Privacy Notice
Data privacy statement
1. Information about the elicitation of individual-related data and contact data of the person in charge2. Data capture while visiting our website
3. Cookies
4. Contacting
5. Computing by opening of a customer's account and processing of contracts
6. Usage of your data for direct advertising
7. Computing for the order handling
8. Contacting for the evaluation reminder
9. Usage of social media: Social Plugins
10. Rights of all the concerned persons
11. Duration of the storage of individual-related data
1. . Information about the elicitation of individual-related data and contact data of the person in charge
1.1 We are pleased for visiting our website and we are grateful for your interest. Furthermore, we inform you about the handling with your individual-related data during the exploitation of our website. Individual-related data are all kind of data with which you can be indentified.
1.2 Person in charge for the computing on this website is in the interest of the General Data Protection Regulation (GDPR) is Willi Weber, Sternstr. 57a, 53111 Bonn, Germany, phone: 0228-9650317, E-Mail: info@bonner-cigarrenhaus.de. The person in charge for the computing of of individual-related data is the one of course or the juristic person, who decides alone or with others about the purpose and funds of the computing of individual-related data.
1.3 This website uses for safety reason and for the protection of the transmission of individual-related data and other private contents (e.g. orders and enquiries to the person in charge) a SSL or TSL-encryption. You can recognise an encrypted connection in the character sequence "http://" and in the lock-symbol in the browser's address line.
2. Data capture while visiting our website
During an informational purpose only. if you do not register yourself or you do not transfer any other information, we just gather data which your browser transfers to our server (so-called "Server-Logfiles"). If you call up our website, we gather data, which are technical necessary for us to indicate our website to you:
- Our visited websites
- Date and time of the hit
- Amount of the transferred data in byte
- Source/link form which you connected to our website
- Used browser
- Used operating system
- Used IP-address (as the circumstances requier in anonymous form)
The computing follows in line with art. 6 par. 1 lit. f GDPR based on our justified interest in the improvement of the stability and functionality of our website. A transfer or a further usage of the data does not happen. We reserve the right to review the Server-Logfiles afterwards, if any tangible clues allude an illegal usage.
3. Cookies
In order to arrange the visit of our website attractive and to afford the usage of specific functions, we use on several websites so-called "Cookies". These are tiny text files which are placed in your terminal device. Some of the used Cookies will be deleted after the usage of the browser session, so after closing the browser. These Cookies are called "Session Cookies". Other Cookies stay on your terminal device and allow us or our partner company (Cookies from third-party suppliers) to recognise your browser at your next visit again (persistant Cookies). If Cookies are placed, they gather and process the Cookies in an individual extent certain user information like browser and location data plus IP-address data. Persistant Cookies are autopurged after a perdefined duration which can differentiate depending on the kind of the Cookies.
Partially, the Cookies conduce to simplify the order process with storage of settings (e.g. memorise the content of a virtual shopping cart for a later visit of our website). If individual-related data are computed due to Cookies implemented by us, the computing will be implemented after art. 6 par. 1 lit. b GDPR either for conducting contracts or after art. 6 par. 1 lit. f GDPR for the perception our eligible interests for best possible functionality of our website as well as a customer friendly and effective arrangement site visit.
Possibly, we cooperate with advertisment partners who help us to arrange our online offer more interesting to you. For this purpose, Cookies from third-party suppliers will be saved on your hard disk during your visit on our website. Every browser differ in the method how the Cookie-settings are administrated. These are described in the help menu which explain to you how you can change the Cookie-settings. These can be found in the particular browser as follows:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Please consider the functionality of our website can be restricted if you don not accept the Cookies.
4. Contacting
In the context of contacting with us (e.g. via contact form or e-mail) individual-related data will be gathered. Which data are gathered in the context of a contact form, is evident in the particular contact form. These data are exclusively saved and used for answering your request or for contacting, also for the associated technical administration. The statutory source for computing of the data is our eligible interest to answer your request after art. 6 par. 1 lit. f GDPR. If your contacting is done with the purpose to process a contract, the statutory source for computing is art. 6 par. 1 lit. b GDPR. Your data will be deleted after processing your request. This happens if the circumstances allow that the concerned issue is terminally closed if no lawful storage obligation is required.
5. Computing by opening of a customer's account and processing of contracts
After art. 6 par. 1 lit. f GDPR individual-related data still are gathered and computed if you inform us your data for opening of a customer's account or for processing a contract. Which data are gathered can be found in the particular exhibit form. A deletion of your customer’s account is possible any time and can be carried out through a message to the address of the person in charge which is mentioned above. We save and use your informed data for processing contracts. After a terminal contracting process or the deletion of your customer’s account your data will be suspended considering the fiscal storage period and the terms of commercial law. And the data will be deleted after the expiration of this period if you have not explicitly agreed to a further usage of your data or a legal further usage is reserved by our website. You will be informed about that in particular below.
6. Usage of your data for direct advertising
Registration for our newsletter
If you check in our e-mail newsletter, we regularly send you information about our offers. A compulsory statement for the newsletter is your e-mail address. Further statements of data are voluntary and they are used to personally contact you. For shipping of the newsletter we use the so-called Double Opt-in method. This means the newsletter will be send only if you explicitly confirm the newsletter’s shipping. If so, we will send you a confirmation e-mail which you have to confirm then with a particular link that you wish to receive the newsletter in future.
With the activation of the confirmation-link, you allow us the use of you individual-related data after art. 6 par. 1 lit. a GDPR. By the registration for our newsletter, we save your IP-address which is endorsed by your internet service provide (ISP) as well as the date and the time of the registration to reconstruct a possible misuse of your e-mail address later. The gathered data at the time of registration are solely used for advertising oration through the newsletter. You can unsubscribe the newsletter any time through the link in the newsletter or with a message to the person in charge which is mentioned a the beginning. After a successful logout, you e-mail address will immediately be deleted from our newsletter distributor as long as you did not explicitly agreed a further usage of your data or if we reserve a further data usage for ourselves which is legally allowed and about which you will be informed too.
7. Computing for the order handling
7.1 For handling your orders we cooperate with the contractor as follows which fully or partially support us in implementation of closed contracts. Certain individual-related data will be send to the contractors according to following information.
The gathered individual-related data will be passed to the haulage contractor which is assigned with the delivery in context of processing of contracts which is required for the article’s delivery. For your payment data will be passed to the assigned credit institution in context of the payment handling if this is required for the payment handling. If payment service providers are deployed, you will explicitly be informed. The legal basis for the data’s transfer is art. 6 par. 1 lit. b GDPR.
-SOFORT-
At the selection of the payment method “sofort” the payment handling happens through the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (as follows “SOFORT”) to which we pass on your imparted information in context of the order handling and the information about your order after art. 6 par. 1 lit. b GDPR. The Sofort GmbH is a part of the Klarna Group (Klarna Bank AB 8publ), Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data happens solely for the purpose of the payment handling with the payment service provider SOFORT and solely if this is required. You have access about the data privacy statement of SOFORT via the following internet address: https://www.klarna.com/sofort/datenschutz
8. Contacting for the evaluation reminder
Evaluation reminder with ausgezeichnet.org
If you explicitly granted your consent during or after your order after art. 6 par 1 lit. a GDPR, we pass on your e-mail address to the evaluation platform ausgezeichnet.org by AUBII GmbH, Alsterufer 34, 20354 Hamburg (www.ausgezeichnet.org) so they can send a evaluation reminder via e-mail to you. You can unsubscribe your consent any time via a message to the person in charge for the computing or towards the platform.
9. Usage of social media: Social Plugins
9.1 Facebook-Plugins with Shariff-solution
So-called Social-Plugins (“Plugins”) of the social network Facebook are used on our website which is operated by Facebook Inc., Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).
To increase your data’s protection on our website, these buttons are not unfettered bound as Plugins but just under utilisation of HTML-links in the website. With this kind of inclusion, it is granted that no connection is build up with the servers of Facebook if our website which contains such buttons is called up. If you click on the buttons, a new browser window is opened and calls up the Facebook website (possibly after input of your login-data) on which you can interact with the Plugins.
Facebook Inc. located in the USA is certified for the European privacy agreement “Privacy Shield” which grants the observance of the data privacy statement which is valid in the EU.
Purpose and extent of the data gathering and the computing and usage of the data through Facebook as well as your hereof rights and settings possibilities for your privacy’s protection can be looked at the data privacy statement of Facebook:
http://www.facebook.com/policy.php
9.2 Google+ -Plugins as Sharifff-solution
So-called Social-Plugins (“Plugins”) of the social network Google+ are used on our website which is operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
To increase your data’s protection on our website, these buttons are not unfettered bound as Plugins but just under utilisation of HTML-links in the website. With this kind of inclusion, it is granted that no connection is build up with the servers of Google+ if our website which contains such buttons is called up. If you click on the buttons, a new browser window is opened and calls up the Google+ website (possibly after input of your login-data) on which you can interact with the Plugins.
Google+ located in the USA is certified for the European privacy agreement “Privacy Shield” which grants the observance of the data privacy statement which is valid in the EU. Purpose and extent of the data gathering and the computing and usage of the data through Google as well as your hereof rights and settings possibilities for your privacy’s protection can be looked at the data privacy statement of Google:
https://www.google.com/intl/de/policies/privacy/
9.3 Pinterest-Plugins as Shariff-solution
So-called Social-Plugins (“Plugins”) of the social network Pinterest are used on the salesman’s website which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA (“Pinterest”).
To increase your data’s protection on our website, these buttons are not unfettered bound as Plugins but just under utilisation of HTML-links in the website. With this kind of inclusion, it is granted that no connection is build up with the servers of Pinterest if our website which contains such buttons is called up. If you click on the buttons, a new browser window is opened and calls up the Pinterest website (possibly after input of your login-data) on which you can interact with the Plugins.
Purpose and extent of the data gathering and the computing and usage of the data through Pinterest as well as your hereof rights and settings possibilities for your privacy’s protection can be looked at the data privacy statement of Pinterest:
https://about.pinterst.com/de/privacy-policy
9.4 Twitter-Plugin as Shariff-solution
So-called Social-Plugins (“Plugins”) of the micro blogging-service Twitter are used on our website which is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103 USA (“Twitter”).
To increase your data’s protection on our website, these buttons are not unfettered bound as Plugins but just under utilisation of HTML-links in the website. With this kind of inclusion, it is granted that no connection is build up with the servers of Twitter if our website which contains such buttons is called up. If you click on the buttons, a new browser window is opened and calls up the Twitter website (possibly after input of your login-data) on which you can interact with the Plugins.
Google+ located in the USA is certified for the European privacy agreement “Privacy Shield” which grants the observance of the data privacy statement which is valid in the EU. Purpose and extent of the data gathering and the computing and usage of the data through Twitter as well as your hereof rights and settings possibilities for your privacy’s protection can be looked at the data privacy statement of Twitter:
https;//twitter.com/privacy
10. Rights of all the concerned persons
10.1 The valid data privacy statement grants you over the person in charge regarding the computing of your individual-related data comprising person concerned rights (access right and right of intervention) about which you will be informed as follows:
- access right after art. 15 GDPR: Especially you have rights about information about your by us computed individual-related data, the receiver or categories of receivers, towards your data has been bared or will be bared, the planned storage period or the criteria for the definition for the determination for the storage period, the insistence of the right for amendment, deletion, restriction of the processing, contradiction against the processing, complaint to a controlling authority, origin of your data if these are not gathered by us from you, the insistence of an automatized decision making, including the profiling and possibly meaningful information about the involved logic and the consequences which affect you and the intended consequences of such a computing as well as your right for notifications which guarantees the transfer of your data to third countries after art. 46 GDPR;
- right to amendment after art. 16 GDPR: You have the right for amendment of you concerning wrong data and/or completion of your saved incomplete data;
- right to deletion after art. 17 GDPR: You have the right to claim the deletion of your individual-related data by submission of art. 17 par, 1 GDPR. This right does not insist especially if the computing of the exertion of this right of free expression and information to fullfill a lawful obligation, due to reason of public interest or enforcement, exertion or defense of titles is required;
- right to restriction of the computing after art. 18 GDPR: You have the right to demand the restriction of the computing of your individual-related data as long as the validity of your data is verified if you deny the deletion of your data because of unreliable computing and you demand the restriction of the computing of your data instead, if you require your data for enforcement, exertion of defence of titles, after we do not require these data any more after gaining one’s end or if you have lodged an opposition out of reasons of your special circumstances, as long as it is not clear if these valid reasons prevail;
- right to notification after art. 19 GDPR: You have the right to make notifications, deletion or restriction of the computing valid toward the person on charge, so he is bound to inform all receivers whom individual-related data are revealed about these notifications or deletion of data or restriction of the computing. Unless this is revealed to be impossible or linked to disproportionate effort. You have the right to be informed about these receivers.
- right to data transmission after art. 20 GDPR: You have the right to receive your individual-related data which you have provided to us, in a machine-parsable form and also you have the right to demand the transmission to another person in charge if this is technically possible.
- right to recall of contracted consents after art. 7 par. 3 GDPR: You have the right to recall all provided consents for the computing of data with future valid any time. In context of the recall, all concerned data will be immediately deleted unless a further computing can not be supported by any legal basis. Because of the recall of the consent the legitimacy will not be affected due the consent until the recall is computed;
- right to complaint after art. 77 GDPR: You have the right to complaint at a controlling authority, unaffected by another administrational or judicial redress procedure. Especially in the member state of your location, your work place or in the place of wanton violation if you consider that the spread of your concerning individual-related data contravenes against the GDPR.
10.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR INDIVIDUAL-RELATED DATA IN CONTEXT OF WEIGHING OF INTERESTS BECAUSE OF AN OUTWEIGHING VALID INTEREST, YOU HAVE THE RIGHT TO RECALL THE PROCESSING ANY TIME WITH FUTURE VALID DUE TO REASONS WHICH OCCUR IN YOUR CERTAIN SITUATION.
IF YOU USE YOUR RIGHT OF OBJECTION, WE STOP THE PROCESSING OF THE CONCERNED DATA. BUT A FURTHER PROCESSING IS RESERVED IF WE CAN PROVE ANY REASONS WHICH ARE WORTH OF BEING PROTECTED FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, BASIC RIGHTS AND FUNDAMENTAL FREEDOM OR IF IT SERVES THE PROCESSING OF THE ENFORCEMENT, EXERTION OR DEFENCE OF TITLES:
IF YOU INDIVIDUAL-RELATED DATA ARE PROCESSED BY US TO PRACTISE DIRECT ADVERTISING, YOU HAVE THE RIGHT TO RECALL THE PROCESSING OF INDIVIDUAL-RELATED DATA FOR A DIRECT ADVERTISING PURPOSE. YOU CAN PERFORM THE CONTRADICTION AS DESCRIBED ABOVE.
IF YOU USE YOUR RIGHT OF OBJECTION; WE STOP THE PROCESSING OF THE CONCERNED INDIVIDUAL-RELATED DATA FOR A DIRECT ADVERTISING PURPOSE.
11. Duration of the storage of individual-related data
The duration of the storage of individual-related data is measured by reference to the current legal duty to preserve records (e.g. in terms of commercial law and fiscal preserve records). After expiration of this period the concerned data will be routinely deleted unless they are not necessary for the contractual performance any more and/or there is no further valid interest for a further storage by us.