DATA PROTECTION

Data protection

General information and mandatory information

Designation of the responsible body

The responsible body for data processing on this website is:

YQU GmbH
Anna Ruckaberle
Oberkircher Str. 16/1
71034 Böblingen

Germany

info@yqu.de

We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below we will inform you in detail about how your data is handled. The responsible body decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).

1. Your rights and consents

Revocation of your consent to data processing

Some data processing operations are only possible with your express consent. You can revoke the consent you have already given at any time. An informal notification by email is sufficient to revoke your consent. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to lodge a complaint with the relevant supervisory authority

As a data subject, you have the right to lodge a complaint with the responsible supervisory authority in the event of a data protection violation. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details:https://www.bfdi.bund.de/DE/Infothek/Anschrift_Links/anschrift_links-node.html.

Right to data portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to third parties. It is provided in a machine-readable format. If you request the data to be transferred directly to another person responsible, this will only be done if it is technically feasible.

Right to information, correction, blocking, deletion

At any time, within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if necessary, a right to correct, block or delete this data. In this regard and also if you have any further questions on the subject of personal data, you can contact us at any time using the contact options listed in the legal notice.

2. Access data

You can visit our websites without providing any personal information. Every time a website is accessed, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data) and documents the retrieval. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offering. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in a correct presentation of our offer in accordance with Art. 6 Para. 1 S lit. F GDPR.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses an SSL or. TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line in your browser and by the lock symbol in the browser line.

3. Data processing for contract processing and contact

Data transmission when concluding a contract for the purchase and shipping of goods

Personal data will only be transmitted to third parties if necessary in the context of contract processing. Third parties can be, for example, payment service providers or logistics companies. No further transmission of data will take place or only if you have expressly agreed to this.

The basis for data processing is Article 6 Paragraph 1 Letter b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.

Registration on this website

To use certain functions, you can register on our website. The data transmitted is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full. Otherwise we will reject the registration.

In the event of important changes, for example for technical reasons, we will inform you by email. The email will be sent to the address provided during registration.

The data entered during registration is processed based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke the consent you have already given at any time. An informal notification by email is sufficient to revoke your consent. The legality of the data processing that has already taken place remains unaffected by the revocation.

We store the data collected during registration for the period that you are registered on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected.

contact form

Data transmitted via the contact form, including your contact details, will be stored in order to be able to process your request or to be available to answer follow-up questions. This data will not be passed on without your consent.

The data entered into the contact form is processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke the consent you have already given at any time. An informal notification by email is sufficient to revoke your consent. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation.

Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent to storage or there is no longer any need to store the data. Mandatory legal provisions - in particular retention periods - remain unaffected.

Data processing for contract processing

For the purpose of contract processing (including inquiries about and processing of any existing warranty and service disruption claims as well as any legal update obligations) in accordance with Article 6 Paragraph 1 Sentence 1 Letter B GDPR, we collect personal data if you provide it to us as part of your Submit your order voluntarily. Mandatory fields are marked as such because in these cases we absolutely need the data to process the contract and we cannot send the order without providing it. Which data is collected can be seen from the respective input forms.

Further information on the processing of your data, in particular on the transfer to our service providers for the purposes of order, payment and shipping processing, can be found in the following sections of this data protection declaration. After the contract has been fully processed, your data will be restricted for further processing and deleted after the expiry of the tax and commercial law retention periods in accordance with Art. 6 Para. 1 lit. C GDPR, unless you expressly consent to further use of your data in accordance with Art 1 lit.

4. Data processing for the purpose of shipping processing

In order to fulfill the contract in accordance with Art. 6 Para. 1 lit.b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

Data transfer to shipping service providers for the purpose of shipping notification

If you have given us your express consent to this during or after your order, we will pass on your email address and telephone number to the selected shipping service provider in accordance with Art. 6 Para. 1 lit.a GDPR so that they can do so before delivery for the purpose of We can contact you for delivery notification or coordination.

Consent can be revoked at any time by sending a message to the contact option described in this data protection declaration or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

DHL Parcel GmbH

Sträßchenweg 10

53113 Bonn

Germany

General Logistics Systems Germany GmbH & Co. OHG

GLS Germany-Straße 1-7

36286 Neuenstein

Germany

5. Data processing for payment processing

When processing payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.

Data processing for transaction processing

Depending on the payment method selected, we pass on the data necessary to process the payment transaction to our technical service providers who work for us as part of order processing, or to the commissioned credit institutions or to the selected payment service provider, to the extent that this is necessary to process the payment. This serves to fulfill the contract in accordance with Article 6 Paragraph 1 Letter b GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, for example on their own website or via a technical integration in the ordering process. The data protection declaration of the respective payment service provider applies.

If you have any questions about our payment processing partners and the basis of our cooperation with them, please contact us using the contact option described in this data protection declaration.

PayPal

Our website allows payment via PayPal. The payment service provider is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg.

If you pay with PayPal, the payment details you entered will be transmitted to PayPal.

Your data will be transmitted to PayPal on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfill a contract). You can revoke the consent you have already given at any time. Past data processing operations remain effective if revoked.

Klarna

Our website allows payment via Klarna. The payment service provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

When paying with Klarna (Klarna checkout solution), Klarna collects various personal data from you. Details can be found in Klarna’s privacy policy at:https://www.klarna.com/de/datenschutz/.

Klarna uses cookies to optimize the Klarna checkout solution. This optimization represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f of the GDPR. Cookies are small text files that your web browser stores on your device. Klarna cookies remain on your device until you delete them. Details on the use of Klarna cookies can be found at:https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

Your data will be transmitted to Klarna on the basis of Article 6 (1) (a) GDPR (consent) and Article 6 (1) (b) GDPR (processing to fulfill a contract). You can revoke the consent you have already given at any time. Past data processing operations remain effective if revoked.

Instant bank transfer

Our website allows payment via “Sofortüberweisung.” The provider of the payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich.

With the help of the “Sofortüberweisung” procedure, we receive a payment confirmation from Sofort GmbH in real time and can begin fulfilling our obligations immediately.

When paying via “Sofortüberweisung” your PIN and TAN are transmitted to Sofort GmbH. The payment provider logs into your online banking account, automatically checks your account balance and makes the transfer. An immediate transaction confirmation follows. Your sales, the credit limit of your overdraft facility and the existence of other accounts as well as their holdings are also automatically checked after you log in.

In addition to the PIN and TAN, the transmission to Sofort GmbH also includes payment data and personal data. Your personal data includes your first and last name, address, telephone number(s), email address, IP address and, if applicable, other data necessary for payment processing. This data transfer is necessary to establish your identity beyond doubt and to prevent attempted fraud.

Your data will be transmitted to Sofort GmbH on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfill a contract). You can revoke the consent you have already given at any time. Past data processing operations remain effective if revoked.

Details about paying with instant transfer can be found at:https://www.sofort.de/datenschutz.htmlandhttps://www.klarna.com/sofort/.

6. Advertising via email

Newsletter data

To send our newsletter we need an email address from you. Verification of the email address provided is necessary and consent to receive the newsletter is required. Additional data is not collected or is voluntary. The data is used exclusively for sending the newsletter.

The data provided when registering for the newsletter will be processed exclusively based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke the consent you have already given at any time. To revoke your consent, simply send an informal message by email or unsubscribe using the “unsubscribe” link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Data entered to set up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.

Sending review requests by email

If you have given us your express consent to this during or after your order in accordance with Art. 6 Para. 1 lit. a GDPR, we will use your email address to request you to submit a review of your order via the review system we use. This consent can be revoked at any time by sending a message to the contact option described in this data protection declaration or via a link provided for this purpose in the review request.

The evaluation requests may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact option described in this data protection declaration.

7. Cookies and other technologies

General information

In order to make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies).
We use technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping cart function). These technologies collect and process IP address, time of visit, device and browser information as well as information about your use of our website (e.g. information about the contents of the shopping cart). As part of a balancing of interests, this serves overriding legitimate interests in an optimized presentation of our offer in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.

We also use technologies to fulfill the legal obligations to which we are subject (e.g. to be able to demonstrate consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this data protection declaration.

You can find the cookie settings for your browser at the following links:Microsoft Edge™/Safari™/Chrome™/Firefox™/Opera™

If you have consented to the use of the technologies in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the data protection declaration.

Cookies

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our offering more user-friendly, effective and secure.

Some cookies are “session cookies.” Such cookies are automatically deleted at the end of your browser session. However, other cookies remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

With a modern web browser you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are deleted automatically when the program is closed. Deactivating cookies may result in limited functionality of our website.

The setting of cookies that are necessary to carry out electronic communication processes or to provide certain functions you require (e.g. shopping cart) is based on Art. 6 Para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in storing cookies to ensure that our services are technically error-free and seamless. If other cookies are set (e.g. for analysis functions), they will be treated separately in this data protection declaration.

reCAPTCHA

To protect your requests via internet forms, we use the reCAPTCHA service from Google Inc. (Google). The query is used to distinguish whether the entry was made by a human or improperly through automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input will be transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha is not merged with other Google data. The different data protection regulations of Google apply to this data. Further information about Google's data protection guidelines can be found at: https://www.google.com/intl/de/policies/privacy/

Storage period for posts and comments

Posts and comments as well as related data, such as IP addresses, are stored. The content remains on our website until it has been completely deleted or required to be deleted for legal reasons.

The storage of posts and comments is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke the consent you have already given at any time. An informal notification by email is sufficient to revoke your consent. The legality of data processing operations that have already taken place remains unaffected by the revocation.

Subscribe to comments

As a user of our website, you can subscribe to comments after registering. We will send a confirmation email to check whether you are the owner of the email address provided. You can unsubscribe from the comment subscription function at any time via a link contained in a subscription email. Data entered to set up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.

8. Use of Google services for web analysis and advertising purposes

Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses “cookies.” These are small text files that your web browser stores on your device and enable website usage to be analyzed. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.

Google Analytics cookies are set on the basis of Article 6 (1) (f) GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.

IP anonymization

We use Google Analytics in conjunction with the IP anonymization function. It guarantees that Google shortens your IP address within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases in which Google transfers the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other Google data.

Browser plugin

The setting of cookies by your web browser can be prevented. However, this could limit some functions of our website. You can also prevent the collection of data relating to your website use, including your IP address, and subsequent processing by Google. This is possible by downloading and installing the browser plugin available via the following link:https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to our website: deactivate Google Analytics.

Details on how Google Analytics handles user data can be found in Google's privacy policy:https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

In order to fully comply with legal data protection requirements, we have concluded an order processing contract with Google.

Demographic characteristics in Google Analytics

Our website uses the “demographic characteristics” function of Google Analytics. It can be used to create reports that contain information about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section “Objection to data collection”.

Google AdSense

Our website uses Google AdSense. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google AdSense is used to integrate advertisements and sets cookies. Cookies are small text files that your web browser stores on your device in order to analyze the use of the website. Google AdSense also uses web beacons. Web beacons are invisible graphics that enable analysis of visitor traffic on our website.

Information generated by cookies and web beacons is transmitted to Google servers and stored there. Server location is the USA. Google may pass on this information to contractual partners. However, Google will not combine your IP address with other data stored by you.

AdSense cookies are stored on the basis of Article 6 (1) (f) GDPR. As website operators, we have a legitimate interest in analyzing user behavior in order to optimize our website and our advertising.

With a modern web browser you can monitor, restrict and prevent the setting of cookies. Deactivating cookies may result in limited functionality of our website. By using our website, you agree to the processing of the data collected about you by Google in the manner and for the purpose described above.

Google AdWords and Google Conversion Tracking

Our website uses Google AdWords. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States.

AdWords is an online advertising program. As part of the online advertising program, we work with conversion tracking. After you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your device. Google AdWords cookies expire after 30 days and are not used to personally identify users. The cookie allows Google and us to recognize that you clicked on an ad and were redirected to our website.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via AdWords customer websites. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. Adwords customers find out how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that allows users to be personally identified. If you do not want to participate in tracking, you can object to its use. Here the conversion cookie must be deactivated in the user settings of the browser. This means that it is not included in the conversion tracking statistics.

The storage of “conversion cookies” is based on Art. 6 Para. 1 lit. f GDPR. As website operators, we have a legitimate interest in analyzing user behavior in order to optimize our website and our advertising.

Details about Google AdWords and Google Conversion Tracking can be found in Google's privacy policy:https://www.google.de/policies/privacy/.

With a modern web browser you can monitor, restrict or prevent the setting of cookies. Deactivating cookies may result in limited functionality of our website.

Google Web Fonts

Our website uses web fonts from Google. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

By using these web fonts, it is possible to present you with the representation of our website that we want, regardless of which fonts are available to you locally. This is done by retrieving the Google Web Fonts from a Google server in the USA and thereby passing on your data to Google. This is your IP address and which page you visited on our website. The use of Google Web Fonts is based on Art. 6 Para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our website.

The company Google is certified for the US-European data protection agreement “Privacy Shield”. This data protection agreement is intended to ensure compliance with the level of data protection applicable in the EU.

For details about Google Web Fonts, see:https://www.google.com/fonts#AboutPlace:aboutand further information in Google's privacy policy:https://policies.google.com/privacy/partners?hl=de

9. Use of Facebook services for web analysis and advertising purposes

Use of Facebook Pixel

We use the Facebook Pixel as part of the technologies presented belowMeta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). With the Facebook Pixel, data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as visiting a website or registering for a newsletter) are automatically collected and stored, from which data is used Usage profiles can be created using pseudonyms. As part of the so-called extended data comparison, information is also hashed and stored for comparison purposes, with which individuals can be identified (e.g. names, email addresses and telephone numbers). For this purpose, when you visit our website, the Facebook pixel automatically sets a cookie, which automatically enables your browser to be recognized when you visit other websites using a pseudonymous CookieID. Facebook (by Meta) will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website use, in particular personalized and group-based advertising.
The information automatically collected by Facebook (by Meta) technologies about your use of our website is usually transmitted to a server at Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. There is no adequacy decision from the European Commission for the USA. If the transfer of data to the USA is our responsibility, our cooperation is based on standard data protection clauses of the European Commission. Further information about data processing by Facebook can be found in Facebook's data protection informationFacebook (by Meta).

Facebook Analytics

As part of Facebook Analytics, statistics about visitor activities on our website are created from the data collected with the Facebook pixel about your use of our website. The data processing takes place on the basis of an agreement on order processing by Facebook (by Meta). Your analysis serves to optimally display and market our website.

Facebook Ads

We use Facebook Ads to advertise this website on Facebook (by Meta) and on other platforms. We determine the parameters of the respective advertising campaign. Facebook (by Meta) is responsible for the exact implementation, in particular the decision about the placement of the ads to individual users. Unless otherwise stated for the individual technologies, data processing takes place on the basis of an agreement between those jointly responsible in accordance with Art. 26 GDPR. The joint responsibility is limited to the collection of the data and its transmission to Meta Platforms Ireland. This does not cover subsequent data processing by Meta Platforms Ireland.

Based on the statistics about visitor activities on our website created via Facebook Pixel, we operate group-based advertising on Facebook (by Meta) via Facebook Custom Audience by determining the characteristics of the respective target group. As part of the extended data comparison that takes place to determine the respective target group (see above), Facebook (by Meta) acts as our processor.

Based on the pseudonymous cookie ID set by the Facebook Pixel and the data collected about your usage behavior on our website, we operate personalized advertising via Facebook Pixel Remarketing.

Using Facebook Pixel Conversions, we measure your subsequent usage behavior for web analysis and event tracking when you reach our website via an advertisement from Facebook Ads. The data processing takes place on the basis of an agreement on order processing by Facebook (by Meta).

Facebook conversion tracking

We use the “visitor action pixel” from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) within our website. This allows us to track users' actions after they have seen or clicked on a Facebook ad. This allows us to record the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected in this way is anonymous to us, which means we do not see the personal data of individual users. However, this data is stored and processed by Facebook, about which we will inform you according to our level of knowledge. Facebook can connect this data to your Facebook account and also use it for its own advertising purposes in accordance with Facebook's data usage policy https://www.facebook.com/about/privacy/. You can enable Facebook and its partners to place advertisements on and outside of Facebook. A cookie may also be stored on your computer for these purposes.

10. Social media

Social plugins from Facebook (by Meta), Twitter, Instagram (by Meta), Pinterest, Xing, Addthis, Whatsapp

Social buttons from social networks are used on our website. These are only integrated into the page as HTML links, so that no connection is established with the servers of the respective provider when our website is accessed. If you click on one of the buttons, the website of the respective social network opens in a new window in your browser. There you can, for example, press the Like or Share button.

Our online presence on Facebook (by Meta), Twitter, Instagram (by Meta), YouTube, Pinterest, LinkedIn, Xing

If you have given your consent to the respective social media operator in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR, your data will be automatically collected for market research and advertising purposes when you visit our online presence on the social media mentioned above and stored, from which usage profiles are created using pseudonyms. These can be used, for example, to display advertisements within and outside the platforms that presumably match your interests. Cookies are usually used for this purpose. For detailed information on the processing and use of data by the respective social media operator as well as a contact option and your related rights and setting options to protect your privacy, please refer to the provider's data protection information linked below. If you still need help with this, you can contact us.

Facebook

Source: Data protection configurator from

BE PART OF OUR #YQUBRILLEN COMMUNITY