Data protection

Person responsible for data processing is: Ishai Rosenbaum Max-Planck-Straße 7 12489 Berlin Germany ir@enerdan.de

We appreciate your interest in our online shop. The protection of your privacy is very important to us. Below, we provide detailed information about how we handle your data.

Access Data and Hosting

You can visit our websites without providing any personal information. When you access a website, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, date and time of access, the amount of data transferred, and the requesting provider (access data) and documents the access. This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our offer. This is to safeguard our legitimate interests in the correct presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. All access data is deleted no later than seven days after the end of your visit to the site.

Hosting

The hosting and display of the website's services are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact details described in this privacy policy.

Data Processing for Contract Processing and Contact

2.1 Data Processing for Contract Processing

For the purpose of contract processing in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Mandatory fields are marked as such because in these cases, we need the data to process the contract and cannot send the order without it. The data collected can be seen from the respective input forms.

Further information on the processing of your data, especially regarding the transfer to our service providers for the purpose of order, payment, and shipping processing, can be found in the following sections of this privacy policy. After the complete processing of the contract, your data is restricted for further processing and deleted after the expiration of tax and commercial retention periods in accordance with Art. 6 Para. 1 S. 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this statement.

ERP System

For order and contract processing, we use external ERP systems from service providers. Our service providers act as processors on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact details described in this privacy policy.

2.2 Customer Account

If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening a customer account and storing your data for further future orders on our website. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or by using a designated function in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this statement.

2.3 Contact

As part of customer communication, we collect personal data to process your inquiries in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR if you voluntarily provide us with this information when contacting us (e.g., via contact form or email). Mandatory fields are marked as such because in these cases, we need the data to process your contact request. The data collected can be seen from the respective input forms. After complete processing of your inquiry, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this statement.

Data Processing for the Purpose of Shipping Processing

For the purpose of contract fulfillment in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

Transfer of Data to Shipping Service Providers for the Purpose of Delivery Notification

If you have given your explicit consent during or after your order, we will, based on Art. 6 Para. 1 S. 1 lit. a GDPR, forward your email address and phone number to the selected shipping service provider so that they can contact you for the purpose of delivery notification or coordination. The consent can be revoked at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this statement.

FedEx Express Germany GmbH Langer Kornweg 34 k 65451 Kelsterbach Germany

United Parcel Service Deutschland S.à r.l. & Co. OHG Görlitzer Straße 1 41460 Neuss Germany

DHL Paket GmbH Sträßchensweg 10 53113 Bonn Germany

Payment Service Providers

Use of PayPal

All PayPal transactions are subject to the PayPal Privacy Policy. These can be found at https://www.paypal.com/webapps/mpp/ua/privacy-full.

Use of Stripe

If you choose a payment method offered by the payment service provider Stripe, the payment will be processed by the payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we provide your information as part of the order in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. You can find more information about Stripe's data protection at the URL https://stripe.com/privacy.

Advertising by Email

Newsletter

If you subscribe to our newsletter, we will regularly send you our email newsletter based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, using the data required or disclosed by you separately for this purpose.

You can unsubscribe from the newsletter at any time by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this statement.

Contact Options and Your Rights

As a data subject, you have the following rights:

in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
in accordance with Art. 16 GDPR, the right to demand the correction of incorrect or incomplete personal data stored by us without delay;
in accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless the further processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party;
in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

For questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data, and revocation of granted consent or objection to a particular use of data, please contact us directly using the contact details in our imprint.

Right of Objection

If we process personal data as described above to protect our legitimate interests, which outweigh any conflicting interests on your part, you can object to this processing with effect for the future. If the processing is for the purpose of direct marketing, you can exercise this right at any time as described above. If the processing is for other purposes, you have the right to object only for reasons that arise from your particular situation.

After exercising your right of objection, we will not further process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing is for the assertion, exercise, or defense of legal claims.

This does not apply if the processing is for direct marketing purposes. Then we will not further process your personal data for this purpose.

End of the Privacy Policy