Data Privacy Statement

The responsible party for data processing is:

Bölting + Kollegen Steuerberatungsgesellschaft mbH
Auf der Reihe 2
45884 Gelsenkirchen

Contact:
Tel.: +49 209 941440
Fax: 0209 9414444
E-Mail: steuerberatung@boelting.com

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Access data and hosting

You can visit our web pages without providing any personal information. Each time a web page is accessed, the web server only automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. This serves according to Art. 6 para. 1 s. 1 lit. f GDPR to protect our predominantly legitimate interests in a correct presentation of our offer as part of a weighing of interests. All access data are deleted no later than seven days after the end of your site visit.

Third-party hosting services
Within the framework of processing on our behalf, a third party provider provides services for hosting and displaying the website. All data that is collected as part of the use of this website or in forms designated for this purpose in the online shop as described below are processed on its servers. Processing on other servers only takes place within the scope explained here.

This service provider is located within a country of the European Union or the European Economic Area.

2. Data collection and use for contract processing, contact, and when opening a customer account

We collect personal data if you voluntarily provide it to us as part of your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such, as we require the data for contract processing, or to process your contact, and you cannot send the order or contact without providing it. The data collected is evident from the respective input forms. We use the data provided by you in accordance with Art. 6 para. 1 s. 1 lit. b GDPR for contract processing and handling your inquiries.
To the extent you have given your consent according to Art. 6 para. 1 s. 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening the account.
Once the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after expiry of the retention periods required by tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this which is legally allowed and about which we inform you in this declaration. Deleting your customer account is possible at any time and can be done either by sending a message to the contact option described below or via a designated function in the customer account.

3. Data transfer

For fulfillment of the contract according to Art. 6 para. 1 s. 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and any payment service providers commissioned by us or to the selected payment service. . In part, the selected payment service providers also collect this data themselves, as long as you create an account there. In this case, you must log in to the order process with your access data with the payment service provider. The privacy policy of the respective payment service provider applies.

For order and contract processing, we also use an external merchandise management system. The data transfer or processing that takes place in this context is based on order processing.

4. Email newsletter and postal advertising

Email advertising with newsletter subscription
If you subscribe to our newsletter, we use the necessary data or data you separately provide to send you our email newsletter regularly based on your consent according to Art. 6 para. 1 s. 1 lit. a GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided in the newsletter. After unsubscribing, we delete your email address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this which is legally permitted and about which we inform you in this statement.

Postal advertising and your right to object
In addition, we reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g., to send interesting offers and information about our products by mail. This serves to safeguard our predominantly legitimate interests in an advertising approach to our customers according to Art. 6 para. 1 s. 1 lit. f GDPR.

The advertising mailings are provided in the context of processing on our behalf by a service provider to whom we pass on your data.
You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

5. Data use in payment processing

Identity and creditworthiness checks when selecting Klarna payment services
If you opt for Klarna’s payment services, we ask for your consent according to Art. 6 para. 1 s. 1 lit. a GDPR that we are allowed to transfer the data necessary for the processing of the payment and an identity and creditworthiness check to Klarna. In Germany, the identity and creditworthiness check can be carried out by credit agencies listed in Klarna’s privacy policy.
The information obtained about the statistical probability of a payment default is used by Klarna for a balanced decision on the establishment, execution, or termination of the contractual relationship.
You may revoke your consent at any time by sending a message to the contact details below. This can result in us no longer being able to offer you certain payment options. You can also revoke your consent to this use of personal data at any time by contacting Klarna.

Identity and creditworthiness checks when selecting Billpay payment options
f you opt for one of our partner Billpay GmbH‘s payment options, you will be asked in the order process to consent to the transfer of the data necessary for the processing of the payment and an identity and credit check according to Art. 6 para. 1 s. 1 lit. a GDPR. If you give your consent, your data (first and last name, street, house number, postcode, town, date of birth, telephone number, and when purchasing by direct debit the specified bank account) as well as the data related to your order will be transmitted to Billpay.

For its own identity and credit assessment, Billpay or partner companies commissioned by Billpay transmit data to credit reporting agencies (credit bureaus) and receive information and if applicable creditworthiness information on the basis of mathematical-statistical procedures, which include address data among other things. Detailed information on this and the credit bureaus used can be found in Billpay’s privacy policy. The information received about the statistical probability of a payment default is used by Billpay for a balanced decision on the establishment, execution, or termination of the contractual relationship.
Furthermore, Billpay may use tools of third parties for detection and prevention of fraud. Data obtained with these tools may be stored encrypted at third parties so that they are only readable by Billpay. Only if you select a payment method of our cooperation partner Billpay, will this data be used, otherwise, the data automatically expires after 30 minutes.
You may revoke your consent to Billpay at any time. However, Billpay may still be entitled to process, use, and transmit your personal data if this is necessary for contractual payment processing, is legally required, or is ordered by a court or an authority.

6. Cookies and web analysis

To make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our predominantly legitimate interests in an optimized presentation of our offer according to Art. 6 para. 1 s. 1 lit. f GDPR. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). You can see the duration of storage in the overview of the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™
If you do not accept cookies, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analytics
For the purpose of website analysis, this website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, a company incorporated and operated under Irish law with its seat in Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The information automatically collected by cookies about your use of this website is usually transferred to a server of Google in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a server of Google in the USA and shortened there. The anonymized IP address transmitted by your browser within the framework of Google Analytics is generally not merged with other Google data. After the purpose and end of the use of Google Analytics by us, the data collected in this context will be deleted.

Insofar as information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. The current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can revoke your consent at any time with effect for the future by downloading and installing the browser plugin available under the following: https://tools.google.com/dlpage/gaoptout?hl=de. This prevents the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google.

Alternatively to the browser plugin, you can click this link to prevent the collection by Google Analytics on this website in the future. An opt-out cookie will be stored on your device. If you delete your cookies, you will be asked to give your consent again.

7. Online marketing

Google Maps
This website uses Google Maps for the visual display of geographic information. Google Maps is a service of Google Ireland Limited, a company incorporated and operated under Irish law, located at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to protect our predominantly legitimate interests in an optimized presentation of our offer and easy accessibility of our locations according to Art. 6 para. 1 s. 1 lit. f GDPR.
When using Google Maps, data about the use of the Maps functions by visitors to the websites is transmitted or processed by Google, which may include, in particular, IP addresses and location data. We do not have any influence on this data processing.
Insofar as information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. The current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
To disable the service of Google Maps and thus prevent the transmission of data to Google, you must disable the JavaScript function in your browser. In this case, Google Maps cannot be used, or only to a limited extent.
Further information about data processing by Google can be found in Google’s privacy notices. The terms of use for Google Maps contain detailed information about the map service.
The data processing is based on an agreement between jointly responsible parties according to Art. 26 GDPR, which you can view here.

Google reCAPTCHA
For the purpose of protection against misuse of our web forms and against spam, we use the Google reCAPTCHA service within the framework of some forms on this website. Google reCAPTCHA is a service of Google Ireland Limited, a company incorporated and operated under Irish law, located at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). By checking a manual entry, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. This serves according to Art. 6 para. 1 s. 1 lit. This serves to protect our predominantly legitimate interests in the protection of our website against misuse and in a trouble-free presentation of our online presence according f GDPR

Google reCAPTCHA uses, among other things, a code embedded in the website, a so-called JavaScript, as part of the verification methods, which allows an analysis of the use of the website by you, such as cookies. The automatically collected information about your use of this website including your IP address is usually transferred to a server of Google in the USA and stored there. In addition, other cookies stored by Google services in your browser are evaluated by Google reCAPTCHA.
There is no reading or storage of personal data from the input fields of the respective form.

Insofar as information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. The current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can prevent Google from collecting the data generated by the JavaScript or cookie and related to your use of the website (including your IP address) and from processing this data by Google by preventing the execution of JavaScripts or the setting of cookies in your browser settings. Please note that this may limit the functionality of our web offer for your use.

Further information on Google’s privacy policy can be found here.

Google Fonts
On this website, the script code “Google Fonts” is incorporated. Google Fonts is a service of Google Ireland Limited, a company incorporated and operated under Irish law, located at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to protect our predominantly legitimate interests in a uniform presentation of the content on our website according to Art. 6 para. 1 lit. f GDPR. In this context, a connection is established between the browser you are using and the Google servers. This gives Google knowledge that our website has been accessed via your IP address.
Insofar as information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. The current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield. Further information about data processing by Google can be found in Google’s privacy notices.

Adobe Typekit
On this website, the script code “Adobe Typekit” of the company Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (hereinafter: Adobe) is incorporated. This serves to protect our predominantly legitimate interests in a uniform presentation of the content on our website according to Art. 6 para. 1 lit. f GDPR. In this context, a connection is established between the browser you are using and the Adobe servers. This gives Adobe knowledge that our website has been accessed via your IP address.
Adobe is certified under the EU-US Privacy Shield. The current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
Further information about data processing in the context of Adobe Typekit can be found in Adobe’s privacy notices.

8. Social Media

Use of social plugins from Facebook, Twitter, Instagram, Pinterest, using the Shariff solution.

Social buttons from social networks are used on our website.

This serves to protect our predominantly legitimate interests in an optimal marketing of our offer according to Art. 6 para. 1 s. 1 lit. f GDPR. To increase the protection of your data when visiting our website, these buttons are not unrestricted as plugins, but merely using an HTML link embedded in the site. This integration ensures that when you visit a page of our web presence that contains such buttons, no connection is made with the servers of the provider of the respective social network.

If you click on one of the buttons, a new window of your browser opens and calls up the page of the respective service provider, where you can (possibly after entering your login data) press the Like or Share button.

Purpose and scope of data collection and further processing and use of the data by the providers on their pages, a contact option and your related rights and settings options for protecting your privacy, especially opt-out options, can be found in the privacy policies of the providers:

https://www.facebook.com/policy.php

https://twitter.com/de/privacy

https://help.instagram.com/155833707900388

https://policy.pinterest.com/en/privacy-policy

https://policies.google.com/privacy

Our online presence on Facebook, Instagram

Our presence on social networks and platforms serves a better, active communication with our customers and prospects. We inform there about our products and ongoing special promotions.
When you visit our online presences in social media, your data may be automatically collected and stored for market research and advertising purposes. From this data, so-called usage profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside of the platforms that presumably correspond to your interests. Cookies are usually used on your device for this purpose. Visitor behavior and interests of users are stored in these cookies. This serves according to. Art. 6 para. 1 lit. f. GDPR to protect our predominantly legitimate interests in an optimized presentation of our offer and effective communication with customers and prospects. If you are asked by the respective social media platform operators for consent (agreement) to the data processing, e.g., with the help of a checkbox, the legal basis of the data processing is Art. 6 para. 1 lit. a GDPR.
Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission has made an adequacy decision for the USA. This is based on the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.
The detailed information on the processing and use of the data by the providers on their sites as well as a contact option and your related rights and settings options for protecting your privacy, especially opt-out options, can be found in the linked privacy policies of the providers. Should you still need help, you can contact us.

Facebook: https://www.facebook.com/about/privacy/
The data processing is based on an agreement between jointly responsible parties according to Art. 26 GDPR, which you can view here.
Further information on data processing in the context of visiting a Facebook fan page (information on Insights data) can be found here.

Instagram: https://help.instagram.com/519522125107875

Opt-out option:

Facebook: https://www.facebook.com/settings?tab=ads

Instagram: https://help.instagram.com/519522125107875

9. Sending reminder emails for reviews

Rating reminder by Trusted Shops
If you have given us your express consent during or after your order according to Art. 6 para. 1 s. 1 lit. a GDPR, we will send your email address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you a rating reminder by email.

This consent can be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.

If you have given us your express consent during or after your order according to Art. 6 para. 1 s. 1 lit. a GDPR, we use your email address as a reminder to submit a review of your order via the rating system we use. This consent can be revoked at any time by sending a message to the contact option described below.

10. Contact options and your rights

As a data subject, you have the following rights:

• according to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• according to Art. 16 GDPR, the right to immediately demand the correction of incorrect or complete personal data stored by us;
• according to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is necessary
  • to exercise the right to freedom of expression and information;
  • to fulfill a legal obligation;
  • for reasons of public interest or
  • to assert, exercise or defend legal claims;
• according to Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, as far as
  • the accuracy of the data is contested by you;
  • the processing is unlawful, but you refuse its deletion;
  • we no longer need the data, but you need it to assert, exercise or defend legal claims or
  • you have filed an objection to the processing pursuant to Art. 21 GDPR;
• according to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible;
• according to Art. 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

For questions about the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of granted consents or objection to a specific data use, please contact us directly via the contact details in our imprint.