1. Information about the collection of personal data

In the following we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. B. name, address, e-mail addresses, user behavior.

 

2. Name and contact details of the data controller

This data protection information applies to data processing by:

WOSZ Fan Shop GmbH, Bertramstrasse 20, 06110 Halle (Saale)

Managing directors: Dirk Neubert, Steffen Seifert, Thorsten Görke

Telephone: +49 345 - 2 02 99 66

Fax: +49 345 - 2 90 92 44

Email: vereinsshop@wosz-fan-shop.de

Registration court: District Court of Stendal, registration number: 19758

 

3. Collection and storage of personal data as well as type and purpose of their use

a. When visiting the site

When you visit our website, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file.

The following information is recorded without your intervention and stored until it is automatically deleted:

IP address of the requesting computer,

date and time of access,

Time zone difference to Greenwich Mean Time (GMT),

Content of the request (specific page),

name and URL of the retrieved file,

Website from which access is made (referrer URL),

amount of data transferred in each case,

Browser used and, if applicable, the operating system of your computer and the name of your access provider.

 

The data mentioned are processed by us for the following purposes:

Ensuring a smooth connection establishment of the website,

Ensuring comfortable use of our website,

Evaluation of system security and stability as well

for other administrative purposes.

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

 

In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations in this data protection declaration.

 

b. When using our contact form

If you have any questions, we offer you the opportunity to contact us using a form provided on the website. It is necessary to provide a valid e-mail address as well as first and last name so that we know who sent the request and can answer it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us takes place in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR on the basis of your voluntarily given consent.

We delete the personal data collected by us for the use of the contact form after the storage is no longer necessary, or restrict the processing if there are statutory retention periods.

 

4. Sharing of Data

Your personal data will not be transmitted to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

you have given your express consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR,

the transfer according to Article 6 paragraph 1 sentence 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

in the event that there is a legal obligation for the transfer according to Art. 6 Para. 1 S. 1 lit

this is legally permissible and required for the processing of contractual relationships with you in accordance with Article 6 (1) sentence 1 lit. b GDPR.

 

5.Cookies

We use cookies on our site. These are small files that your browser creates automatically and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not damage your end device and do not contain viruses, Trojans or other malware.

Information is stored in the cookie that arises in connection with the specific end device used. However, this does not mean that we are immediately informed of your identity.

On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specific period of time. If you visit our site again to make use of our services, it will automatically be recognized that you have already been with us and what inputs and settings you have made so that you do not have to enter them again.

 On the other hand, we use cookies to statistically record the use of our website and to optimize our offer. These cookies enable us to automatically recognize when you visit our site again that you have already been with us. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are required for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR, since

there are legitimate economic, legal and non-material interests on our part;

the use of cookies is necessary to achieve these interests;

overriding interests of the data subject do not conflict with the use of cookies.

Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or that a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

 

6. Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.

For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offering. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

 

7. Social Media - Use of Social Media Plug-ins

We currently use Facebook as a social media plug-in on our website on the basis of Article 6 Paragraph 1 Sentence 1 lit. f GDPR in order to make our company better known.

The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation is to be guaranteed by their respective providers.

We integrate these plug-ins using the so-called two-click method in order to provide the best possible protection for visitors to our website. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the “Facebook” mark. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it will the plug-in provider be informed that you have accessed the corresponding website of our online offer. In addition, the data specified in Section 3 of this declaration will be transmitted. In the case of Facebook, according to the provider in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via the security settings of your browser before clicking on the grayed-out box.

We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. With the plug-ins we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6 Paragraph 1 Clause 1 Letter f GDPR.

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected from us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and e.g. B. link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.

Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers communicated below. There you will also receive further information on your rights in this regard and setting options to protect your privacy.

Addresses of the respective plug-in providers and URL with their data protection notices:

[Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; Further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook .com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

8. Integration of Google Maps

(1) We use Google Maps on this website. This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function.

(2) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in Section 3 of this declaration will be transmitted. This takes place regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

(3) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider's data protection declaration. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

9. Analysis Tools

We do not use analysis tools, tracking tools, etc.

 

10. Use of our web shop

(1) If you would like to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. Mandatory information required for the processing of the contracts is marked separately, further information is voluntary. We process the data you provide to process your order. For this purpose, we can pass on your payment data to our house bank. The legal basis for this is Art. 6 (1) sentence 1 lit. b GDPR.

You can voluntarily create a customer account through which we can save your data for future purchases. When you create an account under "I would like to create a customer account", the data you provide will be stored revocably. You can always delete all other data, including your user account, in the customer area.

We can also process the data you provide to inform you about other interesting products from our portfolio or to send you e-mails with technical information.

(2) Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, after two years we restrict the processing, i. H. Your data will only be used to comply with legal obligations.

(3) To prevent unauthorized access by third parties to your personal data, especially financial data, the ordering process is encrypted using SSL/TLS technology.

 

11. Use of our portal

(1) If you would like to use our portal, you must register by entering your e-mail address, a password of your choice and your freely selectable user name. There is no obligation to use a real name, pseudonymous use is possible. We use the so-called double opt-in procedure for registration, i. H. Your registration is not complete until you have previously confirmed your registration by clicking on the link contained in a confirmation e-mail sent to you for this purpose. If you do not confirm this within 24 hours, your registration will be automatically deleted from our database. The provision of the aforementioned data is mandatory, you can provide all other information voluntarily by using our portal.

(2) If you use our portal, we store your data required to fulfill the contract, including information on the method of payment, until you finally delete your access. Furthermore, we store the data you provide voluntarily for the duration of your use of the portal, unless you delete them beforehand. You can manage and change all information in the protected customer area. The legal basis is Article 6 Paragraph 1 Clause 1 Letter f GDPR.

(3) If you use the portal, your data may become accessible to other participants in the portal in accordance with the contractual service. Members who are not registered do not receive any information about you. Your [username and photo] are visible to all registered members, regardless of whether you have approved them. On the other hand, your entire profile with the data you have released is visible to all members who you have confirmed as a personal contact. If you make content accessible to your personal contacts that you do not send via a private message, this content can be viewed by third parties if your personal contact has given permission. If you post in public groups, these are visible to all registered members of the portal.

(4) In order to prevent unauthorized access by third parties to your personal data, in particular financial data, the connection is encrypted using SSL/TLS technology.

 

12. PayPal

On our website we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). If you choose to pay via PayPal, the payment details you enter will be sent to PayPal. Your data is transmitted to PayPal on the basis of Article 6 (1) (a) GDPR (consent) and Article 6 (1) (b) GDPR (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations.

 

13. Sofortüberweisung

We offer payment by direct transfer. All you need is your account number, BIC or sort code, as well as your PIN and TAN for your online banking account. As part of the ordering process, you will be automatically forwarded to the secure Sofort GmbH payment form. Immediately afterwards you will receive the confirmation of the transaction. We will then receive the transfer credit directly. Anyone who has an activated online banking account with a PIN/TAN procedure can use Sofortüberweisung as a payment method. Please note that a few banks do not yet support payment by direct transfer. You can get more information about this via the following link: https://www.sofort.com/ger-DE/general/fuer-kaeufer/fragen-und- Answers/

 

14. Rights of data subjects

You have the right:

to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right of appeal, request the origin of your data, if not collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details;

according to Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;

according to Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or Defense of legal claims is required;

according to Art. 18 GDPR, to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you use them for need to assert, exercise or defend legal claims or you have objected to processing in accordance with Art. 21 GDPR;

according to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible;

according to Art. 7 Para. 3 GDPR, to revoke the consent you have given us at any time. As a result, we are no longer allowed to continue the data processing based on this consent for the future and

according to Art. 77 GDPR to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

15. Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, insofar as this is necessary There are reasons that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

If you would like to make use of your right of cancellation or objection, just send an email to info@wosz-fan-shop.de

16. Data Security

We use appropriate technical and organizational security measures during the website visit to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties (encryption and authentication of data traffic on the network). Our security measures are continuously improved in line with technological developments.

17. Updating and changing this data protection declaration

This data protection declaration is currently valid and has the status as of May 2018.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can call up and print out the current data protection declaration at any time on the website in the "footer" under the "Data protection" button.