data protection

§ 1 General Information

Your personal data (e.g. salutation, name, address, email address, phone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you about the purposes of processing, recipients, legal bases, storage periods, your rights, and the person responsible for data processing. This privacy policy applies only to our websites. If you are redirected to other sites via links on our pages, please refer to the respective privacy policies of those sites.

§ 2 Data Processing for Contract Fulfillment

(1) Purpose of Processing

The personal data you provide during the ordering process is necessary for concluding a contract with us. Without your address, we cannot deliver the goods. For certain payment methods, we require your payment data in order to pass it on to a payment service provider commissioned by us. Processing therefore takes place for the purpose of fulfilling the contract.

If you contact us by email or via the contact form prior to concluding a contract, we will process your data to carry out pre-contractual measures and respond to your inquiries.

When you create a customer account, your data (name, address, payment method, email, password) will be processed for registration and creation of a customer login. Through your account, you can view your orders at any time. The account can be deleted at any time.

(2) Legal Basis: Art. 6 (1) (b) GDPR

(3) Categories of Recipients: Payment service providers, shipping service providers, hosting providers, possibly merchandise management systems, possibly suppliers (dropshipping).

(4) Storage Period: Data will be stored until the expiry of statutory warranty or contractual guarantee periods. Commercial and tax retention periods are generally ten years (§257 HGB, §147 AO).

§ 3 Comments

(1) Purpose of Processing: When using the comment function, your data (e.g. name/pseudonym, email, website) is processed for publication.

(2) Legal Basis: Art. 6 (1) (f) GDPR

(3) Legitimate Interest: Public exchange of opinions and transparency. Your privacy remains protected since pseudonyms may be used.

(4) Storage Period: No fixed retention period. Deletion can be requested at any time.

(5) Right to Object: You may object to processing based on Art. 6 (1) (f) GDPR at any time. In the case of direct marketing, no justification is required.

§ 4 PayPal Transactions

All PayPal transactions are subject to the PayPal Privacy Policy.

§ 5 Information about Cookies

(1) Purpose of Processing: This website uses technically necessary cookies that enable the use of the site (e.g. shopping cart). Other cookies store your settings permanently (e.g. login data).

(2) Legal Basis: Art. 6 (1) (a) GDPR

(3) Storage Period: Session cookies are deleted when you close your browser. Persistent cookies remain stored for several months or years depending on their function.

(4) Right of Withdrawal: You can delete or block cookies at any time through your browser settings. This may limit the functionality of the website.

§ 6 Newsletter

(1) Purpose of Processing: When you subscribe to our newsletter, your email address is used to inform you about products and offers. Statistical evaluations of link clicks are made without personal reference.

(2) Legal Basis: Art. 6 (1) (a) GDPR

(3) Categories of Recipients: where applicable, newsletter service providers

(4) Storage Period: Stored until you unsubscribe from the newsletter.

(5) Right of Withdrawal: You may revoke your consent at any time. You can unsubscribe via the link provided in each newsletter.

§ 7 Your Rights as a Data Subject

If your personal data is processed, you have the following rights under the GDPR:

  • Right of Access (Art. 15 GDPR)
  • Right to Rectification (Art. 16 GDPR)
  • Right to Erasure (Art. 17 GDPR)
  • Right to Restriction of Processing (Art. 18 GDPR)
  • Right to Data Portability (Art. 20 GDPR)
  • Right to Withdraw Consent (Art. 7 (3) GDPR)
  • Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

Right to Object under Art. 21 GDPR

a) General: You may object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) (e) or (f) GDPR. We will then no longer process your data unless we can demonstrate compelling legitimate grounds or legal claims that override your interests.

b) Direct Marketing: If your personal data is processed for direct marketing purposes, you may object at any time without providing reasons.

Controller Responsible for Data Processing

heinrich pemöller handels-partner GmbH
Seeweg 14
24329 Dannau
Phone: +49 4383 2829824
Email: service@hpgmbh.de