Data Privacy Policy

Data protection

Thank you for your interest in our web shop. Protecting your privacy is very important to us. We will inform you below about how we handle your data.

1. Scope

This data protection declaration applies to all content and offers on the website www.dencaibiza.com (including www.ch.dencaibiza.com and www.uk.dencaibiza.com ). It is intended to inform the users of this website about the type, scope and purpose of the collection and use of personal data in accordance with the Federal Data Protection Act and the Telemedia Act.

Keep in mind that data transmissions on the Internet can always be subject to security gaps. Full protection against access by third parties is not feasible.

2. Definitions

a) Personal data

Personal data is information that relates to an identified or identifiable natural person, with which this person can be identified directly or indirectly by means of assignment to name, identification number, location data, online identifier (e.g. cookie) or other special features.

b) Processing

Processing means every procedure and every process with which personal data is processed. In particular, the collection, recording, organization, ordering, storage, adaptation or modification, reading out, querying, use, transmission, distribution or any other form of provision, comparison or linking, restriction, erasure or destruction

3. Nature and use of personal data

a) access data

Access data is data about every access by a user to the server on which our website is located (server log file). The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, source/reference to the previously visited page, the IP address of the user and the requesting provider.

The access data is evaluated exclusively for the purpose of ensuring trouble-free operation and improving the website and the offer.

The legal basis for processing is Art. 6 Para. 1 Sentence 1 f GDPR. For the processing of the IP address by third parties, see Section 6.

b) cookies

This site uses cookies. These are small text files that are stored on your end device. Your browser accesses these files.

The legal basis for the use of cookies is Art. 6 Para. 1 f GDPR. Our legitimate interest in data collection follows from the fact that we need the use of cookies for the purpose of direct advertising, the user-friendliness of our website and the optimization of our offers.

Common browsers can be set so that they do not allow cookies. However, this does not guarantee that you will be able to access all functions of this website without restrictions.

c) Customer Data

If you enter personal data via the forms on our website and transmit it to us by submitting it, the purpose of the data processing depends on the respective form:

If you register as a customer and order goods, we use your personal data to manage your account and to process contracts and payments (Art. 6 Para. 1 Sentence 1 b GDPR).

If you use our contact form, we will use your personal data to process your request (Article 6 (1) sentence 1 a, f GDPR).

If you write posts and comments, we will use your personal data to process your posts and comments.

If you register for the newsletter, we will use your personal data to send you the desired news.

Our legitimate interest in data collection within the meaning of Art. 6 Para. 1 f GDPR follows from the fact that we cannot process your request (registration, order, contact, participation in a competition, newsletter) without your data.

d) purchase dates

If you make purchases from us, we record the relevant data for the purchases made by you (article, purchase price, purchase date, customer number).
We use the purchase data for contract and payment processing (Art. 6 Para. 1 Sentence 1 b GDPR) and for statistical purposes (Art. 6 Para. 1 Sentence 1 f GDPR).

e) Dealing with comments and contributions

If you leave a contribution or comment on this website, your IP address will be saved. This is for the security of the website operator: if your text violates the law, he wants to be able to trace your identity.

f) Advertising, subscriptions, newsletters

You have the option of subscribing to the entire website as well as follow-up comments on your post. You will receive an email to confirm your email address. The stored data will not be passed on to third parties. You can unsubscribe at any time.

4. Data transfer

The personal data we process is transferred to our headquarters in Switzerland (see contact details below). The European Commission has determined that Switzerland offers an adequate level of data protection (Commission Decision 2000/518/EC of 26 July 2000 in accordance with Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection of personal data in the Switzerland, OJ L 215 of 25.8.2000, p. 1).

5. Data processing by third parties

a). hosting

Our website is operated on the servers of the hosting provider (www.shopify.de). This processes the personal data on our behalf to operate and optimize our website. The legal basis for this is Art. 6 Para. 1 Sentence 1 f GDPR.

The purpose, scope and use of the data by the provider as well as your related rights to protect your data can be found directly in the provider’s data protection information:

Shopify International Limited privacy policy: https://www.shopify.de/legal/datenschutz

 b). Shop service provider

We have commissioned an external service provider ( www.shopify.de / www.shopify.com ) to record and process the purchases.

If you make purchases, we will pass on your personal data required for this to the commissioned service provider, insofar as this is required to process the purchase.

The purpose, scope and use of the data by the service provider as well as your related rights to protect your data can be found directly in the service provider’s data protection information:

Shopify International Limited privacy policy: https://www.shopify.de/legal/datenschutz

c). payment processing

We have commissioned an external service provider ( www.mollie.com/de/payments ) to collect and process the data to process the payment.

When we check and process your payments, we pass on your personal data required for this to the commissioned service provider, insofar as this is required for payment processing.

The purpose, scope and use of the data by the service provider as well as your related rights to protect your data can be found directly in the service provider’s data protection information:

Mollie BV privacy policy: https://www.mollie.com/de/privacy

d). Logistics service providers and shipping companies

We have commissioned an external service provider ( www.zenfullfillment.com ) to process the purchases and organize the shipping.

If we deliver goods to you, we will pass on your personal data (first and last name, address) to the commissioned logistics company, insofar as this is required for the delivery. If you have authorized us, we will also pass on your email address and telephone number so that you can be informed of the delivery status.

The purpose, scope and use of the data by the service provider as well as your related rights to protect your data can be found directly in the service provider’s data protection information:

Data protection information from Zenfulfillment (Visable GmbH): https://www.wlw.ch/de/company/legal-notes/data-protection-20200825

 e). Social media plug-ins, website analysis tools

Facebook

So-called social plugins (“plugins”) from the social network Facebook are used on our website. These services are offered by the companies Facebook Inc. and Google Inc. ("providers"). Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Google+ is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Google or Facebook servers. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile on the corresponding social network or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider in the USA and stored there.

If you are logged into one of the social networks, the providers can immediately assign your visit to our website to your profile on Facebook. If you interact with the plugins, for example by clicking the "Like" button or the "+1" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and displayed to your contacts there.

The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options for the protection of your privacy can be found in the data protection information of the providers:

Facebook privacy policy: http://www.facebook.com/policy.php
Google's privacy policy: https://policies.google.com/privacy?hl=de

Facebook and Google have committed to comply with the EU-US Privacy Shield Framework regarding the collection, use, and storage of personal data from EU member states, published by the US Department of Commerce. Further information can be found here:

Facebook: https://m.facebook.com/about/privacyshield .
Google: https://support.google.com/analytics/answer/7105316?hl=en .

If you do not want Google or Facebook to directly assign the data collected via our website to your profile in the respective social network, you must log out of the relevant network before visiting our website. You can also completely prevent the plugins from loading with add-ons for your browser, e.g. B. with the script blocker "NoScript" ( http://noscript.net ).

Instagram

We have integrated Instagram functions and services on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our site with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or how it is used by Instagram.

Instagram data protection information: https://instagram.com/about/legal/privacy/

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout

We would like to point out that on this website Google Analytics has been extended by the code "gat. anonymizeIp();" was expanded to ensure anonymous collection of IP addresses (so-called IP masking).

Google Analytics data protection information: https://support.google.com/analytics/answer/6004245?hl=de .

6. Voluntary provision of data

The provision of personal data when visiting our website is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are also not obliged to provide the personal data when you visit our website, although the access data is recorded automatically when you visit our website. If you order goods, register as a customer with us or fill out the contact form, the data marked in bold are mandatory for sending the respective forms.

7. Duration of data retention

access data, cookies
For security reasons (e.g. to investigate misuse or fraud), the access data is stored for a maximum of 7 days and then deleted. Data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified.

If IP addresses and movement data are processed by third-party providers using cookies, we have no influence on the duration of the processing. Under section 5 you will find the links to the data protection declarations of the third-party providers. There you can find out about the duration of the processing.

Contract data (input data, purchase data)
We store personal data that we process for contractual purposes within the framework of the tax and commercial law or other statutory retention periods (the retention periods are between 2-10 years). If we transmit your personal data to third parties for the purpose of contract processing and payment (section 5c), we have no influence on the duration of processing at these companies. Please contact these companies directly in this regard; we will be happy to provide you with their contact details.

Newsletter
If you unsubscribe from our newsletter, we will no longer send you any newsletters; you will be entered in a so-called blocked list. However, we continue to process your first and last name and your e-mail address in order to be able to prove that you have registered for our newsletter.

Other input data
You store the other data entered via the web forms for as long as we need them to process your request, provided that these data are not subject to tax and commercial law or other statutory retention periods (the retention periods are between 2-10 years).

8. User Rights

Please assert your rights under the GDPR by email or letter. The contact details of the provider and the person responsible in the EU can be found below.

a). Revocation of consent to data processing

If you have given your consent, you have the right to revoke it. We would like to point out that a revocation does not change the lawfulness of the processing carried out up to the revocation (no retroactive effect of the revocation).

b). Objection to processing of personal data

You have the right to object at any time to the personal data processed on the basis of Art. 6 Para. 1 Sentence 1 f GDPR, provided that there are reasons for the objection that arise from your particular situation and provided there are no compelling reasons worthy of protection, continue to collect the data. If we process your personal data in order to operate direct advertising, you have the right to object to the processing of your personal data for the purpose of such advertising at any time without giving reasons (Article 21 GDPR).

c). information

You have the right, within the framework of the GDPR, to request information free of charge about the personal data we hold about you (Art. 15 GDPR).

d). correction

Furthermore, in accordance with the GDPR, you have the right to correction (Art. 16 GDPR), deletion (Art. 17 GDPR), restriction (Art. 18 GDPR) and transfer (Art. 20 GDPR) of your personal data.

e). deletion

You have the right under the GDPR to request the deletion of your personal data, provided there are no other overriding statutory reasons in the way.

f). Complaint to the supervisory authority

You also have the right to complain to the data protection supervisory authority responsible for us in justified cases (Article 77 GDPR).

9. Contact Information

a). Offerer

AYA Trading Ltd
Weidstrasse 12
8803 Rueschlikon
Switzerland

contact@dencaibiza.com

b). Representative in the EU according to GDPR

Angel Pizarro
Camp de Mar 16 4o 3a
08330 Premia de Mar (BCN)
Spain

contact@dencaibiza.com

 

c). data protection supervisory authority

State representative for data protection and freedom of information in Baden-Württemberg
PO Box 10 29 32,

70025 Stuttgart

Telephone: +49 711 615 541 - 0
Fax: +49 711 615 541 - 15
Email: poststelle@lfdi.bwl.de