Privacy Policy
Privacy Policy
Contents
§ 2 Applicable Version of the General Terms and Conditions. 3
§ 3 Order Process and Contract Conclusion. 3
§ 4 Storage of the Contract Text. 4
§ 6 Exclusion and Premature Expiration of the Right of Withdrawal. 4
§ 7 Return of Goods and Transport Damages. 5
§ 8 Prices and Shipping Costs. 6
§ 11 Goodwill Vouchers and Their Redemption. 8
§ 12 Delivery and Shipping Conditions. 9
§ 15 Warranty and Liability for Defects. 10
§ 18 Consumer Dispute Resolution. 12
§ 1 Controller and Contact
§ 1.1 The controller for the processing of personal data within the meaning of the General Data Protection Regulation and other data protection laws is:
Kelm Tomovic Battermann GbR
Bugenhagenweg 7
29614 Soltau
Germany
Represented by the shareholders:
Niko Kelm
Philip-Elias Tomovic
Finn Niklas Battermann
Email: info@reitwert.store
Website: www.reitwert.store
§ 1.2 For questions regarding the processing of your personal data or the exercise of your data protection rights, you can contact us at any time by email or post using the contact details provided above.
§ 2 General Notes on the Processing of Personal Data
§ 2.1 Personal data refers to all information relating to an identified or identifiable natural person. This includes, in particular, name, address, email address, telephone number, order and contract data, payment information, IP address, and details regarding the use of our website.
§ 2.2 We process personal data only to the extent necessary for the provision of our online shop, the processing of inquiries, the creation and management of a customer account, the execution of orders, the processing of payments and deliveries, or for other purposes mentioned in this privacy policy. In doing so, we particularly observe the principles of lawfulness, transparency, purpose limitation, data minimization, accuracy, storage limitation, and the confidentiality and integrity of personal data.
§ 2.3 Personal data is only processed if there is a legal basis for doing so. Depending on the nature and purpose of the processing, the following legal bases are particularly relevant:
2.3.1. Consent in accordance with Art. 6 para. 1 lit. a GDPR, if you have given us your consent for a specific processing purpose;
2.3.2. Fulfilment of contract and pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR, if the processing is necessary for the performance of a contract with you or for the processing of a pre-contractual request made by you;
2.3.3. Fulfilment of legal obligations in accordance with Art. 6 para. 1 lit. c GDPR, if we are legally obliged to process data;
2.3.4. Safeguarding legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, if the processing is necessary for safeguarding our legitimate interests or the interests of a third party and your interests, fundamental rights, and fundamental freedoms do not override these.
The legal basis relevant for the respective processing operation is specified in more detail in the following sections of this privacy policy.
§ 2.4 The provision of personal data is generally voluntary. However, certain information is required to conclude a contract, carry out an order, provide a customer account or process an inquiry. Without the necessary information, we may not be able to provide the relevant service or not be able to provide it completely. There is no obligation to give consent for unnecessary analysis, marketing or advertising measures.
§ 3 Accessing our online shop and server log data
§ 3.1 When you access our online shop, information is automatically transmitted by the browser you are using to the servers on which our online shop is provided.
In particular, the following data may be processed:
· IP address of the accessing device,
· Date and time of access,
· Page or file accessed,
· Previously visited page or referring internet address,
· Amount of data transferred,
· Access status and HTTP status code,
· Browser and browser version used,
· Operating system used,
· Device and language settings, and
· Information about the duration and technical process of access.
The provision of this data is technically necessary so that the content of our online shop can be transmitted to your device and displayed correctly.
§ 3.2 The processing of server and access data takes place in particular for the following purposes:
· Provision and display of the online shop,
· Ensuring the stability, functionality, and security of our systems,
· Detection and prevention of technical faults, abusive access, and attacks,
· Error analysis and technical optimisation, and
· Ensuring proper use of our online offering.
§ 3.3 Processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable, and technically error-free provision of our online shop, as well as in the protection of our systems and our customers' data from unauthorised access and other misuse.
§ 3.4 Our online shop is provided via the Shopify e-commerce platform. The provider for merchants based in the European Economic Area is generally:
Shopify International Limited
Victoria Buildings
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland
Shopify processes the data required for the operation and provision of the online shop on our behalf or within the scope of the services provided by Shopify. Sub-processors used by Shopify may also have access to the data.
Further information on the processing of personal data by Shopify and possible data transfers can be found in the section "Shopify and operation of the online shop" of this privacy policy.
§ 3.5 Server and access data are only stored for as long as is necessary for the provision, security and functionality of the online shop.
Longer storage may occur if there are concrete indications of unlawful or abusive use, a security incident or an attack on our systems. In this case, the relevant data may be stored until the facts have been fully clarified and for the assertion, exercise or defence of legal claims.
Insofar as data is no longer required for the stated purposes and there are no legal retention obligations or other legal grounds for further storage, it will be deleted or anonymised.
§ 4 Cookies and consent management
§ 4.1 We use cookies and similar technologies in our online shop. This may include storing information in the browser or on the end device, or reading out already stored information.
Cookies are small text files that are stored on your device. Comparable technologies may include local storage, session storage, pixels, tags, or other technical identifiers. These technologies may be necessary to provide our online shop, enable the shopping cart and ordering process, save your settings, analyse the use of our online shop, or carry out marketing measures.
§ 4.2 Certain cookies and similar technologies are absolutely necessary for the operation of our online shop. In particular, they enable:
· the technical provision and secure use of the online shop,
· navigation between individual pages,
· the storage of shopping cart content,
· the execution of the order and payment process,
· the registration and use of a customer account,
· the storage of your data protection and language settings,
· the detection and prevention of abusive or harmful access, and
· ensuring the stability and security of the online shop.
For these technically required technologies, no prior consent is required, insofar as their use is absolutely necessary to provide a digital service expressly requested by you.
Insofar as personal data is processed when using technically necessary technologies, this is done, depending on the purpose, in particular on the basis of Art. 6 Para. 1 lit. b GDPR for the implementation of pre-contractual measures or for the fulfilment of a contract, and on the basis of Art. 6 Para. 1 lit. f GDPR to ensure a secure, stable and functional online shop.
§ 4.3 We generally only use cookies and comparable technologies that are not absolutely necessary for the operation of our online shop with your prior consent.
This may include, in particular, technologies from the following categories:
4.3.1. Preferences and Personalisation
These technologies make it possible to save additional settings and adapt content or functions to your interests, insofar as this is not already necessary for an expressly requested function.
4.3.2. Statistics and Analysis
These technologies help us understand how visitors use our online shop. For example, pages accessed, dwell time, devices used, origin of visitors and interactions with the online shop can be evaluated.
4.3.3. Marketing and Advertising
These technologies can be used to measure the success of advertising campaigns, identify user interests, form target groups and display personalised advertising in our online shop or on third-party websites and platforms.
In these cases, the storage of information on your device or access to information stored there takes place on the basis of your consent according to § 25 para. 1 TDDDG. The associated processing of personal data takes place on the basis of Art. 6 para. 1 lit. a GDPR.
§ 4.4 When you first visit our online shop, a consent banner will be displayed. Through this, you can decide whether you wish to consent to the use of non-essential cookies and similar technologies. For this purpose, we use the cookie banner provided by Shopify. You can make your selection by category. Technically necessary technologies cannot be deselected, insofar as they are absolutely necessary for the provision of the service you have requested.
You can revoke or change your given consent at any time with effect for the future. To do this, you can access the function provided in the footer of our online shop under "Cookie Settings". The legality of the processing carried out until revocation on the basis of your consent remains unaffected.
§ 4.5 If you make a selection via the consent banner, information about your decision can be processed and stored. This serves to take your selection into account for further page views and to be able to prove the granting or rejection of consent.
In particular, the following information can be processed:
· Your consent decision,
· Date and time of the decision,
· Selected cookie categories,
· A technical identifier of the consent, and
· If applicable, a truncated or pseudonymised IP address.
The processing is carried out to fulfil our data protection documentation and accountability obligations on the basis of Art. 6 para. 1 lit. c GDPR, and to manage your data protection settings on the basis of Art. 6 para. 1 lit. f GDPR.
§ 4.6 Further information on the specific cookies and comparable technologies used, in particular regarding their provider, purpose, category and storage duration, can be found in the overview accessible via the "Cookie Settings" link. Services requiring consent will only be activated if you have agreed to the respective category. The specific analysis, marketing and other third-party services used are additionally described in the following sections of this privacy policy.
§ 5 Shopify and Operation of the Online Shop
§ 5.1 For the provision and operation of our online shop, we use the e-commerce platform Shopify. The provider for merchants based in the European Economic Area is:
Shopify International Limited
Victoria Buildings, 2nd Floor
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland
Shopify provides us, in particular, with the technical infrastructure for displaying the online shop, managing products and orders, the shopping cart, the ordering process, customer accounts and other functions necessary for shop operation.
§ 5.2 When using our online shop, Shopify may process the following personal data in particular:
· Name, billing and delivery address,
· Email address and, if applicable, telephone number,
· Order, contract, and return data,
· Customer account and login data,
· Payment and transaction information,
· IP address,
· Browser, device, and operating system information,
· Usage and access data,
· Communication and support data, and
· Information for fraud prevention and order process security.
Which data is processed in a specific case depends on which functions of the online shop are used and which information is provided during an order or registration.
§ 5.3 Processing is carried out in particular for the following purposes:
· Provision and display of the online shop,
· Implementation of pre-contractual measures,
· Processing of orders and purchase contracts,
· Management of customer accounts,
· Payment, shipping and returns processing,
· Processing of customer inquiries,
· Prevention and investigation of fraud and abuse,
· Ensuring technical security and stability, and
· Fulfillment of legal retention and verification obligations.
Insofar as processing is necessary for carrying out an order, managing a customer account, or fulfilling a contract, it is based on Art. 6 Para. 1 lit. b GDPR. Insofar as processing is necessary for fulfilling legal obligations, it is based on Art. 6 Para. 1 lit. c GDPR.
Processing to ensure the secure, stable, and economical operation of our online shop and to prevent fraud and abuse is based on Art. 6 Para. 1 lit. f GDPR. Our legitimate interests lie in particular in the secure and reliable provision of our online offering and in protecting our customers and our company from abusive or fraudulent actions. Consent-requiring analysis, personalization, or marketing functions are only used with your consent in accordance with Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG.
§ 5.4 Insofar as Shopify processes personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Art. 28 GDPR. Shopify processes the data in accordance with our instructions and exclusively within the scope of the agreed services. Shopify may use affiliated companies and carefully selected sub-processors to provide its services. For individual services offered by Shopify, Shopify may process personal data under its own data protection responsibility. We will inform you about this, if necessary, in the description of the respective service in this privacy policy.
§ 5.5 Shopify may transfer personal data within the Shopify group of companies and to sub-processors used. This may also involve processing in countries outside the European Economic Area. If there is no adequacy decision by the European Commission for a recipient country, corresponding data transfers are made in accordance with legal requirements and using appropriate safeguards, in particular on the basis of standard contractual clauses of the European Commission or other recognized protection mechanisms. Even if certain shop, order, and customer data are stored in Europe, international processing of individual data may be necessary for the provision and support of Shopify services.
§ 5.6 The data processed via Shopify is stored for as long as necessary for the provision of the online shop, the execution of the contractual relationship, and the stated processing purposes. Contract, order, invoice, and payment data may also be stored in accordance with legal commercial and tax retention periods. After the expiry of the respective purposes and statutory retention periods, the data will be deleted or anonymized, unless there are other legal reasons or legitimate interests for further storage. Further information on the processing of personal data by Shopify can be found in Shopify's privacy policy.
§ 6 Orders and contract processing
§ 6.1 If you place an order via our online shop, we process the personal data you provide during the ordering process. This may include, in particular:
· First and last name,
· Billing and delivery address,
· Email address,
· Telephone number, if applicable,
· Ordered goods and order quantity,
· Invoice amount and shipping costs,
· Selected delivery and payment method,
· Order, invoice and transaction numbers,
· Information on returns, cancellations and refunds,
· Communication content related to the order, and
· Technical information required for the secure execution of the ordering process.
An order can generally also be placed without setting up a customer account, if guest ordering is offered in the online shop.
§ 6.2 We process order and contract data in particular for the following purposes:
· Processing and acceptance of your order,
· Execution and processing of the purchase agreement,
· Creation of order and shipping confirmations,
· Invoicing and payment processing,
· Picking, packaging, and shipping of goods,
· Processing of cancellations, returns, exchanges, and refund requests,
· Processing of warranty claims and other customer inquiries,
· Prevention and investigation of abusive or fraudulent orders, and
· Fulfillment of legal documentation, proof, and retention obligations.
Order data is only used for analysis, profiling, or advertising purposes if there is a separate legal basis for this. If consent is required for this, processing will only take place after this consent has been given.
§ 6.3 The processing of data required for the order and contract fulfillment is based on Art. 6 para. 1 lit. b GDPR. Insofar as we have to process and store data to fulfill commercial, tax or other legal obligations, the processing is based on Art. 6 para. 1 lit. c GDPR. The processing for the prevention and investigation of fraud, misuse, payment defaults or other unlawful acts can be based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure operation of the business and in the protection of our customers and our company from financial damages and abusive actions.
§ 6.4 The information marked as mandatory fields in the ordering process is required for the conclusion and execution of the purchase contract. Without this information, we cannot process the order or cannot process it completely. Voluntary information is marked accordingly and generally has no influence on the ability to place an order.
§ 6.5 For the execution of the order, we transmit personal data only as far as this is necessary for the respective service. Recipients may include in particular:
· Shopify as the operator of the technical shop platform,
· Payment service providers and involved credit institutions,
· Shipping, transport and logistics service providers,
· Providers of merchandise management, accounting or invoicing services,
· IT and support service providers as well as
· Tax advisors, authorities or other bodies, if there is a legal obligation to transmit.
Details on Shopify, the payment service providers used and the shipping service providers are described in the following sections of this privacy policy.
§ 6.6 Order and contract data are initially stored for the duration of the contract processing. Subsequently, we store the data as far as this is necessary to comply with legal retention obligations or to assert, exercise or defend legal claims. After the expiry of the relevant retention and limitation periods, the data will be deleted or anonymized, unless there is another legal basis for further storage. Data that is exclusively required for the execution of an order and is not subject to any legal retention obligation will be deleted as soon as its processing for the stated purposes is no longer necessary.
§ 7 Customer Account
§ 7.1 If this function is offered in our online shop, you can use a personal customer account. Through the customer account, you can manage your contact data, view information about your orders and use other account functions provided by us. The creation and use of a customer account is voluntary. If an order without a customer account is offered in our online shop, you can also place your order as a guest.
§ 7.2 In connection with the setup and use of a customer account, the following personal data may be processed in particular:
· First and last name,
· Email address,
· Billing and delivery addresses,
· if applicable, telephone number,
· Order history and order status,
· Return and refund information,
· Stored account settings,
· Login and authentication information, and
· Technical data required to ensure the security and functionality of the customer account.
Which information is processed in a specific case depends on the account functions you use.
§ 7.3 Registration for the customer account takes place via the login function provided by Shopify. To do this, you enter your e-mail address and receive a one-time confirmation code or a confirmation link. This serves to verify your authorization to access the customer account. As part of the registration process, technical information that is required to carry out the registration, detect unauthorized access attempts and ensure the security of the customer account may be processed.
§ 7.4 The processing of account data takes place in particular for the following purposes:
· Provision and management of the customer account,
· Authentication of the customer,
· Display and management of orders,
· Storage and updating of contact data,
· Processing of returns and refunds,
· Provision of further account functions requested by the customer, and
· Prevention and investigation of unauthorized or abusive access.
Insofar as the processing is necessary for the setup and use of the customer account and for the execution of orders, it is carried out on the basis of Art. 6 para. 1 lit. b GDPR. The processing to ensure the security of the customer account and to prevent abusive access is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the protection of customer accounts, our systems and the personal data processed therein.
§ 7.5 The technical provision and management of customer accounts is carried out via Shopify. Shopify processes the personal data required for customer account and login functions in accordance with the conditions described in Section 5 of this privacy policy. If additional apps or services are used within the customer account, we will inform separately about the associated processing of personal data.
§ 7.6 You can request the deletion or deactivation of your customer account at any time. To do this, please contact us at info@reitwert.store. After the deletion or deactivation of the customer account, its functions will no longer be available. Data that was processed exclusively for the provision of the customer account will be deleted as soon as it is no longer required for this purpose and there are no legal or other legitimate reasons for its further storage. Order, contract, invoice and payment data may continue to be stored regardless of the deletion of the customer account, insofar as legal retention obligations exist or the data is required for the assertion, exercise or defense of legal claims.
§ 7.7 Setting up a customer account does not automatically lead to a subscription to our newsletter or consent to personalized advertising. Account data will only be used for advertising, analysis or profiling purposes if a separate legal basis exists for this. If consent is required, the corresponding processing will only take place after it has been given.
§ 8 Payment processing
§ 8.1 We use the payment service providers displayed during the ordering process to process payments. If you select a payment method, we transmit the data required for processing the payment to the respective payment service provider. This may include, in particular:
· First and last name,
· Billing address and, if applicable, delivery address,
· Email address and, if applicable, telephone number,
· Order and invoice number,
· Invoice amount and currency,
· Information about the ordered goods,
· Transaction and payment status,
· IP address and device and browser information and
· Other information required for authentication, fraud prevention or payment processing.
Which data is processed in individual cases depends on the payment method you have chosen. The transmission and processing of the data required for payment processing is based on Art. 6 Para. 1 lit. b GDPR. If processing is necessary to fulfill legal obligations, it is based on Art. 6 Para. 1 lit. c GDPR. Processing to prevent and clarify fraud, misuse or payment defaults can be based on Art. 6 Para. 1 lit. f GDPR.
Payment service providers may process personal data partly on their own data protection responsibility. This applies in particular to identity and credit checks, fraud prevention, risk assessments, and compliance with anti-money laundering, sanctions, and financial supervisory obligations. We generally have no influence on this independent processing.
We generally do not receive full card, account or other payment access data. In particular, we are provided with information about the successful authorization, rejection or reversal of a payment, as well as the transaction data required for allocation.
§ 8.2 If a payment is to be refunded or reversed, we transmit the necessary information to the payment service provider originally used. The refund is generally made using the payment method used in the original transaction. In particular, the order number, refund amount, transaction ID, refund reason and payment status can be processed.
§ 8.3 We store the payment and transaction data we hold for as long as necessary for contract fulfillment, processing refunds, chargebacks or payment disputes, and to comply with statutory retention obligations. Payment service providers determine the duration of storage carried out on their own responsibility according to their legal and contractual obligations. Further information can be found in the privacy notices of the respective selected payment service provider.
§ 9 Shipping, delivery and returns
§ 9.1 To deliver the goods you have ordered, we use shipping, transport and, if applicable, logistics service providers. For this purpose, we transmit the personal data required for the transport and delivery of the respective shipment to the service providers used.
§ 9.2 In the course of shipping and delivery, the following data may be processed:
· First and last name,
· Delivery address,
· If applicable, alternative delivery information,
· Order and tracking number,
· Type, quantity, weight and dimensions of the shipment,
· Shipping status and delivery information,
· If applicable, email address and telephone number, and
· Information about failed delivery attempts, returns or transport damage.
Shipping service providers generally only receive the data necessary for the execution of the respective shipping order.
§ 9.3 The processing and transmission of the data required for delivery is carried out for the purpose of fulfilling the purchase contract concluded with you on the basis of Art. 6 para. 1 lit. b GDPR. If data is processed to handle transport damage, failed deliveries, losses or other irregularities, this is also done for contract processing or on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the proper handling of shipping, the clarification of delivery problems and the assertion, exercise or defense of claims against shipping and transport service providers.
§ 9.4 If offered, your email address or telephone number may be transmitted to the shipping service provider used so that they can provide you with information about the shipping status, the estimated delivery time or available delivery options. Such transmission only takes place if it is necessary for the delivery you requested or if you have previously consented to it. If the processing is based on your consent, it is carried out on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The legality of the processing carried out until the revocation remains unaffected.
§ 9.5 After dispatch, we can provide you with a tracking number or a link to track your shipment. If you access a link to the shipping service provider's website, you leave our online shop. The shipping service provider processes the data collected when you access the shipment tracking on its own data protection responsibility. Further information can be found in the privacy notices of the respective shipping service provider.
§ 9.6 We store shipping, delivery and return data for as long as necessary for the execution and proof of delivery, the processing of returns, defects or transport damage, and to comply with statutory retention obligations. After the respective purposes cease to apply and the statutory retention and limitation periods have expired, the data will be deleted or anonymized, unless there is another legal basis for further storage. The shipping and logistics service providers determine the duration of the storage carried out on their own responsibility according to their legal and contractual obligations.
§ 10 Newsletter and promotional communication
§ 10.1 If we offer a newsletter, you can voluntarily subscribe to receive it.
With the newsletter, we primarily provide information about:
· Products and new additions to the range,
· Offers and discount promotions,
· Care tips and information about our products,
· News about our online shop, as well as
· comparable goods and services of our own.
To register, you must provide your email address. Further information, such as your name or interests, is voluntary and will only be used to personalize the newsletter or to better tailor content to your interests. Newsletter registration is neither a prerequisite for placing an order nor for setting up or using a customer account.
§ 10.2 To confirm your registration, we generally use the so-called double opt-in procedure. After registration, you will receive an email asking you to confirm your registration by clicking on a confirmation link. Only after this confirmation will your email address be added to the newsletter distribution list. If you do not confirm the registration, your email address will not be permanently used for newsletter delivery. The provisional registration data will be deleted after a reasonable period, unless there is another legal basis for its continued storage. To document the registration, the following data may be stored in particular:
· the email address provided,
· date and time of registration,
· date and time of confirmation,
· registration form used,
· content and wording of the declaration of consent,
· technical information on registration, and
· if applicable, the IP address used for registration and confirmation.
The logging serves as proof that effective consent has been given.
§ 10.3 The newsletter is sent based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. The documentation and retention of the consent record serve to fulfill our data protection obligations for verification and accountability in accordance with Art. 6 Para. 1 lit. c GDPR in conjunction with Art. 7 Para. 1 GDPR. If there is also a legitimate interest in preventing or defending against possible claims, the retention of the consent record can additionally be based on Art. 6 Para. 1 lit. f GDPR.
§ 10.4 You can revoke your consent to receive the newsletter at any time with effect for the future. You can do this in particular by:
· using the unsubscribe link at the end of each newsletter, or
· contacting us at info@reitwert.store.
There are no costs for unsubscribing other than the transmission costs at the basic rates. After unsubscribing, you will generally not receive any further newsletters. The lawfulness of the processing carried out until revocation remains unaffected. Your email address may be stored in a blacklist after unsubscribing, insofar as this is necessary to ensure that you do not receive any further newsletters in the future. The blacklist is used exclusively to observe your revocation or objection.
§ 10.5 The data used for sending the newsletter will generally be processed until you revoke your consent, object to the promotional use, or the newsletter is permanently discontinued. After unsubscribing, the data will be removed from the active newsletter distribution list. Consent records may also be stored for as long as necessary to comply with legal proof obligations or to assert, exercise, or defend legal claims. Data in a blacklist will be stored for as long as necessary to permanently comply with your revocation or objection.
§ 11 Storage Period and Deletion
§ 11.1 We generally store personal data only for as long as is necessary for the purposes for which the data was collected or further processed. The specific storage period depends in particular on:
· the respective processing purpose,
· the duration of a contractual or customer relationship,
· legal retention and documentation obligations,
· statutory limitation periods,
· the necessity for asserting, exercising or defending legal claims,
· given consent and its revocation, and
· existing legitimate interests in further storage.
If a specific storage period is mentioned in the preceding sections of this privacy policy, it takes precedence over the general rules of this section.
§ 11.2 If the purpose of processing ceases to apply and there is no legal obligation or other legal basis for continued storage, the personal data will be deleted or anonymized. Anonymization only occurs if a connection to a specific or identifiable person can no longer be established. If there is a further reason for storage only for a part of the data, the remaining data that is no longer required will be deleted.
§ 11.3 If deletion cannot yet take place due to legal retention obligations or other legal reasons, the processing of the data concerned will be restricted as far as possible to the legally permissible purposes. After the respective storage reason ceases to apply, the data will be deleted or anonymized.
§ 12 Your Data Protection Rights
§ 12.1 With regard to the processing of your personal data, you have the rights described below, subject to the legal requirements. You can contact us at any time to exercise your rights:
Kelm Tomovic Battermann GbR
Bugenhagenweg 7
29614 Soltau
Germany
Email: info@reitwert.store
Exercising your data protection rights is generally free of charge.
§ 12.2 You have the right, in accordance with Art. 15 GDPR, to request information as to whether we process personal data about you. You also have the right to receive a copy of the personal data that is the subject of the processing. The rights and freedoms of other individuals must not be affected by this.
§ 12.3 You have the right, in accordance with Art. 16 GDPR, to demand the immediate rectification of inaccurate personal data. Taking into account the purposes of the processing, you can also demand the completion of incomplete personal data.
§ 12.4 In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data. This does not affect statutory retention obligations for order, invoice, payment, and contract documents.
§ 12.5 In accordance with Art. 18 GDPR, you have the right to request the restriction of processing of your personal data. If processing has been restricted, the data concerned may, in principle, only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest, apart from their storage.
§ 12.6 In accordance with Art. 20 GDPR, you have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format. Where technically feasible, you may request that the data be transmitted directly to another controller. The rights and freedoms of other persons must not be affected by this.
§ 12.7 Insofar as we process personal data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, in accordance with Art. 21 GDPR. If personal data is processed for direct marketing purposes, you have the right to object to the processing for advertising purposes at any time and without giving reasons. This also applies to profiling insofar as it is related to such direct marketing. After your objection, your personal data will no longer be used for direct marketing.
§ 12.8 In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection regulations. In particular, you can contact the supervisory authority of your habitual residence, your workplace, or the place of the alleged infringement.
§ 12.9 We process requests for the exercise of your data protection rights promptly and within the statutory deadlines. If there are reasonable doubts about your identity, we may request additional information necessary to confirm your identity. This serves to protect personal data from unauthorized disclosure or alteration. In the case of manifestly unfounded or excessive requests, we may demand a reasonable fee or refuse to process the request in accordance with statutory requirements.
§ 13 Data Security
Taking into account the state of the art, the costs of implementation and the nature, scope, context, and purposes of processing, we take appropriate technical and organizational measures to protect personal data. Our online shop uses an encrypted connection. You can recognize an encrypted connection, in particular, by the use of "https" in the address bar of your browser. Despite appropriate security measures, completely risk-free data transmission and processing cannot be guaranteed. Therefore, please also protect your own end devices and access options from unauthorized access.
§ 14 Final Statement
We reserve the right to adapt this data protection declaration if legal or official requirements change, new services or providers are used, technical developments of our online shop occur or the nature and scope of the processing of personal data change. The current version of the data protection declaration published on our website shall apply. Should a change concern the processing of personal data based on consent, we will obtain new consent - if legally required.
Status: July 2026