Privacy policy

The person responsible for data processing is:
Ceretis Limited
Tepeleniou 13
8010 Paphos
Germany
service@ceretis.com

Phone: 357 97 694790

Thank you for your interest in our online shop. The protection of your privacy is very important to us. In the following we will inform you in detail about the handling of your data.

1. Access data and hosting

You can visit our website without giving any personal information. Each time a website is called up, the web server automatically only saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. These access data are evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. This serves to safeguard our legitimate interests, which predominate in the context of a weighing of interests, in a correct presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR. All access data will be deleted no later than seven days after the end of your visit to the website.

 Hosting

The services for hosting and displaying the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise stated in this data protection declaration, all access data and all data collected in the forms provided on this website are processed on your servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this data protection declaration.

2. Data processing for contract processing, establishing contact and opening a customer account

We collect personal data if you voluntarily provide it to us as part of your order or when you contact us (e.g. using the contact form or email). Mandatory fields are marked as such, because in these cases we need the data to process the contract or to process your contact and you cannot send the order or contact without specifying them. Which data is collected can be seen from the respective input forms. We use the data you provide to process contracts and to process your inquiries in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR.
Insofar as you have given your consent to this in accordance with Article 6 Paragraph 1 Clause 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account. Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this data protection declaration. After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law in accordance with Art. 6 Paragraph 1 Clause 1 lit. c GDPR, unless you expressly request further use You have consented to your data in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use data that goes beyond this, which is permitted by law and about which we will inform you in this declaration. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this data protection declaration or using a function provided for this in the customer account.

3. Data processing for the purpose of dispatch processing

In order to fulfill the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of the ordered goods.

 Data transfer to shipping service providers for the purpose of shipping notification

If you have given us your express consent to this during or after your order, we will forward your e-mail address and telephone number to the selected shipping service provider on the basis of this in accordance with Art. 6 Para. 1 S. 1 lit. Delivery can contact you for the purpose of delivery notification or coordination.
The consent can be revoked at any time by sending a message to the contact option described in this data protection declaration or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you have provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.

United Parcel Service Luxembourg S.A.R.L.
1, rue de l'Etang
5326 Contern 
Luxembourg

Post Luxembourg DPO
20 rue de Reims
2417 Luxembourg
Luxembourg

4. Data processing for payment processing

When processing payments in our online shop, we work together with these partners: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers who work for us in the context of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary to process the payment. This serves to fulfill the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, e.g. B. on your own website or via a technical integration in the ordering process. The data protection declaration of the respective payment service provider applies in this respect.
If you have any questions about our partners for payment processing and the basis of our cooperation with them, please use the contact option described in this data protection declaration.

4.2 Data processing for the purpose of fraud prevention and the optimization of our payment processes

If necessary, we give our service providers further data, which they use together with the data necessary for the processing of the payment as our contract processors for the purpose of fraud prevention and the optimization of our payment processes (e.g. invoicing, processing of contested payments, accounting support). According to Art. 6 Para. 1 S. 1 lit.

4.3 Credit check

If we make advance payments, e.g. when purchasing on account, we obtain identity and credit information from specialized service companies (credit agencies). For this purpose, we transmit your personal data required for a credit check to:

Creditreform Boniversum GmbH
Hellersbergstrasse 11
41460 Neuss
Germany

This serves to safeguard our predominant legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR in assessing the creditworthiness and willingness to pay of our potential customers in the run-up to the conclusion of the contract and thus avoiding purchase price losses, and is for the Conclusion of contract required in accordance with Art. 22 Para. 2 lit. a GDPR. Appropriate measures to safeguard your rights, freedoms and legitimate interests are taken into account. You have the opportunity to express your point of view by contacting the contact option described in this data protection declaration and to contest the decision. After the contract has been fully processed, your data processed for this purpose will be deleted unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

5. Advertising by email

5.1 Email newsletter with registration

If you register for our newsletter, we use the data required for this or separately provided by you in order to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 Para. 1 S. 1 lit.
Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a link provided in the newsletter. After unsubscribing, we will delete your email address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.

5.2 E-mail newsletters without registration and your right to object

If we receive your e-mail address in connection with the sale of a product or service and you have not objected, we reserve the right to offer you regular offers on products similar to those already purchased on the basis of Section 7 (3) UWG , to be sent from our range by e-mail. This serves to safeguard our predominantly legitimate interests in addressing our customers for advertising purposes.
You can object to this use of your e-mail address at any time by sending a message to the contact option described in this data protection declaration or via a link provided in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic tariffs.

5.3 Sending out newsletters

The newsletter may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this data protection declaration.

6. Cookies and other technologies

 General information

In order to make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically saved on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies).
We use technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping cart function). These technologies collect and process the IP address, time of visit, device and browser information and information about your use of our website (e.g. information about the content of the shopping cart). In the context of a weighing of interests, this serves predominantly legitimate interests in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit.

You can find the cookie settings for your browser under the following links: Microsoft Edge ™ / Safari ™ / Chrome ™ / Firefox ™ / Opera ™

7. Integration of the Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and any reviews we may have collected, as well as to offer Trusted Shops products to buyers after an order has been placed.

This serves to safeguard our legitimate interests, which predominate in the context of a weighing of interests, in optimal marketing by enabling safe shopping in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str.15C, 50823 Cologne. The Trustbadge is provided by a CDN provider (Content Delivery Network) as part of order processing. Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured. You can find more information on data protection at Trusted Shops GmbH here.

When you call up the Trustbadge, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Individual access data are stored in a security database for the analysis of security vulnerabilities. The log files are automatically deleted no later than 90 days after creation.

Further personal data is transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered for use. The contractual agreement made between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you as a buyer is already registered for a product use is automatically checked using a neutral parameter, the email address hashed by a cryptological one-way function. The e-mail address is converted into this hash value, which cannot be decrypted for Trusted Shops, before it is transmitted. After checking for a match, the parameter is automatically deleted.

This is necessary for the fulfillment of our and Trusted Shops ‘overriding legitimate interests in the provision of the buyer protection linked to the specific order and the transactional evaluation services according to Art. 6 Para. 1 S. 1 lit.f GDPR. Further details, including the objection, can be found in the Trusted Shops data protection declaration linked above and in the Trustbadge.

8. Contact options and your rights

As a data subject, you have the following rights:

  • In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent specified therein;
  • In accordance with Art. 16 GDPR, you have the right to immediately request the correction of incorrect personal data or the completion of your personal data stored by us;
  • In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing
    • to exercise the right to freedom of expression and information;
    • to fulfill a legal obligation;
    • for reasons of public interest or
    • is necessary for the establishment, exercise or defense of legal claims;
  • according to Art. 18 GDPR the right to request the restriction of the processing of your personal data, insofar as
    • you dispute the accuracy of the data;
    • the processing is unlawful, but you refuse to delete it;
    • we no longer need the data, but you need them to assert, exercise or defend legal claims or
    • You have lodged an objection to the processing in accordance with Art. 21 GDPR;
  • In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;
  • According to Art. 77 GDPR the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of granted consent or objection to a specific use of data, please contact us directly using the contact details in our imprint.

Right to object
If we process personal data as explained above in order to safeguard our legitimate interests, which are predominant in the context of a weighing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing takes place for other purposes, you only have a right of objection if there are reasons that arise from your particular situation.

After exercising your right of objection, we will no longer process your personal data for these purposes, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing requires the assertion, exercise or defense of Serves legal claims.

This does not apply if the processing is carried out for direct marketing purposes. Then we will no longer process your personal data for this purpose.

 

Data protection created with the Trusted Shops Legal copywriter in cooperation with FÖHLISCH lawyers.