Privacy Policy

The following information explains how Dekoli GmbH, as the operator of the online shop www.werbecenter-onlineshop.de, processes personal data and what rights you have under applicable data protection legislation.

1. Controller responsible for data processing

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection legislation is:

Dekoli GmbH
Sophie-Charlotten-Str. 92
14059 Berlin
Germany

Operator of the online shop: www.werbecenter-onlineshop.de

Telephone: +49 30 34 50 679-0
E-mail: info@werbecenter-berlin.de

2. What is personal data?

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, address, e-mail address, telephone number, payment details, order details and technical data generated when you use our website, such as your IP address, browser type, operating system, time of access or device information.

3. Purposes and legal bases of data processing

We process personal data in particular for the following purposes:

to process enquiries and communicate with you,
to create and manage customer accounts,
to process and fulfil orders and contracts,
to issue and process invoices and payments,
to produce and deliver ordered goods,
to process print data and other files supplied by customers,
to comply with statutory retention and record-keeping obligations,
to ensure the proper and secure operation of our website,
to establish, exercise or defend legal claims, and
for analysis, statistical and marketing purposes where you have given your consent.

Processing is carried out in particular on the basis of:

Article 6(1)(a) GDPR – consent,
Article 6(1)(b) GDPR – performance of a contract and pre-contractual measures,
Article 6(1)(c) GDPR – compliance with legal obligations, and
Article 6(1)(f) GDPR – legitimate interests.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal of consent remains unaffected.

4. Server log files and use of our website

Each time you visit our website, technical information may be collected automatically by the web server or hosting provider. This may include, in particular, your IP address, date and time of access, the page or file accessed, the amount of data transferred, referrer URL, browser type, browser version and operating system used.

This data is processed to ensure the secure and reliable operation of the website, to provide our content technically and to detect and prevent misuse and attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically reliable operation of our online shop.

5. Cookies and consent management

Our website uses cookies and comparable technologies. Cookies are small text files or pieces of information that may be stored on or read from your device.

Strictly necessary cookies and comparable technologies may be used where they are required to provide a digital service expressly requested by you or to transmit a communication.

For cookies and comparable technologies that are not technically necessary, in particular for analytics, statistics or marketing purposes, we obtain your consent before they are used via our consent management system or cookie banner.

The storage of information on your device or access to information already stored on your device is governed in particular by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Any subsequent processing of personal data is carried out on the basis of the relevant legal provisions of the GDPR.

You can change or withdraw your consent at any time with effect for the future via the cookie or privacy settings provided on our website.

6. Contacting us

If you contact us via a contact form, by e-mail, telephone or by other means, we process the information you provide in order to handle your enquiry.

Where your enquiry relates to an existing or potential contractual relationship, processing is carried out on the basis of Article 6(1)(b) GDPR. In other cases, processing may be based on our legitimate interest in handling enquiries pursuant to Article 6(1)(f) GDPR.

7. Customer accounts and registration

If you create a customer account in our online shop, we process the data you provide to set up and manage the account and to facilitate future orders.

This may include, in particular, your name, company, address, e-mail address, telephone number, login details and order information.

The legal basis is Article 6(1)(b) GDPR.

You may request that your customer account be amended or deleted, provided that no statutory retention obligations or other legitimate grounds prevent its deletion.

8. Order and contract processing

We process the personal data required to process and fulfil your order. This may include, in particular, your name, company name, billing and delivery address, e-mail address, telephone number, order information, payment information and print data supplied by you.

Processing is carried out on the basis of Article 6(1)(b) GDPR.

Where necessary for the performance of the contract, we may disclose personal data to service providers used by us, such as production service providers, suppliers, shipping and logistics companies and payment service providers.

9. Shipping and delivery

For the purpose of delivering your order, we transmit the data required for delivery, in particular your name and delivery address and, where necessary, other contact details required for delivery, to the shipping or transport company commissioned with the delivery.

The legal basis is Article 6(1)(b) GDPR.

10. Payment processing

For the purpose of processing payments, we transmit the data required for the relevant transaction to banks, financial institutions and payment service providers where this is necessary to process your chosen method of payment.

The legal basis is generally Article 6(1)(b) GDPR.

11. PayPal

If you select a payment method offered via PayPal, the data required for payment processing will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

This may include, in particular, your name, address, e-mail address, invoice amount, payment information and information relating to your order.

The data is transmitted for the purpose of processing the payment method selected by you on the basis of Article 6(1)(b) GDPR. PayPal may process further data under its own data protection responsibility, for example for fraud prevention, credit checks or compliance with legal obligations.

Further information is available in PayPal's privacy information.

12. Klarna / Sofort

Where payment methods provided by Klarna or Sofort are offered in our online shop and selected by you, the data required for payment processing will be transmitted to Klarna.

The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

The data transmitted may include, in particular, your name, address, e-mail address, invoice amount and information relating to your order.

The legal basis is Article 6(1)(b) GDPR. Klarna may additionally process personal data under its own data protection responsibility, including for identity verification, fraud prevention or credit checks.

13. Credit checks

Where we provide goods or services in advance, for example where payment by invoice is permitted, we may carry out a credit check to the extent permitted by law.

For this purpose, personal data required for the credit check may be transmitted to a credit reference agency used by us. According to the current Privacy Policy, Creditreform may be used for this purpose.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in reducing the risk of payment defaults and assessing financial risks where we provide goods or services in advance.

14. Review reminders via eKomi

Where you have expressly consented, we may transmit your e-mail address to eKomi following an order so that you can be sent a reminder to review your order.

Processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future.

15. Graphic design and print services

If you order additional graphic design or artwork services, in particular the creation or editing of print artwork, the data and files required to perform the service may be disclosed to a graphic design service provider used by us.

According to the current Privacy Policy, the following service provider may be used for this purpose:

krähativ werbung
Pankstr. 8-10, Aufgang G
1. Etage links
13127 Berlin
Germany

Processing and transmission are carried out on the basis of Article 6(1)(b) GDPR insofar as this is necessary to perform the contracted service.

16. Google Analytics

Where you have given your consent via our consent management system, we use Google Analytics for statistical analysis and optimisation of our online services.

For users within the European Economic Area, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics may process information relating to the use of our website, device and browser information, usage events and technical identifiers.

Google Analytics is used only with your consent. The legal basis for processing personal data is Article 6(1)(a) GDPR. Where information is stored on or read from your device, this is carried out on the basis of your consent pursuant to Section 25(1) TDDDG.

You may withdraw your consent at any time with effect for the future via our cookie or privacy settings.

When Google services are used, it cannot be ruled out that personal data may also be processed in third countries, in particular the United States. For transfers of data to the United States, where the relevant requirements are met, the European Commission's adequacy decision concerning the EU-U.S. Data Privacy Framework or other appropriate safeguards under the GDPR may apply.

17. YouTube

Where YouTube videos are embedded on our website, we use services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube content is only loaded or activated where this is necessary according to the specific technical implementation and is permitted under applicable data protection law. Where consent is required, processing will only take place after you have given your consent.

The legal basis in such cases is Article 6(1)(a) GDPR and, where information is stored on or read from your device, Section 25(1) TDDDG.

When YouTube is used, data may be transferred to Google companies or servers outside the European Economic Area, in particular in the United States.

18. Google Maps

Where we use Google Maps on our website, this is for the purpose of displaying geographical information and locations.

For users within the European Economic Area, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Where Google Maps is not technically necessary, it will only be activated after you have given your consent. The legal basis is Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

You may withdraw your consent at any time with effect for the future via our cookie or privacy settings.

19. Recipients and processors

Personal data is only disclosed to third parties where this is necessary for the relevant processing purposes, where we are legally obliged to do so, where you have given your consent or where another legal basis permits the disclosure.

Recipients may include, in particular:

IT, hosting and technical service providers,
payment service providers and financial institutions,
shipping and logistics companies,
production and graphic design service providers,
suppliers and other service providers involved in fulfilling orders,
credit reference agencies where a credit check is legally permissible,
tax advisers, solicitors and other professional advisers, and
public authorities and other public bodies where disclosure is required by law.

20. Transfers of data to third countries

When certain service providers are used, personal data may be processed outside the European Union or the European Economic Area.

Such transfers will only take place where the requirements of Articles 44 et seq. GDPR are met. This may include, in particular, an adequacy decision by the European Commission, appropriate safeguards such as the European Commission's Standard Contractual Clauses, or another legal basis provided for under applicable data protection law.

21. Retention period

We generally retain personal data only for as long as it is required for the relevant processing purpose.

Where personal data is required for the performance of a contract, it will generally be retained for the duration of the contractual relationship. Data may subsequently be retained where statutory retention and record-keeping obligations, limitation periods or legitimate interests in establishing, exercising or defending legal claims require further storage.

Once the relevant purpose for storage no longer applies and statutory retention periods have expired, the data will be deleted or anonymised unless another legal basis permits continued processing.

22. Your rights

Subject to the applicable statutory requirements, you have in particular the following rights:

Right of access under Article 15 GDPR: You may request information about the personal data we process about you.
Right to rectification under Article 16 GDPR: You may request the correction of inaccurate data or completion of incomplete data.
Right to erasure under Article 17 GDPR: You may request the deletion of your personal data where the statutory requirements are met.
Right to restriction of processing under Article 18 GDPR: You may request that the processing of your personal data be restricted where the statutory requirements are met.
Right to data portability under Article 20 GDPR: Where the statutory requirements are met, you may receive the data you have provided to us in a structured, commonly used and machine-readable format or request its transmission to another controller.
Right to object under Article 21 GDPR: You may object to the processing of your personal data where the statutory requirements are met.
Withdrawal of consent: You may withdraw consent you have given at any time with effect for the future.
Right to lodge a complaint under Article 77 GDPR: You have the right to lodge a complaint with a data protection supervisory authority.

23. Right to object

Where personal data is processed on the basis of Article 6(1)(f) GDPR for the purposes of legitimate interests, you have the right under Article 21 GDPR to object at any time to such processing on grounds relating to your particular situation.

We will then cease processing the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is required for the establishment, exercise or defence of legal claims.

24. Data protection contact

If you have any questions regarding data protection or wish to exercise your data protection rights, you can contact us at:

Dekoli GmbH – Data Protection
Sophie-Charlotten-Str. 92
14059 Berlin
Germany

E-mail: datenschutz@werbecenter-berlin.de

25. Competent data protection supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority.

For a company established in Berlin, the following supervisory authority is particularly relevant:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin
Germany

Telephone: +49 30 13889-0
E-mail: mailbox@datenschutz-berlin.de