Datenschutz Shop | WiCa Handelsgesellschaft mbH

Privacy Policy

Data Controller:

WiCa Handelsgesellschaft mbH
Moosweg 3
87545 Burgberg

We appreciate your interest in our online store. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically saves a so-called server log file, which includes details such as the name of the requested file, your IP address, date and time of access, the amount of data transferred, and the requesting provider (access data). This data is used exclusively to ensure the smooth operation of the site and to improve our services. This is based on our legitimate interest in providing a correct presentation of our offerings in accordance with Art. 6 (1) sentence 1 lit. f GDPR. All access data is deleted no later than seven days after your visit.

Hosting

The services for hosting and displaying the website are provided in part by our service providers as part of data processing on our behalf. Unless otherwise explained in this privacy policy, all access data and data collected through forms on this website are processed on their servers.

Our service providers operate servers in the following countries: the USA and countries outside the EU. There is no adequacy decision by the European Commission for these countries. Our cooperation with these providers is based on:

• Standard contractual clauses of the European Commission

• Standard data protection clauses of a supervisory authority

• Approved binding corporate rules

• Approved contractual clauses

• Approved codes of conduct

• Approved certification mechanisms

2. Data Processing for Contract Execution and Contact Requests

2.1 Data Processing for Contract Execution

For the purpose of processing contracts (including inquiries and handling of warranty and performance claims, as well as legal update obligations), we collect personal data if you voluntarily provide it to us when placing an order. Mandatory fields are marked as such because we require this information to process the contract, and we cannot fulfill your order without it. The data collected can be found in the respective input forms.

After the contract is fully executed, your data will be restricted for further processing and deleted after the retention periods required by tax and commercial law (Art. 6 (1) sentence 1 lit. c GDPR), unless you have expressively consented to further use of your data (Art. 6 (1) sentence a lit. a GDPR) or we are legally permitted to retain the data.

2.2 Customer Account

If you have given your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR by choosing to open a customer account, we will use your data to create and store your account for future orders. You can delete your account at any time by contacting us via the contact details provided in this privacy policy or through the account deletion function. After deletion, your data will also be erased unless you have explicitly agreed to further use or we have legal permission to retain the data.

2.3 Contact Requests

As part of customer communication, we collect personal data to process your inquiries when you voluntarily provide it via a contact form or email. Mandatory fields are marked as such, as this data is necessary for processing your request. After completing your inquiry, your data will be deleted unless you have explicitly agreed to further use or we have legal permission to retain it.

3. Data Processing for Shipping

To fulfill the contract (Art. 6 (1) sentence 1 lit. b GDPR), we forward your data to the shipping provider responsible for delivering your order.

Data Transfer for Shipment Notifications

If you have given us explicit consent during or after your order (Art. 6 (1) sentence 1 lit. a GDPR), we will pass on your email address to the shipping provider so they can contact you regarding delivery. You can revoke this consent at any time by contacting us or the respective shipping provider directly:

• General Logistics Systems Germany GmbH & Co. OHG (GLS)

Germany-Straße 1 - 7, DE-36286 Neuenstein, Germany

• United Parcel Service Deutschland S.à r.l. & Co. OHG (UPS)

Görlitzer Straße 1, 41460 Neuss, Germany

• Hermes Germany GmbH

Essener Straße 89, D-22419 Hamburg, Germany

• DHL Paket GmbH

Sträßchensweg 10, 53113 Bonn, Germany

• DPD Deutschland GmbH

Wailandtstraße 1, 63741 Aschaffenburg, Germany

4. Data Processing for Payments

We collaborate with technical service providers, banks, and payment providers to process payments in our online store.

4.1 Transaction Data Processing

Depending on the selected payment method, we pass the necessary transaction data to our payment service providers, banks, or technical service providers who process the payment on our behalf. This is requir4ed for contract fulfillment (Art. 6 (1) sentence 1 lit. b GDPR). In some cases, payment service providers collect data themselves via their own websites or within the order process. The privacy policies of the respective providers apply.

4.2 Fraud Prevention and Payment Optimization

We may share additional data with our service providers to prevent fraud and optimize our payment process (e.g., invoicing, handling disputed transactions, and accounting support). This is based on our legitimate interest in preventing fraud and ensuring efficient payment management (Art. 6 (1) sentence 1 lit. f GDPR).

5. Social Media

5.1 Social Plugins from Facebook (Meta), Instagram (Meta)

Our website uses social media buttons that are embedded as HTML links. This means that no connection is made to the servers of the respective providers when you visit our site. When you click a button, the website of the respective provider opens in a new browser window, allowing you to interact with it.

5.2 Our Presence on Facebook (Meta), Instagram (Meta), LinkedIn

If you have given your consent (Art. 6 (1) sentence 1 lit. a GDPR) to the respective social media operator, your data will be collected and stored for market research and advertising purposes when you visit our profiles. User profiles may be created using pseudonyms, and these may be used to display personalized advertisements.

• Facebook (Meta) - Operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Data collected by Meta may be transferred to Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Since there is no adequacy decision by the European Commission, our coorperation is based on the European Commission's standard contractual clauses.

• Instagram (Meta) - Operated by Meta Platforms Ireland Ltd. Data is typically transferred to Meta Platforms, Inc., in the USA under the same conditions as Facebook.

• LinkedIn - Operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Data collected may be transferred to LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, under standard contractual clauses.

For further details on data processing by these providers please refer to their privacy policies.

6. Contact Options and Your Rights

6.1 Your Rights

As a data subject, you have the following rights:

• According to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein.

• According to Art. 16 GDPR, the right to request the immediate correction of incorrect or completion of your stored personal data.

• According to Art. 17 GDPR, the right to request the deletion of your stored personal data, unless further processing is necessary:

- to exercise the right to freedom of expression and information;

- to fulfill a legal obligation;

- for reasons of public interest; or

• for the establishment, exercise, or defense of legal claims.

• According to Art. 18 GDPR, the right to request the restriction of processing of your personal data, insofar as:

- you contest the accuracy of the data;

- the processing is unlawful, but you oppose the deletion;

- we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or

- you have objected to the processing under Art. 21 GDPR.

• According to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller.

• According to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. Typically, you can contact the supervisory authority of your usual place of residence, workplace, or our company headquarters.

Right to Object

If we process personal data as explained above to protect our legitimate interests within the framework of a balancing of interests, you can object to this processing with efffct for the future. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If the processing is for further purposes, you only have the right to object if there are reasons arising from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

This does not apply if the processing is for direct marketing purposes. In that case, we will not continue to process your personal data for this purpose.

6.2 Contact Options

For questions regarding the collection, processing, or use of your personal data, for requests for information, correction, restriction, or deletion of data, as well as for the withdrawal of consent given or objections to a specific data use, please contact us directly via the contact details provided in our legal notice.

7. Cookies and Other Technologies

7.1 General Information

To make our website more attractive to visitors and enable the use of certain functions, we use various technologies, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some cookies are deleted after the end of your browser session (session cookies). Other cookies remain stored on your device and allow us to recognize your browser on your next visit (persistent cookies).

We use technologies that are essential for specific website functions (e.g., shopping cart functionality). These technologies process your IP address, visit time, device and browser information, and information about your use of our website (e.g., shopping cart content). This processing is based on our legitimate interest in optimizing our website as per Art. 6(1)(f) GDPR.

Additionally, we use technologies to comply with legal obligations (e.g., to verify consent for data processing) and for web analysis and online marketing. Further details, including the legal basis for data processing, can be found in the following sections of this privacy policy.

You can adjust your cookie preferences via your browser settings:

• Microsoft Edge™: https://support.microsoft.com/en-us/help/4027947/microsoft-edge-delete-cookies

• Safari™: https://support.apple.com/en-us/guide/safari/sfri11471/mac

• Chrome™: https://support.google.com/chrome/answer/95647?hl=en

• Firefox™: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

• Opera™: https://help.opera.com/en/latest/web-preferences/#cookies

If you have consented to the use of technologies under Art. 6(1)(a) GDPR, you may withdraw your consent at any time via the methods described in this privacy policy. Disabling cookies may limit the functionality of our website.

7.2 Use of Usercentrics Consent Management Platform

We use the Usercentrics Consent Management Platform https://usercentrics.com/en/ to inform you about the cookies and technologies used on our website and to obtain, manage, and document your legally required consent for data processing. This is necessary to fulfill our legal obligations under Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR.

Usercentrics, provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, processes your data on our behalf. When you visit our website, Usercentrics stores a server log file containing an anonymized IP address, visit time, device and browser information, and your consent status. Your data will be deleted after three years unless you have expressly consented to further processing under Art. 6(1)(a) GDPR or if further data processing is legally permitted.

8. Use of Cookies and Other Technologies for Web Analysis and Advertising

If you have given your consent under Art. 6(1)(a) GDPR, we use the following third-party cookies and technologies on our website. Data collected in this context will be deleted once the purpose has been fulfilled and we no longer use the respective technology.

For details on providers and their data processing practices, please refer to the relevant sections of this privacy policy.

8.1 Use of Google Services for Web Analysis and Advertising

We use various technologies from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The data collected through these Google technologies is usually transferred to Google LLC servers in the USA. There is no adequacy decision by the European Commission for the USA. However, our cooperation with Google is based on Standard Contractual Clauses approved by the European Commission.

Google Analytics

We use Google Analytics for website analytics. This tool automatically collects data (IP address, visit time, device and browser information, website usage) and creates pseudonymized usage profiles. Cookies may be used in the process. Your IP address is generally not merged with other Google data. The processing is based on a data processing agreement with Google.

Google Ads

For advertising in Google search results and on third-party websites, we use Google Ads Remarketing cookies. These cookies track your website usage and create an interest-based advertising profile based on a pseudonymous cookie ID.

If you are signed in to Google, Google may link this data with your Google account for cross-device remarketing.

8.2 Use of Facebook Services for Web Analysis and Advertising Purposes

USE OF FACEBOOK PIXEL

We use the Facebook Pixel within the framework of the technologies described below from Facebook Ireland Ltd [https://de-de.facebook.com/facebookdublin/], 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). he Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information, and details about your use of our website based on predefined events such as visiting a webpage or subscribing to a newsletter). These data are used to create user profiles under pseudonyms. As part of the so-called advanced data matching, additional information is collected and stored in hashed form for comparison purposes, which can be used to identify individuals (e.g., names, email addresses, and phone numbers).

When you visit our website, the Facebook Pixel automatically sets a cookie that enables the recognition of your browser when you visit other websites through a pseudonymous cookie ID. Facebook will merge this information with additional data from your Facebook account and use it to generate reports on website activities and provide other services related to website usage, particularly personalized and group-based advertising.

The information automatically collected by Facebook’s technologies regarding your use of our website is typically transmitted to and stored on a server operated by Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. There is no adequacy decision from the European Commission for the USA. If the data transfer to the USA falls under our responsibility, our cooperation is based on the European Commission’s standard contractual clauses. Further information on Facebook’s data processing can be found in Facebook’s privacy policy [https://de-de.facebook.com/policy.php].

FACEBOOK ADS

Through Facebook Ads, we advertise this website on Facebook and other platforms. We determine the parameters of each advertising campaign. However, Facebook is responsible for the exact implementation, particularly for deciding on the placement of advertisements for individual users. Unless otherwise stated in the individual technologies, data processing is based on a joint controller agreement according to Art. 26 GDPR. The joint responsibility is limited to the collection of data and its transmission to Facebook Ireland. Further data processing by Facebook Ireland is not included.

Based on statistics created through the Facebook Pixel regarding visitor activities on our website, we use Facebook Custom Audience to run group-based advertising on Facebook by defining the characteristics of the respective target group. As part of the advanced data matching process used to define target groups (see above), Facebook acts as our data processor.

Based on the pseudonymous cookie ID set by the Facebook Pixel and the data collected about your usage behavior on our website, we use Facebook Pixel Remarketing for personalized advertising.

Through Facebook Pixel Conversions, we measure your subsequent user behavior for web analysis and event tracking when you have accessed our website via a Facebook Ads advertisement. The data processing is based on a data processing agreement with Facebook.

8.3 Other Web Analytics and Online Marketing Providers

USE OF PINTEREST TAG FOR WEB ANALYSIS AND ADVERTISING PURPOSES

For web analysis and advertising purposes on Pinterest and third-party websites, when you visit our website, Pinterest Europe Ltd [https://www.pinterest.de/], Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”) automatically collects and processes data (IP address, time of visit, device and browser information, and details about your use of our website based on predefined events such as visiting a webpage or subscribing to a newsletter). This data, together with a pseudonymous cookie ID and based on the pages you have visited, enables interest-based advertising. User profiles are created from the collected data using pseudonyms.

Pinterest will merge this information with additional data from your Pinterest account and use it to generate reports on website activities and provide other services related to website usage. We have no control over Pinterest’s data processing and only receive statistics based on the Pinterest Tag. This allows us to measure your subsequent user behavior for website analysis and event tracking when you access our website via a Pinterest advertisement.

The information automatically collected by Pinterest is typically transmitted to and stored on a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on the European Commission’s standard contractual clauses. Data processing is carried out under a joint controller agreement according to Art. 26 GDPR.

9. Integration of the Trusted Shops TRUSTBADGE

To display our Trusted Shops Quality Seal and any collected reviews, as well as to offer Trusted Shops products to buyers after a purchase, the Trusted Shops Trustbadge is integrated on this website.

This is done to protect our legitimate interests in optimal marketing by enabling a secure shopping experience according to Art. 6 (1) sentence 1 lit. f GDPR. The Trustbadge and the services it promotes are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided within the framework of order processing by a CDN provider (Content-Delivery-Network). Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured. For more information about the privacy policy of Trusted Shops GmbH, please visit [https://www.trustedshops.de/impressum/#datenschutz].

When the Trustbadge is called up, the web server automatically stores a so-called server log file, which also contains your IP address, the date and time of access, the amount of data transmitted, and the requesting provider (access data), documenting the access. Individual access data is stored in a security database for the analysis of security incidents. The log files are automatically deleted no later than 90 days after creation.

Additional personal data will be transferred to Trusted Shops GmbH if you choose to use Trusted Shops products after completing a purchase or if you have already registered for their use. The contractual agreement between you and Trusted Shops applies. For this, personal data is automatically collected from the order data. Whether you, as a buyer, are already registered for product use is automatically checked based on a neutral parameter, which is the hashed email address using a cryptographic one-way function. The email address is converted into this non-reversible hash value before transmission to Trusted Shops. After verifying a match, the parameter is automatically deleted.

Whether you, as a buyer, are already registered for product use is automatically checked based on a neutral parameter, which is the hashed email address using a cryptographic one-way function. The email address is converted into this non-reversible hash value before transmission to Trusted Shops. After verifying a match, the parameter is automatically deleted.

This is necessary to fulfill our and Trusted Shops’ overriding legitimate interests in providing the buyer protection and transactional review services linked to the specific order, according to Art. 6 (1) sentence 1 lit. f GDPR. For further details, including information on how to object, please refer to the Trusted Shops privacy policy linked above and in the Trustbadge.