Data protection

As the operator of this website, Archive GmbH (“Archivist” or “we”) takes the protection of your personal data very seriously. Protecting your privacy when processing personal data is important to us. Below, we would like to inform you about the data we collect and process when you, for example, visit our website or use the services we offer (hereinafter also referred to as “Services”).

Responsible
The data controller within the meaning of the EU General Data Protection Regulation (GDPR) is Simon Maier, Rebhalde 6, 88677 Markdorf
Data collection and use for contract processing, contacting you and when opening a customer account
We collect personal data when you voluntarily provide it to us as part of your order or when contacting us (e.g., via contact form or email). Required fields are marked as such because we absolutely need this data to process your order or your inquiry, and you cannot submit your order or contact request without providing it. The specific data collected is evident from the respective input forms. We use the data you provide in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR for contract processing and handling your inquiries.
If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR by choosing to open a customer account, we will use your data for the purpose of opening the customer account.
After complete fulfillment of the contract or deletion of your customer account, your data will be restricted from further processing and deleted after the statutory retention periods under tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope, which is permitted by law and about which we inform you in this statement. You can delete your customer account at any time, either by sending a message to the contact address provided below or by using the corresponding function in your customer account.

Logging of non-personal data when using our website
When you access our website or download data from the website or one of its subpages, information about this is stored and processed in a log file. This process is anonymized. It is not possible to draw any conclusions about your identity.

Depending on the access protocol used, the log record contains information with the following content:

- Name of the requested file, date and time of the page request
- IP address of the requesting computer
- Access methods/functions requested by the requesting computer
- the accessed website or the name of the retrieved file
- Operating system and browser type or browser settings
- the amount of data transferred and the message indicating whether the access/retrieval was successful

We have no way of linking IP addresses and any personal data that may be present. The stored data is used exclusively for the purpose of identifying and tracking unauthorized access attempts to the web server, for statistical analyses such as visitor numbers and page popularity, and to improve our online services. This data is used exclusively by us. It is not shared with third parties.

Email advertising without newsletter registration and your right to object
If we receive your email address in connection with the sale of goods or services and you have not objected to its use, we reserve the right, based on Section 7 Paragraph 3 of the German Unfair Competition Act (UWG), to regularly send you offers for similar products from our range by email. This serves our legitimate interest in advertising to our customers, which outweighs your interests in this context. You can object to this use of your email address at any time by sending a message to the contact details provided below or by using the unsubscribe link in the promotional email, without incurring any costs other than the transmission costs at basic rates.

Collection and use of personal data
In order to provide certain services and process contracts, the collection of personal data is unavoidable. We will then request and store your master data (name, address, and company name) and your contact details (e.g., email address, telephone numbers). Additionally, we process contract data (e.g., subject matter of the contract, term, customer category) and payment data (e.g., bank details, payment history).

If you provide us with personal data for the purpose of contacting us, this data will only be stored for as long as necessary for the respective communication and contact. As soon as we no longer need the personal data for these purposes and there are no longer legal obligations to retain it, it will be deleted immediately.

We use the collected data to answer your inquiries, fulfill contracts, for service and customer care, marketing and market research, to comply with legal requirements, and, if you have subscribed, to send you our newsletter. To provide our services to you, it may be necessary to share your personal data with companies that we use to provide the service or process the contract. These include, for example, transport companies, technicians, IT and hosting providers, payment service providers, operators of merchandise management systems, or marketing newsletter providers.

User data collected in connection with order processes and contract conclusions is stored and processed electronically for the purpose of payment processing and delivery.

You can revoke your consent to the processing of your personal data at any time and object to the creation of user profiles at any time with effect for the future. Furthermore, you can also object to the use of your personal data for purposes such as postal marketing, insofar as this is legally permissible. In both cases, an email to the following address is sufficient: Datenschutz@archivist.store

Personal data collected from other sources
As part of our collaboration with third-party service providers, we may receive personal data about you from these third-party providers. These include, for example, credit reference agencies, service providers, tradespeople, or business partners.

Legal basis for processing
In accordance with Article 13 of the GDPR, we inform you of the legal bases for our data processing. The legal basis for processing depends on the purpose for which the data is processed. If you have given us your consent to process your personal data, we base the data processing on the consent you have given in accordance with Article 6(1)(a) of the GDPR.

The processing of your personal data may also be necessary for the following reasons, such as fulfilling a contract concluded with you or carrying out pre-contractual measures requested by you, and providing you with our services (e.g., processing orders and software development contracts, feedback requests, online surveys regarding our business relationship, offers, invoices, payment reminders), as well as fulfilling our legal obligations (Art. 6 para. 1 sentence 1 lit. a to c GDPR). We also use your personal data pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR to pursue our legitimate interests, provided that your rights and freedoms do not override these interests.

Data transfer to third parties
to the payment service provider="" respective="" of the="" data protection declaration="" insofar as="" applies="" it="" register="" with" access data their themselves in case="" this in="" create an="" account="" there themselves also="" these collect" part="" to the" payment service" selected the" or" us if necessary" and" credit institution payment payment data" collected here may" the payments of processing from order process in the" you" payment service provider which according to each is" required were ordered for this insofar as further" shipping company commissioned" delivery the with" the" to data their" we="" give="" GDPR="" b="" lit="" s="" abs="" art="" gem="" contractual requirements="">
For order and contract processing, we also use an external enterprise resource planning (ERP) system. The data transfer and processing that takes place in this context is based on a data processing agreement. The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle shipping for us (drop shipping).
Data transfer to shipping service providers
If you have given us your express consent during or after your order, we will, on the basis of this consent and in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, pass on your email address and telephone number to the selected shipping service provider so that they can contact you before delivery for the purpose of delivery notification or coordination.
You can withdraw your consent at any time by contacting us using the contact details provided below or directly with the shipping provider at the contact address listed below. After withdrawal, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope, which is permitted by law and about which we inform you in this statement.
DHL
Sträßchensweg 10
53113 Bonn
Germany
Data sharing for age verification purposes
If your order includes goods whose sale is subject to age restrictions, we use a reliable procedure involving personal identity and age verification to ensure that the purchaser has reached the required minimum age. For this purpose, we use the SCHUFA identity check on our website. This service is operated by SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany. 
To ensure the required minimum age, certain personal data (e.g., name, address, and date of birth) will be transmitted to SCHUFA Holding AG. An identity check will then be carried out using Q-Bit, which has been positively evaluated by the Commission for the Protection of Minors in the Media (KJM) for age verification purposes.
The data transfer serves, in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, to safeguard our overriding legitimate interests in ensuring a youth protection-compliant offer and the safeguarding of the legal provisions on youth protection.
No credit check is performed in this respect.
After complete fulfillment of the contract and after expiry of the tax and commercial law retention periods, your data processed for this purpose will be deleted, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope, which is permitted by law and about which we inform you in this declaration.
Data transfer to debt collection agencies
For the purpose of fulfilling the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, we will forward your data to a commissioned debt collection agency if our payment claim remains unpaid despite prior reminders. In this case, the debt collection agency will collect the claim directly. Furthermore, the transfer of your data serves to protect our overriding legitimate interests in the effective assertion and enforcement of our payment claim pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.
Data usage during payment processing
Credit check
If we provide services in advance, e.g., for purchases on account, it is necessary for the conclusion of the contract, in accordance with Article 22 Paragraph 2 Letter a of the GDPR, to obtain identity and credit information from specialized service providers (credit agencies). For this purpose, we transmit your personal data required for a credit check to the following company(ies):
SCHUFA Holding AG 
Cormorant Trail 5 
65201 Wiesbaden
Creditreform Boniversum GmbH 
Hellersbergstraße 11 
41460 Neuss
Tesch mediafinanz GmbH
White width 5 
49084 Osnabrück
CRIF Bürgel GmbH
Radlkoferstraße 2
81373 Munich
arvato infoscore GmbH 
Rheinstraße 99 
76532 Baden-Baden
Deltavista GmbH 
Freisinger Landstraße 74 
80939 Munich
Klarna Bank AB (publ)
Sveavägen 46
111 34 Stockholm
Sweden
Appropriate measures to protect your rights, freedoms, and legitimate interests will be taken into account. You have the opportunity to present your point of view and contest the decision by contacting us using the contact details provided below.
After complete fulfillment of the contract, your data processed for this purpose will be deleted, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope, which is permitted by law and about which we inform you in this declaration.
installment purchase
When selecting the payment method "installment purchase" and granting the necessary data protection consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, personal data (first name, last name, address, email, telephone number, date of birth, IP address, gender) together with data required for processing the transaction (item, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and order time) will be transmitted to our partner Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden for the purpose of processing this payment method.

To verify the customer's identity and/or creditworthiness, our partner conducts inquiries and obtains information from publicly accessible databases and credit bureaus. For details on the providers from whom information and, where applicable, creditworthiness information based on mathematical-statistical methods is obtained, as well as further details on the processing of your data after transmission to our partner Klarna Bank AB, please refer to their privacy policy, which you can find here: https://www.klarna.com/de/datenschutz/
Our partner Klarna Bank AB uses the information obtained regarding the statistical probability of payment default to make a balanced decision about establishing, executing, or terminating the contractual relationship. You have the option to contact our partner Klarna Bank AB to explain your position and contest the decision.
The consent to data transfer given during the ordering process can be revoked at any time, even without giving reasons, with effect for the future.
Your personal data will only be transferred to third parties for purposes other than those listed in the previous section if and to the extent that:

- You have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the disclosure is necessary pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR for the establishment, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- where there is a legal obligation to disclose the data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, as well as
- this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, such as in the case of disclosure to external service providers who support us in our business operations.

Our employees and partners are bound by us to maintain confidentiality and to comply with data protection regulations.

Data transfers to third countries
When we share your personal data in accordance with this Privacy Policy, this may involve transferring your personal data to countries outside the European Economic Area (EEA). When we transfer your personal data to countries outside the European Economic Area, we always ensure that an adequate level of protection is guaranteed by ensuring – where required by law – that at least one of the following appropriate safeguards is in place:

- Transfer of personal data to countries which, in the opinion of the European Commission, offer an adequate level of protection for personal data (so-called “adequacy decision”);

- Use of special contracts approved by the European Commission, which guarantee personal data the same protection they enjoy within the EEA;

- Transfer of personal data to an organization that has a valid "Privacy Shield" certification and therefore offers a level of protection for personal data similar to the EU standard; or

- Transfer of personal data to an organization that has implemented binding internal data protection rules equivalent to the EU level of protection for personal data.

Storage period, deletion of personal data
The data we process will be erased or its processing restricted in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated otherwise in this privacy policy, the data stored by us will be erased as soon as it is no longer required for its intended purpose and there are no legal obligations to retain it. If the data is not erased because it is required for other legally permissible purposes, its processing will be restricted. This means the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

Your rights
You have various rights regarding your personal data. You have the right to request, free of charge, information about the personal data we have stored about you, the right to rectification, erasure, or restriction of processing of this data, and the right to object to its processing. Whether and to what extent these rights apply in a specific case, and what conditions apply, is governed by the GDPR and the German Federal Data Protection Act (BDSG). Under the GDPR, you also generally have the right to data portability. Furthermore, if you have given your consent to the processing of your personal data, you can withdraw this consent at any time with effect for the future.

Should you have any questions, comments or requests regarding the collection, processing, use or deletion of your personal data by us, please contact datenschutz@archivist.store.

Right to lodge a complaint with the competent supervisory authority
As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a data protection breach. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company is located. The following link provides a list of data protection commissioners and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Data security
For security reasons and to protect the transmission of confidential information that you send to us as the website operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" in your browser's address bar and the padlock icon in the browser bar.

As part of the hosting process, all data processed in connection with the operation of this website is stored. This is necessary to enable the website to function. We process this data based on our legitimate interests pursuant to Art. 6 para. 1 f) GDPR. To provide our online presence, we use services from web hosting providers, to whom we transmit the aforementioned data.

Contact form
Data submitted via the contact form, including your contact details, will be stored in order to process your request or to be available for follow-up questions. This data will not be shared without your consent.

The processing of data entered into the contact form is based solely on your consent (Art. 6 para. 1 lit. a GDPR). You may withdraw your consent at any time. To withdraw your consent, simply send an informal notification by email. The withdrawal of consent does not affect the lawfulness of data processing carried out before the withdrawal.

Data submitted via the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the data is no longer needed. Mandatory legal provisions – in particular retention periods – remain unaffected.

Cookies
Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our website more user-friendly, effective, and secure.

Some cookies are "session cookies." These cookies are automatically deleted after you close your browser. Other cookies remain on your device until you delete them yourself. These cookies help us recognize you when you return to our website.

With a modern web browser, you can monitor, restrict, or block the setting of cookies. Many web browsers can be configured to automatically delete cookies when the program is closed. Disabling cookies may result in limited functionality of our website.

The setting of cookies that are necessary for carrying out electronic communication processes or providing certain functions you have requested (e.g., shopping cart) is based on Article 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in storing cookies to ensure the technically flawless and smooth provision of our services. If other cookies are set (e.g., for analytics), these are addressed separately in this privacy policy.

Google Analytics
Our website uses features of the web analytics service Google Analytics. The provider of this service is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies." These are small text files that your web browser stores on your device and that enable analysis of website usage. Information generated by the cookie about your use of our website is transmitted to and stored on a Google server. The server location is usually the USA.

The setting of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if applicable, our advertising.

IP anonymization
We use Google Analytics in conjunction with the IP anonymization function. This ensures that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. In exceptional cases, Google may transmit the full IP address to a server in the USA and shorten it there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics will not be merged with other Google data.

You can prevent Google Analytics from collecting your data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de . More information about how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Browser Plugin
You can prevent your web browser from setting cookies. However, this may limit some of the functionality of our website. You can also prevent Google from collecting and processing data relating to your website usage, including your IP address. This is possible by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. This will set an opt-out cookie that prevents the collection of your data on future visits to our website: Disable Google Analytics.

Details on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

To fully comply with legal data protection requirements, we have concluded a data processing agreement with Google.

Demographic characteristics in Google Analytics:

Our website uses the "demographic characteristics" feature of Google Analytics. This allows us to generate reports that provide information about the age, gender, and interests of website visitors. This data comes from Google's interest-based advertising and from third-party visitor data. It is not possible to link this data to a specific individual. You can deactivate this feature at any time. This can be done via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section "Objection to data collection."

Google AdWords and Google Conversion Tracking
Our website uses Google AdWords. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.

AdWords is an online advertising program. As part of this program, we use conversion tracking. After clicking on an ad served by Google, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your device. Google AdWords cookies expire after 30 days and are not used to personally identify users. The cookie allows Google and us to recognize that you clicked on an ad and were redirected to our website.

Each Google AdWords customer receives a different cookie. These cookies cannot be tracked across websites of other AdWords customers. Conversion cookies are used to generate conversion statistics for AdWords customers who use conversion tracking. AdWords customers learn how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that allows for the personal identification of users. If you do not wish to participate in tracking, you can opt out. To do this, disable the conversion cookie in your browser settings. This will prevent your data from being included in the conversion tracking statistics.

The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f GDPR. As website operators, we have a legitimate interest in analyzing user behavior to optimize our website and advertising. Details on Google AdWords and Google Conversion Tracking can be found in Google's privacy policy: https://www.google.de/policies/privacy/. With a modern web browser, you can monitor, restrict, or block the setting of cookies. Disabling cookies may result in limited functionality of our website.

Social Media
Our website uses buttons for the following social networks:

facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA LinkedIn Ireland UnlimitedCompany, Wilton Place, Dublin 2, Ireland Google+, Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA Twitter, Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA Xing, XING AG,Gänsemarkt 43, 20354 Hamburg, Germany

The buttons are marked with the logo of the respective social network. However, these are not the usual social plugins, but buttons with embedded links. You must activate (click) the buttons separately. Only when you click the buttons and thereby declare your consent to communication with the social network's servers will the buttons become active and the connection established.

By activating the button, the social networks will receive information such as when and where you accessed the corresponding page of our website, as well as, for example, your IP address, information about the browser used and language settings.

By activating the button, we have no influence on the data collected and data processing operations and are not responsible for this data processing and are therefore not the controller within the meaning of the GDPR.

For information on the purpose and scope of data collection and the further processing and use of data by the respective social network, as well as your related rights and settings options to protect your privacy, please refer to the following information:

• Facebook: http://www.facebook.com/about/privacy
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• Google: http://www.google.com/intl/de/policies/privacy
• Twitter: http://twitter.com/privacy
• Xing: https://www.xing.com/privacy

Intercom
To improve the user experience in our applications, we use the Intercom service from Intercom Inc. for sending email notifications and for live chats. We transmit your email address and name to Intercom as personal data.
Intercom, Inc. has joined the EU-US Privacy Shield program, which aims to provide a higher level of data protection for companies not based in the EU. Further information about data protection at Intercom can be found at http://docs.intercom.io/privacy .

Mailchimp
We use the email marketing tool MailChimp to send our newsletter. MailChimp is a product of The Rocket Science Group, LLC, 512 Means Street, Ste 404 Atlanta, GA 30318 and has obtained EU/US Privacy Shield certification.
MailChimp offers extensive analytics on how emails are opened and used. Further information about MailChimp and its privacy policy can be found here: https://mailchimp.com/legal/privacy/

Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and us,
(2) is permitted under Union or Member State law to which we are subject and that law contains appropriate safeguards for your rights and freedoms and legitimate interests or
(3) with your express consent.

Changes to this privacy policy
We reserve the right to amend this privacy policy at any time with effect for the future. The current version is always available on our website. Please visit our website regularly and familiarize yourself with the applicable data protection regulations. Please also note that data protection regulations and practices of third parties, such as Google or Facebook, are subject to change. It is therefore advisable and necessary to stay informed about changes in legal regulations and company practices.

contact
If you have any questions, comments, or inquiries regarding this privacy policy, please contact: Datenschutz@archivist.store