Privacy policy of Kolibri Image - Regina und Dirk Maass GbR

1. Definitions

This data privacy statement relies on the definitions that were used by the European guideline encoders and regulators for the enactment of the General Data Protection Regulation (DSGVO). In this data privacy statement, these definitions will be used, among others: personal data, affected person, processing, processing restriction, profiling, person responsible, recipient, third party, consent. The following link provides information on how the definitions in the sense of the DSGVO are to be understood: http://www.anwaltblog24.de/artikel-4-dsgvo-begriffsbestimmungen

2. Name and contact data of the person responsible for the processing

These data privacy statements apply to the data processing carried out by:

Dirk Maass and Regina Maass GbR
represented by Mr. Dirk Maass
Lessingstr. 27
22087 Hamburg
Germany

Cell phone: +49 (0)179 7801656
Telephone: +49 (0)40 18089289
Telefax: +49 (0)40 380178-68885
E-Mail: dm (at) kolibri-image.com

3. Elicitation and storage of personal data, as well as the type and purpose of their use

You were already informed, in the data privacy statement provided by eBay, (downloadable at: https://pages.ebay.com/help/policies/privacy-policy.html) about the elicitation and storage of your personal data, as well as the type and purpose of their use. Your consent to this was obtained by eBay as part of your registration. We will not elicit any additional personal data from you beyond that of eBay. You have already agreed that eBay transfer to us your personal data for the purpose of contract implementation. These personal data transmitted to us by eBay will be retained by us.

We will use these data,

• in order to be able to identify you as our customer;
• in order to be able to process, comply with and complete your order;
• in order to correspond with you;
• in order to send you an invoice;
• in order to settle possible liability claims that may occur, as well as to enforce possible claims against you;

In the course of your registration at eBay and during the order fulfillment process, an approval to process these data will be sought from you.

The data processing takes place with respect to your order and is necessary in accordance with Article 6 Para 1 p. 1 lit. b of the DSGVO for the named purposes necessary for the reasonable processing of your order and for the mutual fulfillment of the obligations in the purchasing contract.

The personal data elicited by eBay for the handling of your order and transferred to us will be stored by us until the expiration of the legal obligation to preserve business records and then deleted, unless we are obligated to preserve the information for a longer period due to reasons related to taxation or commercial law per Article 6 Para 1 p. 1 lit. c of the DSGVO or an obligation to document (from HBB, StGB or AO) or you have consented to a longer period of storage in accordance with Article 6 Para 1 p. 1 lit. a of the DSGVO. Please obtain further information on the storage of your personal data by e-Bay in eBay’s data privacy statement.

4. Passing on of data

A transfer of your personal data by us to third parties will take place exclusively in connection with the service partners participating in the execution of the contract:

• the company contracted with for order picking and shipment, Concept GmbH, Tonndorfer Hauptstr. 34-36, 22045 Hamburg, Germany and the logistics companies related to it, Deutsche Post und DHL;
• the credit institute contracted for payment matters, GLS Gemeinschaftsbank (Community Bank) eG, Christstraße 9, 44789 Bochum, Germany;
• the service provider involved with invoicing, easybill GmbH, Düsselstr. 21, 41564 Kaarst, Germany.

When your personal data is transferred to one of the above-named third parties, the transferred information includes only the necessary minimum.

When paying via PayPal, by credit card via PayPal, by direct deposit via PayPal or “on account” via PayPal, we will transfer your payment data in connection with payment execution to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereafter identified as "PayPal"). PayPal reserves the right to carry out a credit check for the following payment types: credit card via PayPal, direct deposit via PayPal or “Payment on account” via PayPal. PayPal will use the result of the credit check with regard to the statistical probability of failure to pay for the purpose of deciding whether to provide the particular type of payment. The credit check can incorporate probabilities (so-called scoring values). To the extent that scoring values are taken into account in the result, these have their basis in a scientifically recognized mathematical statistical procedure. To calculate the scoring values, address details are among the data taken into account. Information on additional legal data privacy protection can be found on PayPal’s data security policy at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

There will be no transfer of your personal data to third parties for other than the previously stated reasons.

We will also only then pass your personal data on to third parties if:

• you have provided expressed consent in accordance with Article 6 Para 1 p. 1 lit. a of the DSGVO,
• the transfer is necessary in accordance with Article 6 Para 1 p. 1 lit. f of the DSGVO for validation, exercise or defense of legal claims and no basis exists for conjecture
• you have an overriding interest worthy of protection in not transferring your data,
• a legal obligation exists for the transfer in accordance with Article 6 Para 1 p. 1 lit. c of the DSGVO, as well as
• this is legally permissible and necessary in accordance with Article 6 Para 1 p. 1 lit. b of the DSGVO for the processing of contractual relationships with you.

In the course of the ordering process, your consent to the transfer of your data to third parties will be obtained.

5. Rights of the person affected

You have the right:

• in accordance with Article 15 of the DSGVO, to demand information about your personal data that has been processed by us. In particular, you can request information about the processing purposes, the category of the personal data, the categories of recipients to whom your data has been or will be exposed, the planned duration of storage, the existence of a right to correct, delete, limit the processing and contradict, the existence of a right of appeal, the source of your data to the extent it was not elicited by us, as well as about the existence of automated decision making including profiling and, if appropriate, meaningful information on their details;
• in accordance with Article 16 of the DSGVO, to demand immediately the correction of incorrect personal or the completion of personal data stored by us;
• in accordance with Article 17 of the DSGVO, to demand the deletion of your personal data stored by us to the extent that the processing is not necessary to exercise the right to the free expression of opinions and information, to fulfill a legal obligation, for reasons of the public interest or for validation, exercise or defense of legal rights;
• in accordance with Article 18 of the DSGVO, to demand the limitation of the processing of your personal data to the extent that the accuracy of your data is being disputed, the processing is improper, but you decline to have the data deleted and we no longer need the data, but you need it in order to validate, exercise or defend legal rights or you have lodged a disagreement against the processing in accordance with Article 21 DSGVO;
• in accordance with Article 20 of the DSGVO, to demand to receive your personal data that you have made available to us in a structured, current and machine-readable format or to request its transfer to another responsible party;
• in accordance with Article 7 Para 3 of the DSGVO, to revoke the formerly granted consent to us at any time. This has the consequence that the data processing that rested on this consent may no longer be carried out in the future and
• in accordance with Article 77 of the DSGVO, to complain to a regulatory authority. As a rule, you can turn for this to a regulatory authority in your current place of residence or workplace or at our headquarters location.

6. Right of revocation

To the extent that your personal data is processed on the basis of justified interests in accordance with Article 6 Para 1 p. 1 lit. f of the DSGVO, you have the right in accordance with Article 21 of the DSGVO, to lodge a dissent against the processing of your personal data, to the extent that reasons for that exist that derive from your special situation or focus on the revocation against direct advertising. In the latter case, you have a general right of revocation that can be implemented by us without stating a particular situation.

If you would like to make use of your right of revocation or objection, an e-mail to dm (at) kolibri-image.com is sufficient.

7. Data security

Information on data security can be found in the data privacy statement made available by eBay, downloadable under the link identified in Item 3.

In addition, we will make use of technical and organizational security measures in order to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction and against unauthorized access by third parties. Our security measures are constantly being improved, as further technical developments occur.

8. Currency of this data privacy statement and changes to it

This data privacy statement is currently valid and takes effect as of May 2018.

Through the further development of the website offered by eBay and offers made over it or because of changed legal or regulatory guidelines, it can become necessary to change this data privacy statement.

Source: Attorney Andreas Gerstel (http://www.anwaltblog24.de/)