Privacy policy

Privacy policy

We appreciate your interest in our website/online shop. The protection of your privacy is very important to us and always takes place in accordance with the General Data Protection Regulation (GDPR). With this data protection declaration we inform you in detail about the handling and processing of your general and personal data. We also offer our customers the opportunity to provide us with your personal data by telephone or by post.

  1. Collection, processing, use and deletion of personal data:

You can visit our site without giving any personal information. We only store access data without personal reference, such as.B. the name of your Internet service provider, the browser used, the operating system used, the page from which you are visiting us or the name of the requested file, as well as the time, date of access to apfelbluete-shop.de and similar data. These are evaluated exclusively for the improvement of our offer and do not allow any inference about you. The storage takes place anonymously and separately from the personal data.

Personal data will only be collected if you voluntarily provide it to us as part of your order for goods or when you open a customer account, when contacting us via email  or when registering for our newsletter. We use the data you provide without your separate consent exclusively for the fulfilment and processing of your order or request. With the complete execution of the contract and full payment of the purchase price, your data will be blocked for further use and deleted after expiry of the tax and commercial retention periods, unless you have expressly consented to the further use of your data. When you subscribe to the newsletter, your e-mail address will be used for your own advertising purposes until you unsubscribe from the newsletter. You can unsubscribe at any time.

As soon as prescribed storage periods have expired or the purpose of data storage is no longer necessary, personal data will be deleted or blocked on a regular basis.

  1. Security:

Your personal data will be transferred via the Internet during the ordering process, registration or registration. In addition, personal data is transferred via email enquiries  or the contact form.

We secure our website and other systems by technical and organizational measures against loss, destruction, access, alteration or dissemination of your data by unauthorized persons. Access to your customer account is only possible after entering your personal password. You should always keep your access information confidential and close the browser window when you have finished communicating with us, especially if you share your computer with others. We also recommend the use of secure passwords (including special characters, text and number combinations) and regular changes of passwords.

  1. Disclosure of personal data

We will only pass on your personal data to third parties if this is permitted by law and if .b GDPR is required for the processing of contractual relationships with you in accordance with Art. 6 sec. 1 p. 1 lit. This includes the shipping service provider you selected at the time of ordering and commissioned with the delivery to you, the payment service provider with which you pay for the order, as well as the merchandise management and billing system used by us for order processing. The data protection declaration of the respective provider applies in this respect.

In this context, we use the following services:

The order is processed by the company Dreamrobot. We share the following information with this company:

DreamRobot Ltd.

Eckendorfer Str. 2-4

33609 Bielefeld

For more information on Dreamrobot's  privacy, please visit: https://www.dreamrobot.de/info/datenschutz/

If delivery is made by Hermes, we will pass on the following data to this company:

Hermes Germany Ltd.

Essener Straße 89

D-22419 Hamburg

For more information on Hermes data protection, please visit: https://www.myhermes.de/datenschutz/

If deutsche Post has delivered the following data to this company:

Deutsche Post AG

Charles-de-Gaulle-Straße 20

Postcode/Place: 53113 Bonn

Further information on data protection at deutsche Post can be found at: https://www.deutschepost.de/de/f/footer/datenschutz.html

If payment is made through the company PayPal we will pass on the following information to this company:

PayPal (Europe) S.A. r.l. et Cie, S.C.A.

22-24 Boulevard Royal

L-2449 Luxembourg

For more information on PayPal's privacy policy, please visit:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

If payment is made through AmazonPay,  we will pass on the following information to this company:

Amazon Payments Europe S.C.A.

38 avenue  J.F. Kennedy,

L-1855 Luxembourg

For more information on PayPal's privacy policy, please visit:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

  1. Rights under GDPR

Right to correction

You have the right to request the controller to immediately rectify any inaccurate personal data concerning them. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.

The data subject's right to information

You have the right to request confirmation from the controller as to whether personal data concerning them will be processed; if this is the case, it shall have the right to information on such personal data and to information under GDPR Art.

In addition, you have a right of access to information whether personal data has been passed on to a third country or an international organisation. If this is the case, they shall have the right to obtain information on the appropriate guarantees in connection with the transfer.

Right to erasure ("Right to beforgotten")

You have the right to require the controller to delete personal data concerning you without delay, and the controller is obliged to delete personal data immediately, provided that the reasons under GDPR Art. 17(1) are fulfilled.

Where personal data of Apple Blossom Style & Accessories have been made public and required to delete personal data in accordance with GDPR, it shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data controllers who process the personal data that a data subject has requested from them the deletion of all links to such personal data or to copies or replicates of that personal data.

Right to restrict processing

You have the right to require the controller to restrict the processing of personal data if one of the conditions under GDPR Art. 18(1) is met.

Where the processing of personal data has been restricted, such data may be processed, with the exception of its storage, only with the consent of the data subject or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.

Right to data portability

They have the right to obtain the personal data concerning them, which they have provided to Apple Blossom Style & Accessories, in a structured, common and machine-readable format, and they have the right to transmit that data to another controller without hindrance by the controller to whom the personal data was provided, provided that this is in accordance with GDPR Art. 20.

Right to object

They have the right, for reasons arising from their particular situation, to object at any time to the processing of personal data concerning them under Article 6  (1) (e) or (f) GDPR, including  profilingbased on theseprovisions.

Apple Blossom Style & Accessories no longer processes the personal data unless it can prove compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

If Apple Blossom Style & Accessories processes personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning it for the purpose of such advertising; this also applies to profiling,insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

In addition, you have the right to object, for reasons arising from your particular situation, against the processing of personal data concerning them for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, unless the processing is necessary for the performance of a task in the public interest.

In connection with the use of information society services, you may exercise your right to object, notwithstanding Directive 2002/58/EC,  by means of automated procedures using technical specifications.

Right to complain to a supervisory authority

Under Article 77 of the GDPR, you have the right to complain to a supervisory authority, in particular in the Member State of their place of residence, place of work or place of alleged infringement, if you consider that the processing of personal data concerning them is contrary to this Regulation.

Automated decisions on a case-by-case basis, including profiling

They have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect towards it or, in a similar manner, significantly affects it. 

However, this shall not apply where the decision is necessary for  the conclusion or performance of a contract between the data subject and the controller, or is permitted by european Union or Member State legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject or is carried out with the express consent of the data subject.

  1. Revoked consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time.

  1. Responsible contact person for data protection and processing of data

If you have any questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data as well as revocation of consents given, please contact directly:

Sandra Wiener

Mühlenweg 3

86424 Spelt Scherben

E-mail:  apfelbluete-shop@online.de

Phone: (0049) 8292 3719807

(Responsible persons within the meaning of the General Data Protection Regulation)

  1. Creation of pseudonymous user profiles for web analysis

This website uses Google Analytics, a web analytics service provided by Google Inc, (1600  Amphitheatre  Parkway Mountain View, CA 94043, USA; "Google"). The usage includes the "Universal Analytics" operating mode. This allows data, sessions and interactions across multiple devices to be assigned to a pseudonymous user ID and thus analyze a user's activities across devices. This Privacy Notice is provided by  www.intersoft-consulting.de.

Google Analytics uses so-called "cookies", text files that are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, comcompile reports on website activity and providing other services relating to website activity and internet usage to the website operator. In these purposes lies also our legitimate interest in data processing. The legal basis for the use of Google Analytics is Section 15 (3) TMG or Art. 6 (1) lit. f GDPR. The data sent by us and linked to cookies, user IDs (e.B. user ID) or advertising IDs will be automatically deleted after 14 months. The deletion of data whose retention period has been reached is done automatically once a month. For more information on terms of use and privacy, see  https://www.google.com/analytics/terms/de.html  or  https://policies.google.com/?hl=de.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to the full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on. Opt-Outcookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from capturing across different devices, you must  optout on all systems youuse. If you click here, the opt-out cookie is set: Disable Google Analytics

  1. Use of cookies

In order to make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies to recognize your browser the next time you visit (persistent cookies).

You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.

  1. Social plugins from Facebook, Google+ and Twitter using the "2-click solution"

Our website uses so-called social  plugins ("plugins") of the social networks Facebook and Google+ and the microblogging service Twitter. These services are offered by Facebook Inc., Google Inc. and Twitter Inc. ("Providers").

Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Facebook Ireland Ltd. is responsible for the processing of personal data (residents outside the USA or Canada) (4 Grand  Canal  Square, Grand  Canal  Harbour, Dublin 2  Ireland)

An overview of Facebook's plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins  Google+ is operated by Google Inc., 1600  Amphitheatre  Parkway, Mountain View, CA 94043, USA ("Google").

An overview of Google's plugins and their appearance can be found here: https://developers.google.com/+/web/

Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). An overview of the Twitter buttons and their appearance can be found here: https://about.twitter.com/en_us/company/brand-resources.html

In order to increase the protection of your data when visiting our website, the plugins are integrated into the page by means of a so-called "2-click solution". This integration

warrants that when you visit a page of our website that contains such plugins, no connection is made to the servers of Facebook, Google and Twitter. Only when you activate the plugins and thereby give your consent to the data transfer does your browser establish a direct connection to the servers of Google, Facebook or Twitter. The content of the respective plugin is then transmitted directly to your browser by the associated provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the respective provider or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider in the USA and stored there.

If you are logged in to one of the social networks, the providers can assign the visit to our website directly to your profile on Facebook or Google+. If you interact with the plugins, for example by pressing the "Like", the "+1" or the "Twitter" button, the corresponding information is also transmitted directly to a server of the providers and stored there. The information will also be published on the social network or on your Twitter account and displayed to your contacts.

The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options for the protection of your privacy can be found in the data protection notices of the providers.

Facebook privacy policy: http://www.facebook.com/policy.php

Google Privacy Notice: http://www.google.com/intl/de/+/policy/+1button.html

Twitter privacy policy: https://twitter.com/privacy

If you do not want Google, Facebook or Twitter to use the

directly assign collected data to your profile in the respective service, you must log out of the corresponding service before activating the plugins.

  1. Use of social  plugins from Facebook, Google+, Twitter, Pinterest and  Youtube.

On our website, social  plugins ("plugins") are used by social networks.  In order to increase the protection of your data when visiting our website, the plugins are not unrestricted, but onlyintegrated into the page using an HTML link (so-called"Shariffsolution" by c't). This integration ensures that when a page of our website containing such plugins is called up, no connection is made to the servers of the provider of the respective social network. Click on one of the buttons, open a new window of your browser and go to the page of the respective service provider, where you can (if necessary after entering your login data) e.B. the Like or Share button.

The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as your rights in this regard and setting options for the protection of your privacy can be found in the data protection notices of the providers.

Facebook: http://www.facebook.com/policy.php

Twitter: https://twitter.com/privacy

Google+ and Youtube: http://www.google.com/intl/de/+/policy/+1button.html

Pinterest: https://about.pinterest.com/de/privacy-policy

  1. Data protection regulations on payment methods

On our website the different payment methods PayPal,  AmazonPay, and transfer are offered.

The European operating company of PayPayl  is  the PayPal  (Europe)  S.A.R.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

All personal data communicated to Amazon Payments or collected by Amazon Payments is primarily controlled by Amazon Payments s.c.a. and secondary by Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three located at 5, Rue  Plaetis  L 2338, Luxembourg.

If the user selects the appropriate payment option in our online shop, data is automatically transmitted to the online payment service provider. By selecting the appropriate option, the user agrees to the transfer of personal data required for payment processing.

The following data is usually transmitted: name, last name, address, telephone number, emailaddress and IP address as well as the data necessary for the checkout. The transmission is necessary in order to be able to guarantee the appropriate security.

The respective data protection declarations refer to the handling of personal data in the online payment service providers.

PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Amazon Pay: https://pay.amazon.com/de/help/201751600

  1. Profiling / automated decision-making

Apple Blossom Style & Accessories dispenses with automatic decision-making or profiling

  1. Withdrawal of consents

We have logged and stored any consents you may have given on our website (e.g. for an e-mail newsletter reference). You can request the content of any of these consents from us at any time. Please contact apfelbluete-shop@online.deby e-mail. We would like to point out that you can revoke your consents given at any time with effect for the future also on  apfelbluete-shop.de  under "My Account".