Privacy Policy
Controller for data processing:
Sagenta GmbH
Attilastraße 18
12529 Schönefeld
Email: info@sagenta.de
We are pleased about your interest in our online shop. The protection of your privacy is very important to us. Below, we provide detailed information about how we handle your data.
1. Access Data and Hosting
You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, the amount of data transferred, and the requesting provider (access data) and documents the access. This access data is evaluated exclusively to ensure the trouble-free operation of the site and to improve our offerings. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in a correct presentation of our offerings pursuant to Art. 6(1)(f) GDPR. All access data is deleted no later than seven days after the end of your visit to the site.
Content Delivery Network
For the purpose of shorter loading times, we use a so-called Content Delivery Network (“CDN”) for some offerings. With this service, content, such as large media files, is delivered via regionally distributed servers of external CDN service providers. Therefore, access data is processed on the servers of the service providers. Our service providers act on our behalf within the framework of commissioned processing.
Our service providers are located and/or use servers in countries outside the EU and the EEA. For these countries, there is no adequacy decision by the European Commission.
Our cooperation with them is based on standard data protection clauses of the European Commission. For questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.
2. Data Processing for Contract Fulfillment and Contact
2.1 Data Processing for Contract Fulfillment
For the purpose of contract fulfillment (including inquiries regarding and processing of any existing warranty and performance claims as well as any statutory update obligations) pursuant to Art. 6(1)(b) GDPR, we collect personal data if you voluntarily provide it to us during your order. Mandatory fields are marked as such, as in these cases, the data is absolutely necessary for contract fulfillment, and we cannot send the order without this information. The data collected can be seen from the respective input forms.
Further information about the processing of your data, in particular regarding the transfer to our service providers for the purpose of order, payment, and shipping processing, can be found in the following sections of this privacy policy. After complete contract fulfillment, your data will be restricted for further processing and deleted after the expiry of tax and commercial retention periods pursuant to Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR, or we reserve the right to use your data beyond this, which is legally permitted and about which we inform you in this policy.
Inventory Management System
For order and contract fulfillment, we use inventory management systems of external service providers. Our service providers act on our behalf within the framework of commissioned processing. For questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.
2.2 Customer Account
If you have given your consent pursuant to Art. 6(1)(a) GDPR by deciding to open a customer account, we use your data for the purpose of opening the customer account and storing your data for further future orders on our website. You can delete your customer account at any time, either by sending a message to the contact option described in this privacy policy or via a designated function in the customer account. After deletion of your customer account, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR, or we reserve the right to use your data beyond this, which is legally permitted and about which we inform you in this policy.
2.3 Contact
Within the framework of customer communication, we collect personal data to process your inquiries pursuant to Art. 6(1)(b) GDPR if you voluntarily provide it to us when contacting us (e.g., via contact form or email). Mandatory fields are marked as such, as in these cases, the data is absolutely necessary to process your contact request. The data collected can be seen from the respective input forms. After complete processing of your inquiry, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR, or we reserve the right to use your data beyond this, which is legally permitted and about which we inform you in this policy.
Live Chat Tool Userlike
For the purpose of customer communication, we use the live chat tool of Userlike UG (limited liability), Probsteigasse 44-46, 50670 Cologne, Germany (“Userlike”). This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in effective and improved customer communication pursuant to Art. 6(1)(f) GDPR. Userlike acts on our behalf.
3. Data Processing for Shipping Purposes
For contract fulfillment pursuant to Art. 6(1)(b) GDPR, we transfer your data to the shipping service provider entrusted with the delivery, as far as this is necessary for the delivery of ordered goods.
Data Transfer to Shipping Service Providers for Shipment Notification
If you have given us your express consent during or after your order, we will transfer your email address and phone number to the selected shipping service provider based on this consent pursuant to Art. 6(1)(a) GDPR, so that they can contact you for the purpose of delivery notification or coordination.
You can revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data provided for this purpose, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR, or we reserve the right to use your data beyond this, which is legally permitted and about which we inform you in this policy.
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany
4. Data Processing for Payment Processing
For payment processing in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.
4.1 Data Processing for Transaction Processing
Depending on the selected payment method, we transfer the data necessary for processing the payment transaction to our technical service providers, who act on our behalf within the framework of commissioned processing, or to the commissioned credit institutions or the selected payment service provider, as far as this is necessary for payment processing. This serves contract fulfillment pursuant to Art. 6(1)(b) GDPR. In some cases, the payment service providers collect the data required for payment processing themselves, e.g., on their own website or via technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.
For questions about our payment processing partners and the basis of our cooperation with them, please use the contact option described in this privacy policy.
4.2 Data Processing for Fraud Prevention and Optimization of Our Payment Processes
If necessary, we provide our service providers with additional data, which they use together with the data necessary for payment processing as our processors for the purpose of fraud prevention and optimization of our payment processes (e.g., invoicing, processing of disputed payments, accounting support). This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in our protection against fraud or in efficient payment management pursuant to Art. 6(1)(f) GDPR.
4.3 Identity and Credit Check for Purchase on Account via PayPal and Ratepay
If you choose the payment method purchase on account (offered via Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (hereinafter Ratepay) and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter PayPal)), we ask for your consent pursuant to Art. 6(1)(a) GDPR to transfer the data necessary for payment processing and an identity and credit check to Ratepay. In Germany, the credit agencies listed in Ratepay’s privacy policy may be used for the identity and credit check. The information received about the statistical probability of a payment default is used by Ratepay for a balanced decision on the establishment, execution, or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact option specified in this privacy policy. This may result in us no longer being able to offer you certain payment options. Additional information on data protection at PayPal can be found here.
5. Email Advertising
5.1 Email Newsletter with Subscription, Newsletter Tracking with Separate Consent
If you subscribe to our newsletter, we use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent pursuant to Art. 6(1)(a) GDPR.
You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or via a designated link in the newsletter. After unsubscribing, we will delete your email address from the recipient list, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR, or we reserve the right to use your data beyond this, which is legally permitted and about which we inform you in this policy.
If you have additionally given your consent pursuant to Art. 6(1)(a) GDPR to analyze our newsletter, we also analyze your interaction with our newsletter by measuring, storing, and evaluating opening rates and click rates for the purpose of designing future newsletter campaigns (“newsletter tracking”).
For this evaluation, the sent emails include single-pixel technologies (e.g., so-called web beacons, tracking pixels) stored on our website. For the evaluations, we link the following “newsletter data” in particular:
- the page from which the page was requested (so-called referrer URL),
- the date and time of the access,
- the description of the type of web browser used,
- the IP address of the requesting computer,
- the email address,
- the date and time of the subscription and confirmation
and the single-pixel technologies with your email address or your IP address and, if applicable, an individual ID. Links contained in the newsletter may also include this ID.
You can unsubscribe from newsletter tracking at any time, either by sending a message to the contact option described or via a designated link in the newsletter.
The information is stored as long as you are subscribed to the newsletter.
5.2 Newsletter Dispatch
The newsletter may also be sent by our service providers on our behalf as part of commissioned processing. For questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.
Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA.
The adequacy decision for the USA serves as the basis for the third-country transfer, provided the respective service provider is certified. Until certification by our service providers, the data transfer continues to be based on this basis: standard data protection clauses of the European Commission.
6. Cookies and Other Technologies
10. Contact Options and Your Rights
10.1 Your Rights
10.2 Contact Options
In case of questions regarding the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data, as well as to revoke granted consent or to object to a specific use of data, please contact our data protection contact:
E-Mail: dsb@sagenta.de
Phone: +49 30 23320044
Mailing address:
Sagenta GmbH
z. H. Datenschutzbeauftragten
Attilastraße 18
12529 Schönefeld
Deutschland