General note and mandatory information
Designation of the responsible body
The controller responsible for data processing on this website is
Colours & Sons GmbH
Guido Schmitz
Alsstrasse 166
41063 Mönchengladbach
The data controller decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).
Withdrawal of your consent to data processing
Some data processing operations are only possible with your express consent. You can withdraw your consent at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to lodge a complaint with the competent supervisory authority
As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.
Right to information, correction, blocking, deletion
You have the right to free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time within the framework of the applicable legal provisions. You can contact us at any time using the contact options listed in the legal notice if you have any further questions on the subject of personal data.
SSL and TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line of your browser and the lock symbol in the browser line.
Data protection officer
We have appointed a data protection officer.
Schmitz, Guido
Colours & Sons GmbH
Alsstrasse 166
41063 Mönchengladbach
Telephone: 02161-68468-0
E-Mail: gs@coloursandsons.com
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in server log files. These are
- Visited page on our domain
- Date and time of the server request
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- IP address
This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
Data transmission upon conclusion of a contract for the purchase and shipment of goods
Personal data will only be transmitted to third parties if this is necessary in the context of contract processing. Third parties may be, for example, payment service providers or logistics companies. No further transmission of data takes place or only if you have expressly consented to this.
The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
Registration on this website
You can register on our website to use certain functions. The data transmitted is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full. Otherwise we will refuse registration.
In the event of important changes, for example for technical reasons, we will inform you by e-mail. The e-mail will be sent to the address provided during registration.
The data entered during registration is processed on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing that has already taken place remains unaffected by the revocation.
We store the data collected during registration for the period that you are registered on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected.
Newsletter data
We require an e-mail address from you in order to send you our newsletter. Verification of the e-mail address provided is necessary and you must consent to receiving the newsletter. Additional data is not collected or is voluntary. The data is used exclusively for sending the newsletter.
The data provided when registering for the newsletter will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time. To withdraw your consent, simply send us an informal email or unsubscribe via the “Unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
Data entered to set up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.
Cookies
Our website uses cookies. These are small text files that your web browser stores on your end device. Cookies help us to make our website more user-friendly, effective and secure.
Some cookies are “session cookies”. Such cookies are deleted automatically at the end of your browser session. Other cookies, on the other hand, remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website.
With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are deleted automatically when the program is closed. Deactivating cookies may result in limited functionality of our website.
The setting of cookies, which are necessary for the performance of electronic communication processes or the provision of certain functions desired by you (e.g. shopping cart), takes place on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these are treated separately in this privacy policy.
Google Analytics
Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses “cookies.” These are small text files that your web browser stores on your end device and enable website usage to be analyzed. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.
Google Analytics cookies are set on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.
IP anonymization
We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google truncates your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and truncates it there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics will not be merged with other Google data.
Browser plugin
The setting of cookies by your web browser can be prevented. However, some functions of our website may be restricted as a result. You can also prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. You can do this by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to our website: Deactivate Google Analytics.
Details on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have concluded an order processing contract with Google in order to fully comply with the statutory data protection requirements.
Demographic characteristics with Google Analytics
Our website uses the “demographic characteristics” function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section “Objection to data collection”.
PayPal
Our website enables payment via PayPal. The provider of the payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you pay with PayPal, the payment data you enter will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You can withdraw your consent at any time. Data processing operations carried out in the past remain effective in the event of a revocation.
Klarna
In collaboration and cooperation with the payment service provider KLARNA (Klarna Bank AB (publ). Sveavägen 46, 111 34 Stockholm, Sweden) we offer you the purchase on “invoice”, “direct debit” and “pay now” as a payment option. In order to be able to offer you Klarna's payment methods, we may transmit your personal data in the form of contact and order data to Klarna in the checkout so that Klarna can assess whether you are eligible for their payment methods and to customize these payment methods for you. Your submitted personal data will be processed in accordance with Klarna's privacy policy. You can find more information about KLARNA here and information about the KLARNA. App can be found here.
Pinterest plugin
Our website uses functions of the social network Pinterest. The provider is Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103-490, USA.
When you access a page with Pinterest functions, your browser establishes a direct connection to the Pinterest servers. Log data is transmitted to the Pinterest servers. The servers are located in the USA. The log data may allow conclusions to be drawn about your IP address, websites visited, browser type and settings, date and time of the request, your use of Pinterest and cookies.
You can find details on this in Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy.
Amazon Partner Program
As the operator of this website, we participate in the Amazon EU Partner Program. Advertisements from Amazon and links to Amazon are integrated on our pages in order to earn money through advertising cost reimbursements. Amazon cookies are used, whereby Amazon recognizes that you have clicked on an affiliate link on our website.
The storage of “Amazon cookies” takes place on the basis of Art. 6 lit. f GDPR. As the website operator, we have a legitimate interest in this, as the amount of the advertising cost reimbursement can only be determined through the cookies.
Details on the use of data by Amazon can be found in the Amazon privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.
Google AdWords and Google Conversion Tracking
Our website uses Google AdWords. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.
AdWords is an online advertising program. As part of the online advertising program, we work with conversion tracking. After clicking on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your end device. Google AdWords cookies lose their validity after 30 days and are not used to personally identify users. The cookie allows Google and us to recognize that you have clicked on an ad and have been redirected to our website.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. AdWords customers learn how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that allows users to be personally identified. If you do not wish to participate in tracking, you can object to its use. In this case, the conversion cookie must be deactivated in the user settings of the browser. This will also prevent it from being included in the conversion tracking statistics.
“Conversion cookies” are stored on the basis of Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in the analysis of user behavior in order to optimize our website and our advertising.
Details on Google AdWords and Google Conversion Tracking can be found in Google's privacy policy: https://www.google.de/policies/privacy/.
With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Deactivating cookies may result in limited functionality of our website.
Trusted Shops Plugin
Our website uses the Trusted Shops Trustbadge® plug-in or widget from Trusted Shops of Trusted Shops GmbH, Colonius Carré, Subbelrather Straße 15c, 50823 Cologne, phone: 0221 - 77 53 66, fax: 0221 - 77 53 6 89, e-mail: info@trustedshops.de.
With the Trusted Shops Trustbadge® plug-in or widget, we present you with a summary of our current profile at Trusted Shops directly on our website. In this way, you can see on our website how other users rate us and what position we have on Trusted Shops. The integration enables you to find our profile immediately so that you can also obtain further information about us and rate us.
The purpose of processing the data is to integrate a summary of our Trusted Shops profile on our website, in particular the presentation of our Trusted Shops seal of approval and any reviews we may have collected.
The plug-in or widget from Trusted Shops is integrated on our website via an interface (“API”) to Trusted Shops using Javascript. In particular, the trust badge also sets cookies.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the amount of data transferred, the date and time of the call and the requesting provider (access data) and documents the call. This access data is not analyzed.
Further personal data will only be transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order or have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies.
We do not collect any data ourselves if you look at the Trustbadge. According to Trusted Shops, the data is automatically overwritten no later than seven days after the end of your visit to the site.
The legal basis for the processing of personal data described here is Art. 6 (1) (f) GDPR. Our legitimate interest is to present our profile and our rating on Trusted Shops to visitors to our website in order to give our visitors a first impression of us. We also have a legitimate interest in ensuring that visitors to our website are directed to our own correct profile. In this way, we prevent visitors from accessing incorrect Trusted Shops profiles with similar or identical names via web searches. The Trusted Shops service also has a legitimate interest in improving its services and offering.
You can find information on the other service providers used by Trusted Shops here:
https://shop.trustedshops.com/de/datenschutz
Information regarding the possible transfer of data to third countries by Trusted Shops can be found here:
https://shop.trustedshops.com/de/datenschutz
The provision of personal data is neither legally nor contractually required and is also not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, if you do not provide it, you may not be able to use this function of our website or not be able to use it to its full extent.
You can find further information on data protection at Trusted Shops at
https://shop.trustedshops.com/de/datenschutz
Content Delivery Network
- Hosting by Shopify
We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”), for the purpose of hosting and displaying the online store on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Any further processing on Shopify servers other than those mentioned above will only take place within the scope specified below.