Privacy
Status: 06/2024
We process personal data (hereinafter referred to as “data”) of users only insofar as this is necessary to provide a functional and user friendly website as well as our content and services.
“Processing” includes the collection, use, disclosure, and/or storage of data. Under the EU General Data Protection Regulation (hereinafter “GDPR”), “personal data” generally means all information relating to an identified or identifiable natural person. The exact definitions of the terms used can be found in Art. 4 GDPR.
The following information explains in particular the type, scope, purpose, duration, and legal basis of the processing of personal data for which we alone or jointly with others determine the purposes and means of processing. It also informs you about third party components we may use to optimize our website and improve usability, where these third parties process data under their own responsibility.
I. Information about the Controller
II. User Rights
III. Information on Data Processing
I. Information about the Controller
The controller within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:
Flucks GmbH
Rotdornweg 11
48165 Münster
Germany
Phone: +49 (0)2501 5998060
Email: [email protected]
II. User Rights
With regard to the processing of personal data described below, the user has the right:
- to request confirmation as to whether data concerning them is being processed and to obtain detailed information about such data as well as further information and copies of the data in accordance with Art. 15 GDPR;
- to request without delay the correction of inaccurate data concerning them or the completion of incomplete data pursuant to Art. 16 GDPR;
- to request the immediate deletion of data concerning them pursuant to Art. 17 GDPR or, alternatively, where further processing is required under Art. 17 para. 3 GDPR, to request restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning them and provided by them in accordance with Art. 20 GDPR and to request transmission of this data to other controllers;
- to lodge a complaint with the supervisory authority pursuant to Art. 77 GDPR if the user believes that the processing of their data by the provider violates the GDPR.
- The user may object at any time to future processing of data concerning them that is carried out by the controller on the basis of Art. 6 para. 1 lit. f GDPR in accordance with Art. 21 GDPR. In particular, the objection may be directed against processing for direct marketing purposes.
- The provider is also obliged to communicate any correction or deletion of personal data or restriction of processing carried out pursuant to Art. 16 GDPR, Art. 17 para. 1 GDPR, and Art. 18 GDPR to all recipients to whom the data has been disclosed, unless this proves impossible or involves disproportionate effort. The user has the right to be informed about these recipients.
III. Information on Data Processing
Unless more detailed information is provided below regarding specific processing operations, the user’s data processed by the provider will be deleted or blocked as soon as the purpose of storage no longer applies and no statutory retention obligations prevent deletion.
Server Data
For technical and security reasons, the following data transmitted by the user’s internet browser to the provider or its web hosting provider is collected during the website visit (so called server log files):
- browser type and version;
- operating system used;
- website from which the user accessed the provider’s website (referrer URL);
- website visited by the user;
- date and time of access;
- user’s IP address.
The data is also temporarily stored. This data is not stored together with other personal data of the user.
The legal basis for temporary storage is Art. 6 para. 1 lit. f GDPR based on the legitimate interest in improving the stability, functionality, and security of the website.
The data is deleted after no later than seven days unless further retention is required for evidentiary purposes.
Cookies
a) Cookies
The controller uses so called cookies on its website. Cookies are small text files or other storage technologies that are stored on the user’s device by the internet browser. These cookies process certain information about the user, such as browser data, location data, and IP address values.
Their use makes the website more user friendly, effective, and secure.
Processing is carried out on the basis of the controller’s legitimate interest in improving the functionality of the website and fulfilling legal requirements pursuant to Art. 6 para. 1 lit. f GDPR.
Cookies are deleted when the user closes their browser.
b) Third Party Cookies
The provider may also use cookies from third party providers for advertising, analytics, or website functionality purposes. Details regarding the purposes and legal bases are explained below where applicable.
c) Prevention and Removal
The user can prevent or restrict the installation of cookies through browser settings. Stored cookies can also be deleted at any time. The settings depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via browser settings but only via Flash player settings. Preventing or restricting cookies may result in limited website functionality.
Consent Manager
The provider uses a consent manager to obtain user consent for technically unnecessary cookies and embedded third party content.
When the website is accessed, a cookie storing the consent settings is placed on the user’s device to avoid repeated consent requests.
This cookie is necessary to obtain legally compliant consent.
The user can prevent or terminate installation of this cookie through browser settings. Further information can be found above under “Cookies.”
Contract Processing
a) Processing
Personal data provided by the user for the purchase of goods or services is processed by the provider for contract fulfillment purposes. Providing this data is necessary for concluding the contract; without it, the contract cannot be concluded.
The legal basis is Art. 6 para. 1 lit. b GDPR.
After complete contract fulfillment, the user’s data will be deleted taking into account retention periods under tax and commercial law.
b) Disclosure
The user’s personal data may be passed on to shipping companies, payment service providers, or shop software providers where necessary for contract fulfillment, delivery, or payment.
The legal basis is Art. 6 para. 1 lit. b GDPR.
If the customer consents to data transfer for parcel tracking, the legal basis is Art. 6 para. 1 lit. a GDPR.
Customer Account
If the user registers for a customer account, the data entered during registration (e.g. name, address, email address) will be collected and stored exclusively for contract fulfillment, pre contractual measures, and customer relationship management.
The IP address as well as date and time of registration are also stored. No disclosure to third parties takes place.
The legal basis is Art. 6 para. 1 lit. a GDPR where consent exists and additionally Art. 6 para. 1 lit. b GDPR where registration serves contract fulfillment.
Consent may be revoked at any time pursuant to Art. 7 para. 3 GDPR.
The data will be deleted when processing is no longer necessary, subject to statutory retention periods.
Contact Requests
If the user contacts the provider, the personal data entered is used to process the request.
Where the inquiry relates to contract fulfillment or pre contractual measures, the legal basis is Art. 6 para. 1 lit. b GDPR.
The data will be deleted once the request has been conclusively answered unless legal retention obligations apply.
The legal basis may also be consent pursuant to Art. 6 para. 1 lit. a GDPR.
Consent may be revoked at any time.
Direct Advertising
The provider reserves the right to use customer data collected during orders for direct advertising via email or post in accordance with Section 7 para. 3 UWG, unless the user objects.
The advertising is limited to similar products or services.
The legal basis is Art. 6 para. 1 lit. f GDPR based on the provider’s legitimate interest in sales and service improvement.
Product Reviews / Comments
Users may publish product reviews or comments via the website.
The provider processes and publishes the contribution, submission time, and the name or pseudonym provided.
The legal basis is Art. 6 para. 1 lit. a GDPR.
The user may revoke consent at any time.
The provider also processes the user’s IP address and, where applicable, email address based on legitimate interests in legal defense and prevention of unlawful content pursuant to Art. 6 para. 1 lit. f GDPR.
Newsletter
If the user subscribes to the free newsletter, the email address entered during registration will be transmitted to the provider. IP address, date, and time of registration are also stored.
The legal basis is Art. 6 para. 1 lit. a GDPR.
Consent may be revoked at any time via notice to the provider or the unsubscribe link contained in the newsletter.
Integration of PayPal
The provider uses the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
PayPal may process user data such as IP address, device type, operating system, browser type, and location data. Cookies may also be used.
The legal basis is Art. 6 para. 1 lit. f GDPR based on the legitimate interest in offering secure payment methods.
If PayPal is selected as payment method, the user’s data is transmitted to PayPal for payment processing pursuant to Art. 6 para. 1 lit. b GDPR.
Further information:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
YouTube
The provider uses YouTube services provided by Google Ireland Limited.
The legal basis is Art. 6 para. 1 lit. a GDPR.
The provider uses YouTube in “enhanced privacy mode.”
When visiting a page with embedded YouTube videos, a connection to Google servers in the USA is established and data such as IP address, date, time, and visited page are processed.
Further information:
https://policies.google.com/privacy
Google Tag Manager
The provider uses Google Tag Manager by Google Ireland Limited.
Its sole purpose is integrating and managing website functions.
The user’s IP address may be processed to load functions.
The legal basis is Art. 6 para. 1 lit. f GDPR based on legitimate interests in optimizing and economically operating the website.
Google Analytics
This website uses Google Analytics by Google Ireland Limited.
Google Analytics is used to analyze website usage and measure marketing campaigns.
The legal basis is Art. 6 para. 1 lit. a GDPR.
Collected data may include time, location, visit frequency, click paths, advertisements viewed, and link clicks.
IP anonymization is activated.
Further information:
https://www.google.com/intl/de/policies/privacy/partners
Google Ads with Conversion Tracking / Remarketing
The provider uses Google Ads and Google Conversion Tracking.
Conversion cookies are stored for up to 30 days after clicking advertisements.
The provider receives statistics but no personally identifiable user information.
Remarketing is also used to display personalized advertisements.
Further information:
https://services.google.com/sitestats/de.html
http://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
Facebook Pixel – Conversion Tracking
The provider uses Facebook Pixel by Meta Platforms Ireland Limited.
The legal basis is Art. 6 para. 1 lit. a GDPR.
Facebook may process IP address, browser information, pixel IDs, and website activities.
Further information:
https://www.facebook.com/policy.php
Social Media Links
The provider links to social networks via linked graphics.
Only after clicking the graphic is the user redirected to the respective network.
The following networks are linked:
Facebook – Meta Platforms Ireland Limited
Privacy Policy: https://www.facebook.com/policy.php
Instagram – Meta Platforms Ireland Limited
Privacy Policy: https://help.instagram.com/519522125107875
YouTube – Google Ireland Limited
Privacy Policy: https://policies.google.com/privacy