In the following data protection information, we will inform you about the processing of personal data by Al Wazzan GmbH (“we,” and/or the “Controller”) in accordance with the GDPR and the Bundesdatenschutzgesetz (the Federal Data Protection Act (BDSG 2018).
Please read through our data protection information carefully. You may request information (Art. 15 DSGVO, § 34 BDSG) about your personal data stored by us by e-mail.
Name and contact data of the processing Controller
This data protection information applies to data processing by:
Al Wazzan GmbH
D - 20459 Hamburg
for the following website: www.alwazzan.de
I. Purposes of the data processing, legal bases, and legitimate interests that are pursued by the Controller or by a third party, as well as categories of recipients
A) Calling our websites / applications
1. Log files
Each time access is made to websites/applications, information is sent by the respective internet browser on your respective end device to the server of our website/application, and temporarily stored in log data files, the so-called log files. The data sets stored in this way contain the following data which are stored up until automatic erasure: date and time of the retrieval, name of the site retrieved, IP address of the inquiring device, referrer URL (source URL, from which you arrived at our websites), the data quantity transferred, loading time, and the product and version information of each browser used as well as the name of your access provider.
The legal basis for the processing of the IP address is Article 6(1)(f) GDPR. We have a legitimate interest in:
- guaranteeing that connections are established smoothly,
- guaranteeing convenient use of our website/application, and
- evaluating system security and stability.
No immediate inference as to your identity is possible by means of the information; nor do we draw and such inference.
The data are stored and automatically erased after the aforementioned purposes have been achieved. The standard periods for erasure are determined by the criterion of necessity.
2. Cookies, tracking, and social media plug-ins
For our website/applications, we use so-called cookies, tracking tools, targeting procedures and social media plug-ins. The precise procedures involved, and the manner in which your data are used for them, are explained in detail below.
B) Entering into, performance of, and/or end of a contract
1. Data processing upon entering into a contract
Whenever you register at one of our websites/applications and/or enter into a further contract with us, e.g., whenever you order one of our business reports and/or other documents, then we shall process the data necessary for entering into the contract, for its performance, or for ending the contract with you. Such data include:
- first name, last name
- delivery address
- email address
The legal basis for such is Article 6(1)(a) and (b) GDPR, i.e., you are making the data available to us upon the basis of the respective contractual relationship between you and us.
To the extent that we do not use your data for further purposes (see below), we shall store the data collected for fulfillment of the contract for the term of the contract as well as until the expiration of the statutory or any potential contractual warranty and guarantee rights. After expiration of this time period, we shall retain the information about the contractual relationship, which information is necessary pursuant to commercial and tax law, for the statutorily determined time periods. During this time period, the data will again be processed, solely for the event of an examination by the financial administration.
Furthermore, for transacting the order over our websites/applications, the following data processing is necessary:
We shall share the details of your delivery address with the logistics company and shipping partners engaged by us, in order to make the delivery of orders possible. The respective data shall be transferred to our contractors solely for the respective purposes and shall be erased after delivery has been effected.
2. Transfer of data to transportation service providers
For the purpose of delivering goods ordered, we cooperate with logistics services providers/transportation companies and/or shipping partners. For the purpose of delivering the goods ordered or for the notification thereof, these companies shall be able to receive transfers of the following data: first name, last name, mailing address, email address.
The legal basis of the processing is Article 6(1)(b) GDPR.
C) Online presence and website optimisation
1. Cookies – general information
Most of the cookies used by us are deleted again after the end of the browser session (so-called session cookies). Using these, we can offer you, for example, the cross-website shopping basket display, from which you can see how many articles are already in your shopping basket and the current amount of your purchases. Other cookies remain on your computer and enable us to recognize your computer again during the next visit (so-called permanent or cross-session cookies). These cookies, in particular, serve to make our offer user-friendly, more effective, and more secure. Thanks to these data files, it is possible, for instance, for you to receive on the site displays of information that are customized to your interests.
To be sure, you can set up your browser in such a manner that it does not store our cookies in your end device. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, provided that you set up your browser to notify you whenever you receive a new cookie, or how you can delete all of the cookies already received and block any additional ones.
Please proceed as follows:
In Internet Explorer
- Select “Internet Options” in the “Tools” menu.
- Click on the “Privacy” tab.
- Now you can make security adjustments for the internet. Here, you can set whether and which cookies are supposed to be allowed or blocked.
- Confirm your setting by clicking on “OK.”
- Click the menu button and choose “Options.”
- Click on “Privacy & Security.”
- Select the entry “Use custom settings for history” in the drop-down menu.
- Confirm your setting by clicking on “OK.”
In Google Chrome:
- Click on the Chrome menu on the symbols bar of the browser.
- Select “Settings.”
- Click on “Advanced.”
- Under “Privacy and security,” click on “Content settings.”
- Under “Cookies” you can make the following settings for cookies:
- Delete cookies.
- Block cookies by default.
- Delete cookies and website data by default after closing the browser.
- Allow exceptions for cookies from particular websites or domains.
Insofar as personal data are involved with these cookies and/or the information contained therein, the legal basis of the data processing is Article 6(1)(f) GDPR. Our interest in optimizing our website is in the course of such to be regarded as legitimate within the meaning of the aforementioned regulatory provision.
2. Google AdWord / remarketing
Our website uses the Google Adwords service. Google AdWords is an online advertising program provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). We use the remarketing feature within the Google AdWords service. With the remarketing feature, we can show you advertisements based on your interests on other sites within the Google Network. This will analyse your surfing behavior on our website, e.g. which offers you have viewed. This allows us to show you even after your visit to our website on the online search engine Google itself, so-called "Google ads" and on other websites personalised advertising. For this purpose, Google stores a cookie in your browser when you visit Google services or websites on the Google Network. This cookie records your visits. The cookie is used to uniquely identify your web browser and not the identification of your person. The legal basis for this data processing is Article 6 (1) (f) GDPR.
3. Google Analytics
For the purpose of the needs-based configuration and ongoing optimization of our websites, we use – upon the basis of Article 6(1)(f) GDPR – Google Analytics, a web analysis service of Google, Inc. (“Google”). Google Analytics uses so-called “cookies,” text data files that are stored on your computer and facilitate an analysis of your use of the website. In this connection, pseudonymised use profiles are created and cookies are used. The information generated by the cookie about your use of this website includes:
- browser type/version,
- operating system used,
- referrer URL (the site previously visited),
- host name of the accessing computer (IP address),
- time of the server inquiry.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports about website activities, and to render additional services affiliated with the website use and the internet use vis-à-vis the website operator. The IP address transferred by your browser within the framework of Google Analytics is not merged with other data from Google. Using a corresponding setting on your browser software, you can prevent cookies from being stored; however, we would like to point out that in this event, it is possible that you will not be able to use all of the features of this website in their fullest scope. Moreover, you can prevent the recording of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google as well as the processing of these data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
As an alternative to the browser add-on, particularly with browsers on mobile end devices, you can also prevent the recording by Google Analytics by deactivating Google Analytics:
An opt-out cookie is set that prevents any future recording of your data when visiting this website. The opt-out cookie is valid only in this browser and only for our website, and is stored on your device. If you delete the cookies in this browser, then you will have to set the opt-out cookie again. You can find additional information about data protection in connection with Google Analytics on the Google Analytics website.
4. Google Conversion TRacking
We also use so-called conversion tracking when using the Google AdWords service. When you click on an ad served by Google, a conversion tracking cookie will be placed on your computer / device. These cookies lose their validity after 30 days, contain no personal data and are thus not used for personal identification. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking.
The legal basis for this data processing is Article 6 (1) (f) GDPR (legitimate interest).
You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you can opt-out of interest-based ads on Google and interest-based Google ads on the web (within the Google Display Network) in your browser by turning off or turning off http://www.google.com/settings/ads at http://www.aboutads.info/choices/. For more information about your preferences and privacy on Google, please visit: https://www.google.com/intl/en/policies/privacy/?fg=1
5. Deactivation / Opt-Out-Option
In addition to the deactivation methods already described, you can generally prevent the described technologies by setting a corresponding cookie in your browser. In addition, you have the option of deactivating preference-based advertising with the help of the preference manager.
You have the opportunity to contact us in several ways: via email, telephone, or surface mail. If you contact us, then we will use the personal data that you provide us voluntarily in this context, exclusively for the purpose of getting in touch with you and being able to process your inquiry.
Article 6(1)(a), Article 6(1)(b), Article 6(1)(c), and Article 6(1)(f) GDPR establish the legal basis for this data processing.
We process your payment information for the purpose of payment processing.
The legal basis for this data processing is Article 6 (1) (a), Article 6 (1) (b), DSGVO and Article 6 (1) (f) GDPR.
F) Recipients outside the EU
With the exception of the processing set forth herein, we do not share your data with any recipients having their seat outside the European Union or the European Economic Area.
G) Your rights
Alongside the right to withdrawal of the consents you have given to us, if the respective statutory prerequisites are fulfilled, then you are entitled to the following additional rights:
- the right of access to your personal data stored by us (Article 15 GDPR), in particular, you can obtain access to information on the purposes of the processing, the category of the personal data, the categories of recipients to whom your data were or are being disclosed, the envisaged period of storage, and the source of your data, insofar as these were not collected directly from you;
- the right to rectification of inaccurate data or to completion of accurate data (Article 16 GDPR),
- the right to erasure of your data stored with us (Article 17 GDPR), to the extent that we do not have to comply with any statutory or contractual retention periods or other duties or rights by operation of law concerning further storage by us,
- the right to the restriction of processing of your data (Article 18 GDPR), to the extent that the accuracy of the data is contested by you, that the processing is unlawful, but you oppose its erasure; the Controller no longer needs the data, but that you, however, require the data for the establishment, exercise, or defense of legal claims, or have filed an objection to the processing as contemplated under Article 21 GDPR,
- the right to data portability in accordance with Article 20 GDPR, i.e., the right to receive selected data stored with us about you transferred in a commonly used, machine-readable format, or to obtain the transfer to another controller,
- the right to lodge a complaint with a supervisory authority. As a rule, for this purpose you can turn to the supervisory authority at your habitual residence or place of work, or at our company seat..
H) Right to object
It is possible under the prerequisites of Article 21(1) GDPR to object to the data processing on grounds relating to the particular situation of the data subject.
The general right to objection above applies to all processing purposes described in this data protection information, which purposes are processed on the basis of Article 6(1)(f) GDPR. In contrast to the special right of objection oriented to data processing for promotional purposes, we are obligated under the GDPR to implement such a general right of objection only if you set forth to us reasons of overarching significance (e.g., a potential risk to life or health).
I) Right to withdrawal
Insofar as we process data upon the basis of a consent that you have issued, you have the right to withdraw the consent issued at any time. The withdrawal of the consent does not result in the data processing becoming ineffective which has taken place upon the basis of the consent up to the date of the withdrawal.