Privacy Policy – CVC.de
§ 1 General Information
Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will be processed solely in accordance with German data protection law (in particular GDPR, BDSG, TDDDG) and the data protection law of the European Union (EU).
This statement informs you about purposes of processing, recipients, legal bases, storage periods as well as your rights and the controller responsible for data processing. It applies only to our websites. For third-party sites, please check their policies.
§ 2 Data Processing for Contract Fulfillment
(1) Purpose of Processing
Data you provide during ordering is necessary to conclude the contract and deliver goods. For some payment methods, data is passed to payment providers. The same applies to pre-contractual inquiries (e-mail, contact forms).
(2) Legal Basis
Art. 6 (1) (b) GDPR
(3) Categories of Recipients
Payment providers, shipping providers, hosting providers, inventory systems, suppliers
(4) Storage Period
Retained until expiry of statutory warranty/guarantee; commercial/tax data: 10 years (§ 257 HGB, § 147 AO). Pre-contractual data is deleted once no contract is concluded.
§ 3 Additional Information
Your address and e-mail may be transmitted to DHL, DPD, GLS or UPS solely for sending tracking e-mails. You may object to this at any time.
§ 4 PayPal Transactions
All PayPal transactions are subject to the PayPal Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
§ 5 Consent (Consent Mode)
Our website uses a consent banner. Non-essential cookies and services (e.g. web analytics, conversion tracking, marketing) are only activated once you have given your consent via this banner. Until then, no or only limited, non-personal signals are transmitted via Google Consent Mode.
You can withdraw your consent at any time with effect for the future via the “change cookie settings” button in the footer of our website, by reopening and adjusting the cookie settings there.
Legal basis: Art. 6 (1) (a) GDPR, § 25 (1) TDDDG
§ 6 Web Analytics with Google Analytics
Subject to your consent, this website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In Google Analytics 4, IP anonymization is enabled by default (IP addresses are truncated before storage and are not logged). The purpose is the statistical analysis of user behavior to optimize our offering and for marketing purposes.
Legal basis: Art. 6 (1) (a) GDPR, § 25 (1) TDDDG (consent via the consent banner)
Recipients: Google Ireland Limited and, where applicable, Google LLC (USA)
Transfer to third countries: A transfer to the USA may occur. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF); the transfer is based on an adequacy decision of the EU Commission (Art. 45 GDPR) and, additionally, on Standard Contractual Clauses (Art. 46 GDPR).
Storage period: event data max. 2 months, user data max. 14 months (configurable retention settings in Google Analytics 4).
Withdrawal: at any time via the “change cookie settings” button in the footer of our website.
§ 7 Conversion Tracking & Enhanced Conversions (Google Ads)
Subject to your consent, we use Google Ads (Google Ireland Limited) to measure the success of our advertisements (conversion tracking). This records whether an advertisement led to an action (e.g. a purchase).
In addition, we use the „Enhanced Conversions“ feature. Here, data you provide during the ordering process (in particular your e-mail address) is encrypted on our website using an irreversible one-way hashing procedure (SHA-256) and transmitted to Google in this hashed form only. Your e-mail address is never transmitted in plain text. The hashed data is used solely to attribute conversions more accurately to your interactions with our ads and to improve measurement accuracy.
Legal basis: Art. 6 (1) (a) GDPR, § 25 (1) TDDDG (consent via the consent banner)
Recipients: Google Ireland Limited and, where applicable, Google LLC (USA)
Transfer to third countries: see § 6 (EU-U.S. Data Privacy Framework / Standard Contractual Clauses).
Withdrawal: at any time via the “change cookie settings” button in the footer of our website.
§ 8 Cookies
Technically necessary cookies are used (e.g. to store the shopping cart). These are required for the operation of the website and are set without consent.
Legal basis: Art. 6 (1) (f) GDPR, § 25 (2) TDDDG
Non-essential cookies (e.g. for analytics and marketing) are only set after your consent via the consent banner (§ 5). Storage: session to several years, depending on the cookie. You can object to or delete them via your browser settings or the “change cookie settings” button in the footer of our website.
§ 9 Newsletter
If you subscribe, your e-mail is used for advertising (products, offers). Legal basis: Art. 6 (1) (a) GDPR. You may unsubscribe anytime via the link in the newsletter or by e-mail.
§ 10 Rights of Data Subjects
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Portability (Art. 20 GDPR)
- Withdrawal of consent (Art. 7 (3) GDPR)
- Complaint to a supervisory authority (Art. 77 GDPR)
Right to object (Art. 21 GDPR): You may object at any time – for legitimate interest processing only with reasons, for direct marketing at any time without reasons.
Controller
Volker BierBahnhofstraße 62
66629 Freisen
Germany
Phone: +49 (0)6855 996046
info@cvc.de