PRIVACY POLICY

 

1. Data Protection at a Glance

 

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data means any data by which you can be personally identified. Detailed information on the subject of data protection can be found in our Privacy Policy set out below.

Data Collection on Our Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the Legal Notice (Imprint) of this website.

How do we collect your data?

Some data is collected when you provide it to us directly. This may include, for example, data entered into a contact form.

Other data is collected automatically by our IT systems when you visit the website. This primarily includes technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze user behavior.

What rights do you have regarding your data?

You have the right at any time to receive, free of charge, information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the rectification, restriction, or erasure of such data. For this purpose, and for further questions regarding data protection, you may contact us at any time using the address provided in the Legal Notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Analytics Tools and Third-Party Tools

When visiting our website, your browsing behavior may be statistically evaluated. This is primarily done using cookies and analytics programs. Such analyses are generally anonymous and cannot be traced back to you personally.

You may object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following Privacy Policy.

You may object to this analysis. We will inform you about the available options for objection in this Privacy Policy.

 

2. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.

When you use this website, various personal data is collected. Personal data means any data with which you can be personally identified. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this takes place.

Please note that data transmission over the Internet (e.g. communication by e-mail) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the responsible department

The responsible department for data processing on this website is

Andreas Schupp
Schupp Musterkarten GmbH
Blätteräcker 12
D-74523 Schwäbisch Hall
Germany
Phone: +49 7907 9876-0
info@schupp-musterkarten.de

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may withdraw your consent at any time with future effect. An informal notification by e-mail to us is sufficient for this purpose. The legality of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the State Commissioner for Data Protection of the federal state in which our company is headquartered. A list of data protection officers and their contact details can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract, in a commonly used, machine-readable format, either for yourself or for a third party. If you request the direct transfer of the data to another controller, this will only take place insofar as it is technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the browser address line from “http://” to “https://” and by the lock symbol in your browser bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted Payment Transactions on this Website

If, after the conclusion of a paid contract, there is an obligation to provide us with your payment data (e.g. bank account number for direct debit authorization), this data is required for payment processing.

In the case of encrypted communication, your payment data transmitted to us cannot be read by third parties.

Access, Restriction, and Erasure

Within the framework of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of the data processing and, if applicable, a right to rectification, restriction, or erasure of this data. For this purpose, and for further questions regarding personal data, you may contact us at any time using the address provided in the Legal Notice.

Objection to Promotional Emails

The use of contact data published within the scope of the legal notice obligation for the purpose of sending unsolicited advertising and informational materials is hereby expressly prohibited. The operators of the website expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam e-mails.
 

 

3. Data Collection on Our Website

Cookies

Some pages on this website use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective, and secure. Cookies are small text files stored on your computer and saved by your browser.

Most of the cookies we use are “session cookies.” They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser during your next visit.

You can configure your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies in certain cases or generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies required for carrying out the electronic communication process or for providing certain functions requested by you (e.g. shopping cart functionality) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your browsing behavior) are stored, these are treated separately in this Privacy Policy.

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Contact Form

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered into the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You may revoke this consent at any time. An informal notification by e-mail is sufficient for this purpose. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation.

The data you enter into the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions — especially statutory retention periods — remain unaffected.

Registration on this Website

You may register on our website in order to use additional functions on the site. We use the data entered for this purpose only for the use of the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

For important changes, such as changes to the scope of services or technically necessary changes, we use the e-mail address provided during registration to inform you accordingly.

The processing of the data entered during registration is carried out on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You may revoke your consent at any time. An informal notification by e-mail is sufficient for this purpose. The legality of the data processing already carried out remains unaffected by the revocation.

The data collected during registration will be stored by us for as long as you remain registered on our website and will subsequently be deleted. Statutory retention periods remain unaffected.

Processing of Customer and Contract Data

We collect, process, and use personal data only insofar as it is necessary for the establishment, content design, or modification of the legal relationship (inventory data). This is carried out on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

We collect, process, and use personal data regarding the use of our website (usage data) only insofar as this is necessary to enable the user to use the service or for billing purposes.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

4. Plugins and Tools

Google Web Fonts

This website uses so-called Web Fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required Web Fonts into your browser cache in order to correctly display texts and fonts.

For this purpose, the browser you use must establish a connection to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support Web Fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found at: https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://www.google.com/policies/privacy/.

5. Application Process

We use the web service heyflow for our application process. The service provider is Heyflow GmbH, Jungfernstieg 49, 20354 Hamburg, Germany.

Within the scope of the application process, personal data is processed and stored. This data is automatically deleted after six months. Further information on data processing by heyflow can be found in heyflow’s Privacy Policy: https://heyflow.app/de/datenschutz.