Privacy notice
The privacy notice provided below applies to the use of our licenseseller.shop Internet site (hereinafter referred to as the “website”).
Data protection is a matter of great importance to us. Your personal data are collected and processed in compliance with the applicable data protection provisions, and the General Data Protection Regulation (GDPR) in particular.
1 Controller
The controller responsible for collecting, processing and using your personal data within the meaning of Article 4(7) GDPR is
IT Trading GmbH
Hufeiseinring 9
22941 Bargteheide
Germany
E-mail: info@licenseseller.shop
Phone: +49 (0)4532 288 88 22
Should you wish to object generally or in individual circumstances to your data being collected, processed or used in compliance with these data protection provisions, you may contact the data protection office with your objection.
You may store and print out this privacy notice at any time.
2 What data do we use and why?
2.1 Access data
We collect information on you when you use this website. We automatically record information about your usage and interaction with us and register data on your computer or mobile device. We collect, store and use data every time someone accesses our website (so-called server log files). The access data concerned include:
− Name and URL of the accessed file
− Date and time of access
− The transferred data volume
− Message reporting successful access (HTTP response code)
− Browser type and version
− Operating system
− Referrer URL (i.e. the site previously visited)
− Websites accessed via our website by the user’s system
− User’s Internet service provider
− IP address and the requesting provider
We use these protocol data – without associating them with you or any other profiles you may have created – for statistical evaluations for the purpose of running and optimising this website and also safeguarding it, but also to anonymously record the number of visitors to our website (traffic) and how and to what extent they use our website and services, as well as for invoicing, in order to measure the number of clicks received by cooperation partners. Using this information, we can provide personalised and location-specific content and analyse data traffic, troubleshoot and eliminate errors, and improve our services.
These uses constitute our legitimate interest pursuant to Article 6(1)(1f) GDPR.
We reserve the right to review the protocol data retrospectively if there are specific grounds to assume there is a legitimate reason to believe the website has been used unlawfully. We store IP addresses in log files for a limited period if this is required for security reasons or for providing or billing for a given service, e.g. if you use one of our offerings. Should an ordering process be cancelled or payment be received, we erase the IP address provided that it is no longer required for security reasons. We also store IP addresses if we specifically suspect that a criminal act has been perpetrated in connection with the use of our website. We also store the date of your most recent visit as part of your account (e.g. upon registration, login, clicks on links, etc.).
2.2 Cookies
We use so-called session cookies to optimise our website. A session cookie is a small text file that is sent by the respective servers when you visit a website and temporarily stored on your hard drive. The file in question contains a so-called session ID to enable various inquiries from your browser to be associated with a common session. This allows your computer to be recognised when you return to our website. These cookies are erased once you close your browser. They serve, for example, to enable you to use the shopping cart feature when passing from one page to another.
Our legitimate interest in using cookies in accordance with Article 6(1)(1f) GDPR is in making our website more user-friendly, more effective and safer.
The following data and information are stored in the cookies:
– Log-in information
– Language settings
– All entered search terms
– Information concerning the number of times our website is accessed plus how
individual features on our website are used.
The enabled cookie will be assigned an identification number and your personal data will not be associated with this identification number. Your name, IP address or similar data, which would enable the cookie to be associated with you, will not be added to the cookie. Based on this cookie technology, we will merely receive pseudonymised information on items such as which of our shop pages have been visited, which products have been viewed, etc.
You can set your browser to be informed of any cookies that will be placed before this occurs and to decide in advance whether you want to exclude the placement of cookies in individual cases or in general, or whether you wish to prevent the placement of cookies entirely. Such actions may restrict your ability to enjoy the full functionality of our website.
2.3 Contact form
When you contact us (e.g. by our contact form or by e-mail), we process your details in order to process your inquiry and also in the event that follow-up questions or queries arise.
Should data be processed to implement pre-contractual measures resulting from your inquiry, or – if you are already a customer of ours – to execute a contract, your data will be processed in accordance with Article 6(1)(1)(b) GDPR.
Any other personal data will only be processed by us if you grant your consent for us to do so (Article 6(1)(1a) GDPR) or if we have a legitimate interest in processing the data (Article 6(1)(1f) GDPR). A legitimate interest exists e.g. in responding to your e-mail.
3 Google Fonts
We incorporate fonts (“Google Fonts”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy statement: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
4 Google Analytics
We use Google Analytics, a web analysis service provided by Google Inc. („Google“). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about the use of this website by website visitors is generally transmitted to and stored by Google on servers in the United States. This also constitutes our legitimate interest pursuant to Art. 6 (1) sentence 1 f) DSGVO. Google has submitted to the Privacy Shield Agreement concluded between the European Union and the USA and certified itself. As a result, Google undertakes to comply with the standards and regulations of European data protection law. Further information can be found in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. We have enabled IP anonymization on this website (anonymizeIp). However, as a result of this, your IP address will be previously deleted by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to and deleted from a Google server in the United States. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You may also prevent the transmission to Google of data generated by the cookie and relating to your use of the website (including your IP address) and the processing of such data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser plugin or within browsers on mobile devices, you can click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data from this website in the future (this opt-out cookie only works in this browser and only for this domain). If you delete the cookies in your browser, you must click this link again. Google Analytics
5 Storage time
Unless otherwise specifically stated, we will only store personal data for as long as this is necessary to fulfil the envisaged purposes.
In certain cases, legislators prescribe the time personal data must be archived, e.g. where taxation or commercial laws are concerned. In these instances, we will only continue to store the data for such legal purposes but will not otherwise process them and they will be erased once the statutory retention period elapses.
6 Your rights as the data subject
In accordance with the applicable laws, you have various rights in respect of your personal data. Should you wish to make use of such rights, please send your inquiry by e-mail or post to the address shown under Point 1 along with clear proof of your identity.
A summary of your rights can be found below.
6.1 Right to confirmation and access
You have the right to be readily informed as to the processing of your personal data.
Specifically:
You have the right, at any time, to receive confirmation from us as to whether information pertaining to you is being processed. Should this be the case, you have the right to receive access information free of charge as to the personal data that are stored and to request a copy of such data. You furthermore have the right to the following information:
the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the personal data are not collected from you, any available information as to their source;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
Should personal data be transferred to a third country or an international organisation, you have the right, in accordance with Article 46 GDPR, to be informed about the appropriate safeguards that are taken in connection with the transfer of such data.
6.2 Right to rectification
You have the right to require personal data concerning you to be rectified or completed.
Specifically:
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
6.3 Right to erasure (“right to be forgotten”)
In a number of instances, we are obliged to erase any personal data relating to you.
Specifically:
You have the right, pursuant to Article 17(1) GDPR, to obtain from us the erasure of personal data concerning you without undue delay and we have the obligation to erase personal data without undue delay where one of the following grounds applies:
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you withdraw consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing;
you object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR;
the personal data have been unlawfully processed;
the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject;
the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
Where we have made the personal data public and are obliged pursuant to Article 17(1) GDPR to erase the personal data, we will, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, such personal data.
6.4 Right to restriction of processing
In a number of instances, you are entitled to request that the processing of your personal data be restricted.
Specifically:
You have the right to obtain from us restriction of processing where one of the following applies:
the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, or
you have objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of our company override yours.
6.5 Right to data portability
You have the right to receive or transfer personal data concerning you, or have us transfer such data to you, in a machine-readable format.
Specifically:
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us to which the personal data have been provided, where:
the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1); GDPR and
the processing is carried out by automated means.
In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
6.6 Right to object
You have the right to withdraw your consent to your personal data being legally processed by us if you have specific grounds for doing so and our interests in processing the data do not override your own.
Specifically:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on points (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, you, on grounds relating to your particular situation, have the right to object to processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
6.7 Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
No automated individual decision-making is undertaken on the basis of the personal data that are collected.
6.8 Right to withdraw data protection consent
You have the right to withdraw your consent to the processing of personal data at any time.
6.9 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, especially in the member state of your place of residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you is unlawful.
7 Data security
We make every effort to keep your data secure in accordance with the applicable data protection laws and technical possibilities.
We transfer your personal data in encrypted form. This applies in the case of your orders and also when you log in as a customer. Although we use SSL (Secure Socket Layer) encryption, we wish to point out that the transfer of data via the Internet (e.g. when communicating by e-mail) is not completely secure. It is not possible to fully safeguard data from third-party access.
In order to secure your data, we undertake technical and organisational security measures in accordance with Article 32 GDPR, which we adapt on an ongoing basis to meet the latest technical standards.
We also do not guarantee that our offering is always available at given times; we cannot wholly exclude disruptions, interruptions or downtimes. The servers that we use are regularly and carefully secured.
8 Transfer of data to third parties; no data transfer to non-EU countries
As a rule, we only use your personal data within our company.
If and to the extent that we engage third parties to fulfil contracts (such as logistics providers), they only receive the amount of personal data required for them to perform the service in question.
Should we ever outsource certain parts of the data processing (“order processing”), we always bind our order processors by virtue of a contract only to use personal data in compliance with the requirements of the data protection laws and to guarantee that the data subject’s rights are protected.
No data are actually or intended to be transferred to agencies, organisations or persons outside the EU beyond what is described in the aforementioned Point 5.
