1. Name and address of the responsible person
Handelshaus für internationale Philatelie
Owner: Lars Franke
Phone: +49 (0)151 66936227
2. General information on data processing
As a matter of principle, we collect and use personal data of our users only to the extent that this is necessary for the provision of a functional website as well as our contents and services. The collection and use of our users' personal data regularly takes place only with the user's consent. An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by legal regulations.
Legal basis for the processing of personal data
The following legal bases exist for the processing of your personal data:
performance of a contract or pre-contractual measures
Art. 6 Paragraph. 1 letter f DSGVO
Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Data may also be stored if a legal retention period, e.g. from the German Fiscal Code and the German Commercial Code, precludes deletion. In principle, we store your data for 10 years.
Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
- Browser type and the version used
- Operating system of the user
- Internet service provider of the user
- IP address of the user
Date and time of access
Websites from which the user's system accesses our website
Websites accessed by the user's system via our website
Due to legal regulations, we are permitted to temporarily store the data and log files. The temporary storage of the IP address (duration of use) is necessary to deliver the website to you. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The data is stored by us until the end of the respective session and then automatically deleted. As this data is absolutely necessary for the operation of the website, you as a user have no possibility to object to the processing.
Transfer of your data to a recipient in a third country
Where necessary for the above purposes, we will also transfer your data to recipients outside the European Economic Area (EEA). We ensure that a transfer to third countries only takes place if there is a legal basis for it. This means that we only transfer your data if a decision of the EU Commission on an adequate level of data protection exists for the respective third country (Art. 45 DSGVO), appropriate safeguards are provided for the protection of your personal data (cf. Art. 46 DSGO) or a legal permission exists (cf. Art. 49 DSGVO).
Appropriate safeguards within the meaning of Art. 46 DSGVO include the standard data protection clauses published by the EU Commission. If you would like more information on the standard data protection clauses on the basis of which we transfer your personal data to third countries, please contact the office mentioned in point 1.
When activating analysis and marketing cookies on our website, data will be transferred from you to the USA. For the USA, there is no so-called adequacy decision of the European Commission according to Art. 45 DSGVO.
3. Visiting the website
You can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link:tools.google.com
Alternatively, you can prevent the storage of cookies by selecting the appropriate settings on your browser software. The legal basis for the processing is Art. 6 para. 1 letter a DSGVO. We obtain the user's consent via a cookie notice.
You can also register on our homepage. In this case, the personal data you enter will be processed by us. Here too, the data will not be passed on to third parties. The following data is collected during the registration process:
- IP address as well as date and time of registration
- Name, address and email address
The processing of your personal data is necessary for the performance of a contract or a pre-contractual measure. However, it can also take place on the basis of your consent. Your registration is necessary to fulfil the contract or to carry out a pre-contractual measure. Furthermore, it is also necessary for the provision of content and services on our website. In principle, storage ends when the purpose is fulfilled. Should the collection and processing of your personal data be necessary for a pre-contractual measure or for the fulfilment of the contract, we are obliged to comply with statutory retention periods. Deletion is then only possible after expiry.
5. Data processing for order handling
In order to process your order, we work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b DSGVO.
In order to fulfil our contractual obligations to our customers, we work together with external shipping partners. We pass on your name as well as your delivery address to a shipping partner selected by us exclusively for the purpose of delivering the goods Art. 6 paragraph. 1 lit. b DSGVO.
If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will also pass on your e-mail address and telephone number to DHL in accordance with Art. 6 Para. 1 lit. f DSGVO prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification.
If the goods are delivered by the transport service provider Hermes (Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg), we will pass on your e-mail address to Hermes prior to delivery of the goods in accordance with Art. 6 Para. 1 lit. f DSGVO for the purpose of coordinating a delivery date or for delivery notification.
6. Use of payment service providers
If you choose the payment method "Postfinance", the payment will be processed by the payment service provider PostFinance AG, Mingerstrasse 30, 3030 Bern, Switzerland (hereinafter referred to as PostFinance), to whom we pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 Para. 1 lit. b DSGVO. PostFinance is part of Swiss Post AG, Wankdorfallee 4, 3030 Bern, Switzerland Your data will only be passed on for the purpose of processing payments with the payment service provider PostFinance and only to the extent necessary for this purpose. You can obtain further information on Postfinance's data protection policy at the following Internet address:www.postfinance.ch
If you select the payment method "TWINT", the payment will be processed by the payment service provider TWINT AG, Stauffacherstrasse 41, 8004 Zurich, Switzerland (hereinafter referred to as TWINT), to whom we will pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 Para. 1 lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with the payment service provider TWINT and only insofar as it is necessary for this purpose. You can obtain further information on the data protection provisions of TWINT AG at the following Internet address:www.twint.ch
If you select the payment method "Mastercard/Girocard/Credit Cards", the payment will be processed by the payment service provider Concardis GmbH, Helfmann Park 7, 65760 Eschborn, Germany (hereinafter referred to as Concardis), to whom we will pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 (1) lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with the payment service provider Concardis and only insofar as it is necessary for this purpose. You can obtain further information about the data protection provisions of Concardis GmbH at the following Internet address:www.concardis.com
d. Pay Pal
If you choose the payment method "PayPal", credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 Para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration: www.paypal.com You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
7. Contact form and e-mail contact
On our website you will also find a contact form. This can be used to contact us electronically. The data entered in it will be processed by us. The following data is processed when contacting us:
- IP address, date and time of entry
- Email address, telephone numbers
- Name and address
- Collection areas
For the processing of the data, your consent is obtained during the sending process and reference is made to this data protection declaration.
You can also use our email address to contact us. Your email will be processed by us. In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation. The legal basis for data processing is your consent. Should you seek contact with us in order to conclude a contract, the legal basis is the fulfilment of the contract or a pre-contractual measure. The purpose of entering data in the contact form is to contact us. The data will be deleted when the purpose of the data processing has been achieved. This may depend on the circumstances of the individual case when contact is made. It is possible that a legal retention period may prevent immediate deletion. You may revoke your consent to us.
a. Advertising letter
We also use your contact details to send you advertising for products that may be of interest to you by e-mail or letter post. This applies regardless of whether you sign up for the newsletter. If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right, on the basis of Paragraph 7 (3) of the German Unfair Competition Act (UWG), to regularly send you offers for similar products to those you have already purchased from our range by e-mail or letter post. The legal basis for this processing is our legitimate interest in addressing our customers in an advertising manner. You can object to this use of your e-mail address at any time by sending a message to firstname.lastname@example.org or via a link provided for this purpose in the advertising e-mail.
8.Social Media Links
Within our websites there are links to various social media with the corresponding logos. These are not social media plugins, but merely a link to our offers within these media. If you click on one of these links, your IP address will be transmitted to the operators of the various platforms. If you use one of these services and are also logged in with your specific account, information about your surfing behaviour may also be collected by the operators of these media. The transmission of your IP address to the operators of the websites accessed is technically necessary and applies to all websites.
9. Rights of the data subject
You have the following rights if the respective legal requirements are met:
You can demand information as to which personal data, of what origin, is stored about you and for what purpose. You must also be informed whether your data has been transferred to third parties. In this case, you must be informed of the identity of the recipient or of the categories of recipients.
If your personal data is incorrect or incomplete, you may request that it be corrected or supplemented.
You may object to the processing of your personal data for advertising purposes. Your data must then be blocked for these purposes.
You have a right to restriction of processing if you dispute the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data; the controller no longer needs the personal data for the purposes of processing but you need them for the assertion, exercise or defence of legal claims, or if you object to the processing pursuant to Art. 21 (1) DSGVO and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.
You can request the deletion of your data. This is possible if the legal basis for the data processing is missing or has ceased to exist. The same applies in the event that the purpose of the data processing has ceased to exist due to the passage of time or other reasons. Please note that an existing retention period or other interests of our company worthy of protection may stand in the way of deletion. We will be happy to inform you of this on request. If we have made your data public, we are obliged to inform each recipient that you have requested the deletion of all links to this personal data or of copies of this personal data.
You also have the right to object if your legitimate interest based on a personal situation outweighs the interest of the processing. However, this does not apply if we are obliged to carry out the processing due to a legal provision. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes data protection.
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format.