Privacy policy

 

Responsible for data processing

 

GINSA GmbH
Kurfürstendamm 14
10719 Berlin
Germany

Email: info@ginsa.com

 

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

 

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which may include the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the access.

This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the website and improving our services. This serves to safeguard our legitimate interests in the proper presentation of our offer pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. All access data is deleted no later than seven days after the end of your visit.

 

1.1 Hosting

The services for hosting and displaying the website are partly provided by our service providers within the framework of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in forms provided on this website are processed on their servers.

If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Canada, New Zealand, Japan, United Kingdom, USA.

The adequacy decision for the USA applies as the basis for third-country transfers insofar as the respective service provider is certified. Until certification by our service providers, data transfer continues to rely on the following basis: Standard Contractual Clauses of the European Commission.

Our service providers are located and/or use servers in the following countries: Australia, India, Singapore.

No adequacy decision by the European Commission exists for these countries. Our cooperation with them is based on the following safeguards: Standard Contractual Clauses of the European Commission.

 

1.2 Content Delivery Network

For the purpose of shorter loading times, we use a so-called Content Delivery Network (“CDN”) for some offers. With this service, content such as large media files is delivered via regionally distributed servers of external CDN service providers.

Therefore, access data is processed on the servers of the service providers. Our service providers act on our behalf within the framework of order processing.

Our service providers are located and/or use servers in countries outside the EU and EEA. No adequacy decision by the European Commission exists for these countries.

Our cooperation with them is based on Standard Contractual Clauses of the European Commission.

If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

 

2. Data Processing for Contract Handling and Contacting Us

2.1 Data Processing for Contract Handling

For the purpose of contract processing (including inquiries regarding and processing of any existing warranty and performance disruption claims as well as any statutory update obligations) pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us as part of your order.

Mandatory fields are marked as such because we absolutely require this data to process the contract and cannot ship the order without it. Which data is collected can be seen from the respective input forms.

Further information regarding the processing of your data, especially regarding the transfer to our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy.

After complete contract processing, your data will be restricted for further processing and deleted after expiration of retention periods required under tax and commercial law pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this scope in a legally permitted manner and inform you accordingly in this statement.

 

2.2 Customer Account

If you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening the customer account and storing your data for future orders on our website.

Deleting your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or through a designated function within the customer account.

After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this scope in a legally permitted manner and inform you accordingly in this statement.

 

2.3 Contacting Us

As part of customer communication, we collect personal data to process your inquiries pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR if you voluntarily provide it to us when contacting us (e.g. via contact form, live chat tool, or email).

Mandatory fields are marked as such because we absolutely require this data to process your request. Which data is collected can be seen from the respective input forms.

After complete processing of your request, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this scope in a legally permitted manner and inform you accordingly in this statement.

 

3. Data Processing for Shipping Purposes

For the performance of the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, we pass your data on to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

Data Transfer to Shipping Service Providers for Delivery Notification

If you have given us your explicit consent during or after your order pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, we will pass on your email address and telephone number to the selected shipping service provider so that they may contact you before delivery for the purpose of delivery notification or coordination.

Consent may be revoked at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider using the contact details listed below.

After revocation, we will delete the data provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope in a legally permitted manner and inform you accordingly in this statement.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

 

4. Data Processing for Payment Processing

When processing payments in our online shop, we work together with the following partners: technical service providers, financial institutions, and payment service providers.

 

4.1 Data Processing for Transaction Handling

Depending on the selected payment method, we transfer the data necessary for processing the payment transaction to our technical service providers acting on our behalf, to commissioned financial institutions, or to the selected payment service provider, insofar as this is necessary for payment processing.

This serves contract fulfillment pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

In some cases, payment service providers collect the data required for payment processing themselves, e.g. on their own website or through technical integration during the order process.

The privacy policy of the respective payment service provider applies in this regard.

 

5. Advertising by Email, Mail and Telephone

5.1 Email Newsletter with Registration and Newsletter Tracking

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to regularly send you our email newsletter based on your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

You may unsubscribe from the newsletter at any time either by sending a message to the contact option described below or via a link provided in the newsletter.

After unsubscribing, we delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope in a legally permitted manner.

We would like to point out that we analyze your user behavior when sending the newsletter. For this purpose, we also analyze your interaction with our newsletter by measuring, storing, and evaluating opening and click rates for the purpose of designing future newsletter campaigns (“newsletter tracking”).

 

6. Cookies and Other Technologies

General Information

To make visiting our website attractive and enable the use of certain functions, we use technologies including so-called cookies on various pages.

Cookies are small text files automatically stored on your device. Some cookies are deleted after the browser session ends, i.e. after closing your browser (session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies).

 

9. Contact Options and Your Rights

9.1 Your Rights

As a data subject, you have the following rights:

• pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us;

• pursuant to Art. 16 GDPR, the right to request immediate correction of inaccurate or incomplete personal data stored by us;

• pursuant to Art. 17 GDPR, the right to request deletion of your personal data stored by us;

• pursuant to Art. 18 GDPR, the right to request restriction of processing of your personal data;

• pursuant to Art. 20 GDPR, the right to receive your personal data in a structured, commonly used, and machine-readable format;

• pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority.

Right to Object

If we process personal data as explained above to safeguard our legitimate interests, you may object to this processing with future effect.

If processing is carried out for direct marketing purposes, you may exercise this right at any time.

 

9.2 Contact Options

If you have questions regarding the collection, processing, or use of your personal data, requests for information, correction, restriction, or deletion of data, as well as revocation of consent granted or objection to a particular use of data, please contact us directly using the contact details in our legal notice.