Privacy policy
1) Information on the Collection of Personal Data and Contact Details of the Data Controller
1.1 The data controller for data processing within the meaning of the General Data Protection Regulation (GDPR) is Claudia Iffert, Winkelsweg 183, 40764 Langenfeld, Germany, Tel.: +49 2173 2046366, Email: C.Iffert@Magic-Glaze.com. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
1.2 Below, we inform you about how your personal data is handled. Personal data refers to any information that can be used to identify you personally.
2) Contact
If you contact us (e.g., via the contact form or email), we collect the personal data you provide to us. This data is stored and used solely for the purpose of processing your inquiry and the related technical administration. The legal basis for the processing of the data is our legitimate interest in processing your request pursuant to Art. 6(1)(f) GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after your request has been fully processed, unless there are statutory retention obligations. We consider the processing of your request to be completed when the circumstances indicate that the issue has been conclusively resolved.
3) Data Processing for Order Processing
As far as necessary for the fulfillment of the contract, for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the contracted bank in accordance with Art. 6(1)(b) GDPR.
If we owe you updates for goods with digital elements or digital products under an existing contract, we process the contact details you provided during the order (name, address, email address) to inform you about upcoming updates within the legally required period, in accordance with our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for communications regarding the updates we owe and will only be processed to the extent necessary for the relevant information.
To process your order, we also work with the service provider(s) listed below, who assist us fully or partially in carrying out the concluded contracts. Certain personal data will be transmitted to these service providers as specified below.
4) Rights of the Data Subject
4.1 The applicable data protection law grants you comprehensive rights as a data subject concerning the processing of your personal data (right to access and intervention rights), which we inform you about below:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent given pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
4.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON A LEGITIMATE INTEREST PURSUANT TO ART. 6(1)(f) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THIS PROCESSING WITH FUTURE EFFECT.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA. HOWEVER, FURTHER PROCESSING IS STILL POSSIBLE IF WE CAN DEMONSTRATE COMPELLING PROTECTABLE REASONS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.
5) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the processing purpose, and, where applicable, any statutory retention periods (e.g., commercial and tax law retention periods).
In the case of processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data will be stored as long as you do not withdraw your consent.
If there are statutory retention periods for data processed in connection with contractual or quasi-contractual obligations based on Art. 6(1)(b) GDPR, these data will be routinely deleted after the retention periods have expired, unless they are still needed for contract fulfillment or pre-contractual measures and/or we have a legitimate interest in further storage.
For processing personal data based on Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling protectable reasons for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
For processing personal data for direct marketing purposes based on Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.
Unless otherwise specified in the other information of this statement regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.