Privacy and Data Protection
DATA PROTECTION STATEMENT
We highly appreciate your interest in our online store available via www.katadyn.com, www.optimusstoves.com and www.trekneat.com (hereinafter ‘online store’). Protecting your privacy is very important to us. Below, we will provide you with detailed information about our handling of your data.
1. Collection, processing and use of your data
You can visit our webpages without providing personal data. In our server log files, we only save such user data as, for example, the name of the requested file, date and time of the file being opened, the transmitted amount of data and the IP address assigned to you by your internet provider. These data are stored for 7 days and are assessed exclusively to ensure fault-free operation of our webpage (e.g. to detect attacks) and to improve our offer. This processing takes place in accordance with Article 6 Paragraph 1(f) of GDPR, based on our legitimate interest in improving the stability and functionality of our webpage and online store.
If you register as a client, order goods, subscribe to our newsletter as part of a double opt-in, or wish to use particular functions of our online store, personal data are collected. You can obtain detailed information on the type, purpose and scope of data collection on the corresponding pages with the appropriate input masks, and in the following guidelines. We process or use your data only for the purpose indicated, unless otherwise specified below, or if you have not consented to other use.
1.1 Ordering goods and processing orders
We use your personal data as part of the ordering process and to carry out the orders you make in the online store, strictly within the limits established by the effective data protection law. These data are only collected, processed and used for the purpose of handling your applications and orders. To the extent that they are necessary for the purpose of handling the order, your data may be transferred to other companies, e.g. payment service providers. These companies may only use your data for handling the order, and not for other purposes. The legal justification for this data processing is fulfilment of a contract, subject to Article 6 Paragraph 1(b) of GDPR.
Otherwise, we do not transfer your personal data to third parties, unless there is a legal obligation to do so, or unless you provide express permission, e.g. by explicitly pressing a button to publish on social networks.
With your special consent as part of the double opt-in procedure, we will use your e-mail address to send our newsletter that you can choose to unsubscribe from at any time by clicking on the deactivation link provided in every newsletter. If you register for our newsletter, you will regularly receive information about our products and offers. The name and surname fields in the registration form for the newsletter are optional. They will only be used to personalise the newsletter.
1.3 Credit card data
We do not save credit card data; they are collected and processed directly by our payment service provider.
1.4 Use of data for postal advertising
We furthermore reserve the right to use your data that we obtain as part of a contractual relationship with you for our own advertising via post, e.g. for sending interesting offers and information about our products, provided this is allowed by data protection law.
1.5 Revocation and objection to advertising
You always have the right to revoke your consent with future effect. Furthermore, you may object in writing to the use of your data for all or specific advertising or market/opinion research purposes at any time with future effect. After you revoke your permission, use of your data for these purposes is prohibited.
If you issue a data protection-related approval or revoke such consent on our webpages, we must save it for the purposes of traceability. Personal identification data (name, surname or e-mail address, whenever known, and the IP address) and the date/time are recorded as part of this. The data regarding your approval are deleted after a period of limitation of three years.
1.7 Contact form
If you send us a request via a contact form, your data from the contact form, including the contact data specified therein, will be processed and used for the purpose of processing your question. These data are not transferred to third parties. The legal basis for the processing of the data is our legitimate interest in replying to your request according to Article 6 Paragraph 1(f) of GDPR.
After your request is fully processed, your data will be deleted. This is the case if the circumstances indicate that the matter or your request are completely resolved, and there are no legal retention periods that would prevent deletion.
2. Data security
Your personal data are encrypted using an SSL (Secure Socket Layer) procedure when they are transmitted via the internet as part of the order process. We secure our online store and other systems through technical and organisational measures against loss, destruction, access, modification and disclosure of your data by unauthorised persons. Access to your customer account is only possible using your personal password. You should always keep your access information confidential, and close the browser window when you end your communication with us, especially when you share the computer with other people.
In order to make visiting our online store appealing and efficient, and to enable the use of certain functions, we use so-called cookies on various pages. Cookies are small text files stored on your computer or end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (session cookies). Other cookies are retained on your computer or end device and make it possible for us to recognise your browser on your next visit (persistent cookies).
You can change your browser settings so that you are informed about the saving of cookies, and can decide whether to accept individual cookies, refuse to accept cookies in certain situations or prohibit them in general. You can also delete the cookies saved on your computer or end device (as a rule, via your browser settings). If you do not accept cookies or delete them, the functionality of our webpage may be restricted.
3.1 Google Analytics
You can prevent the collection of data through Google Analytics by clicking on the following link. This will create an opt-out cookie that will prevent future use of your data when you visit the webpage. Click here to be excluded from the collection of data by Google Tag Manager.
We would like to point out that on this webpage, Google Analytics was expanded with the code ‘gat._anonymizeIp()’ that ensures anonymised collection of IP addresses (so-called IP masking).
This online store uses Social Plugins (hereinafter ‘Plugins’) of the social network facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, US (hereinafter ‘Facebook’). The plugins are marked with a Facebook logo (a white letter ‘f’ on a blue square, or a ‘thumbs up’ sign), or with the note ‘Facebook Social Plugin’. The list and appearance of Facebook Social Plugins can be found here: http://developers.facebook.com/plugins.
If a user opens a webpage of this offer that contains such a plugin, their browser will establish a direct connection with Facebook servers. The content of the plugins is transferred directly to your browser by Facebook, and a connection is made to the webpage from it. The offering party thus has no influence on the scope of the data that Facebook collects using this plugin, informing users appropriately of their state of knowledge. Using the plugin, Facebook obtains the information that a user opened on the corresponding page of the offer. If the user is logged into Facebook, Facebook can assign the visit to their Facebook account. When users interact with the plugins, e.g. by pressing the ‘Like’ button, or leaving a comment, appropriate information is transferred directly from your browser to Facebook, and is stored there. If a user is not registered on Facebook, there is still the possibility of Facebook finding out and saving their IP address. According to Facebook, in Germany, only an anonymised IP address is saved.
The purpose and scope of the data collection, as well as further processing and use of data by Facebook and the respective rights and configuration options for protecting the privacy of the user can be found in the Facebook data protection guidelines: http://www.facebook.com/policy.php.
If a user is registered on Facebook and does not wish Facebook to collect data about the user via this offer, linking them to the corresponding Facebook user data, the user must log out of Facebook before visiting the corresponding website. Likewise, it is possible to block Facebook Social Plugins using add-ons for your browser, such as ‘NoScript’.
4. Your right to data protection
You are subject to the rights of affected persons: i.e. the rights that you can enforce as an affected person in a given situation. These rights are established by GDPR:
- Right of access (Article 15 of GDPR): You have the right to access any stored personal data that pertain to you.
- Right to rectification (Article 16 of GDPR): If you determine that incorrect data about your person are processed, you may demand their rectification. Incomplete data must be completed taking into account the purpose of the processing.
- Right to erasure (Article 17 of GDPR): You have the right to demand deletion of your data if certain grounds for deletion apply. This is particularly the case if such data are not needed for the purpose, for which they were originally collected or processed.
- Right to object (Article 21 of GDPR): if we as part of balancing of interest process your personal data in favour of our predominant legitimate interest, you have the right to object to such processing with future effect at any time, for the reasons based on your specific situation.
If you exercise your right to object, we will discontinue any processing of the data affected.
- Furthermore, you have other rights granted to affected persons, especially the right to restriction of processing, revocation and data portability, in accordance with the provisions of Articles 12—23 of GDPR.
To find out about your rights, please contact us at firstname.lastname@example.org. Should you have any questions, comments or requests concerning our collection, processing and use of your personal data, please contact us using the contact information provided below.
5. Information about the responsible party