Fluco-Online.de

Data Protection

Data protection

The responsible party within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:

Ulrich Fleischmann

Your data subject rights

You can exercise the following rights at any time using the contact details provided by our data protection officer:

  • Information about your data stored by us and its processing (Art. 15 DSGVO),
  • Correction of inaccurate personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 DSGVO),
  • Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
  • object to the processing of your data by us (Art. 21 DSGVO) and
  • Data portability, provided that you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).

If you have given us consent, you can revoke this at any time with effect for the future.

You may at any time submit a complaint to a supervisory authority, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the responsible body.

A list of supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information when visiting our website

Nature and purpose of the processing:

When you access our website, i.e., when you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.

In particular, they are processed for the following purposes:

  • Ensuring that the website connection is established without any problems,
  • Ensuring a smooth use of our website,
  • Evaluation of system security and stability, and
  • to optimize our website.

We do not use your data to draw conclusions about your person. Information of this kind is statistically evaluated anonymously by us, if necessary, in order to optimize our Internet presence and the technology behind it.

Legal basis and legitimate interest:

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:

Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.

Storage period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.

In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymized, so that an assignment of the calling client is no longer possible.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website is not guaranteed. In addition, individual services and services may not be available or may be limited. For this reason, an objection is excluded.

Cookies

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website.

You can delete individual cookies or the entire cookie inventory. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you can find the necessary information under the following links:

In part, the cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

Storage duration and cookies used:

Insofar as you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Technically necessary cookies

Nature and purpose of the processing:

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

We require cookies for the following applications:

Shopping cart
Adoption of language settings

Legal basis and legitimate interest:

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in a user-friendly design of our website.

recipient:

Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited.

Opposition

Please read the information about your right to object according to Art. 21 DSGVO below.

Registration on our website

Nature and purpose of the processing:

For registration on our website, we require some personal data, which is transmitted to us via an input mask.

At the time of registration, the following data is also collected:

Your registration is required for the provision of certain content and services on our website.

Legal basis:

The processing of the data entered during registration is based on the user’s consent (Art. 6 para. 1 lit. a DSGVO).

recepient:

Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.

Storage period:

Data will only be processed in this context as long as the corresponding consent has been obtained.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to our offered content.

Provision of chargeable services

Nature and purpose of the processing:

For the provision of chargeable services, we request additional data, such as payment details, in order to be able to execute your order.

legal basis:

The processing of data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b DSGVO.

recepient:

Recipients of the data are, if applicable, order processors.

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision prescribed or required:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.

Newsletter

Nature and purpose of the processing:

For the delivery of our newsletter, we collect personal data that is transmitted to us via an input mask.

For an effective registration we need a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the “double opt-in” procedure. For this purpose, we log the registration for the newsletter, the sending of a confirmation e-mail and the receipt of the response requested herewith. Further data is not collected.

legal basis

Based on your explicit consent (Art. 6 para. 1 lit. a DSGVO), we will regularly send you our newsletter or similar information by e-mail to your specified e-mail address.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You will find a link to this effect in every newsletter. In addition, you can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided at the end of this privacy policy.

recepient:

Recipients of the data are, if applicable, order processors.

storage duration:

In this context, the data will only be processed as long as the respective consent is given. Afterwards they will be deleted.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. Without existing consent, we can unfortunately not send you our newsletter.

Withdrawal of consent:

You can revoke your consent to the storage of your personal data and its use for newsletter dispatch at any time with effect for the future. Unsubscribing can be requested via the link contained in every e-mail or from the data protection officer or person responsible for data protection listed below.

Contact form

Nature and purpose of the processing:

The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This serves the assignment of the request and the subsequent response to the same. The specification of further data is optional.

legal basis:

The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO).

By providing the contact form, we would like to enable you to contact us in an uncomplicated manner. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b DSGVO).

recepient:

Recipients of the data are, if applicable, order processors.

storage duration:

Data will be deleted no later than 6 months after processing the request.

If a contractual relationship arises, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

Data processing for order processing

In order to process your order, we work together with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted over third party cookies to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution (see “Payment methods”) as part of the payment processing, insofar as this is necessary for the payment processing. The legal basis for the transfer of data is here Art. 6 para. 1 lit. b DSGVO.

  • DHL – If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a DSGVO prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible. The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider DHL.

Use of Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these web pages, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

Withdrawal of consent:

You can prevent tracking by Google Analytics on our website by clicking this link. This will install an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, please note that in this case you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to disable Google Analytics.

Use of script libraries (Google Webfonts)

In order to display our content correctly and in a graphically appealing manner across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) on this website to display fonts.

Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Use of Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

The purpose of reCAPTCHA is to verify whether data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not made aware that an analysis is taking place.

The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.

For more information on Google reCAPTCHA and Google’s privacy policy, please see the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Use of Google Maps

On this website we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.
You can find more information about data processing by Google in the Google privacy policy: https://policies.google.com/privacy. There you can also change your personal privacy settings in the Privacy Center.

Detailed instructions on how to manage your own data in connection with Google products can be found here: https://www.dataliberation.org.

By visiting the website, Google receives information that you have called up the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.

If you do not want the assignment in your profile at Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its websites. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you want to prevent tracking of your activities on our website, please revoke your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website at all or only to a limited extent.

Embedded YouTube videos

We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter “YouTube”). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter “Google”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. In the process, YouTube is informed which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behavior.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to the provider’s privacy policy, where you will also find further information on your rights in this regard and settings options for protecting your privacy (https://policies.google.com/privacy).

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you want to prevent tracking of your activities on our website, please revoke your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website at all or only to a limited extent.

Usage of Klarna

The controller has integrated components of Klarna on this website. Klarna is an online payment service provider that enables the purchase on account or a flexible installment payment. Furthermore, Klarna offers additional services, such as buyer protection or an identity and credit check.

The operating company of Klarna is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If the data subject selects Klarna as a payment option during the ordering process in our online store, data of the data subject is automatically transmitted to Klarna. By selecting one of these payment options, the data subject consents to this transmission of personal data required for the processing of the purchase on account or installment purchase or for identity and credit checks.

The personal data transmitted to Klarna are usually first name, last name, address, date of birth, gender, email address, IP address, telephone number, cell phone number and other data necessary for the processing of an invoice or installment purchase. Also necessary for the processing of the purchase contract are such personal data that are related to the respective order. In particular, there may be a mutual exchange of payment information, such as bank details, card number, validity date and CVC code, number of items, item number, data on goods and services, prices and tax charges, information on previous purchasing behavior or other information on the financial situation of the person concerned.

The purpose of the transfer of the data is, in particular, identity verification, payment administration and fraud prevention. The controller will transfer personal data to Klarna in particular if there is a legitimate interest for the transfer. Personal data exchanged between Klarna and the Controller will be transferred by Klarna to credit reporting agencies. The purpose of this transmission is to check identity and creditworthiness.

Klarna also discloses the personal data to affiliated companies (Klarna Group) and service providers or subcontractors, insofar as this is necessary for the fulfillment of contractual obligations or the data is to be processed on behalf.

In order to decide on the establishment, implementation or termination of a contractual relationship, Klarna collects and uses data and information about the past payment behavior of the data subject as well as probability values for his behavior in the future (so-called scoring). The scoring is calculated on the basis of scientifically recognized mathematical-statistical methods.

The data subject has the option to revoke the consent to the handling of personal data at any time vis-à-vis Klarna. A revocation does not affect personal data that must necessarily be processed, used or transmitted for (contractual) payment processing.

The applicable data protection provisions of Klarna can be found at https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf.

Usage of PayPal

The controller has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. In addition, PayPal offers the option of processing virtual payments via credit cards if a user does not maintain a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments as well. PayPal also assumes trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If the data subject selects “PayPal” as a payment option during the ordering process in our online store, data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.

The personal data transmitted to PayPal are usually first name, last name, address, email address, IP address, telephone number, cell phone number or other data necessary for payment processing. Also necessary for the processing of the purchase contract are such personal data that are related to the respective order.

The purpose of transmitting the data is payment processing and fraud prevention. The controller will transmit personal data to PayPal in particular if there is a legitimate interest for the transmission. The personal data exchanged between PayPal and the controller may be transferred by PayPal to credit reporting agencies. The purpose of this transmission is to check identity and creditworthiness.

PayPal may disclose the personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary for the fulfillment of contractual obligations or the data is to be processed on behalf.

The data subject has the possibility to revoke the consent to the handling of personal data at any time vis-à-vis PayPal. A revocation does not affect personal data that must necessarily be processed, used or transmitted for (contractual) payment processing.

The applicable data protection provisions of PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

SSL-encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Information about your right to object according to Art. 21 DSGVO

Right to object on a case-by-case basis

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) DSGVO (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 DSGVO.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

Recipient of an opposition

Ulrich Fleischmann

Change to our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions for the data protection officer

If you have any questions about data protection, please write us an e-mail or contact the person responsible for data protection in our organization directly:

FLUCO Ulrich Fleischmann e.K.
Nordgaustrasse 4
D-93437 Furth im Wald

Phone: +49 (0)9973 2028
E-mail: onlineshop@fluco.de

The privacy policy was created with the help of activeMind AG, the experts for external data protection officers (version #2020-09-30).