Privacy Policy

1) Information about the collection of personal data and contact details of the data controller

1.1 We are pleased that you use our application (hereinafter "App"). In the following, we inform you about the handling of your personal data when using our app. Personal data is all data with which you can be personally identified.

1.2 The data controller for data processing in relation to this app within the meaning of the General Data Protection Regulation (GDPR) is "Shopküche eCommerce GmbH, René Schwabe, Kirchenholzstraße 4, 83134 Prutting, 08038/9105007, info@appdivison.de". The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the data controller), this app uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2) Log files when using our mobile app

When you download our mobile app via an app store, the necessary information is transmitted to the app store, in particular the username, email address and customer number of your account, time of download, payment information and the individual device identifier. We have no influence on this data collection and are not responsible for it. We only process the data to the extent necessary for downloading the mobile app to your mobile device.

When using our mobile app, we collect the personal data described below to enable comfortable use of the function. If you want to use our mobile app, we collect the following data that is technically required for us to offer you the functions of our mobile app and to ensure stability and security:

  • Date and time of request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request
  • Access status/HTTP status code
  • Amount of data transmitted in bytes
  • Source/reference from which you reached the page
  • Browser used
  • Language and version of browser software
  • Operating system used and its interface
  • IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our app. The data is not passed on or otherwise used. However, we reserve the right to subsequently check the aforementioned log files if there are concrete indications of illegal use.

Furthermore, we need your unique device number (IMEI = International Mobile Equipment Identity), unique subscriber number (IMSI = International Mobile Subscriber Identity), mobile phone number (MSISDN), possibly MAC address for WLAN use and the name of your mobile device.

3) Contact

When contacting us (e.g. via contact form or email), personal data is collected. Which data is collected when using a contact form can be seen from the respective contact form in the app. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that no legal retention obligations prevent this.

4) Rights of the data subject

4.1 The applicable data protection law grants you comprehensive data subject rights (information and intervention rights) vis-à-vis the data controller with regard to the processing of your personal data, about which we inform you below:

  • Right to information according to Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if this was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed about what guarantees according to Art. 46 GDPR exist when your data is forwarded to third countries;
  • Right to rectification according to Art. 16 GDPR: You have a right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored with us;
  • Right to deletion according to Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 para. 1 GDPR are met. However, this right does not exist in particular if processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending legal claims;
  • Right to restriction of processing according to Art. 18 GDPR: You have the right to request restriction of processing of your personal data as long as the accuracy of your data disputed by you is being verified, if you refuse deletion of your data due to unlawful data processing and instead request restriction of processing of your data, if you need your data for asserting, exercising or defending legal claims after we no longer need this data after achieving the purpose, or if you have lodged an objection for reasons of your particular situation, as long as it has not yet been determined whether our legitimate reasons outweigh;
  • Right to information according to Art. 19 GDPR: If you have asserted the right to rectification, deletion or restriction of processing against the data controller, they are obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or deletion of data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
  • Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another controller, insofar as this is technically feasible;
  • Right to withdraw given consent according to Art. 7 para. 3 GDPR: You have the right to withdraw consent given once for data processing at any time with effect for the future. In the case of withdrawal, we will immediately delete the affected data, unless further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
  • Right to complaint according to Art. 77 GDPR: If you believe that the processing of personal data concerning you violates the GDPR, you have the right to complaint to a supervisory authority, particularly in the member state of your residence, workplace or the place of the alleged violation - without prejudice to any other administrative or judicial remedy.

4.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE AFFECTED DATA. HOWEVER, CONTINUED PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

5) Duration of storage of personal data

The duration of storage of personal data is determined based on the respective legal basis, the processing purpose and - if applicable - additionally based on the respective legal retention period (e.g. commercial and tax retention periods).

When processing personal data based on explicit consent according to Art. 6 para. 1 lit. a GDPR, the affected data is stored until you withdraw your consent.

If there are legal retention periods for data processed in the context of contractual or contract-like obligations based on Art. 6 para. 1 lit. b GDPR, this data is routinely deleted after the retention periods expire, provided it is no longer required for contract fulfillment or contract initiation and/or we have no legitimate interest in continued storage.

When processing personal data based on Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or processing serves the assertion, exercise or defense of legal claims.

When processing personal data for direct marketing purposes based on Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object according to Art. 21 para. 2 GDPR.

Unless the other information in this declaration regarding specific processing situations indicates otherwise, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.