Privacy and data protection


I. Name and address of the responsible party

Responsible according to the General Data Protection Regulation is the following person:

Hinterher.com
Peter Hornung-Sohner
Hans-Preißinger-Str. 8
80379 Munich
Germany
Tel. 089/41554200
info@hinterher.com


II. Name and address of the coordinator for data security and privacy

Peter Hornung-Sohner
Hans-Preißinger-Str. 8
80379 Munich
Germany
Tel. 089/41554200
info@hinterher.com
www.hinterher.com

 


III. General information about data handling

 

1.    Extent of individual-related data handling
We only process individual-related data of our users as far as it is necessary to provide them with a functioning website and webshop. We only process individual-related data from our users with their consent except when this consent is not possible to obtain for actual reasons and the data processing is permitted by law.

2.    Legal basis for the processing of individual-related data
Insofar as we ask the affected person for his or her consent when processing individual-related data Article. 6 Paragraph. 1 lit. a of the General Data Protection Regulation (in the following text we will use the German abbreviation DSGVO) serves as legal basis.
When processing individual-related data in order to fulfill a contract with the affected person the legal basis is art. 6 Paragraph. 1 lit. b DSGVO. This legal basis applies also to data processing that is necessary to fulfill measures in preparation of a contract.
Is processing individual-related data necessary to protect the legitimate interest of our company or of a third party, Article 6, Paragraph 1 lit. f of DSGVO serves as legal basis if these legitimate interests outweigh the interests, basic rights and fundamental freedoms of the affected person.

3.    Deletion of data and storage period
Individual-related data of an affected person will be deleted or blocked as soon as the data has fulfilled its purpose. You can find an overview of data processing in our company here. Beyond that a continued storage may take place in case our company has to meet european or national laws, requirements or other regulations. Data will be deleted or blocked when the aforementioned norms for storage periods exceed unless a continued storage of data is necessary to close or fulfill a contract.

 


IV.    Provision of our website and creation of logfiles

 

1. Description and extent of data processing
With each visit of our webseite our system automatically logs data from the deviece used to call up our website.
The following data is being logged by our system:
Information about the type of browser software used
Information about the type of operating system used
Information about the service provider of the user
The IP-address of the user
Date and time of the websites visit
A storage of this data in connection with individual-related data does not take place. Not affected are types of data like the IP-address of the user that would allow an attribution of the data to a identifiable user. These kinds of data will not be stored in connection with individual-related data.

2. Legal basis for the processing of individual-related data
The legal basis for the temporary storage of data and logfiles is article 6, paragraph 1 lit. f of DSVGO. The legal basis for the temporary storage of data is art. 6, paragr. 1 lit. F of the DSGVO.

3. Purpose of data processing
The temporary storage of the IP-address is necessary in order to enable the proper provision of our website to the user. For this purpose a temporary storage of the users IP-address has to take place for the duration of the session.
A storage of logfiles takes place to guarantee the functionality of our website. Furthermore the logfiles improve our website and are necessary to safe-guard our information and communication systems. A data analysis for the purpose of marketing or advertising does not take place.
The abovementioned purposes are the basis of our legitimate interest in processing data according to article 6, paragraph 1 lit. f DSGVO.

4. Duration of data storage
Data will be deleted as soon as it is not longer necessary for the provision of the website. In case of providing the user with a functioning website the collection of data has fulfilled its purpose once a session has finished.
Concerning the stored logfiles this is the case at the latest seven days after the completion of the session. Beyond that the storage of logfiles is possible. In this case the IP-address of the user will be deleted or anonymized so that an identification of the client is no longer possible.

5.    Appeal procedures and data elimination possibilities
The logging of data for the provision of the website and the storage of data in logfiles is technically necessary. Therefore there is no possibility for the users appeal against this procedure.

 


V.    Usage of Cookies

 

a) Description and extend of data processing
Our website uses cookies. Cookies are text files that are stored within the users internet browser (and therefore on a device itself). Does a user visit a website a cookie can be stored on the operating system of the users device. This cookie contains a characteristical sequence of characters that allow for an identification of the browser software once the website is revisited.
We use cookies to make our website more userfriendly. Some elements of our website requiere the identification of a browser even after its user has changed pages.
The cookie will collect and store the following data:
Language option
items in the shopping cart
Log-In-Information

b) Legal basis for the data processing
The legal basis for collectiong individual-related data through cookies is article 6, paragraph 1 lit. f DSGVO.

 

c) Purpose of data processing
The purpose of using technically necessary cookies ist o make the website more userfriendly. We cannot provide certain functions of our website without the usage of cookies. For those functions it is necessary to be able to identify and recognize a certain browser even after it has changed pages.
For the following functions we need cookies:
- Shopping cart
The individual-related data collected by the technically necessary cookies will not be used to generate user profiles.
The abovementioned purposes are the basis of our legitimate interest in processing data according to article 6, paragraph 1 lit. f DSGVO.

e) Duration of data storage, appeal procedures and data elemination possibilities
Cookies are stored locally on the device of the user and are transmitted to our website. Therefore you, as a user, have full control of the usage of cookies. Through changing the settings in your internet browser you can deactivate or limit the transmission of cookies to a website. You can delete already saved cookies at any time. This can also be done automatically. In case you have deactivated cookies in your browser you may not be able to use our website to ist full extend.

 


VI.    Registering at our onlineshop

 

1.    Description and extend of the data processing
On our website we offer our users the possibility to register with individual-related data. Users have to fill in their data which will then be transmitted and stored by us. We will not pass on this data to third parties.
We will ask for the following data when users register a tour website:
Name
Address
E-Mail-address
Telephone
At the moment of registration the following data is being saved and stored:
The users IP-address
Date and time of the registration
We ask the users permission for saving and storing his or her data during the registration process.

 

2.    Legal basis for processing the data
The legal basis for the processing of data with the consent of the user is Art. 6 paragraph. 1 lit. b DSGVO.

 

3.    Purpose of data processing
A registration of the user for our onlineshop is necessary to fulfill a contract with a user or to fulfill requirements leading up to a contract. Hinterher.com Munich Biketrailers sells bike trailers and accessories. In order to process the deed of purchase the name, address for shipping and invoice and contact information is required. We are also required to collect and store this data for a legally mandated storage period as well as for meeting tax obligations.

4.    Duration of data storage
The data will be deleted as soon as the reasons for its collection cease to exist. Concerning the collected date through the registration on our website the reason for their storage ceases to exist once the contract of purchase has been fulfilled and the collected data is not longer necessary to close or fulfill this contract. Individual-related data can be required to be stored beyond the completion of the sale if it is necessary to fulfill a contract or meet laws and regulations. You can find an overview of the data stored and collected at our company and the different periods of storage here.

5.    Appeal procedures and data elemination possibilities
As a user of our website you have the right to cancel and delete your registration at any time. You can also alter your registration data at any time.
In order to do so please contact us via the contact information that you find at the beginning of this page. In case your data is required to fulfill or close a contract, an untimely deletion is only possible if no contractual or legal obligations would forbid us to do so.

 

 

VII.    Contact form and e-mail communication

 

1.    Description and extend of the data processing
We offer a contact form on our website that can be used for the electronical communication with us. When a user of the website uses the contact form all the data typed into the respective fields are transmitted to us and are saved. This data can:

Name (optionally), address (optionally), Telephone (optionally), E-Mail-address (mandatory)

At the moment of submitting the message the following data will be logged and saved:
-    The users IP-address
-    Date and time of submission
For the collection and data storage we ask for your consent and refer to our data policy.

You can contact us alternatively via our e-mail-address. In this case the individual-related data submitted together with the e-mail will be saved.
No data is passed along to third parties. All data is solemnly used to process the conversation with the customer or user.

2.    Legal basis for data processing
The legal basis for processing indivdual-related data with the users consent is Art. 6 Paragraph. 1 lit. a DSGVO.
Legal basis for the processing of data being transmitted by sending an e-mail is Art. 6 Paragraph. 1 lit. f DSGVO. Is the aim of the e-mail communication the completion of a contract the legal basis for data processing is Art. 6 Paragraph. 1 lit. b DSGVO.

 

3.    Purpose of data processing
The sole purpose of processing individual-related data from the contact form is to answer the users request for communication. In case users send us an e-mail we must assume their willingness to communicate with us and sending us their data voluntarily.
All other data that is generated by using the contact form has the sole purpose to prevent misuse of the contact form and to safeguard our communication systems.


4.    Duration of data storage
Data will be deleted once it has fulfilled ist respective purpose. Concerning the individual-related data submitted with the contact form as well as data submitted per e-mail this is the case once the conversation with a user has ended. A conversation has ended when circumstances suggest that the purpose of a conversation has been adequately met.
Additional collected individual-related data during the data submission will be deleted at the latest after seven days.

 

5.    Appeal procedures and data elemination possibilities
A user can at any time revoke his or her consent of granting us the handling of individual-related data. If a user contacts us via e-mail he or she can revoke his or her consent regarding the use of individual-related data. In this case we cannot continue the conversation with the respective customer.
In order to do so please contact
Peter Hornung
Hans-Preißinger-Str. 8
D-80379 Munich
Germany
Tel. +49(0)89 - 41554200
or write to us: info@hinterher.com

All individual-related data from a users contact will be deleted.

 

 

VIII.    Embedded Youtube videos

We embed youtube videos at some of our pages. Responsible for the youtube plugin is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a webpage containing a youtube plugin a connection to youtube servers is made. Youtube will know which webpage you visit. In case you are logged-in with your youtube account, youtube can identify your browsing behaviour. You can prevent this by logging-out from your youtube account prior to visiting other websites. All youtube videos embedded in our website are embedded in youtubes own „extended data protection“ mode. Still, some data will be transfered to youtube when you watch a video. In case you have deactivated cookies for the Google-Ad-Program you may expect not to encounter such cookies when watching youtube videos. Youtube will generate non-individual-related data and save it to other cookies. In order to prevent this you have to deactivate cookies in your browser.
For further details please visit google.

 


IX.    Encryption of our webpage

 

Our webpage is encrypted with HTTPS.

 


X.    Logistic companies

 

Once you purchase items from your webshop we have to ship them to you. In order to do so we submit your name, adress, e-mail adress and other data to a logistic company. For most items we work with DHL. You can find more inormation about privacy policy of DHL here 

 


XI.    Your rights

 

If invididual-related data of you is being processed, stored or collected you have the following rights according to the DSGVO.

 

1.    Right to information
You can demand a confirmation of the person responsibe if individual-related data of yourself is being processed by us.
In case we do process your individual-related data you can request the following information:
(1)    The purpose why we process individual-related data;
(2)    the categories of individual-related data;
(3)    the recipients or the category of recipients that have or will have access to your individual-related data;
(4)    the planend storage length of your individual-related data. If specific details to the storage length are not possible, criteria for the definition of data storage periods;
(5)    the existence of your right of having your individual-related data deleted or  corrected, the existence of a right of restricting the use of your individual-related data or a right of appealing the use of your individual-related data.
(6)    the right of filing a complaint with a regulating authority;
(7)    all available pieces of information about the origin of the individual-related data in case this data had not been collected by our company.
You have the right to be informed if your individual-related data is transferred to a third party country or to an international organization. In this context you can demand to be informed about the appropriate guarantees according to Article 46 DSGVO.

 

2.    Right of correction
You have the right of correction and/or completion in case your individual-related data is incorrect or incomplete. The person responsible for handling your data has to make such corrections as quickly as possible.

 

3.    Right of restricting data processing
You can demand the restriction of the processing of your individual-related data under the following conditions:
(1)    in case you deny the correctness of your individual-related data for an amount of time that enables us to check the correctness of your data;
(2)    in case the data processing is unlawful and you object to the deletion of your individual-related data and demand a restriction of the usage of such data instead;
(3)    in case we have no legitimate purpose to further use your individual-related data but you need such data for enforcing, excercising or defending your legitimate claims, or
 (4)    in case you have appealed against the usage of your data according to Article 21, Paragraph 1 DSGVO and it is still unclear wheather our legitimate reasons outweigh yours.
In case the handling of individual-related data has been restricted such data - aside from its storage – can only be processed with your consent or to excercise, enforce and defend legitimate claims or to protect the rights of another natural person or legal body or for reasons of public interest of the Union or one of its member states.
Has a restriction occured in the context of the abovementioned circumstances you will be notified before the restriction is lifted.

 

4.    Right of data deletion
a)    Obligation to delete data
You can demand to have your individual-related data deleted. We have to oblige to this demand as quickly as possible providing that the following reasons apply:
(1)    The reasons individual-related data is collected or processed are  no longer given.
(2)    You revoke your consent the processing of your individual-related data is legally based upon according to article 6, paragraph 1 lit. a or article 9, paragraph 2 lit. A DSGVO and there is no other legal basis for the data processing available.
 (3)    You revoke your consent for the processing of your individual-related data according to Art. 21 Paragraph 1 DSGVO and there are no legitimate reasons for the data processing. Or you repeal the processing of your individual-related data according to article 21, paragraph 2 DSGVO.
(4)    The individual-related data has ben unlawfully processed.
(5)    The deletion of your personal data is necessary in order to meet Union laws or laws of one of ist member states.
(6)    Your individual-related data was collected in regard to services of the information society in accordance with article 8, paragraph 1 DSGVO.    
b)    Information for third parties
In case we have made your individual-related data public and are obligated to delete it according to article 17, paragraph 1 DSGVO, we will take appropriate measures to inform all responsible parties that handle your data about your demand of deletion of all links, copies or replicas of this data. These measures consider the available technology and the costs of implementation.
c)    Exceptions
You have no right of deletion if the processing of your individual-related data is necessary to
(1)    excercise the right of free speech and information;
(2)    fulfill and meet laws and regulations that we are obligated to follow under the juristiction of the Union or ist member states. Or to fulfill a task that is in the public interest or we were assigned to carry out with official authority;
(3)    for reasons of public interest in the area of public health according to article 9, paragraph 2 lit. H as well as article 9, paragraph 3 DSGVO;
(4)    for reasons of public interest in the area of historical or scientific or statistical research according to article 89, paragraph 1 DSGVO so long as the right mentioned in the section a) will presumably stand against the realization of these scientific aims or will serioulsly hinder them. Or
(5)    for reasons to enforce, excercise or defend legitimate claims.

 

5.    Right to be informed
If you have excercised your right to have your individual-related data corrected, deleted or its usage restricted we are obligated to inform all third parties that were given your data to do so as well. Unless this is impossible to do or a disproportionately great effort.
You have the right to be informed about all recipients of your individual-related data.

 

6.    Right of data portability
You have the right of data portability in a format that is common, structured and machine-readable. You also have the right to pass your data onto other entities of your choosing without being hindered so far as
(1)    the agreement is based upon your consent according to article 6, paragraph 1 lit. A DSGVO or article 9, paragraph 2 lit. a DSGVO or on a contract according to article 6, paragraph 1 lit. b DSGVO and
(2)    the processing is done automatically.
In excercising this right you have the further right to demand that your individual-related data is passed on directly from one responsible party to the next if this is technically feasible. Freedom and rights of third persons must not be affected by this. und Rechte anderer Personen dürfen hierdurch nicht beeinträchtigt werden.
The right of data portability does not apply for processing individual-related data in order to fulfill and meet laws and regulations that we are obligated to follow under the jurisdiction of the Union or its member states. Or to fulfill a task that is in the public interest or we were assigned to carry out with official authority.

 

7.    Right of objection
You have the right to object the processing of your individual-related data, which is carried out in accordance with article 6, paragraph 1 lit. e or f DSGVO, at any time. This right applies also to a profiling based on these regulations.
We will not process your data anymore unless we can proof to have compelling and worthy reasons to do so that overrule your interests, rights and freedoms or our data processing serves to enforce, excercise or defend our legal rights.
In case we process your individual-related data for direct advertising you have the right of objection at any time for this particular usage of your data. This also applies for profiling in connection with direct advertising.  
If you object the processing of your individual-related data for advertising we will stop processing your data in this context and for these reasons.
You have the possibility, in the context of using services of the information society, to excercise your right of objection through automatically procedures that use technical specifications -  notwithstanding the 2002/58/EG.

 

8.    Right to revoke your consent from data policy agreements
You have the right to revoke your consent from data policy agreements at any time. By doing so the lawfulness of the data processing based upon your initial consent will not be touched.

 

9.    Automatical decision including profiling in individual cases
You have the right not to be sujected to a solely automatically made decision including profiling that will have  legal effects or considerable restrictions for you. This does not apply if the decision
(1)    is necessary to comply with fulfilling or closing a contract  with us,
(2)    is legal according to the legal provisions of the Union or its member states and these provisions contain appropriate measures to ensure your rights and freedems as well as your legitimate interests or
(3)    is made with your explicit consent.
However these decisions may not be based upon a special category of individual-related data according to article 9, paragraph 1 DSGVO as long as arcticle 9, paragraph 2 lit. a or g DSGVO does not apply and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
In regard to the under (1) and (3) mentioned cases we take appropriate measures to protect your rights, freedoms and your legitimate interest. This means at least the right to have a person on our part intervene, of having your point of view heard and of your right to appeal this decision.

 

10.    Right to file a complaint at a regulating authority
Notwithstanding other administrative or juridical remedies you have the right to file a complaint at a regulating authority especially in the member state of your location, your workplace or the place of the presumed violation if you are convinced that the processing and handling of your individual-related data violates the DSGVO.
The regulating authority where you have filed the complaint will inform you about the status and the results of your complaint including the possibility of a juridical remedy according to article 78 DSGVO.


XII.    Location of your data storage
Our website www.munich-biketrailers.com as well as www.hinterher.com  as well as our e-mail communication is hosted by Firma Hetzner Online GmbH, Gunzhausen, Germany. We have closed a contract about the data processing with Hetzner in accordance with article 28 DSGVO. Your individual-realted data is stored on our own company server here in Munich, Germany.