Privacy

Data Protection Policy according to the GDPR

This policy aims to inform you as to the type, extent and purpose of the collection and use of personal data during your visit to our online shop. Personal data is all information which refers to an identified or identifiable natural person ("Data Subject").

Name and address of the Controller

The Controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of Member States, as well as other data protection rules, is:

Schelchen GmbH
Im Gewerbepark 4-6
15711 Königs Wusterhausen
Germany
Tel.: +49 (0)3373 – 90 38 0
Email: info@pedag.de
Website: www.pedag.de

The Data Protection Officer has been designated.
Contact details of the Data Protection Officer:

Schelchen GmbH
Im Gewerbepark 4-6
15711 Königs Wusterhausen
Deutschland
Tel.: +49 (0)3373 – 90 38 0
E-Mail: datenschutz@pedag.de
Website: www.pedag.de

Providing the website and creating log files

Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer.

The following data is processed:

  1. Information about the browser type and version used
  2. The user's operating system
  3. The user's internet service provider
  4. The user’s IP address
  5. The date and time of access
  6. The websites from which the user's system reaches our website
  7. The websites accessed by the user's system via our website

The IP address and information on the request(s) from your internet browser are necessary, for technical reasons, for you to visit and use the website; without this data being processed, websites cannot be accessed and webpages cannot be displayed. The processing of the IP address is anonymised by way of abbreviation or deleted once it is no longer required for technical reasons for you to access/use the site.

The above data is also stored in the log files of our system. This does not apply to the user’s IP addresses or other data which enables data to be attributed to a specific user. This data is not stored together with other personal data of the user.

Purpose of data processing

The temporary storage of the IP address and the processing of the information regarding the request(s) of your internet browser by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. Processing of the above log files is carried out in order to optimise how content is displayed, determine the system capacity and make future modifications and improvements to the website, on the basis of statistical analyses (where applicable).

Legal basis for the processing of data

The legal basis for the aforementioned processing of data is Art. 6 (1) first sentence (f) GDPR. The legitimate interest in processing the relevant data is that it makes accessing the website technically possible, optimises how the content is displayed for the user and enables the continued improvement/optimisation of the internet service in the future.

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. As far as the collection of data for the provision of the website is concerned, the data is deleted when the respective session is ended.

Right to object

As far as data processing based on Art. 6 (1) first sentence (f) GDPR is concerned, you have a right to object, without prejudice to other rights. On this point, see below ("Rights of the Data Subject").

Use of cookies

Session cookies

We use so-called cookies on our website. Cookies are small text files or other storage technologies that are saved to and stored on your end device by the internet browser you use. These cookies process certain information about you, on an individual basis, such as your browser or location data or your IP address. 

Processing this data makes our website more user-friendly, effective and secure, as it enables the processing or display of our website in different languages or the provision of a shopping basket function, for example.
The legal basis for this processing of data is Art. 6 (1), first sentence, (b) GDPR, to the extent that this data is required for the provision and use of the online shop, i.e. ability to place orders and fulfil them.

Where the processing of data is not for the purposes of initiating or performing a contractual agreement, such processing is carried out on the basis of Art. 6 (1) first sentence (f) GDPR. The legitimate interest lies in improving the functionality of our website.

When you close your internet browser, these session cookies are deleted.

Cookies from third party providers

In some circumstances, our website also uses cookies from partner companies we work with for the purposes of advertising, analysis or the functionalities of our website. For details in this regard, in particular on the purposes and legal bases of the processing of such cookies from third party providers, please refer to the information below.

Cookie management / Blocking cookies

You can prevent or restrict the installation of cookies using your internet browser settings. You can also delete cookies that have already been stored at any time. However, the steps and measures required depend on the specific internet browser you are using. Therefore, if you have any questions please use the help function or documentation of your internet browser or contact the browser’s manufacturer/support.

Should you prevent or restrict the installation of cookies, however, this may lead to not all functions of our website being fully usable.

Right to object

As far as data processing based on Art. 6 (1) first sentence (f) GDPR is concerned, you have a right to object, without prejudice to other rights. On this point, see below ("Rights of the Data Subject").

Newsletter

By giving your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The relevant goods and services are stated in the declaration of consent.

For the registration to our newsletter, we use a so-called double opt-in process. This means, following registration we send an email to the specified email address, in which we ask for confirmation that you wish to receive the newsletter. If you do not confirm registration within 24 hours, your information will be locked and automatically deleted after one month. In addition, we store the IP addresses you used and the times of registration and confirmation. The purpose of the process is to verify your registration to the newsletter and your consent and, if necessary, to be able to investigate a possible abuse of your personal data.

The only mandatory information required to receive the newsletter is your email address. The provision of further, separately marked data is optional and is used to be able to address you by name. After you have provided confirmation, we will store your email address for the purposes of sending the newsletter.  The legal basis is Art. 6 (1) first sentence (a) GDPR.

Granting your consent to receive the newsletter is optional; it is, however, not possible to receive the newsletter without giving consent. You can revoke your consent to receive the newsletter and unsubscribe from the newsletter at any time, with effect for the future. You can revoke your consent by clicking on the link provided in every newsletter or by sending a message via the contact form provided on the imprint page.

Customer account and orders

Customer account

Placing an order in our online shop requires prior registration, whereupon you also receive access to the online account. In the online account you can, for example, view and amend delivery addresses, payment information etc. and view your order history.

When registering for the online account, mandatory information necessary for the conclusion and performance of the contract must be supplied (name, billing and delivery address, email address and payment details) in addition to the email address and password; all other information is optional. You can amend the above information in your customer account at any time and also add information to the user account. Moreover, when you use the online shop we store additional information and associate it with your account, namely the content of your shopping basket, the content of your Wish List notepad and information on orders placed.

Consent and revocation

The opening of a user account and the data processing during the set-up process and subsequently is carried out on the basis of your prior consent, which must be given on registration. The granting of consent is voluntary; there is no statutory or contractual obligation to register and thus transfer personal data. Consent can be revoked at any time with effect for the future. Should you wish to do so, please send an email to vertrieb@pedag.de. Revoking consent has no influence on the legitimacy of the processing carried out on the basis of the consent prior to the revocation.

Purpose of data processing and legal bases

The processing of data during the setting up of a customer account is carried out for the purposes of setting up and maintaining a customer account, to enable convenient/easy placing and viewing of orders via our online shop as well as - when orders are placed - to perform the contracts thereby concluded.

When placing an order, the data stored in your user area at that time and the data transmitted in the course of the order will be processed for the purpose of concluding and performing the respective contract.

The legal basis for this processing of data to set up and maintain a customer account is Art. 6 (1) first sentence (a) GDPR; the legal basis for the processing of data to concluding and fulfil orders is Art. 6 (1) first sentence (b) GDPR.

Duration of processing

Order-related information will be stored beyond the end of the process. We are obliged, on the basis of commercial law and tax law obligations, to retain your address, payment and order data for a period of ten years. However, we restrict processing after two years. The above also applies in the case of a revocation with respect to a customer account and its deletion. The legal basis for this archiving is Art. 6 (1) first sentence (c) GDPR.

Contact

Description and scope of data processing

There is a contact form on our website which can be used for contacting us electronically. If you decide to use this option, the data entered in the input mask will be transmitted to us and stored.

Your consent for the processing of the data is obtained within the scope of sending the form and reference is made to this Data Protection Policy.

Alternatively, you can contact us via the e-mail address provided. In this case, the personal data transmitted with the email will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for conducting the conversation.

When you submit a product recommendation or rating, we process the personal information that you voluntarily enter during the evaluation. You can always publish ratings under a pseudonym and / or your first name and last name.

Purpose of data processing

The processing of the personal data from the input mask or any email communication is carried out solely for the purpose of processing the enquiry. Any other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

Legal basis

The legal basis for the processing of the data is Art. 6 (1) (a) GDPR. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 (1) (f) GDPR. The legitimate interest lies in processing your enquiry. If the purpose of the enquiry is to seek the conclusion of a contractual agreement, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

Right to object

As far as data processing based on Art. 6 (1) first sentence (f) GDPR is concerned, you have a right to object, without prejudice to other rights. On this point, see below ("Rights of the Data Subject").

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case, as far as the personal data from the input mask of the contact form and that sent by email, when the related conversation with you has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been completely resolved.  The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Right of Revocation

You have the possibility of revoking your consent to the processing of personal data at any time with effect for the future. If you contact us by email, you can object to the storage of your personal data at any time. In such an event, the conversation cannot be continued. In that case, all personal data which has been stored in the course of contacting us will be deleted. Where the conversation has led to the conclusion of a contract, however, we are, where applicable, obliged to retain the data in accordance with Art. 6 (1) first sentence (c) GDPR. In individual cases, continued storage and processing on the basis of a legitimate interest under Art. 6 (1) first sentence (f) GDPR may be justified or required for the establishment, exercise or defence of civil law claims in accordance with Sec. 24 (1) No. 2 BDSG (German Federal Data Protection Act).

Embedded third-party provider tools

Social media plug-ins

We use social media plug-ins from various providers on our website, on the basis of Art. 6 (1) first sentence (f) GDPR, in order to offer you the opportunity to interact with the social networks and other users and thereby to make our website more interesting and also make other users aware of it. The underlying commercial purpose is regarded as a legitimate interest within the meaning of the GDPR. The responsibility for operating in a manner compliant with data protection rules must be ensured by the respective provider.

a) The following social media plug-ins are embedded in our website:

  • Facebook (Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA)
  • Pinterest (Pinterest Europe Ltd., Palmerston House, Fenian Street, Dublin 2, Ireland)
  • Twitter (Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA)

These plug-ins can be identified by the respective provider logos, each of which is displayed on our website. The providers mentioned which are based in the USA are all members of the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

b) The plug-ins are embedded with the so-called two-click solution. This means that personal data cannot be collected by those providers merely from a visit to our website or a simple click on their logo. Instead, after the first click on the logo, an information banner is displayed. Only after you have clicked on “OK” are you then forwarded to the plug-in provider and that provider receives the information that you have visited the our website.

c) When the plug-in is activated, your personal data will be transmitted to the respective plug-in provider and stored by them. The plug-in provider stores the data collected about you as user profiles and uses it for the purposes of advertising, market research and/or tailoring the design of its website. Analysis of this type is carried out in particular (even for users who are not logged in) in order to present tailored advertising and to inform other users of the social network about your activities on our website.

d) The transmission of data takes place irrespective of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data collected with us will be directly associated with your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares this publicly with your contacts.

e) You have a right to object to the creation of these user profiles; in order to exercise this right, you must contact the respective plug-in provider.

f) You can find further data protection information regarding the plug-in providers through the links below:

Google Analytics, Google remarketing and Google conversion tracking

This website uses functions from the web analysis service Google Analytics. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files which are stored on your computer and which enable an analysis of your use of the website.

Based on a contract with us for third party processing, certain user and usage information is recorded by Google compiled into pseudonymised user profiles and stored in cookies (see above). The information includes, for example, browser type/version, the operating system used, the screen resolution, referrer URL (the website visited prior to this one), anonymised IP address of the computer used to access the website, time of server request, files downloaded, videos watched, advertising banners clicked on, orders placed, sequence of clicks, frequency of site visits, entry and exit times, the length of time spent on individual pages, etc. This is carried out for the purpose of statistical evaluation with a view to the future optimisation of the design of the website and its contents.

The information generated by the cookie is transferred to one of Google's servers, which could be in the USA, and is processed there. Google has committed to complying with the Privacy Shield agreement, published by the US Department of Commerce, between the EU and the USA regarding the collection, use and storage of personal data from EU Member States. The certificate can be viewed at www.privacyshield.gov.

We have activated an IP anonymisation tool, which means that your IP address will be truncated beforehand by Google, in Member States of the European Union or in other states which are party to the Agreement on the European Economic Area, and is thus transmitted by Google in anonymised form. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and anonymised there. Google will use this information, on behalf of the operator of this website, to evaluate your use of the website, to compile reports on website activity and to provide further services to the website operator connected with the website and internet use. The IP address transmitted by your browser in the scope of Google Analytics is not associated with other data from Google.

Google Remarketing

Due to the activation of the remarketing function, after you have visited our website there is a high probability that when you visit other websites in the Google Display Network you will be shown advertisements that include previously viewed product and information pages. The processing is carried out on the basis of Art. 6 (1) (f) GDPR based on the legitimate interest of communicating with website visitors through targeted advertising in that visitors to the provider’s website are shown personalised, interest-based advertising when visiting other websites in the Google Display Network. Further information can be found at https://www.google.com/privacy/ads.

Google conversion tracking

When clicking on an online advertisement placed by us, Google will place a cookie on your computer for 30 days. If a user arrives on one of our webpages via one of our Google advertisements within these 30 days on other sites, both we and Google will be able to identify via which advert this visitor has reached us. Personal data which can be used to identify individual users will not be collected. We only receive statistical analyses about the total number of users who have clicked on our adverts and been forwarded to our website. Further information can be found at https://policies.google.com/privacy?gl=de.

The information obtained with the aid of the conversion cookie serves the purposes of compiling conversion statistics. These tell us the total number of users who have clicked on one of our adverts and been forwarded to a page that has a conversion tracking tag. However, we receive no information which can be used to identify users personally. The processing is carried out on the basis of Art. 6 (1) first sentence (f) GDPR based on the legitimate interest in targeted advertising and analysing the effectiveness and efficiency of that advertising.

Preventing cookie storage

You can prevent cookies being stored by adjusting your browser settings accordingly; moreover, you can delete stored cookies using your browser. Preventing or deleting cookies may render, in some circumstances, the use of certain functions of the website awkward or impossible.

In addition, you can

  • prevent Google from collecting and transmitting the data generated by the cookie related to your use of the website, as well as the processing of such data by Google, by downloading and installing the browser plug-in available at this link: http://tools.google.com/dlpage/gaoptout?hl=de.
  • prevent the collection of your personal data by Google Analytics via an opt-out, by clicking on the following link:  > Deactivate Google Analytics deaktivieren < This will place an opt-out cookie on your computer that will prevent the future collection of your data by Google Analytics when visiting this website.

Legal basis

The legal basis for the use of Google Analytics is Art. 6 (1) first sentence (f) GDPR. The legitimate interest in processing the data is to analyse usage data and, on the basis of the knowledge gained, identify and remedy errors and to optimise the design of our website, including measuring and optimising marketing measures.

Right to object

As far as data processing based on Art. 6 (1) first sentence (f) GDPR is concerned, you have a right to object, without prejudice to other rights. On this point, see below ("Rights of the Data Subject").

Job applications

Within our website, job advertisements may be published, to which you can, if interested, apply by email to the email address provided in the advert. The application documents sent in connection with job applications and the personal data contained therein will be processed in order to handle and review your application. The legal basis for this processing of data is Sec. 26 (1), first sentence BDSG in conjunction with Art. 88 (1) GDPR.

Where an employment contract is concluded following an application process, we will store the data you transmitted with your application in your personnel file for the purposes of the normal organisational and administrative processes. The legal basis for this processing of data is similarly Sec. 26 (1), first sentence BDSG in conjunction with Art. 88 (1) GDPR.

Where an application is rejected, we will automatically delete the data sent to us two months after notifying you of the unsuccessful application or, in the event of a legal dispute related to the rejection, until the conclusion of such dispute. The legal basis for this is Art. 6 (1) first sentence (a) GDPR (legitimate interest: retention with regard to possible legal disputes) and Sec. 24 (1) No. 2 BDSG. Where necessary, storage is also carried out where this is required on the basis of legal data retention obligations (legal basis: Art. 6 (1) first sentence (c) GDPR).

To the extent you expressly consent to longer storage of your data, for example inclusion in an applicant or interested party database, the data will be further processed on the basis of your consent. The legal basis in that case is Art. 6 (1) (a) GDPR. Naturally, you can revoke your consent by way of declaration at any time with effect for the future.

Recipients of personal data

In connection with the provision of our website and online shop as well as in the context of the contractual fulfilment of active orders placed via our online shop, there may be - always strictly purpose based - a disclosure of personal data to third parties, also including third party data processors as per Art. 28 GDPR, specifically from the following categories:

IT service providers (support for our hardware and software), web developers/system administrators (support/administration of our website), website analysis (Google; see above), payment service providers.

Rights of the Data Subject

If personal data concerning you is processed, you are a data subject within the meaning of the GDPR and you have the following rights in your relationship with the Controller:

Right of access

You have the right to obtain confirmation from us as to whether or not we are processing personal data concerning you. If this is the case, you have a statutory right of access to the personal data (Art. 15 GDPR in conjunction with Sec. 34 BDSG). This does not apply if

  • the data is only still stored because it may not be deleted due to data retention rules set out in the law or company statutes or
  • the storage is for the sole purpose of backing up data or data protection monitoring

and the provision of information would involve a disproportionate effort and any processing for other purposes has been excluded using appropriate technical and organisational measures.

Right to rectification

You also have the right to obtain the rectification of inaccurate personal data concerning you and where applicable - taking into account the purposes of the processing - to have incomplete personal data completed, including by means of a supplementary statement (Art. 16 GDPR). Moreover, in the cases set out in Art. 17 (1) (a) to (f) GDPR, you have the right to erasure of personal data provided none of the exceptions under Art. 17 (3) GDPR applies, as well as a right to restriction of processing in the cases set out in Art. 18 (1) GDPR. There is also a right to data portability in the cases set out in Art. 20 (1) GDPR.

Right to erasure ("right to be forgotten")

Moreover, in the cases set out in Art. 17 (1) (a) to (f) GDPR, you have the right to erasure of personal data provided none of the exceptions under Art. 17 (3) GDPR applies, as well as a right to restriction of processing in the cases set out in Art. 18 (1) GDPR.

Right to data portability

There is also a right to data portability in the cases set out in Art. 20 (1) GDPR.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) (e) or (f) GDPR.

Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. Revoking consent does not affect the lawfulness of such processing carried out on the basis of the consent prior to the revocation.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78.

Changes to the policy

This Data Protection Policy may in future be modified according to changing circumstances, in particular in line with amendments to legal requirements, the practice of public authorities or case law.

Version: May 2019