Data Privacy Policy

Data Privacy Policy

Privacy Policy and Information to be provided where personal data are collected in accordance with Art. 13, 14 GDPR

shop.k-fee.com

 

The protection of your personal data is an important concern for K-fee® System GmbH. The collection and processing of your personal data is therefore carried out by our company exclusively within the framework of data protection regulations. On this page we inform you about the collection and processing of your personal data in accordance with Art. 13, 14 of the General Data Protection Regulation (GDPR).

Responsible for data processing is

K-fee System GmbH
Senefelderstr. 44
51469 Bergisch Gladbach
Tel. +49-2202-105-0
E-Mail: info@k-fee.com

Our data protection officer:

Dr. Jan-Peter Ohrtmann
PricewaterhouseCoopers Legal AG Rechtsanwaltsgesellschaft
Moskauer Straße 19
40227 Düsseldorf
Telefon +492119812572
E-Mail: jan-peter.ohrtmann@de.pwc.com

When you visit this website and use the various offers, we process your personal data as described in detail below.
When operating the website, we work together with an external service provider whom we have carefully selected and obliged in accordance with data protection law.

 

Table of Contents

  1. Cookies
    1.a Session-Cookies
    1.b Longtime-Cookies
    1.c Cookie settings
  2. Server-Logfiles
  3. Google Analytics
  4. Contact and Customer Complaints: Form and E-Mail Function
  5. Online Shop
  6. Data security
  7. rights of the persons concerned

 

1. Cookies

Each time you visit our website, we use so-called cookies, i.e. small text files that are stored in your browser.
Cookies are small files which are stored on your data carrier and which store certain settings and data for exchange with our system via your browser. Basically there are 2 different types of cookies, so-called session cookies, which are deleted as soon as you close your browser and temporary/permanent cookies, which are stored on your data carrier for a longer period or indefinitely. This storage helps us to design our web pages and our offers accordingly for you and facilitates your use, for example by storing certain entries by you in such a way that you do not have to repeat them constantly. 

1.a Session-Cookies

On the one hand, we use so-called session cookies, which are retained until you close all browser windows. We need these session cookies so that we can process your request on our website and direct you to the various sub-pages. We have a legitimate interest in this, as otherwise we would not be able to offer our website in this way (Art. 6 I 1 f GDPR). If you do not wish cookies to be used, you can block the use of cookies in your browser settings. You can still visit our website, but you cannot use it equally. Most of the cookies we use are automatically deleted from your hard drive at the end of the browser session (hence session cookies). Session cookies are required, for example, to offer you the shopping basket function across several pages. 

1.b Longtime-Cookies

In addition, we use the following longer-term cookies, which allow us to make our website more user-friendly if you have consented to it:

  • Long-term cookie for identifying new/regular customers: 6 months / 0.5 years without opt-in and 12 months / 1 year with opt-in
  • Opt-out cookie in the event of an objection to tracking, minimum service life: 60 months / 5 years
  • Opt-in cookie to extend the long-term cookie, lifetime: 12 months / 1 year

These cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies), so that e.g. preferences are retained. Persistent cookies are automatically deleted after a specified period, which differs depending on the cookie and is specified above. By using the long-term cookies, it is possible to recognize you the next time you visit our website. Recognition takes place with these cookies to optimise the content of our website.

You are free to decide whether to accept long-term cookies with a duration of 6 months or 12 months. For the long-term optimization of our website and for the targeted provision of content or user information, cookie information helps us over a longer period of time. For example, we may recognize that you have visited our website before and your preferred settings will automatically be displayed again for the duration of the long-term cookie you have chosen. This information is then also used for a longer-term statistical evaluation.

We only use these cookies if you have explicitly consented to them (Art. 6 I 1 a GDPR). Giving your consent is voluntary. You can also use the website without the above cookies, in which case it may not be equally user-friendly. 

1.c Cookies settings

The storage period of cookies is shown in your web browser under “cookie settings”. Here you can choose between several cookie default settings. Each browser has its own individual cookie settings, described in the respective browser help menu. The following links may help you to preset you cookie settings:

 

2. Server-Logfiles

In addition, your browser transmits access data, so-called server log files, which we process each time you visit our website in order to guarantee system security and to compile usage statistics. In particular, the date and time of access, name of the page accessed, IP address, referrer URL (originating URL from which you accessed the website), the data volume transmitted as well as product and version information of the browser used are transmitted to us. This data is required to ensure system security, e.g. to identify and block the attacker in the event of a hacker attack. This is in our overriding, legitimate interest (Art. 6 I 1 f GDPR). In the case of anonymisation, the IP addresses are changed in such a way that the individual information about personal or factual circumstances can no longer be assigned to a specific or identifiable natural person, or only with a disproportionately large expenditure of time, cost and manpower.

 

3. Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc Google Analytics uses so-called tracking cookies, text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. This website uses Google Analytics with the extension "_anonymizeIP()". Your IP address will therefore be shortened immediately after transmission and thus made anonymous. Specifically, your IP address will be reduced by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being forwarded. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address initially transmitted by your browser within the scope of Google Analytics and then shortened will not be merged with other Google data. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide services associated with Internet use to the website operator.

We use Google Analytics to analyse and regularly improve the use of our website. We can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, an appropriate level of data protection is ensured, as Google has submitted to the EU-US Privacy Shield (list available at https://www.privacyshield.gov/list).

We use Google Analytics only after your express consent by the confirmation on our homepage (Art. 6 I 1 a GDPR). Giving your consent is voluntary. You can also use the website without Google Analytics. You can revoke your consent at any time and prevent the use of Google Analytics by clicking here.

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Privacy policy: https://www.google.de/intl/de/policies/privacy
Privacy policy overview: https://www.google.com/intl/de/analytics/learn/privacy.html
Terms of Use: https://www.google.com/analytics/terms/de.html

 

4. Contact and Customer Complaints: Form and E-Mail Function

You can contact us directly using the contact form provided on our website. If you do so, you must provide your name, e-mail address and, in exceptional cases, your address and telephone number. We collect this information, your message, your IP address and the time you submit the form.

We also offer you the opportunity to contact us directly via e-mail. If you click on the button "e-mail" on our website, a contact form of your e-mail-provider will open and you can send us a message to our pre-registered e-mail address. We have no influence on the data processing by the e-mail program of your respective provider; we only create a link to the e-mail program.

We use the information you send us via the contact form exclusively to process your request; we delete it as soon as the communication is completed, unless legal storage obligations require a further storage. We need your IP address and the time when using the contact form for security reasons; we can thus identify automated accesses and hacker attacks and exclude them from renewed accesses. This processing of the information you send us is in our legitimate interest (Art. 6 I 1 f GDPR).

 

5. Online Shop

In addition to the purely informational use of our website, you can also order our products online if you wish. In order to process an order, we require further data from you; in addition, you may voluntarily make use of further offers.

If you use our shop to order our products, we collect, store and process further personal data from you. These are only collected, stored and processed if you inform us of them when ordering goods or opening a customer account. We need some data to process an order (e.g. name and address), others to provide you with the functionalities of your customer account (e.g. order history).

We use the data provided by you without your separate consent exclusively for the fulfilment and processing of your order or the other offer you have chosen, such as the customer account. You have the choice whether you enter the data necessary for the order only once for this order or whether you want to create a customer account where your data will be saved for further purchases. The legal basis for the respective data processing is Art. 6 I 1 b GDPR, in the case of the customer account also Art. 6 I 1 f GDPR with our legitimate interest in making this voluntary offer available to you with regard to the quasi-contractual relationship.

If you decide against setting up a customer account with us, your data will be blocked for further use once the contract has been completely processed and the purchase price has been paid in full and deleted after expiry of the tax and commercial law periods (10 years for billing-relevant data), unless another legal permission permits further processing in exceptional cases.

If you set up a customer account with us, your data will be processed as long as you do not delete this customer account. Setting up a customer account is voluntary; you can also order goods from us without setting up a customer account. In addition to the data you provide, such as your name, your e-mail address and your address, we also store your order history.

Under no circumstances will the collected data be sold or passed on to third parties without consent or legal permission. Without the cooperation with third parties (in accordance with data protection law), however, it would not be possible for us to process your order. We therefore work together with various third parties, in particular:

  • with external service providers who support us in the technical provision of our services, have been carefully selected and integrated in compliance with data protection law,
  • with postal service providers who are involved in the processing of your order (dispatch);
  • with payment service providers for processing your payment, depending on your chosen method of payment to credit institutions, postal service providers or Paypal


We are entitled to obtain and evaluate credit information if and as long as you have given us your consent (Art. 6 I 1 a GDPR). There are also cases in which it is in our legitimate interest to obtain creditworthiness information (Art. 6 I 1 f EU DSGVO), if we bear a considerable credit risk through the drafting of the contract, especially if we step into advance payment (also taking into account that you can also choose other methods of payment, without credit assessments).How Paypal handles your data cannot be influenced by us, is beyond our knowledge and is the subject of the contractual relationship between you and Paypal. However, we would like to point out that PayPal may transfer your data to credit agencies in order to obtain credit information for assessing the liability risk.
Further information can be found here: https://www.billsafe.de/privacy-policy/credit-check
PayPal's current privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You are free to choose this payment service and not obliged to do so. If you decide to use PayPal, the data must be transmitted to PayPal for processing and is therefore permitted under Art. 6 I 1 b GDPR.

 

6. Data security

In order to protect your personal data as best as possible, we use SSL encryption (https standard) for technical and organisational security measures, which are also adapted in accordance with the current state of the art in each case.

 

7. rights of the persons concerned

If personal data relating to you as a natural person is used, you are entitled to various data protection claims against us. In accordance with § 34 BDSG, Art. 15 GDPR, you have the right of access to information about your personal data stored and its origin, the recipients or categories of recipients to whom data are passed on, and the purpose of storage.

In addition, you are entitled to have your personal data corrected, deleted or restricted (processed) in accordance with § 35 BDSG, Art. 16 - 18 GDPR. In addition, pursuant to Art. 20 of the GDPR, you may request the transfer of the data to another responsible body.

In addition, you can object to the further processing of your data if we process your data on the basis of a legitimate interest (Art. 6 I 1 f GDPR). As far as we do not process your data for advertising purposes, this requires a reason, which results from your special situation. In the event of an objection, we will no longer process your personal data as soon as we receive it during the subsequent check and - in the event of a justified objection - delete it after completion of the check (§ 36 BDSG, Art. 21 GDPR).

You can revoke your consent to data processing (Art. 6 I 1 a GDPR) at any time; we will then not process your personal data further unless we have legal permission to do so.

An objection or revocation does not affect the permissibility of data processing in the past.

We fulfil the rights to which you are entitled immediately and free of charge. Please contact us or our data protection officer; you will find our contact details at the beginning of this privacy policy.

Finally, under Article 77 of the GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority.

Download Data Request Form