Privacy Policy

SHOPMACHER eCommerce GmbH & Co. KG
Am Campus 5
48712 Gescher
Phone: +49 2542 8703 0
Fax: +49 2542 8703 139
E-mail: info@shopmacher.de

Change privacy settings // History of privacy settings // Withdraw consents

E-mail: datenschutz@shopmacher.de

Depending on the customer relationship, we process the following categories of your personal data:

• Contact data (e.g. name, address, e-mail address, telephone number)

• Contract data within the scope of our customer relationships

• Payment and billing data (e.g. bank account details)

The personal data concerning you are processed for the following purposes and on the basis of the following legal basis:

• Performance of the customer relationship (Art. 6(1)(b) GDPR)

• Data processing based on our legitimate interest (Art. 6(1)(f) GDPR)

• Data processing based on your consent (Art. 6(1)(a) GDPR)

The processing based on legitimate interests comprises the use and analysis of your personal data for:

• Product information and services

• Measures to improve and develop services and products, in order to be able to offer you an individual approach with suitable offers and products

• Conducting market and opinion research

• Creating transparency and quality of our products, services and communication

In addition, we process data to fulfil legal obligations (e.g. due to commercial or tax law requirements) on the basis of Art. 6(1)(c) GDPR.

We collect your personal data directly from you, e.g. in the contact form or in direct enquiries to us.

A disclosure or transfer of your personal data takes place within the scope of the aforementioned purposes. Recipients of personal data may, for example, be:

• Billing service providers and IT service providers

• Marketing agencies

• Market research institutes

• Service and cooperation partners

• Printing and shipping service providers

• Data destruction service providers

• Consultants and consulting firms

Where a transfer of data takes place, this generally occurs within the scope of processing on behalf (Auftragsverarbeitung). Our service providers are contractually obliged for this purpose to secure, confidential and correct processing.

The processing of personal data takes place primarily within the territory of the European Union (EU), insofar as we operate in these countries. A transfer of data outside the EU (to third countries) or to international organisations takes place only if the special requirements of Art. 44 et seq. GDPR are met.

Personal data are stored for the stated purposes for the duration required to fulfil the purposes and where no other statutory retention obligations (HGB, German Commercial Code; Abgabenordnung, German Fiscal Code) or legal grounds for storage exist. This means that after expiry of the statutory retention obligations, as a rule 10 years after the end of the contract, we delete your personal data.

In particular, you have the following rights vis-a-vis us regarding your personal data:

• Right of access to your stored personal data (Art. 15 GDPR)

• Right to rectification if the stored data concerning you are incorrect, outdated or inaccurate (Art. 16 GDPR)

• Right to erasure if the storage is unlawful, the purpose of the processing has been fulfilled and the storage is therefore no longer necessary, or you have withdrawn a consent given for the processing of certain personal data (Art. 17 GDPR)

• Right to restriction of processing if one of the conditions set out in Art. 18(1)(a) to (d) GDPR is met (Art. 18 GDPR)

• Right to portability of the personal data concerning you that you have provided (Art. 20 GDPR)

• Right to withdraw a consent given, whereby the withdrawal does not affect the lawfulness of the processing carried out on the basis of the consent up to that point (Art. 7(3) GDPR)

• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The authority responsible for us is:

Die Landesbeauftragte fur Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia), Postfach 20 04 44, 40102 Dusseldorf, Tel. 0211 384 24-0, Fax: 0211 38424-10, E-mail: poststelle@ldi.nrw.de

You may object to us at any time, without giving reasons, to the processing of your personal data for the purposes of direct advertising and/or market research.

After receipt of the objection, we will no longer process the personal data for the purposes of direct advertising and/or market research, and will delete the data, unless processing is necessary for other purposes (for example to perform the contract). You may also object to us at any time, on grounds relating to your particular situation and stating those grounds, to other processing that we base on a legitimate interest within the meaning of Art. 6(1)(f) GDPR. In the case of a justified objection, we will as a rule no longer process the personal data for the purposes concerned and will delete the data, unless we can demonstrate compelling grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

Please address the objection to the address stated at the beginning.

The information presented also applies to the following special uses, unless other provisions have been made.

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data are collected in this process:

• Information about the browser type and the version used

• The user's operating system

• The user's internet service provider

• The user's IP address

• Date and time of access

• Websites from which the user's system reaches our website

• Websites that are accessed by the user's system via our website

The data are likewise stored in the log files of our system. Storage of these data together with other personal data of the user does not take place.

The legal basis for the temporary storage of the data and the system log files is Art. 6(1)(f) GDPR.

Storage in system log files takes place in order to ensure the functionality of our website. In addition, the data serve us to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. The data are deleted as soon as they are no longer necessary to achieve the purpose of their collection. In the case of storage of the data in system log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are deleted or anonymised, so that assignment to the accessing client is no longer possible.

You can apply online for our job offers on this website. In the course of the application, in addition to your contact data, we also process data submitted by you regarding your CV and qualifications as well as photos. The data are used exclusively for the application process and are deleted after six months. Only core data for comparison with earlier applications are deleted after 24 months.

The legal basis for the processing of the application data is pre-contractual measures pursuant to Art. 6(1)(b) GDPR. The legal basis for the processing of the core data is our own legitimate interest pursuant to Art. 6(1)(f) GDPR.

We collect and process the personal data of applicants for the purpose of handling the application procedure, which may also take place electronically. This is in particular the case if applicants submit corresponding application documents electronically, for example by e-mail or via a web form located on the website. If an employment contract is concluded with an applicant, the transmitted data are stored for the purpose of handling the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents are automatically deleted six months after the notification of the rejection decision, provided that no other legitimate interests oppose deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG, Allgemeines Gleichbehandlungsgesetz).

A "cookie" is a small data file that is transferred from a website to your computer's hard drive. We use cookies when you browse our site, request or personalise information, or register for certain services. If you accept the cookies on our site, we do not have access to your personal information, but with the help of the cookies we can identify your computer. Cookies are generally distinguished into "session" and "permanent" cookies.

"Session" cookies do not remain on your computer when you leave our website or close your browser. With the help of the information gathered, we can analyse usage patterns and structures of our website. In this way, we can optimise our website by improving the content or personalisation and simplifying use.

"Permanent" cookies are cookies that remain on your computer. They are used to simplify personalisation and registration services. This means that you only have to enter your password once on websites for which a login is required. "Permanent" cookies can be removed manually by the user.

Most browsers accept cookies by default. However, you can normally reject cookies or selectively accept certain cookies by adjusting the browser settings accordingly. If you disable cookies, certain features on our site may not be available to you, and some web pages may not be displayed correctly.

(Facebook Pixel, Facebook Custom Audiences and Facebook Conversion.) Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used, operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

With the help of the Facebook Pixel, it is possible for Facebook to determine visitors of our online offering as a target group for the display of advertisements ("Facebook Ads"). Accordingly, we use the Facebook Pixel in order to display the Facebook Ads placed only to those users who have also shown an interest in our online offering (so-called "Custom Audiences"), and to track the effectiveness of the advertisements for statistical and market research purposes (so-called "Conversion").

We use Google Analytics, a web analytics service of Google LLC ("Google"). Google Analytics uses "cookies", text files that are stored on your computer and enable an analysis of the use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server and stored there. On this website, IP anonymisation is activated, so that your IP address is shortened by Google beforehand within the EU or the EEA.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide further services connected with website use. The personal data are deleted or anonymised after 14 months. You can prevent the collection via the consent management or browser settings.

On this website, data are collected and stored for marketing, market research and optimisation purposes using the SalesViewer® technology of SalesViewer® GmbH on the basis of your consent (Art. 6(1)(a) GDPR). For this purpose, a JavaScript-based code is used that serves to collect company-related data. The data collected with this technology are encrypted via a non-reversible one-way function (so-called hashing). The data are immediately pseudonymised and are not used to personally identify the visitor of this website. The stored data are deleted as soon as they are no longer necessary for their intended purpose and no statutory retention obligations oppose deletion. The collection and storage of data can be objected to at any time with effect for the future via the opt-out link: https://www.salesviewer.com/opt-out. In doing so, an opt-out cookie is placed on your device.

A contact form is available on our website, which you can use for electronic contact. In this process, the data entered in the input mask, as well as the date and time and your IP address, are stored. Your consent is obtained for the processing of the data. Alternatively, contact is possible via the e-mail address provided; in this case, your personal data transmitted with the e-mail are stored.

The processing serves solely to handle the contact or the conversation with you. Herein also lies the legitimate interest in the processing of the data.

We maintain online presences within the social networks. The aim of these presences is to be able to communicate with the users active there and to inform them about our products and services.

When accessing our profiles in the social networks, the terms and conditions and data processing policies of the respective operators apply. Unless otherwise stated, we process users' data insofar as they communicate with us within the social networks. The transmission of personal data on these platforms is always voluntary.

Zur Einholung und Verwaltung von Einwilligungen setzen wir den Consent-Manager Usercentrics ein, angeboten von der Usercentrics GmbH, Sendlinger Straße 7, 80331 München. Beim Aufruf unserer Website erhebt Usercentrics Informationen zu Ihrer Einwilligungsentscheidung (eingewilligte oder abgelehnte Kategorien), Datum und Uhrzeit, Geräte- und Browserinformationen sowie eine anonymisierte IP-Adresse.

Zweck ist der Nachweis erteilter oder verweigerter Einwilligungen (Dokumentationspflicht). Rechtsgrundlage ist Art. 6 Abs. 1 lit. c DSGVO (rechtliche Verpflichtung) sowie unser berechtigtes Interesse an einer rechtskonformen Einwilligungsverwaltung nach Art. 6 Abs. 1 lit. f DSGVO. Ihre Einstellungen können Sie jederzeit über den Link „Privatsphäre-Einstellungen“ anpassen.

Wir nutzen den Google Tag Manager der Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Der Tag Manager ist ein Werkzeug zur Verwaltung von Website-Tags und setzt selbst keine Cookies und speichert keine personenbezogenen Daten zu Analyse- oder Marketingzwecken. Er dient dazu, andere Dienste erst nach Ihrer Einwilligung auszulösen.

Die über den Tag Manager eingebundenen Dienste werden ausschließlich auf Grundlage Ihrer Einwilligung aktiviert (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TDDDG).

Unsere Website wird bei der Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, gehostet. Beim Aufruf der Website werden technisch notwendige Daten verarbeitet, insbesondere IP-Adresse, Datum und Uhrzeit des Zugriffs, aufgerufene Seiten sowie Browser- und Geräteinformationen (Server-Logs).

Zweck ist die sichere, stabile und effiziente Bereitstellung der Website. Rechtsgrundlage ist unser berechtigtes Interesse nach Art. 6 Abs. 1 lit. f DSGVO. Mit Vercel besteht ein Auftragsverarbeitungsvertrag. Da eine Verarbeitung in den USA erfolgt, stützt sich die Übermittlung auf das EU-US Data Privacy Framework bzw. auf Standardvertragsklauseln.

Zur Messung der Websitenutzung und der Ladeperformance setzen wir Vercel Analytics und Vercel Speed Insights (Vercel Inc.) ein. Diese Dienste arbeiten nach Angaben des Anbieters cookiefrei und erheben aggregierte, nicht auf einzelne Personen zurückführbare Nutzungs- und Performancedaten.

Zweck ist die statistische Auswertung und technische Optimierung der Website. Rechtsgrundlage ist unser berechtigtes Interesse nach Art. 6 Abs. 1 lit. f DSGVO.

Die Inhalte unserer Website werden über das Headless-CMS Storyblok bereitgestellt, angeboten von der Storyblok GmbH, Peter-Behrens-Platz 10, 4020 Linz, Österreich. Bei der Auslieferung der Inhalte über das Content-Delivery-Netzwerk kann Ihre IP-Adresse verarbeitet werden.

Zweck ist die technische Bereitstellung und Auslieferung der Website-Inhalte. Rechtsgrundlage ist unser berechtigtes Interesse nach Art. 6 Abs. 1 lit. f DSGVO.

Wir binden Videos von YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland) und Vimeo (Vimeo.com, Inc., 555 West 18th Street, New York, New York 10011, USA) ein. Erst mit Ihrer Einwilligung wird beim Abspielen eine Verbindung zu den Servern des jeweiligen Anbieters hergestellt, wobei unter anderem Ihre IP-Adresse und Informationen zum abgespielten Video übermittelt werden. YouTube binden wir, soweit möglich, im erweiterten Datenschutzmodus ein.

Rechtsgrundlage ist Ihre Einwilligung nach Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG. Bei einer Übermittlung in die USA stützt sich diese auf das EU-US Data Privacy Framework bzw. Standardvertragsklauseln.

Zur Einbindung unseres Podcasts nutzen wir den Player von Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Schweden. Beim Abspielen wird eine Verbindung zu den Servern von Spotify hergestellt und dabei unter anderem Ihre IP-Adresse übermittelt. Die Einbindung erfolgt erst nach Ihrer Einwilligung.

Rechtsgrundlage ist Ihre Einwilligung nach Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG.

Unser Kontaktformular wird über Zoho Forms bereitgestellt, angeboten von der Zoho Corporation B.V. (europäisches Rechenzentrum, forms.zohopublic.eu). Die von Ihnen im Formular eingegebenen Daten (z. B. Name, E-Mail-Adresse, Unternehmen und Ihre Nachricht) werden zur Bearbeitung Ihrer Anfrage verarbeitet.

Rechtsgrundlage ist Art. 6 Abs. 1 lit. b DSGVO (Anbahnung eines Vertragsverhältnisses) bzw. unser berechtigtes Interesse an der Beantwortung Ihrer Anfrage nach Art. 6 Abs. 1 lit. f DSGVO. Die Verarbeitung erfolgt in einem Rechenzentrum innerhalb der EU.

Für die Verwaltung von Bewerbungen setzen wir die Software Personio ein, angeboten von der Personio SE & Co. KG, Seidlstraße 3, 80335 München. Im Rahmen Ihrer Bewerbung verarbeitete Daten (z. B. Kontaktdaten, Lebenslauf, Anschreiben und Zeugnisse) werden zur Durchführung des Bewerbungsverfahrens gespeichert und verarbeitet.

Rechtsgrundlage ist Art. 6 Abs. 1 lit. b DSGVO in Verbindung mit § 26 Abs. 1 BDSG (Begründung eines Beschäftigungsverhältnisses). Nach Abschluss des Verfahrens werden die Daten gelöscht, sofern keine gesetzlichen Aufbewahrungspflichten bestehen oder Sie einer weiteren Speicherung zugestimmt haben.

Wir nutzen das LinkedIn Insight Tag der LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland. Damit werden nach Ihrer Einwilligung Informationen zu Ihrem Besuch und Ihrem Nutzungsverhalten erhoben, um die Reichweite unserer Kampagnen auszuwerten und Websitefunktionen zu verbessern.

Rechtsgrundlage ist Ihre Einwilligung nach Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG. Bei einer Übermittlung in die USA stützt sich diese auf das EU-US Data Privacy Framework bzw. Standardvertragsklauseln.

Zur Vereinbarung von Terminen setzen wir Calendly ein, angeboten von der Calendly LLC, 271 17th St NW, Suite 1000, Atlanta, GA 30363, USA. Wenn Sie über Calendly einen Termin buchen, werden die von Ihnen angegebenen Daten (z. B. Name, E-Mail-Adresse und Terminwunsch) zur Organisation und Durchführung des Termins verarbeitet.

Rechtsgrundlage ist Art. 6 Abs. 1 lit. b DSGVO bzw. Ihre Einwilligung nach Art. 6 Abs. 1 lit. a DSGVO. Da Calendly Daten in den USA verarbeitet, stützt sich die Übermittlung auf das EU-US Data Privacy Framework bzw. Standardvertragsklauseln.