Data protection

The protection of your personal data is very important to us. In the following, we would like to inform you that personal data is requested from us and stored electronically. Your data will be stored and processed by us in compliance with the relevant provisions of the national data protection act and the General Data Protection Regulation (DSGVO). The person responsible for the meaning of the aforementioned regulations is:

Sk Export & Trading Ltd.
Kalin Tsvetkov
Buket St. 48
BG-1618 Sofia
Email: info@propoliswelt.de

 

I. General

1. Terms

In order to ensure the readability and comprehensibility of our privacy policy, we will inform you in advance about the basic terms used in the GDPR.

  • Personal data
    Personal data means any information relating to an identified or identifiable natural person (‘the data subject’); a natural person is regarded as identifiable, which can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, the expression of the physical , physiological, genetic, mental, economic, cultural or social identity of this natural person.
  • Affected person
    The affected person is any identified or identifiable natural person whose personal data is processed by the controller.
  • Processing is any process or series of operations performed with or without the aid of automated
    processes in connection with personal data, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading, querying, using, disclosure through submission, dissemination or any other form of provision, reconciliation or association, restriction, erasure or destruction.
  • Restriction of processing
    Restriction of the processing is the marking of stored personal data with the aim to limit their future processing.
    Profiling is any type of automated processing of personal data that involves the use of such personal
    information to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal To analyze or predict preferences, interests, reliability, behaviour, whereabouts, or relocation of that natural person.
    Pseudonymisation is the processing of personal data in such a way that personal data can no longer be
    attributed to a specific data subject without the need for additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.
  • Responsible or data controller
    The controller or controller is the natural or legal person, public authority, body or body that, alone or in concert with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.
    A processor is a natural or legal person, public authority, body or body that processes personal data on behalf of the controller.
    The recipient is a natural or legal person, agency, agency or other entity to whom Personal Data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered to be beneficiaries.
    The third is a natural or legal person, public authority, body or body other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or processor to process the personal data.
    Consent is any expression of will voluntarily and unambiguously be made by the data subject in the form of a statement or other unambiguous confirmatory act expressing to the data subject that they consent to the processing of the personal data concerning them is.
    Payment service providers are used to process payments under contracts that an affected person concludes with the person responsible.

 

2. Type and scope of data collection

When accessing our website or retrieving a file stored on our website, data is collected and processed. This only happens if this is necessary to provide a functional website and its content and services. Furthermore, a collection and use of personal data are regularly only after appropriate consent. An exception applies to cases in which prior consent is not possible for reasons of fact and the processing of the data is permitted by law.

a. Legal basis for the processing of personal data
Insofar as the processing of personal data takes place in order to fulfil the contracts concluded with us, Art. 6 para. 1 lit. b DSGVO as the legal basis. This also applies to process operations required to carry out pre-contractual measures.
If we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a DSGVO as the legal basis.
Insofar as the processing of personal data is required to fulfil a legal obligation that our company is subject to, Art. 6 para. 1 lit. c DSGVO as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO as the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interest, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f DSGVO as the legal basis for processing.

b. Data erasure and storage duration
The deletion of the personal data collected by us takes place as soon as the purpose of the storage is omitted.
Storage shall take place if provided for by law, EU regulation or other regulations.
Furthermore, the deletion takes place when a storage period prescribed by the named standards expires, unless there is a need for further storage of the data for a conclusion of the contract or fulfilment of the contract.

 

II. Own data collection via the website

1. Log files

a. Description and scope of data processing
When accessing our website will be

Operating system used
Referrer URL (previously visited website), as well as pages accessed on our website
IP address
Date and time of the server request
Internet service provider

b. Legal basis of data processing
The legal basis for the storage of data and log files is Art. 6 para. 1 lit. f DSGVO.

c. Purpose of data processing
Saving in logfiles ensures the proper functioning of our website. It also serves the optimization and security of our systems. An evaluation of the data for marketing purposes does not take place in this context.

d. Duration of storage
The data stored by us will be deleted as soon as they are no longer necessary for the purpose of their collection. This is the case after seven days at the latest. Additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

e. Contradiction and removal possibility
The collection of this data is mandatory for the operation of the website. There is consequently no contradiction on the part of the user.

 

2. Cookies

a. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored on the visitor’s computer system when our websites are visited. Cookies contain a string that allows us to identify the visitor’s browser when we visit our website again. We use technically necessary cookies, which serve to make our offer more user-friendly, effective and secure.

The following data is stored and transmitted in the cookies, for example:

  • Articles in shopping cart
    The data obtained from this is pseudonymized by us. An assignment of the data to the visitor is therefore not possible. Furthermore, this data will not be stored with other personal information.
    You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Failure to accept cookies may limit the functionality of our website.
    In addition, we use cookies that allow an analysis of the surfing behaviour of our website visitors (so-called analysis cookies).

The following data is stored and transmitted in the analysis cookies, for example:

  • Use of the website functions

b. Legal basis of data processing
The legal basis for the processing of personal data using cookies is Article 6 (1) lit. f DSGVO. The legal basis for the processing of personal data using cookies for analysis purposes is, if the user agrees to this, continue to be Article 6 (1) lit. a GDPR.

c. Purpose of data processing
Technically necessary cookies are used to simplify the use of websites. Some functions of the website or the online shop can not be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.
The user data collected by technically necessary cookies will not be used to create user profiles.
The use of the analysis cookies is done to improve the quality of our websites and their content. Through the analysis cookies, we learn how the website is used and so we can constantly optimize our offer.

d. Duration of storage, objection and disposal options
Cookies are stored on the user’s computer and transmitted by the user. Therefore, users also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

 

3. Contact form and e-mail

a. Description and scope of data processing
We provide visitors to our website with a contact form for quick, electronic contact. The data entered in the input mask are transmitted to us and stored.
In addition, the IP address of the user, as well as the date and time of the transmission, are stored at the time of sending.
Alternatively, contact via the provided e-mail address is possible. In this case, the user’s personal data transmitted by e-mail will be stored.
There is no transfer of the data to third parties. The data will be used exclusively to process the request.

b. Legal basis of data processing
Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f DSGVO. If the e-mail contact aims to conclude a contract, then the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

c. Purpose of data processing
The processing of personal data is solely for processing the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

d. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has been finally clarified.
The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

e. Contradiction and removal possibility
The user has the opportunity to revoke his consent to the processing of personal data at any time. For this purpose, the user can contact the responsible person via the contact options provided on the website. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.

 

4. Comment function

a. Description and scope of data processing
Visitors to our website have the opportunity to comment. The data entered in the input mask are transmitted to us and stored.
In addition, the IP address of the user, as well as the date and time of the transmission, are stored at the time of sending.
There is no transfer of the data to third parties. The data will be used exclusively to process the request.

b. Legal basis of data processing
Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR, otherwise Art. 6 para. 1 lit. f DSGVO.

c. Purpose of data processing
The processing of personal data is intended to prevent misuse of the commenting function (for example, by bots) and to ensure the security of our information technology systems.

d. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. This is the case at the latest when the comment or the corresponding page is deleted.

e. Contradiction and removal possibility
The user has the opportunity to revoke his consent to the processing of personal data at any time. For this purpose, the user can contact the responsible person via the contact options provided on the website.

 

5. Newsletter

a. Description and scope of data processing
Users have the option of subscribing to our newsletter on our website. When registering for the newsletter, the data requested from the input mask will be sent to us.
In addition, the following data will be collected upon registration:

  • IP address of the computer of the applicant
  • Date and time of registration

As part of the registration process, consent is obtained through a so-called double-opt-in procedure.
If customers have purchased goods or services from us and have deposited their e-mail address, this can also be used subsequently for sending a newsletter. In such a case, the newsletter will only send direct mail for your own similar goods or services.

b. Legal basis of data processing
Legal basis for the processing of the data after registration for the newsletter by the user is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.
The legal basis for the dispatch of the newsletter as a result of the sale of goods or services is § 7 Abs. 3 UWG.

 

6. Payment provider PayPal

On our website we offer u.a. Payment via PayPal. Provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). If you choose to pay via PayPal, the payment details you enter will be sent to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing to fulfil a contract). You have the opportunity to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of historical data processing operations.