Privacy

Sect. 1 General

We will process your personal data (e.g. title, name, address, e-mail address, phone number, bank details, credit card number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarise yourself with the respective use of your data there.

Sect. 2 Data processing for the performance of contracts

(1) Purpose of data processing
Your personal data you provide us during the ordering process are necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we would not be able to send you the goods without your address. For some payment methods we ask for the necessary payment data in order to pass them on to a payment service provider commissioned by us. Hence, the processing of your data collected during the ordering process is soley for the purpose of contract performance.

If you send us a request by e-mail or by using the contact form, etc. before concluding the contract, we process the obtained data to carry out pre-contractual measures and answer your questions about e.g. our products.

(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (b) of the GDPR.

(3) Recipient categories
Payment service provider, shipping service provider, hosting provider, if necessary merchandise management system, suppliers if necessary (drop-shipping).

(4) Duration of Storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.

We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).

The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.

Sect. 3 Comments

(1) Purpose of data processing
Adding comments is possible. Your personal data (e.g. name/pseudonym, email address, website) collected in this scope will be solely processed for the purpose of publishing your comments.

(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.

(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on specific topics and products. The publication serves, among other things, the purpose of transparency and opinion-forming. Your interest in data protection is preserved, as you can publish your comment under a pseudonym.

(4) Duration of Storage
There is no provision for a certain storage period. You may request the deletion of your comment at any time.

(5) Right of objection
You have the right to object at any time to the processing of data which was performed according to Article 6 (1)(f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.

In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.

Sect. 4 Credit Check

Please note the following privacy policy: When paying via the payment methods "secupay debit", "secupay credit card" and "secupay bill purchase" the purchase price claim is assigned to the secupay AG, Goethestraße 6, 01896 Pulsnitz, Germany. The debit of your bank or credit card account takes place upon completion of the order. The data required for payment processing will be forwarded to secupay AG or secupay S.A. transmitted. Secupay SA or secupay S.A. possibly a credit check. Information on your previous payment history and credit information based on mathematical-statistical procedures using address data (scoring) are obtained from the following credit reporting agencies:

- infoscore Consumer Data GmbH, Rheinstrasse 99, 76532 Baden-Baden, Germany
- Creditreform Boniversum GmbH, Hellersbergstr. 11, 41460 Neuss, Germany.

Further information on the processing and storage of your data can be obtained directly from secupay AG.

Sect. 5 Information about cookies

(1) Purpose of data processing
This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable, for example, the inserting of several products in a shopping basket.

(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.

(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This preserves your interest in data protection.

(4) Duration of Storage
The technically necessary cookies are usually deleted when the browser is closed. Persistent cookies have different validity period from a few minutes to several years.

(5) Right of objection
If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website. You can also delete persistent cookies at any time by changing your browser settings.

Sect. 6 PayPal-Transactions

Please note that all PayPal transactions are subject to the PayPal Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Sect. 7 Rights of the data subject

If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards the controller:

1. Right of access by the data subject

You may ask the controller to confirm whether your personal data is processed.

In the case of such processing, you may request the following information from the controller:

(1) the purposes of the processing of the personal data;

(2) the categories of personal data concerned;

(3) the recipients or categories of recipient to whom the personal data have been or will be disclosed;

(4) the estimated period of time for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

(5) the right to request from the controller to rectify or erase the personal data or the right to restrict the processing of personal data concerning the data subject or to object to such processing;

(6) the right to lodge a complaint with a supervisory authority;

(7) the right to all available information on the source of the data if the personal data are not collected from the data subject;

(8) the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) of the GDPR and - at least in these cases - meaningful information for your about the logic involved, as well as the consequences and intended effects of such processing.

As a data subject, you have the right to be informed whether the personal data concerning you are transferred to a third country or to an international organisation. In this regard, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

2. Right to rectification

You have the right to have corrected and/or completed your personal data from the controller if your personal data processed is incorrect or incomplete. The controller has to make the correction without delay.

3. Right to restriction of processing

You have the right to obtain from the controller restriction of processing where one of the following applies:

(1) if you contest the accuracy of the personal data relating to you for a period of time that enables the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse to erase the personal data and request the restriction of the use of the personal data instead;

(3) the controller no longer needs the personal data for the purposes of processing, but you need them to establish, exercise or defend legal claims; or

(4) if you have lodged an objection against the processing in accordance with Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your grounds.

Where processing of personal data relating to you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the purpose of establishing, exercising or defending legal claims or for the protecting of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the conditions mentioned above, you will be informed by the controller before the restriction of processing is lifted.

4. Right to erasure

a) Obligation regarding erasure

You have the right to obtain from the controller the erasure of your personal data immediately and the controller is obliged to erase this data without delay where one of the following reasons applies:

(1) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

(2) you withdraw your consent on which the processing is based accordance to point (a) of Article 6 (1), or point (a) of Article 9 (2) GDPR and where there is no other legal ground for the processing;

(3) you submit an objection to the processing accordance to Article 21 (1) of the GDPR, and there are no legitimate reasons for the processing, or you lodge an objection against the processing accordance to Article 21 (2) of the GDPR;

(4) your personal data have been unlawfully processed;

(5) your personal data need to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;

(6) your personal data have been collected in relation to the offer information society services referred to Article 8 (1);

b) Obligation to inform other controllers (third parties)

If the controller has made your personal data public and is obliged to erase them accordance to Article 17 (1) of the GDPR, he has to take reasonable steps, taking into account the available technology and the cost of implementation, including technical measures, to inform the controllers who process the personal data that you, as the person concerned, have requested the erasure of any links to, or copy or replication of those personal data.

c) Exceptions

The right to erasure does not apply to the extent that processing is necessary:

(1) for exercising the right of freedom of expression and information;

(2) for fulfilment of a legal obligation which requires processing by the law of the Union or of the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or the exercise of official authority transferred to the controller;

(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9 (2) as well as Article 9 (3) of the GDPR;

(4) for archiving purposes in the public interest, scientific or historical research or for statistical purposes in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 is likely to make it impossible or seriously impair the achievement of the objectives of such processing; or

(5) for the establishing, exercising or defending legal claims.

5. Notification obligation

If you have made use of your right to correct, erase or restrict the processing of your personal data, the controller is obliged to inform all recipients to whom the personal data have been disclosed of this correction or erasure of the data or limitation of the processing, unless this proves to be impossible or involves a disproportionate effort.

You have the right to be informed of these recipients by the controller.

6. Right to data portability

You have the right to receive the personal data relating to you which you have provided to the data controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance by the controller, who has been provided with the personal data, where:

(1) the processing is based on a consent in accordance with the point (a) of Article 6 (1) or point (a) of Article 9 (2) or on a contract in accordance with the point (b) of Article 6 (1); and

(2) the processing is carried out using automated means.

In exercising this right, you also have the right to have your personal data are transmitted directly from one controller to another, as far as this is technically feasible. Freedoms and rights of other persons may not be affected thereby.

The right to data portability is not applicable to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority given to the data controller.

7. Right to object

For reasons arising from your particular situation, you have the right to object at any time to processing of personal data concerning you, which is carried out based on point (e) or (f) of Article 6 (1); this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you, unless the controller can prove that there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.

Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

Where you object to the processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right to object by automated means using technical specifications.

8. Right to withdraw the declaration of consent under Data Protection Act

You have the right to withdraw your declaration of consent under Data Protection Act at any time. The withdrawal of the consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal.

9. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on you or which significantly impairs you in a similar manner.

This does not apply if the decision:

(1) is necessary for entering into, or performance of, a contract between you and a data controller;

(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or

(3) is based on your explicit consent.

However, these decisions may not be based on special categories of personal data in accordance with Article 9 (1), unless point (a) or (g) of Article 9 (2) applies and appropriate measures to safeguard the rights and freedoms and your legitimate interests are in place.

Regarding the cases referred to in (1) and (3), the data controller has to take appropriate measures to safeguard the rights and freedoms and your legitimate interests, at least the right to obtain human intervention on the part of the data controller, to state his or her own position and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this Regulation.

The supervisory authority with which the complaint has been lodged is to inform the complainant on the progress and the outcome of the complaint including the possibility of judicial remedy accordance to Article 78.

Responsible for data processing:
WLAN-Shop24.de
Diversitas Hamburg GmbH
Von-Bargen-Straße 34
22041 Hamburg
Germany
Phone: +49-40-20906700
Info@WLAN-Shop24.de

§ 1 General

Your personal data (e.g., title, name, address, email address, phone number, bank details, credit card number) will be processed by us only in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following regulations provide information about the purposes of processing, recipients, legal bases, storage periods, as well as your rights and the party responsible for processing your data. This privacy policy only applies to our websites. If you are redirected to other sites through links on our pages, please inform yourself there about the respective handling of your data.

§ 2 Data Processing for Contract Fulfillment

(1) Purpose of Processing Your personal data provided during the ordering process is necessary for entering into a contract with us. You are not obliged to provide your personal data. However, without providing your address, we cannot send you the goods. For some payment methods, we need the necessary payment data to pass it on to a payment service provider commissioned by us. Processing of your entered data in the ordering process is therefore carried out for the purpose of contract fulfillment. If you make an inquiry via email, a contact form, etc., before the conclusion of the contract, we process the data received in this way to carry out pre-contractual measures and, for example, answer your questions about our products.

(2) Legal Basis The legal basis for this processing is Art. 6(1)(b) GDPR.

(3) Categories of Recipients Payment service providers, shipping service providers, hosting providers, if necessary, merchandise management system, if necessary, suppliers (dropshipping).

(4) Storage Duration The data required for the processing of the contract will be stored until the expiry of the statutory warranty and, if applicable, contractual guarantee periods. Data required for the execution of pre-contractual measures will be deleted once these measures have been carried out and it is apparent that no contract will be concluded.

§ 3 Comments

(1) Purpose of Processing There is the option to leave a comment. Your data (e.g., name/pseudonym, email address, website) will only be processed for the purpose of publishing your comment.

(2) Legal Basis The legal basis for this processing is Art. 6(1)(f) GDPR.

(3) Legitimate Interest Our legitimate interest is the public exchange of user opinions on specific topics and products. The publication serves, among other things, transparency and opinion-forming. Your interest in data protection is preserved since you can publish your comment under a pseudonym.

(4) Storage Duration A specific storage duration is not provided. You can request the deletion of your comment at any time.

(5) Right to Object You have the right to object to data processing based on Art. 6(1)(f) GDPR and not serving direct marketing, for reasons arising from your particular situation, at any time. In the case of direct marketing, you can object to processing at any time without stating reasons.

§ 4 Web Analysis with Google Analytics

(1) Purpose of Processing This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses "cookies," text files stored on your computer, to analyze your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be truncated within the member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website usage and internet usage to the website operator.

(2) Legal Basis The legal basis for this processing is Art. 6(1)(f) GDPR.

(3) Legitimate Interest Our legitimate interest is the statistical analysis of user behavior for optimization and marketing purposes. To protect your interest in data protection, this website uses Google Analytics with the "anonymizeIP()" extension, ensuring that IP addresses are processed in a shortened form to prevent direct personal reference.

(4) Categories of Recipients Google, partner companies.

(5) Transmission to a Third Country Google Ireland Limited is an affiliated company of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043) and is certified under the US-European Data Protection Agreement "Privacy Shield," ensuring compliance with the level of data protection applicable in the EU.

(6) Storage Duration Unlimited

(7) Right to Object You can prevent the storage of cookies by adjusting your browser software accordingly. However, please note that, in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: Google Analytics Opt-out Browser Add-on. You can also prevent collection by setting an opt-out cookie. If you wish to prevent future data collection when visiting this website, please click here: Deactivate Google Analytics.

§ 5 PayPal Transactions

If you choose to pay using the online payment service provider PayPal during your order process, your contact details will be transmitted to PayPal as part of the initiated order. PayPal is offered by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal functions as an online payment service provider and trustee, providing buyer protection services.

(2) The personal data transmitted to PayPal usually includes first name, last name, address, phone number, IP address, email address, or other data required for order processing, as well as data related to the order, such as the number of items, item numbers, invoice amount and taxes in percentage, invoice information, etc.

(3) This transmission is necessary to process your order with the selected payment method, particularly to confirm your identity, administer your payment, and manage the customer relationship. Please note, however, that PayPal may also disclose personal data to service providers, subcontractors, or other affiliated companies to the extent necessary to fulfill the contractual obligations from your order or if personal data is to be processed on behalf.

(4) Depending on the payment method selected via PayPal, such as invoice or direct debit, personal data transmitted to PayPal may be disclosed to credit reporting agencies. This disclosure is for identity and creditworthiness checks related to your order. Details about which credit reporting agencies are involved and which data is generally collected, processed, stored, and shared by PayPal can be found in PayPal's privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.

§ 6 Uptain

To enhance interaction with our visitors, we use a JavaScript plugin from uptain GmbH ("uptain plugin" https://www.uptain.de). This allows us to analyze your use of the website and improve customer engagement (e.g., through a dialog window). To achieve this, we collect information about your usage behavior, such as cursor movement, dwell time, clicked links, and any information you provide. The legal basis for this processing is our legitimate interest in direct marketing and the provision of our website (Art. 6(1)(f) GDPR). uptain GmbH strictly adheres to our instructions as a data processor. The collected information is not shared with third parties unless required by law. If personal data is included in the information collected by the uptain plugin, it will be deleted immediately after your visit to our website.

You can deactivate the uptain plugin at any time using the following link: https://www.wlan-shop24.de/datenschutz?__up_tracking_unsubscribe

§ 7 Information about Cookies

(1) Processing Purpose: This website uses technically necessary cookies. These are small text files that are stored in or by your internet browser on your computer system. These cookies enable, for example, the placement of multiple products in a shopping cart.

(2) Legal Basis: The legal basis for this processing is Art. 6(1)(f) GDPR.

(3) Legitimate Interest: Our legitimate interest is the functionality of our website. User data collected through technically necessary cookies is not used to create user profiles, preserving your interest in data protection.

(4) Storage Duration: Technically necessary cookies are usually deleted when you close your browser. Persistently stored cookies have varying lifespans, ranging from several minutes to several years.

(5) Right to Object: If you do not wish to store these cookies, please disable the acceptance of these cookies in your internet browser. However, this may result in a limitation of the functionality of our website. Persistently stored cookies can also be deleted at any time through your browser.

§ 8 Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights against the data controller:

Right to Information: You can request confirmation from the data controller as to whether personal data concerning you is being processed. If such processing exists, you can obtain information from the data controller about the purposes, categories of personal data, recipients, storage duration, and other details.
Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected or completed by the data controller without undue delay.
Right to Restriction of Processing: Under certain conditions, you can request the restriction of the processing of your personal data.
Right to Erasure: You can request the deletion of your personal data under certain conditions.
Right to Information to Third Parties: If the data controller has disclosed your personal data and is obligated to delete it, the data controller must inform third parties about the deletion, unless it is impossible or involves disproportionate effort.
Right to Data Portability: You have the right to receive your personal data, which you provided to the data controller, in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller.
Right to Object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you based on legitimate interests or for the performance of a task carried out in the public interest.
Right to Withdraw Consent: If the processing is based on your consent, you have the right to withdraw your consent at any time.
Automated Decision-Making, Including Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Right to Lodge a Complaint with a Supervisory Authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR.

Data Controller for Data Processing:

Diversitas Hamburg GmbH
Von-Bargen-Straße 34
22041 Hamburg
Phone: +49-40-20906700
Info@WLAN-Shop24.de