In the document below, we will provide you with detailed information on how we handle the processing of your personal data pursuant to Article 13 of the General Data Protection Regulation (GDPR). If you have any questions or comments regarding this data protection information, please contact our data controller:
In der Wanne 55
89075 Ulm, Germany
Tel.: +49 731-40 700 601
Fax: +49 731-378 12 30
The processing of your personal data is divided into two categories:
1. We process all data necessary for the purposes of contract execution and advertising, such as sending out newsletters and promotional mail. External service providers involved in the execution of the contract, such as logistics companies and payment service providers, will be provided with your data to the extent necessary in order to perform their respective services.
2. When you access our website, a variety of information is automatically shared between your device and our server. This may include personal data. We use this information for purposes such as optimising our website and displaying advertising on your device’s browser.
In this section, you can learn more about the purposes for which we process your personal data, the legal basis for this processing, the legitimate interests pursued by us and third parties, and the categories of recipients.
Collecting and using data for contract execution and when opening a customer account.
If you voluntarily provide us with personal data as part of your order, when contacting us as a customer (e.g. using our contact form or by email) or when opening a customer account, we will process this data for the purposes of executing contracts and opening a customer account. The data collected is shown in each input form. This primarily includes the following data:
- First name, Last name
- Billing and delivery address
- Email address
- Billing and payment details
- Telephone number, where necessary
- Date of birth, where necessary
The legal basis for our processing of your personal data for contract execution purposes is provided by Article 6, Paragraph 1(b) of the GDPR.In order to enable us to use your email address, we will send you a confirmation email on the basis of Article 6, Paragraph 1(c) of the GDPR.Providing we do not use your contact details for advertising purposes, we are permitted to store the data collected for the execution of the contract until such time as the statutory or any contractual warranty or guarantee rights expire. Upon the expiry of this period, we shall retain the contractual information required under commercial and tax law for the periods stipulated by law. During this period (usually ten (10) years following the conclusion of the contract), said data will only be reprocessed in the event of an audit by the financial authorities.
All customer accounts are created on a voluntary basis and subject to your consent pursuant to Article 6, Paragraph 1(a) of the GDPR.You may view and amend the data that we have stored on you in your customer account at any time.
The following additional data processing is required in order to execute the purchase contract:
Disclosure of data for contract fulfilment, determining identity and creditworthiness
If necessary in order to fulfil the contract and deliver the goods you have ordered, we will send your email address and, where applicable, your telephone number to the logistics company that we have contracted for this work.In order to process payments, we will provide the payment details necessary for this process to the bank instructed for the payment and, where applicable, payment service providers we have contracted and/or any payment service that you have selected during the order process.Where necessary, we will verify your identity on the legal basis of Article 6, Paragraph 1(b) and (f) of the GDPR by obtaining additional information from service providers.We are entitled to do this in order to protect your identity and avoid attempted fraud at our expense. The circumstances and results of our request shall be added to your customer account or guest account and stored there for the duration of the contractual relationship.
Credit check and scoring
Where we provide goods and services in advance, e.g. in the event of purchases made on account, we reserve the right to safeguard our legitimate interests by obtaining information regarding your identity and creditworthiness from service providers who specialise in such services (credit agencies). For this purpose, we will send the personal data relating to you that is necessary for a credit check to the following company or companies:
Creditreform Boniversum GmbH
41460 Neuss, Germany
Creditsafe Deutschland GmbH
Schreiberhauer Straße 30
10317 Berlin, Germany
The information on your creditworthiness may contain probability (score) values, which are calculated on the basis of scientifically accepted statistical mathematical methods. The data used in the calculation process for these scores includes address data.We use the information obtained on the statistical likelihood of a failure to pay to make a carefully weighed decision as to the justification, execution or termination of the contractual relationship.Your legitimate interests are taken into account in accordance with the statutory provisions.
The legal basis for the transmission of this information is provided by Article 6, Paragraph 1(b) and Article 6, Paragraph 1(f) of the GDPR.Information may only be transmitted on the basis of these provisions if and insofar as this is necessary in order to protect the legitimate interests of our company or third parties, and where said legitimate interests are not outweighed by the interests or fundamental rights and freedoms of the data subjects who require the protection of their personal data.
Data processing for advertising purposes
Pursuant to Article 6, Paragraph 1(f) of the GDPR, the processing of data for advertising purposes constitutes a legitimate interest on the part of the controller.The duration for which personal data is stored for advertising purposes is determined based on the principle of whether said storage is necessary for promotional contact. We follow the principle of erasing data no more than two (2) years after it has ceased to be necessary for advertising purposes.
Internal advertising purposes and third-party advertising purposes
If and insofar as you have concluded a contract with us or have asked us to send you promotional material, we shall treat you as an existing or potential customer. In such cases, we shall process your postal contact details in order to provide you with information on new products and services using this method of communication. Within the scope of our legitimate interests, we reserve the right to send your postal contact details to contractual partners that we have carefully selected in the shipping and telecommunications sectors and to providers of similar products so that they can also provide you with information about their products.
To ensure that you only receive advertising information that can be assumed to be in your interest, we categorise your customer profile and supplement it with additional information. In order to do this, we use both statistical and personal information (e.g. the basic data on your customer profile). The aim of this is to provide you with advertising material that is solely based on your actual or assumed interests, and ensure that you are not inconvenienced by advertising that is not useful to you.
Right to object
You have the right to object to your data being processed for the purposes mentioned above at any time free of charge, and may do so for specific methods of communication with future effect. An email or letter sent by post to the contact details specified under Section 2 shall be deemed sufficient for this purpose.
If and insofar as you lodge an objection, the contact address in question shall be blocked for any further processing for advertising purposes.We would like to point out that, in exceptional cases, you may still receive advertising material on a temporary basis even after your objection has been received.This is due to technical reasons involving the lead time necessary for advertising material, and does not mean that we are not complying with your objection.
Use of data when subscribing to the email newsletter
If you subscribe to our newsletter using the double opt-in procedure, we will use the data necessary for this purpose or the data that you provide separately to regularly send you our email newsletter. We will send you a confirmation link for the double opt-in procedure once you have entered your email address in the subscription field. If you click on the confirmation link, your email will be included in our email distribution list.Your email address will be processed subject to your consent pursuant to Article 6, Paragraph 1(a) of the GDPR. Your data will first be processed by DENIOS Direct GmbH, who act as a data processor for us, for the purpose of sending you the newsletter, then made available to Mobil-Mark GmbH for internal analysis purposes.You may revoke your consent at any time with future effect.You may unsubscribe from the newsletter at any time, either by sending a message to the contact details specified in the legal notice or by clicking on the link provided for this purpose at the end of each newsletter. Mobil-Mark GmbH will evaluate the information that you have unsubscribed from the newsletter for internal analysis purposes. The performance of these analyses also constitutes a legitimate interest on our part. As such, the legal basis for this processing is provided by Article 6, Paragraph 1(f) of the GDPR. The data in question will be deleted after six (6) months.
Use of data for email advertising without a newsletter subscription and your right to object
If we receive your email address in connection with the sale of a product or service and you have not objected to the use of your email address, we reserve the right, within the scope of our legitimate interests, to regularly send you offers via email regarding products from our range that are similar to those you have already purchased. In such cases, your email address shall be processed pursuant to Article 6, Paragraph 1(f) of the GDPR. You may object to the use of your email for this purpose at any time, either by sending a message to the contact details specified in the legal notice or by clicking on the link provided for this purpose at the end of the newsletter.
Reminder from Trusted Shops to leave ratings
With your express consent, which you may grant to us during or after the placement of your order by ticking the corresponding box or clicking on the button provided for this purpose (Rate Later), we will send your email address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (www.trustedshops.co.uk) so they are able to send you a reminder to leave a review for your order. You may revoke this consent at any time by sending an email to the contact details specified below or by contacting Trusted Shops directly.
In order to design our website appropriately and to continually optimise our website, we use Google Analytics, a web analysis service provided by Google, Inc. (hereinafter “Google”), on the basis of Article 6, Paragraph 1(f) of the GDPR.In this context, pseudonymised usage profiles are compiled and cookies are used.The information generated by cookies regarding your use of this website is transferred to a Google server in the US and stored there. This information includes, but is not limited to:
- Your browser type/version
- The operating system that you are using
- Your referrer URL (the page that you visited prior to visiting our website)
- The host name of the computer that you are using to access our website (IP address)
- The time of your server request
This information is used to evaluate your use of this website, to compile reports on website activity, and to perform further services linked to website and internet use for market research purposes and to tailor the design of this website.This information may also be transferred to third parties if legally required, or if third parties process this data on behalf of Google.Under no circumstances will your IP address be associated with any other data by Google.IP addresses are anonymised so that it is not possible to link them to individuals (a process known as IP masking).
You may refuse to allow cookies to be installed by selecting the appropriate settings on your browser; however, we would like to point out that this may limit your access to some of the features of this website.You can also prevent the data generated by the cookie regarding your use of the website (including your IP address) from being sent to and processed by Google by downloading and installing this browser add-on.Alternatively, in particular if you are using a browser on a mobile device, you may also prevent Google Analytics from collecting data by clicking on this link. This stores an opt-out cookie on your device that prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser, and only for our website. If you delete the cookies stored for this browser, you will need to reset the opt-out cookie. Additional information on data protection with respect to Google Analytics is available on the Google Analytics website.
Analysis by wiredminds
Our website uses the tracking pixel technology of WiredMinds GmbH (www.wiredminds.de) to analyse visitor behaviour. This processes a visitor’s IP address. The processing is carried out solely for the purpose of collecting information relevant to the company, such as the name of the visitor’s business. IP addresses of natural persons are excluded from further use (whitelist procedure). Your IP address will never be stored in LeadLab. When processing data, it is in our particular interest to safeguard the data protection rights of natural persons.Our interest is based on Article 6, Paragraph 1(f) of the GDPR.The data we collect does not allow any inference to be drawn regarding any identifiable person at any time.WiredMinds GmbH uses this information to create anonymous user profiles based on visitor behaviour on our website. The data obtained through these means will not be used to personally identify visitors to our website.
Exclude from tracking (Clicking on this link will place a cookie on your device for technical reasons in order to permanently exclude you from tracking by WiredMinds LeadLab on this website)
Use of econda for web analytics
On this website, data is automatically collected and stored for web analytics purposes using technology provided by econda GmbH. This data is pseudonymised and used to create user profiles. This safeguards our overriding legitimate interests in optimising how we present our products and services. Cookies may be used for this purpose. Pseudonymised user profiles shall not be linked to personal data relating to the bearer of the pseudonym unless said person expressly and separately consents to such action. You may revoke your consent to your data being collected and stored at any time with future effect by clicking on this link.
Once you object, an opt-out cookie will be placed on your device.If you delete your cookies, you will need to click on this link again.
The targeting measures that we use, which are listed below, are implemented on the basis of Article 6, Paragraph 1(f) of the GDPR. We use these targeting measures to ensure that you are only shown advertising on your devices that relates to your actual or assumed interests. It is in both your interests and our own to ensure that you are not inconvenienced by advertising that does not interest you.
We also use re-targeting technology provided by Google AdWords.This enables us to tailor the design of our website so that it is more interesting to you.In order for us to do this, a cookie is stored to collect data on your interests using pseudonyms. This information is used to show you advertisements for our products and services that relate to your interests on our partners’ websites. No direct personal data is stored during this process, and no usage profiles are linked to your personal data. The cookie is stored for a period of 30 days, after which it is automatically deleted.
Option to object/opt out
In addition to the deactivation methods described above, you can generally disable the targeting technologies explained here by adjusting the cookie settings in your browser.You can also deactivate preference-based advertising using the preference manager available here.
Social media plugins
We use social plugins of the social media networks Facebook, Google+, XING, YouTube and Twitter on our website in order to raise the profile of our company on the basis of Article 6, Paragraph 1(f) of the GDPR. The promotional purpose behind this is deemed to be a legitimate interest as defined by the GDPR. The respective provider of each network is responsible for guaranteeing that it operates in compliance with data protection legislation. We utilise these plugins on the basis of what is known as the “two-click method” in order to protect visitors to our website as far as possible.
Our website uses plugins from the social network Facebook, which is operated by Facebook, Inc. The Facebook plugin is identifiable by the Facebook logo or the phrase “Like” or “Share”.For an overview of Facebook plugins and what they look like, please click on the following link.When you activate this kind of plugin (first click), your browser establishes a direct connection to the Facebook servers. Facebook transfers the content of the plugin directly to your browser, which then embeds it into the website. Through this integrated plugin, Facebook will be notified that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged into Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the US and stored there.If you are logged into Facebook, Facebook will be able to link your visit to our website directly to your Facebook profile.If you interact with the plugins, e.g. by pressing the “Like” button, this information will also be transmitted directly to a Facebook server and stored there.This information will also be published on your Facebook profile and displayed to your Facebook friends.
Please see Facebook’s privacy policies for the purpose and scope of this data collection and the further processing and use of your data by Facebook, as well as your rights and settings options for protecting your privacy. If you do not want Facebook to link any information collected from your visit to our website with your Facebook profile, you should log out of Facebook before you visit our website.
Plugins from the Twitter, Inc. network are also integrated into our website. These Twitter plugins (“Tweet” button) are recognisable by the Twitter logo (a white bird on a blue background) and the phrase “Tweet”. When you visit a page of our website that contains this kind of social plugin, a direct connection is established between your browser and the Twitter servers. Through this connection, Twitter receives the information that you have visited our site from your IP address. If you click on the “Tweet” button while you are logged into your Twitter account, you can link the content of our pages to your Twitter profile.This will allow Twitter to link your visit to our site to your user account. Please note that, as the operator of this site, we have no knowledge regarding the content of the data transmitted to Twitter, or how Twitter uses this data.More information is available here.If you do not want Twitter to be able to link your visit to our pages to your Twitter account, please log out of your Twitter account.
YouTube video plugins
Content from third-party providers is incorporated into our website. This content is provided by Google, Inc. (hereinafter the “Provider”).
YouTube is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).
Extended data protection settings are activated with regard to YouTube videos incorporated into our website. This means that YouTube does not collect or store information from visitors to our website unless said visitors play the video in question. For information on the purpose and scope of this data collection and the further processing and use of your data by the Provider, as well as your rights and settings options for protecting your privacy, please see
Recipients outside the EU
With the exception of the processing stipulated in the sections on internet technology and social media plugins, we do not disclose your data to recipients whose registered offices are located outside of the European Union or the European Economic Area.The processing set out above involves data being transferred to servers run by the providers of tracking and targeting technology whom we have commissioned to work for us.These servers are located in the USA. The data is transferred in accordance with the EU Commission’s standard contractual clauses.
In addition to your right to revoke any consent that you have granted us, you are entitled to the following rights, where the respective legal conditions apply:
- Right to information and access to the personal data that we have stored on you pursuant to Article 15 of the GDPR; in particular, you are entitled to access information concerning the purpose of the processing, categories of personal data, categories of recipients to whom personal data has been disclosed or is to be disclosed, the planned storage period, and the origin of your data in cases where said data was not collected from you directly;
- Right to rectification of incorrect or incomplete data pursuant to Article 16 of the GDPR;
- Right to erasure of the data that we have stored on you pursuant to Article 17 of the GDPR, except in circumstances where we are required to comply with any statutory or contractual retention periods or other statutory requirements or rights regarding further storage;
- Right to restriction of the processing of your data pursuant to Article 18 of the GDPR in circumstances where the accuracy of the data is contested by you, its processing is unlawful but you object to its erasure, the controller no longer needs the data but you need it in order to establish, exercise or defend legal claims, or you have lodged an objection against this data being processed pursuant to Article 21 of the GDPR;
- Right to data portability pursuant to Article 20 of the GDPR, i.e. the right to receive the data that we have stored on you in a commonly used, machine-readable format or to request that this data be sent to another controller;
- Right to lodge a complaint with a supervisory authority;you can usually contact the supervisory authority for your usual place of work or residence for this purpose, or the supervisory authority for the location of our company headquarters.
Right to object
Under the provisions of Article 21, Paragraph 1 of the GDPR, objections may be asserted against data processing for reasons based on the data subject’s particular situation.
The above general right to object shall apply to any and all processing purposes stipulated in this information on data protection where processing is undertaken on the basis of Article 6, Paragraph 1(f) of the GDPR.Unlike the specific right to object to data being processed for advertising purposes, under the GDPR we are only required to comply with a general objection if you specify the reasons behind said objection and these reasons demonstrate an overriding interest (e.g. potential risk to life or health). Furthermore, you have the option to contact the competent supervisory authority responsible for us, or to contact our data protection officer.
Any and all data sent by you personally, including your payment details, shall be transmitted using the secure SSL (secure socket layer) standard that is commonly used.SSL is a secure, proven standard that is used in applications such as online banking. You can recognise a secure SSL connection by the s attached to the end of the letters “http” in your browser’s address bar (i.e. https://…), or by the lock symbol at the bottom of your browser display.
In addition to this, we use appropriate technical and organisational security measures to protect the personal data that we have stored on you from manipulation, partial or total loss, and unauthorised access by third parties. We are always working to improve our security measures in line with technological developments.