Privacy notice

1. Data protection at a glance
General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can identify you personally. Detailed information on data protection can be found in the privacy notice set out below.

Data collection on this website
Who is responsible for collecting data on this website?

Data on this website is processed by the website operator. The operator’s contact details can be found under “Information about the controller” in this privacy notice.

How do we collect your data?

Some data is collected when you provide it to us. This may, for example, be information you enter in a contact form.

Other data is collected by our IT systems automatically or after you give your consent when visiting the website. This is primarily technical data, such as your browser, operating system or the time you access a page. This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some data is collected to ensure that the website is provided without errors. Other data may be used to analyse your usage behaviour.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request its rectification or erasure. If you have consented to processing, you may withdraw that consent at any time with effect for the future. In certain circumstances, you also have the right to request restriction of processing of your personal data. You additionally have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time about these matters or other data protection questions.

Analysis tools and third-party tools

When you visit this website, your browsing behaviour may be evaluated statistically, primarily using analysis programs.

Detailed information on these programs can be found in the privacy notice below.

2. Hosting

We host our website content with the following provider:

External hosting

This website is hosted externally. Personal data collected on this website is stored on the hosting provider’s servers. This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access records and other data generated through a website.

External hosting serves the performance of contracts with our prospective and existing customers (Article 6(1)(b) GDPR) and our interest in the secure, fast and efficient provision of our online services by a professional provider (Article 6(1)(f) GDPR). Where the relevant consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as that consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Our hosting provider will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions regarding that data.

We use the following hosting provider:

ecomDATA GmbH, Steinamangererstraße 9/16, 7400 Oberwart, Austria

Processing on our behalf

We have concluded a data processing agreement for the service mentioned above. This is an agreement required by data protection law that ensures the provider processes our visitors’ personal data only according to our instructions and in compliance with the GDPR.

3. General information and mandatory disclosures
Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy notice.

Various personal data is collected when you use this website. Personal data is data that can identify you personally. This privacy notice explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that transmitting data over the Internet, for example in email communications, may involve security vulnerabilities. It is not possible to protect data completely against access by third parties.

Information about the controller

The controller responsible for processing data on this website is:

Dominik Göke
Daunstrasse 31
26434 Wangerland

Telephone: +49 171 7452733
Email: info@label4man.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.

Storage period

Unless a more specific storage period is stated in this privacy notice, your personal data will remain with us until the purpose of processing no longer applies. If you make a valid request for erasure or withdraw your consent to processing, your data will be erased unless we have other legally permissible grounds for retaining it, such as tax or commercial-law retention periods. In that case, erasure will take place once those grounds cease to apply.

General information about the legal bases for processing data on this website

If you have consented to processing, we process your personal data on the basis of Article 6(1)(a) GDPR or, where special categories of data under Article 9(1) GDPR are processed, Article 9(2)(a) GDPR. Where you expressly consent to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. If you consent to storing cookies or accessing information on your device, for example through device fingerprinting, processing is additionally based on section 25(1) TDDDG. Consent may be withdrawn at any time. If your data is necessary to perform a contract or take pre-contractual steps, we process it on the basis of Article 6(1)(b) GDPR. We also process data on the basis of Article 6(1)(c) GDPR where necessary to comply with a legal obligation. Processing may furthermore be based on our legitimate interest under Article 6(1)(f) GDPR. The following sections of this privacy notice explain the legal bases applicable in each case.

Recipients of personal data

In the course of our business, we work with various external organisations. This sometimes requires personal data to be transferred to them. We disclose personal data to external organisations only where necessary to perform a contract, where legally required, for example disclosure to tax authorities, where we have a legitimate interest in disclosure under Article 6(1)(f) GDPR, or where another legal basis permits it. When using processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. In the case of joint processing, an agreement on joint processing is concluded.

Withdrawal of your consent to processing

Many processing operations are possible only with your express consent. You may withdraw consent already given at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to object to data collection in particular circumstances and to direct marketing (Article 21 GDPR)

IF DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE APPLICABLE LEGAL BASIS IS SET OUT IN THIS PRIVACY NOTICE. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO PROCESSING OF YOUR PERSONAL DATA FOR THAT PURPOSE. THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the alleged infringement. This right is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, yourself or through a third party, in a commonly used, machine-readable format. If you request direct transfer to another controller, this will take place only where technically feasible.

Access, rectification and erasure

Within the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of processing, and, where applicable, the right to rectification or erasure. You may contact us at any time about this or other questions concerning personal data.

Right to restriction of processing

You have the right to request restriction of processing of your personal data. You may contact us at any time for this purpose. This right applies in the following cases:

If you contest the accuracy of personal data we hold about you, we generally need time to verify it. During that verification, you have the right to request restriction of processing.
If your personal data has been or is being processed unlawfully, you may request restriction of processing instead of erasure.
If we no longer need your personal data but you require it to exercise, defend or establish legal claims, you have the right to request restriction of processing instead of erasure.
If you have objected under Article 21(1) GDPR, your interests must be weighed against ours. Until it is determined whose interests prevail, you have the right to request restriction of processing.

Where processing has been restricted, the data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection when the browser’s address line changes from “http://” to “https://” and by the padlock symbol in the browser bar.

Encryption protects data transmission between your browser and our server. It cannot guarantee complete protection against all risks of electronic communications.

4. Data collection on this website
Cookies

Our website uses cookies. Cookies are small data packages and do not harm your device. They are stored on your device either temporarily for a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain on your device until you delete them or your browser deletes them automatically.

Cookies may originate from us (first-party cookies) or third-party companies (third-party cookies). Third-party cookies enable certain services from third-party companies to be integrated into websites, for example cookies used to process payment services.

Cookies serve various functions. Many are technically necessary because certain website functions would not work without them, such as the shopping basket or displaying videos. Other cookies may be used to analyse usage behaviour or for advertising.

Storing information on your device and accessing it are governed by section 25 TDDDG. Where strictly necessary to provide a service you expressly request, consent is not required under section 25(2), point 2 TDDDG. This concerns, in particular, the shopping basket and storage of your privacy choices. Technologies that are not necessary require consent under section 25(1) TDDDG. Subsequent processing of personal data is based, depending on the purpose, on Article 6(1)(b) or (f) GDPR, or, for services requiring consent, on Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future through the privacy settings.

You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, reject cookies in particular cases or generally, and automatically delete cookies when the browser is closed. Disabling cookies may restrict this website’s functionality.

The cookies and services used on this website are described in this privacy notice.

Server logs

When you access a page, the hosting provider processes technical connection data, in particular your IP address, time, requested page, browser, operating system and, where applicable, referring page. This serves delivery of the website, error analysis and system security on the basis of Article 6(1)(f) GDPR. Data is deleted as soon as it is no longer needed for these purposes, unless a specific security incident requires further retention.

Contact form

If you send us an enquiry through the contact form, we store the information provided, including your contact details, to process the enquiry and deal with follow-up questions. We do not disclose this data without your consent.

Processing is based on Article 6(1)(b) GDPR if your enquiry relates to performance of a contract or is necessary for pre-contractual steps. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where requested. Consent may be withdrawn at any time.

Data entered in the contact form remains with us until you request erasure, withdraw consent to storage or the purpose of storage no longer applies, for example after your enquiry has been fully handled. Mandatory statutory provisions, in particular retention periods, remain unaffected.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, we store and process your enquiry, including all personal data it contains, such as your name and enquiry, to handle your request. We do not disclose this data without your consent.

Processing is based on Article 6(1)(b) GDPR if your enquiry relates to performance of a contract or is necessary for pre-contractual steps. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where requested. Consent may be withdrawn at any time.

Data sent to us through contact enquiries remains with us until you request erasure, withdraw consent to storage or the purpose of storage no longer applies, for example after your request has been fully handled. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

5. Newsletter

We send our newsletter through JTL. To register, we process your email address and the information required to demonstrate your registration and consent. The legal basis is Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future using the unsubscribe link in the newsletter, the form on our newsletter page or by emailing info@label4man.de.

After you unsubscribe, we no longer use your address to send newsletters. Records of consent and necessary suppression entries may be retained where required to fulfil legal obligations or to demonstrate and respect your withdrawal. Other data, such as order data, remains unaffected.

6. Customer account, orders and payments

When you create an account and place orders, we process the basic, contact, billing, delivery and order information you provide. This serves provision of the account, processing your order and performance of the contract (Article 6(1)(b) GDPR). Where information is needed for statutory evidence and retention purposes, processing is based on Article 6(1)(c) GDPR.

The shipping and payment providers engaged receive the data necessary for delivery and payment processing. Account data is retained for the lifetime of the customer account. Once the account ends, data no longer required is deleted; statutory retention duties and necessary evidence remain unaffected.

PayPal

If you choose a payment method offered through PayPal, the information necessary to process payment is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. This includes, in particular, the payment amount, transaction and order information, and the contact and payment details required for the chosen payment method. Our transmission serves performance of the contract under Article 6(1)(b) GDPR. PayPal also processes data as an independent controller, for example for payment processing and fraud prevention. Details, including recipients and international transfers, are available in PayPal’s privacy notice.

7. Privacy settings and external services

The fingerprint icon at the edge of the page opens the privacy settings. There you can select the optional services offered and change your choices at any time. Your choices are saved in your browser’s local storage so that they can be respected on future visits. You can also clear this storage through your browser settings; you will then need to make your choices again.

Google Translate

Google Translate is integrated for optional translation of our pages. The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you enable it, connections to Google are established, transmitting in particular your IP address and technical browser data. Page content is processed for translation. Integration is based on your consent under Article 6(1)(a) GDPR and, insofar as information is stored on or read from your device, section 25(1) TDDDG. You can withdraw consent through the privacy settings. Further information: Google’s privacy notice.

dash.bar

We integrate dash.bar from WebStollen GmbH, Prinz-Ludwig-Str. 17, 93055 Regensburg, to evaluate shop usage. Pages visited, usage events and technical information about your browser and device may be processed. The analysis serves to improve our services. Optional usage analysis relies on your consent (Article 6(1)(a) GDPR and, for access to your device, section 25(1) TDDDG). You can withdraw this through the privacy settings. Further information: privacy at WebStollen and dash.bar.

YouTube and Vimeo

Our privacy settings include permissions for embedded YouTube and Vimeo videos. If a page contains such a video, you can manage its permission there or in the privacy settings. When this content loads, providers may receive your IP address, technical device data and information about the video request and may use their own storage technologies. Permission is based on your consent under Article 6(1)(a) GDPR and, where applicable, section 25(1) TDDDG. It may be withdrawn at any time.

Further information on the providers and their processing: YouTube/Google privacy and Vimeo privacy.

Product search

We use JTL Search for product searches. Search terms entered are processed to identify matching products and search suggestions. The basis is our legitimate interest in a usable product search under Article 6(1)(f) GDPR. Please do not enter confidential or personal information in the product search. Further details on the service are available under privacy at JTL.

Processing outside the EU and EEA

External services, particularly those of Google, Vimeo and PayPal, may process data outside the European Union and European Economic Area. Such transfers are additionally subject to Articles 44 et seq. GDPR, for example an applicable adequacy decision or appropriate safeguards such as EU standard contractual clauses. The provider explains the recipients, countries and safeguards it relies on in the privacy information linked above.