The careful, thorough and legally compliant handling and protection of your personal data is of great importance to us.
In the following, we inform you about the collection and processing of personal data when using our website and our services.
§ 1 General information on the collection and processing of personal data
(1) Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour, etc. (“data”).
(2) The responsible party according to Art. 4, No. 7 of the EU General Data Protection Regulation (DS-GVO) is:
SAL de IBIZA GmbH
Kleine Hamburger Str. 2
10115 Berlin, Deutschland
Managing Director: Daniel C. Witte
Tel.: +49 (0)30 280 981 80
Fax: +49 (0)30 280 981 82
E-Mail: office@saldeibiza.com
(3) When you contact us by e-mail, the data you provide (e.g. e-mail address, name and, if applicable, telephone number, content, etc.) will be stored and processed by us in order to answer your questions. The indication of your e-mail address is necessary so that we can answer your inquiry. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) p. 1 lit. a DS-GVO on the basis of your voluntarily given consent. We delete the data generated in this context after storage is no longer necessary, e.g. because your enquiry has been answered.
(4) As part of data processing on our behalf, a third-party provider (Kaizerprojects - Engineered Software UG) provides us with the services for hosting and displaying the website. The legal basis for this is Art. 6 para. 1 p. 1 lit. f DS-GVO. Our legitimate interests are the accessibility and correct presentation of our website.
(5) To prevent unauthorised access by third parties to your personal data, in particular financial data, our websites are encrypted, SSL encryption (Secure Socket Layer). We also implement physical, technical and administrative security measures to adequately protect your personal data from loss, misuse, unauthorised access, disclosure and alteration. These security measures include firewalls, data encryption and physical access restrictions for our data centres and authorisation controls for access to data.
§ 2 Data processing when visiting our website, technically necessary or essential cookies
(1) During the purely informative use of our website, we only collect the personal data that your browser transfers to our server. This information is temporarily stored in a so-called log file. If you wish to view our website, we collect the following data:
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request came
- Browser
- Operating system and its interface
- Language and version of the browser software.
The above data is processed by us for the following purposes:
- Ensuring a smooth connection of the website,
- Ensuring a comfortable use of our website,
- Evaluation of the security system and stability as well as
- for other administrative purposes.
The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f DS-GVO. Our legitimate interests result from the data processing purposes listed above.
(2) In order to make the visit to our website user-friendly and to enable the use of certain functions, we use so-called cookies on various pages. Cookies are small text files that are automatically stored on your terminal device.
Use of technically necessary cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies
- Persistent cookies
b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies at any time in the browser's security settings.
d) You can adjust your browner settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that in this case you may not be able to use all the functions of this website.
e) The duration of storage can be found in the overview in the cookie settings of your web browser.
The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f DS-GVO. Our legitimate interests follow from the purposes mentioned at the beginning (website functionality, increase in user-friendliness, etc.).
(3) The above-mentioned data will be deleted as soon as the purpose of the processing has been achieved; at the latest, however, after one year, provided that there are no longer any legally prescribed retention obligations.
§ 3 Orders in the online shop
(1) If you wish to place an order in our online shop, we will collect and process the data you provide there (name, address, payment data) for the purpose of processing the contract. The legal basis for this data processing is Art. 6 Para. 1 S. 1 lit. b DS-GSVO.
(2) If you wish to open a customer account, we will collect and process the data you provide there (name, address, payment data, e-mail address) in order to facilitate future orders for you. The opening of a customer account is voluntary. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. a DS-GVO. We store this data as long as you are a costumer with us. You can delete your customer account at any time by sending a message to the contact option described above.
(3) In some cases, we use external services providers, in particular payment service providers, to process your order. We pass on your payment data to these companies for payment processing. During payment processing, you may be redirected to the websites of these companies, whose privacy policy also applies in this case. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b DS-GVO.
(4) In order to complete the contract for the delivery of goods, we pass on your delivery address to the shipping company responsible for the delivery, insofar as this is necessary for the delivery of the ordered goods. The legal basis for this data processing is Art. 6 para. 1 p 1 lit. b DS-GVO.
(5) Due to commercial and tax law requirements, we are obliged to store your order data until the legally prescribed period. The legal basis for this is Art. 6 para.1 p. 1 lit. c DS-GVO. After the expiry of the retention periods under tax and commercial law, we will delete your order data unless you have consented to its further use.
§ 4 E-mail advertising with registration for the newsletter
(1) If you register for our newsletter, we will inform you regularly by e-mail about our latest interesting offers. The registration is voluntary.
(2) The mandatory information for receiving the newsletter is your e-mail address. We use your e-mail address for the purpose of sending you the newsletter. The legal basis for this is Art. 6 para. 1 p. lit. a DS-GVO.
(3) We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter.
(4) You can revoke your consent to the sending of the newsletter at any time and thus unsubscribe from it. You can unsubscribe either by sending a message to the contact option described earlier or via a link provided for this purpose in the newsletter.
(5) After unsubscribing, we will delete your email address unless you have consented to further or different use of the address.
§ 5 Your rights
(1) You have the right with regard to the personal data concerning you:
- in accordance with Art. 15 DS-GVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making, including profiling and, if necessary, meaningful information about its details.
-in accordance with Art. 16 DS-GVO, to immediately request the correction of incorrect or incomplete personal data stored by us.
- in accordance with Art. 17 DS-GVO, to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.
- in accordance with Art. 18 DS-GVO, to request the limitation of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its erasure and we no longer need the data, but you need it for the enforcement, exercise or defense of legal claims, or you have objected to the processing in accordance with Art. 21 DS-GVO, and
- in accordance to Art. 20 DS-GVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller.
(2) You have also the right to complain to a data protection supervisory authority YOU are the opinion that the processing of personal data concerning you, violates this Regulation. A competent data protection supervisory is:
Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit)
Friedrichstraße 219
10969 Berlin
Telephone: +49 (0)30 138 890
Fax: +49 (0)30 215 5050
E-mail: mailbox@datenschutz-berlin.de
Further authorities responsible result from Art. 77 para. 1 DS-GVO.
(3) You may revoke your consent to data processing (legal foundation: Art. 6 para. 1 p. 1 lit. a DS-GVO) at any time in accordance with Art. 7 para. 3 DS-GVO. This has the consequence that we may no longer continue the data processing based on this consent for the future. The legitimacy of the data processing carried out on the basis of the consent until the revocation remains affected.
(4) Right to object to processing (Art. 21 DS-GVO)
Right to object
a) You have the right to object at any time, on the basis of reasons arising from your particular situation, to the proceeding of personal data relating to you which is carried out on the basis of the Art. 6 para. 1 p. f of DS-GVO (collection of data for the purposes of safeguarding a legitimate interest). This also applies to any profiling based on these provisions. The objection has the consequence that we no longer process this personal data, unless we can demonstrate overriding legitimate reasons for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
b) If we process your personal data for the purpose of direct marketing, you have the right to object to such processing at any time, this also applies to profiling, insofar as it is related to such direct marketing. The existence of a special situation, as in a), is thus not necessary for an effective objection to direct marketing. If you object the processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be made by sending a message to the contact option described above.
SAL de IBIZA Ltd, June 2022