General Terms and Conditions (GTC)

Privacy Policy

Gro?handel-Schnellversand Koch is committed to your privacy!

It is our goal at gskkoch.de to develop an environment that is easy to use and always respectful of the rights and expectations of our customers and other visitors to the GSK website (www.gskkoch.de).

This privacy policy describes how Wholesale Fast Shipping Koch (referred to here as "GSK") collects, processes and uses the data you give us when using our website and protects it in accordance with the applicable data protection regulations.

As of May 25, 2018, the requirements of the EU General Data Protection Regulation (hereinafter: GDPR) apply throughout Europe. Here we would like to inform you about the processing of personal data carried out by the wholesale fast shipping Koch in accordance with this new regulation (compare Article 13 DSGVO). Please read our data protection information carefully. If you have any questions or comments about this data protection information, you can send them at any time to the e-mail address given under point 2.

Content overview

1. Overview

The following data protection information informs you about the nature and extent of the processing of so-called personal data by the wholesale fast shipping Koch. Personal data is information that can be directly or indirectly assigned to your person or can be assigned. The data processing by the wholesale fast shipping Koch can be divided into two main categories :

• For the purpose of contract processing, all data required for the execution of a contract with the wholesale fast shipping Koch are processed. If external service providers are also involved in the processing of the contract, e.g. logistics companies, payment service providers and/or registration offices of the manufacturer or distributor, your data will be passed on to them to the extent necessary in each case
• With call of the website/application of the wholesale fast shipping Koch, various information is exchanged between your terminal device and our server. This may also be personal data. The information collected in this way is used, among other things, to optimize our website or to display advertising in the browser of your end device.

In accordance with the provisions of the GDPR, you have different rights, which you can assert against us. These include the right to object to selected data processing, in particular data processing for advertising purposes. The option to object is described in 3.3.3. and 3.4.

If you have any questions about our data protection information, please feel free to contact our company data protection officer at any time. You will find the contact details below.

2. Name and contact details of the data controller and the company data protection officer

This data protection information applies to data processing by HiFi & Foto Koch GmbH, Schadowstra?e 60/62, 40212 D?sseldorf, Germany ("data controller"), and to the following website or application: ;:

Mr. Erich Zimmermann
c/o ZiDa-Datenschutz GmbH
Waldhofer Str. 102
69123 Heidelberg

Website of the data protection officer: www.zida-datenschutz.de

3. Purposes of data processing, legal basis and legitimate interests pursued by Wholesale Fast Shipping Koch or a third party as well as categories of recipients

3.1. calling up our website/application

When calling up our website/application, information is automatically sent to the server of our website/application by the browser used on your end device and temporarily stored in a so-called log file. We have no influence on this. The following information is collected without your intervention and stored until automatic deletion:

• the IP address of the requesting internet-capable device,
• the date and time of access,
• the name and URL of the file accessed,
• the website/application from which the access was made (referrer URL),
• the browser used by you and, if applicable, the operating system of your Internet-capable computer as well as the name of your access provider.

The legal basis for the processing of the IP address is Article 6(1)(f) DSGVO. Our legitimate interest follows from the purposes of data collection listed below. At this point, we would like to point out that we are not able to draw any direct conclusions about your identity from the collected data, nor will we be able to do so.

The IP address of your end device and the other data listed above are used by us for the following purposes:

• Ensuring a smooth connection setup,
• Ensuring a comfortable use of our website/application,
• Evaluation of system security and stability.

The data is stored for a period of 180 days and then automatically deleted. Furthermore, we use so-called cookies, tracking tools, targeting methods and social media plug-ins for our website/application. The exact procedures involved and how your data is used for this purpose are explained in more detail below in section 3.4.

3.2 Conclusion, execution or termination of a contract

3.2.1 Data processing upon conclusion of the contract

The object of activity of Gro?handel-Schnellversand Koch is the wholesale and distance selling of goods and services. In this context, we process the data required for the conclusion, execution or termination of a contract . This includes:

• Salutation, first name and last name
• Invoice and delivery address
• E-mail address
• Invoice and payment data
• date of birth, if applicable
• telephone number, if applicable
• IP address of the requesting internet-enabled device

The legal basis for this is Article 6(1)(b) DSGVO, i.e. you provide us with the data on the basis of the contractual relationship between you and us. Insofar as we do not use your contact data for advertising purposes (see 3.3. below), we store the data collected for the purpose of processing the contract until the expiry of the statutory or possible contractual warranty and guarantee rights. After expiration of this period, we retain the information of the contractual relationship required by commercial and tax law for the periods determined by law. For this period (regularly ten years), the data is processed again solely in the event of an audit by the tax authorities. We review the necessity of data storage at regular intervals - at least every two years. With the dispatch of your goods, the order data (clarifying, your name, eMail and delivery address) for tracking the shipment and identification of problem cases according to Art. 6 para. 1 lit. b. (in the context of contractual/pre-contractual relations), Art. 6 para. 1 lit. f. (other requests) DSGVO processed.

For the processing of the purchase contract, the following data processing is also required

• If you have selected a payment method other than prepayment, direct debit or cash on delivery, we will pass on the required payment data to a payment service provider commissioned by us.
• Information about your delivery address we pass on for the purpose of processing the purchase contract to a logistics company commissioned by us. To ensure that the goods are delivered according to your wishes, we transmit in the case of foreign and express shipments, if necessary, your phone number to the logistics company commissioned by us. The logistics company may contact you in advance of the delivery to coordinate details of the delivery with you. The data will be transmitted solely for this purpose and deleted after delivery.

Your delivery address and email address will also be stored and processed in the PAQATO shipping analysis system of the company PAQATO GmbH (Johann-Krane-Weg 6, 48149 M?nster, Germany) in order to be able to deliver the goods faster and without errors and to ensure smooth communication in this regard (legitimate interest pursuant to Art. 6 para. 1 lit. f. DSGVO ).

3.2.2 Identity, creditworthiness and transmission to credit agencies

If necessary, we will verify your identity using information from service providers. The legal basis for this is Article 6 (1) (b) and (f) DSGVO. The authorization for this results from the protection of your identity and the prevention of fraud attempts at our expense. The circumstance and the result of our inquiry will be added to your customer account for the duration of the contractual relationship.

In the course of the ordering process, we check your creditworthiness in certain cases, in order to be able to show you only the payment methods that can be used by you. For this purpose, we transmit the following types of data to so-called credit agencies cooperating with us: Name, address, date of birth, if applicable. The legal basis for this is the following declaration of consent by you within the meaning of Article 6(1)(a) DSGVO:

I hereby consent to the verification of my creditworthiness by Wholesale Fast Shipping Koch. I am aware that the check is already carried out at the beginning of the ordering process and that I can revoke my consent at any time.

By declaration to the address given under Contact or in 2. you can revoke your consent at any time with effect for the future. The revocation of consent does not affect the lawfulness of the personal data processed until the revocation. If you do not want to give the above consent, please give us before you initiate the completion of your purchase an appropriate notice. In this case, however, we can only offer you payment methods that are not associated with a credit risk for Wholesale Fast Shipping Koch. The circumstance and the result of our inquiry will be stored to your customer account for the duration of the contractual relationship.

If you have already purchased from us, your data stored by us about you can be supplemented by so-called score values. At Scoring is the creation of a forecast of future events based on information collected and past experience. On the basis of the data stored about you, an assignment is made to statistical groups of people who had similar entries in the past. The underlying procedure used is a well-founded mathematical-statistical method for forecasting risk probabilities, which has been tried and tested in practice for a long time.

In the case of a delay in payment we transmit the necessary data to a company commissioned to enforce the claim

the other legal requirements are

The legal bases for this are both Article 6(1)(b) and Article 6(1)(f) DSGVO. The assertion of a contractual claim is considered a legitimate interest within the meaning of the second-mentioned provision. We also transmit information about the delay in payment or a possible bad debt to credit agencies cooperating with us if the other legal requirements are met. The legal basis for this is Article 6 (1) (f) DSGVO. The legitimate interest required hereunder results from our interest as well as the interest of third parties in reducing contractual risks for future contracts.

3.3. data processing for advertising purposes

3.3.1 Advertising purposes of Gro?handel-Schnellversand Koch

Insofar as you have concluded a contract with us, we list you as an existing customer. In this case, we process your postal contact data outside the existence of a specific consent, in order to send you information about new products and services in this way.

3.3.2 Interest-based advertising

To ensure that you only receive information that is of supposed interest to you, we categorize and supplement your customer profile with additional information. Statistical information as well as information about you (e.g. basic data of your customer profile) is used for this purpose.

aim is to send you advertising that is geared solely to your actual or perceived needs and accordingly not to bother you with useless advertising.

The legal basis for the aforementioned processing is in each case Article 6 (1) (f) DSGVO. The processing of existing customer data in this way for our own advertising purposes or for the advertising purposes of third parties is to be regarded as a legitimate interest.

3.3.3 Right of objection

You may object to data processing for the aforementioned purposes at any time, free of charge, separately for the respective communication channel and with effect for the future. For this purpose, it is sufficient to send an e-mail or a postal letter to the contact data mentioned under 2.

If you object, the contact address concerned will be blocked for further data processing for advertising purposes. We would like to point out that in exceptional cases, advertising material may still be sent temporarily after receipt of your objection. This is technically due to the necessary lead time of advertisements and does not mean that we will not implement your objection. Thank you for your understanding.

3.3.4 Newsletter dispatch

On our website we offer you the possibility to register for our newsletter. In order to ensure that no mistakes have been made when entering the e-mail address, we use the so-called double opt-in procedure: After you have entered your e-mail address in the registration field, we will send you a confirmation link. Only when you click on this confirmation link will your e-mail address be added to our distribution list. You can revoke your consent at any time with effect for the future. To do so, simply click on the "Unsubscribe from newsletter" link in each newsletter. Alternatively, you can send an email to the email address given under 2.

3.4. online presence and website optimization

3.4.1 Cookies - general information

We use so-called cookies on our website on the basis of Article 6(1)(f) DSGVO. Our interest in optimizing our website is thereby to be regarded as legitimate within the meaning of the aforementioned provision. Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain direct knowledge of your identity.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize whether you have already logged into your customer account.

T

hese are automatically deleted after you leave our site.

In addition, we also use temporary cookies for the purpose of user-friendliness, which are stored on your end device for a certain fixed period of time

you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
If you have a customer account with HiFi && Foto Koch GmbH and are logged in, the information stored in cookies is added to your customer account.

Most browsers automatically accept cookies

.

However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website. The storage period of cookies depends on their purpose and is not the same for all.

3.5. customer account

In order to provide you with the greatest possible convenience when shopping, we offer you the permanent storage of your personal data, open and completed orders and package deliveries in a password-protected customer account. After setting up a customer account, no new data entry is required. In addition, you can view the data stored about you in your customer account at any time.

When you order as a new customer, you provide us with the data listed under 3.2. In order to enable a secure processing of your order and a correct assignment of your payment transactions, we have to assign a customer number to your order. This customer number will be communicated to you with the order confirmation.

In order to provide you with the greatest possible convenience in your shopping, we offer you the opportunity to view the stored data as well as open and completed orders and package deliveries in a password-protected customer account.

When the customer number is assigned, you will be given an automatically generated password

.

You can change this password in the customer area. The password is used together with your e-mail address and/or customer number to access your customer account.

If you place a second order, you can order again as a new customer or log in to your customer account before placing the order. Clarifying, you do not have to order under the existing or already assigned customer number.

Please treat your personal access data confidentially and in particular do not make them accessible to unauthorized third parties. We cannot accept any liability for misused passwords, unless we are responsible for the misuse. Please note that even after leaving our website, you will automatically remain logged in for a short period , unless you actively log out.

3.6. contact form

To enable you to conveniently contact our service team, we provide a contact form. We enrich this contact form with data from your customer profile to make it as easy as possible for you to contact us. We can only retrieve this customer data if you have previously logged in with your email or customer number and your personal password (see 3.5). We cannot accept any liability for misuse of the contact form, unless we are responsible for the misuse.

4. Recipients outside the EU

With the exception of the processing described under 3.4.2 and 3.4.3, we do not pass on your data to recipients based outside the European Union or the European Economic Area. The processing operations described under 3.4.2 and 3.4.3 result in data being transferred to the servers of the providers of tracking and targeting technologies commissioned by us. These servers are located in the USA. The data transfer takes place in accordance with the principles of the so-called Privacy Shield and on the basis of so-called standard contractual clauses of the EU Commission.

5. Your rights

5.1. overview

In addition to the right to revoke your consent given to us, you are entitled to the following additional rights if the respective legal requirements are met:

• Right to information about your personal data stored by us in accordance with Art. 15 DSGVO,
• Right to correct incorrect data or to complete correct data according to Art. 16 DSGVO,
• Right to have your data stored by us deleted according to Art. 17 DSGVO,
• Right to restrict the processing of your data according to Art. 18 DSGVO,
• Right to data portability according to Art. 20 DSGVO.

5.2. right of objection

Under the conditions of Art. 21 (1) DSGVO, data processing may be objected to on grounds relating to the particular situation of the data subject.

The above general right of objection applies to all processing purposes described in this Privacy Notice, which are processed on the basis of Article 6(1)(f) DSGVO. Unlike the specific right of objection directed at data processing for advertising purposes (compare above 3.3.4), we are only obliged under the GDPR to implement such a general objection if you provide us with reasons of overriding importance for doing so (e.g. a possible risk to life or health). In addition, you have the option of contacting our data protection officer (See contact in 2.) or the supervisory authority responsible for HiFi && Foto Koch GmbH.

6. Data security

All data transmitted by you personally, including your payment data, are transmitted using the generally accepted and secure standard TLS (Transport Layer Security), a technical advancement of SSL (Secure Socket Layer). TLS is a secure and proven standard that is also used, for example, in online banking. You can recognize a secure TSL connection, among other things, by the appended s at the http (i.e. https://...) in the address bar of your browser or by the lock symbol in the lower area of your browser.

We also use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved and reviewed in line with technological developments.

Please treat your personal access data confidentially and in particular do not make them accessible to unauthorized third parties. We cannot accept any liability for misused passwords, unless we are responsible for the misuse. Please note that even after leaving our website, you will automatically remain logged in for a short period , unless you actively log out.

3.6. contact form

To enable you to conveniently contact our service team, we provide a contact form. We enrich this contact form with data from your customer profile to make it as easy as possible for you to contact us. We can only retrieve this customer data if you have previously logged in with your email or customer number and your personal password (see 3.5). We cannot accept any liability for misuse of the contact form, unless we are responsible for the misuse.

4. Recipients outside the EU

With the exception of the processing described under 3.4.2 and 3.4.3, we do not pass on your data to recipients based outside the European Union or the European Economic Area. The processing operations described under 3.4.2 and 3.4.3 result in data being transferred to the servers of the providers of tracking and targeting technologies commissioned by us. These servers are located in the USA. The data transfer takes place in accordance with the principles of the so-called Privacy Shield and on the basis of so-called standard contractual clauses of the EU Commission.

5. Your rights

5.1. overview

In addition to the right to revoke your consent given to us, you are entitled to the following further rights if the respective legal requirements are met:

• Right to information about your personal data stored by us in accordance with Art. 15 DSGVO,
• Right to correct incorrect data or to complete correct data according to Art. 16 DSGVO,
• Right to have your data stored by us deleted according to Art. 17 DSGVO,
• Right to restrict the processing of your data according to Art. 18 DSGVO,
• Right to data portability according to Art. 20 DSGVO.

5.2. right of objection

Under the conditions of Art. 21 (1) DSGVO, data processing may be objected to on grounds relating to the particular situation of the data subject.

The above general right of objection applies to all processing purposes described in this Privacy Notice, which are processed on the basis of Article 6(1)(f) DSGVO. Unlike the specific right of objection directed at data processing for advertising purposes (compare above 3.3.4), we are only obliged under the GDPR to implement such a general objection if you provide us with reasons of overriding importance for doing so (e.g. a possible risk to life or health). In addition, you have the option of contacting our data protection officer (See contact in 2.) or the supervisory authority responsible for HiFi && Foto Koch GmbH.

6. Data security

All data transmitted by you personally, including your payment data, are transmitted using the generally accepted and secure standard TLS (Transport Layer Security), a technical advancement of SSL (Secure Socket Layer). TLS is a secure and proven standard that is also used, for example, in online banking. You can recognize a secure TSL connection, among other things, by the appended s at the http (i.e. https://...) in the address bar of your browser or by the lock symbol in the lower area of your browser.

We also use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved and reviewed in line with technological developments.