valid email address so that we can likewise reply by email. The data is processed solely for the purpose of the telephone consultation, and for the handling and answering of enquiries submitted using the contact form.

The processing takes place on the basis of voluntary consent in accordance with Art. 6 (1) Sentence 1 a) EU GDPR. The personal data collected for using the contact form will be automatically deleted as soon as the request has been finally processed and there are no grounds for its further storage.

2.4 Cookies

Our website uses cookies. Cookies are small text files that are placed on the digital terminal device or the customer’s data carrier to make sure that they can effectively use all the functions of our online shop. Most of the cookies used by us will be deleted from the digital terminal device or data carrier of the customers at the end of the respective browser session again; these are called session cookies. Cookies remain on the digital terminal device or data carrier which enable us to check essential functions for the operation of our website. For security reasons, we use cookies on various pages of our website that enable certain functions or contribute to the optimum performance of our application portal. This is in particular the case on the login page and in the user area. Here, cookies ensure that the respective interested visitor does not have to enter the same information every time he/she switches between the individual pages of our website.

The saving of cookies can be disabled at any time. The help function in the menu bar of most web browsers (e.g. Internet Explorer or Firefox) explains how users and visitors to our application portal can prevent their browser from accepting new cookies, how users and visitors to our web pages can ensure that their web browser informs them whenever they receive a new cookie, or how they can delete all previously received cookies and block all future cookies. In the latter case, the aforementioned functions (login and administration options) will no longer be available. To use these functions, please cancel the cookie block.

2.5 Evaluation of accesses and user behaviour

For the needs-based design and for the optimisation of our online shop, Google analytics and Jetpack are used to record and save anonymised data, and to generate usage profiles from this data using pseudonyms. For this purpose, cookies (for a definition, see 2.4) may be used that enable the identification of a revisiting web browser. Usage profiles are, however, not combined with the pseudonym carrier’s data without the express consent of the visitor. In particular, IP addresses are made illegible immediately after receipt, so that assignment of usage profiles to IP addresses is not possible. Our justified interest in the data processing within the meaning of EU GDPR also lies in the aforementioned purposes. The legal basis for the use is § 15 (3) German Telemedia Act (TMG) respectively Art. 6 (1)  f) EU GDPR.

2.6 Online shop

Within the scope of operating our online shop, personal data is collected and processed, for example for the registration and for processing orders. This is inventory data, such as a person’s name and address and the user data (e.g. password).

Processing of the data is necessary for the justification, execution and processing of contracts, as well as for the purpose of future customer service and customer care. The processing takes place based on Art. 6 (1) Sentence 1 b) EU GDPR for the initiation and fulfillment of a contractual relationship with the person concerned.

2.7 Newsletter

By subscribing to the newsletter, the visitor expressly agrees to the processing of the voluntarily submitted personal data. The data provided during the registration will be used solely for sending the newsletter. We use a double opt-in process in order to ensure that our customers will only receive our newsletter if they really want to. For this purpose, we send them a notification email in which they confirm by clicking a link contained in this email that they want to receive our newsletter. Unsubscribing from our newsletter is possible at any time. This can be done by clicking a special link at the end of each newsletter, or by sending an email to info@buildinghome.de.

The legal basis for processing the visitor’s personal data for the purpose of sending newsletters is the consent pursuant to Art. 6 (1) Sentence 1 a) EU GDPR. 

2.8 Advertising

We also use the personal data for our own advertising purposes in both a general and an individualized manner. We send our customers general information about our product portfolio and its components and/or about marketing campaigns, as well as individualized information with regard to their respective usage history of our online shop (regarding both concluded and not yet concluded purchases, e.g. of items that have been placed in the shopping cart, but have not yet been finally ordered). This is done by post and/or email. 

The processing takes place in accordance with Art. 6 (1) Sentence 1 f) EU GDPR as a justified interest in the data processing for the purpose of customer information and loyalty.

Our customers may object to the use of such data at any time (either entirely or for individual advertising purposes).

2.9 Third-party providers 

Ads from various providers may be integrated on the pages of our online shop. Such third-party providers use the above mentioned cookies for placing ads on the basis of previous visits to our online shop. These ads also include personalised ads from Google. In this way, by means of cookies, ads are adapted (personalised) in such a manner that they contain products which may be of interest to the respective user. No personal data is collected, processed, saved or used during this process. Users can deactivate the use of these cookies by Google by calling up the page for the deactivation of Google advertising. Alternatively, users can disable the use of cookies by third-party providers by calling up the deactivation page of the Network Advertising Initiative.

The processing takes place in accordance with Art. 6 (1) Sentence 1 f) EU GDPR as a justified interest in the data processing for the purpose of customer information and loyalty.

Furthermore, third party provider places advertisements on web-sites on the Internet. These advertisements on the basis of previous visits to our website using appropriate technology. Accordingly, these personalized ads contain products that may be of interest to you. No personal data is collected, processed, stored or used.

3 Disclosure of data

Personal data will only be disclosed to third parties if

  • the person concerned expressly consented to this in accordance with Art. 6

(1) Sentence 1 a) EU GDPR,

  • the disclosure in accordance with Art. 6 (1) Sentence 1 f) EU GDPR is necessary in order to assert, exercise or defend legal claims, and there is no reason to assume that the data subject has an overriding interest worthy of protection in the non-disclosure of his/her data,
  • in accordance with Art. 6 (1) Sentence 1 c) EU GDPR there exists a legal obligation, and/or
  • this is necessary in accordance with Art. 6 (1) Sentence 1 b) EU GDPR for the fulfilment of a contractual relationship with the person concerned.

4. Logistics and processing of orders

For the purpose of executing and processing orders and for future customer care, personal customer information may also be disclosed to partner companies (parcel and postal services, transport companies, letter shop services, assembly service) as needed (address and possibly product data).

5 Your rights as a data subject

Insofar as your personal data is processed during your visit to our website, you as a “data subject” are entitled to the following rights within the meaning of EU GDPR:

5.1 Right to information

You may demand that we tell you whether your personal data is processed at our company. No right to information exists if the data may not be deleted due to legal or statutory retention periods or it solely serves data backup or data privacy control purposes, provided that the provision of information would require a disproportionately high expenditure of time and costs, and the processing for other purposes is excluded by suitable technical and organizational measures. Where appropriate, you can request information about:

  • the purposes of the processing,
  • the categories of the personal data processed by you,
  • the recipients or categories of recipients to whom your personal data is disclosed, in particular recipients in third countries,
  • if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining the storage period,
  • the existence of a right to rectification, deletion or limitation of the processing of personal data relating to you or a right to object to such processing,
  • the existence of a right of appeal to a data protection supervisory authority,
  • insofar as the personal data has not been collected from you as the data subject, the available information on the origin of the data,
  • where applicable the existence of automated decision-making, including profiling and meaningful information on the logic involved, as well as the scope and intended effects of automated decision-making,
  • where appropriate in the case of disclosure of the data to recipients in third countries insofar as the EU Commission has not passed a resolution on the pertinence of the level of protection in accordance with Art. 45 (3) EU GDPR, information on which suitable guarantees in accordance with Art. 46 (2) EU GDPR are foreseen for the protection of personal data.

5.2 Correction and completion

If you establish that we possess incorrect personal data about you, you can ask us to correct the wrong details. You can request the completion of incomplete data.

5.3 Deletion

You have the right to cancellation (“right to be forgotten”) if one of the following reasons applies:

  • The personal data is no longer necessary for the purposes for which it was processed.
  • You have revoked your consent to the processing.
  • You have lodged an objection to the processing of your personal data, which we have made public.
  • You have lodged an objection to the processing of personal data not made public by us and there are no overriding justified reasons for the processing.
  • Your personal data has been processed unlawfully.
  • The deletion of personal data is necessary to fulfill a legal obligation to which we are subject.

The right to deletion does not exist if deletion is not possible or only possible with disproportionate effort in the case of legal, non-automated data processing due to the special type of storage and your interest in a deletion is minimal. In this case, a restriction in processing takes the place of deletion.

5.4 Restriction in processing

You may demand that we restrict the processing of your personal data if one of the following reasons applies:

  • You dispute the accuracy of your personal data. In this case, the restriction in processing can be demanded for the time required to verify the accuracy of the data.
  • The processing is unlawful and you demand the restriction in the use of your personal data instead of deletion.
  • We no longer require your personal data for processing purposes, but you require the data to assert, exercise or defend legal claims.
  • You have lodged an objection in accordance with Art. 21 (1) EU GDPR. The restriction in processing can be demanded as long as it is not yet clear whether our justified reasons outweigh your reasons.

A restriction in processing means that personal data will only be processed with your consent or for the assertion, exercising or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest. We are obliged to inform you about this before we lift the restriction.

5.5 Data portability

You have a right to data portability insofar as the processing is based on your consent in accordance with Art. 6 (1) Sentence 1 a) or Art. 9 (2) a) EU GDPR or it is based on a contract to which you are a contracting party and the processing takes place by means of automated procedures. In this case, the right to data portability includes the following rights provided this does not affect the rights and freedoms of other per-sons:

You can demand that we give you the personal data you have provided to us in a structured, commonly used and machine-readable format. You have the right to for-ward this data to another responsible person without any hindrance on our part. If technically feasible, you can demand that we forward your personal data directly to another responsible person.

5.6 Right of appeal

If you believe that the processing of personal data concerning you is unlawful, you may lodge a complaint with a data protection supervisory authority responsible for your place of residence or work or for the place where the alleged infringement has occurred.

5.7 Right of objection

Consent to the processing of the personal data can be revoked at any time with future effect. Regarding the promotional usage, such revocation can be made with an overall effect or be restricted to individual advertising measures, without incurring any costs other than the cost of transmission according to the basic rates. The revocation can be transmitted as follows:

by email to: info@buildinghome.de

Close Menu
×
×

Basket