Within the meaning of the applicable data protection law, in particular the General Data Protection Regulation (GDPR), as the operators of the website www.isquared.eu.com (also referred to as the “website” and/or “online shop”), as the Controller, we are responsible for the personal data of the user (“you”) of this website. In the following we inform you clearly in the context of our obligations to inform (Art. 13 et seq. GDPR) about the data that are processed during your visit to our website and on what legal basis this take place. You also receive information on how we protect your data from a technical and organisational point of view and what rights you have as regards us and the responsible supervisory authority.
1. Information on the Controller
UFD Components AG
In der Halde 4
2. Data Protection Officer:
Our company has appointed a Data Protection Officer:
c/o DS Compliance GmbH
Phone: 0211 942 588 - 24
3. Processing of your personal data
Use of our website for information purposes
If you access our website for the sole purpose of visiting it, what are known as log files will be processed, which are logged by our system automatically.
The following log files will be automatically processed:
- IP address of the accessing computer
- type of internet browser used
- language of the internet browser used
- version of the internet browser used
- operating system and its version
- user interface of the operating system
- web pages visited
- date and time of visit
- time zone difference to Greenwich Mean Time (GMT)
- access status / http status code
- volume of data transferred
- internet service provider of the user
The log files contain your IP address, but this will be shortened before it is saved. This means that it cannot be definitively associated with your person and that your data will not be saved together with other personal data.
The processing of the above data is required for the provision of our website. The legal basis for the processing of data for the purposes of anonymisation is Art. 6 (1) (f) GDPR.
4. Use of offers
a. Customer account / registration
You can create a customer account on our website with your personal data. This is voluntary and the data will not be forwarded to third parties. If you decide on a customer account, you must provide us with the following details:
- email address
- telephone number
When you submit your login/registration, we will save your IP address and the date and time of your registration together with the information that you provide. By sending the registration you agree to the processing of your data by us.
Your data will be used for the purpose of managing your customer account and for providing the associated functions, such as the processing of your customer data and for displaying your orders. The legal basis for storing your customer account data is Art. 6 (1) (a) GDPR.
We will store your data which you have made available to us within the scope of your voluntary registration as long as you do not erase your customer account with us. If you make changes to your data, the old data will be erased and only the updated data will be saved. In addition, we will only store your data in order to fulfil our contractual or legal obligations (e.g. tax obligations). In this case, we will block your data to the extent that it will only be processed for the necessary purposes.
You can erase or amend your voluntary customer account with us at any time. You can find the functions for amending your details or closing your account in your profile.
If you place an order on our website, we require the following data for the fulfilment of the contract with you:
- first name, surname and (invoice and delivery) address to be able to send you your order and invoice.
- email address to be able to send you the confirmation of order and to provide you with contractual documents immediately after the order.
- telephone number in the event of queries during the delivery
- your payment information to process the payment of your order
To send you your order, we will forward your address data to our shipping or logistics service provider for the purposes of the delivery.
The legal basis for the processing of the data is Art. 6 (1) (b) GDPR. The data will only be stored for as long as it is necessary for the implementation of the contract. In addition, we will only store your data in order to fulfil our contractual or legal obligations (e.g. tax obligations). In this case, we will block your data to the extent that it will only be processed for the necessary purposes.
In addition to these data, we will also save the time (the date and time of day) of the transfer of your data to us and your IP address. The processing of this data corresponds to our legitimate interest according to Art. 6 (1) (f) GDPR for ensuring the security of our systems and for counteracting misuse. These additional data will be erased as soon as they are no longer required, at the latest when the contract with you has been completed.
c. Payment methods
If you select a payment provider on our payment page, this provider will also receive your personal data, such as your name, your address and your bank account details.
Credit card: If you pay on our website by credit card, your credit card provider will be informed that you have placed an order with us. Your credit card provider may carry out a credit check. Please refer to your credit card provider's website for further information.
Direct debit / advance payment: If you pay by direct debit on our website, our house bank will receive your bank details for payment processing.
5. Contact by email
You can contact us by email. The personal data transferred in the email will be stored by us. No forwarding of the data to third parties will take place. The data will only be processed in order to process the contact that you initiated. The legal basis for the processing of your personal data is Art. 6 (1) (f) GDPR. The data will be stored until they are no longer necessary for achieving the purpose of the conversation with you and the purpose of the contact that you initiated has been fully clarified.
If your email has the objective of the conclusion of a contract with us, the additional legal basis for the processing of your personal data is Art. 6 (1) (b) GDPR. These data will be stored as long as they are required for the implementation of the contract. Otherwise, we will only store your data in order to fulfil contractual or legal obligations (e.g. tax obligations).
You can withdraw your consent to the processing of your personal data at any time by sending an email to email@example.com
. In this case, all personal data from the conversation will be erased and a continuation of the conversation will not be possible.
On our website we offer you the opportunity to subscribe to our newsletter free of charge. For this purpose, in addition to your declaration of consent, we also require your email address. By sending the newsletter registration you agree to our processing of your data.
Further information such as your name, is voluntary and serves the sole purpose of contacting you personally. The legal basis for the sending of the newsletter is Art. 6 (1) (b) GDPR as regards your email address because we provide our services to you in this way and Art. 6 (1) (a) GDPR in terms of further data which is provided on a voluntary basis.
We will only send you the newsletter once you have confirmed your registration by clicking on the appropriate link which is provided in a confirmation email that is sent to you for this purpose. In this way, we wish to ensure that only you yourself can subscribe to the newsletter. Your confirmation must be sent shortly after your receipt of the confirmation email, otherwise your newsletter subscription will be automatically erased from our database.
Within the scope of your newsletter registration, we will also save the time (the date and time of day) of the transfer of your data to us and your IP address. The processing of this data corresponds to our legitimate interest according to Art. 6 (1) (f) GDPR for ensuring the security of our systems and for counteracting misuse.
Your data will not be forwarded to third parties and will only be processed in connection with the sending of newsletters. The purpose of the processing of your email address is the possibility of being able to send you the newsletter. Further data within the scope of the registration process serve the purpose of either addressing you personally or ensuring the security of our services and preventing the misuse of the email address used.
Your data will only be stored for as long as is necessary to achieve the purpose. Your email address will therefore be stored for the period of your active newsletter subscription if you have given the appropriate consent. The data that we additionally collect automatically during your registration (IP address, date and time of day) will be erased at the latest when you cancel your newsletter subscription.
If you provide your email address when using our services, for example when making a purchase on our website, we may use it to send you our newsletter. This takes place exclusively in the context of direct advertising for own or similar goods or services.
The legal basis for the sending of the newsletter in connection with the sale of goods or services is Art. 7 (3) German Unfair Competition Act (UWG). If we send you a newsletter following an order on our website, we will save your email address for the purpose of advertising our own or similar goods or services until you cancel your subscription to the newsletter.
Possibility to lodge an objection / cancel newsletter subscription
You can end your subscription and/or cancel our newsletter at any time. A link is provided for this purpose at the end of each newsletter. In deciding to do this, you withdraw your consent and/or object to the further use of your data for the purpose of sending the newsletter.
Please note the following information: you can ensure yourself that no cookies are stored on your computer at all, or that the storage of certain cookies is permitted only. You can select such options in your internet browser settings, where you can also view and erase the cookies that have been saved.
If you block all of the cookies, you may not be able to use all the features offered by our website.
a. Own cookies:
We use our own cookies for the purpose of ensuring the functionality of our website. Certain elements of our website require that your internet browser is recognised after a change of web page.
In the overview, you can see for what purposes your data is collected and for how long it will be stored:
Name of cookie
Purpose of the cookie
Saves your ID during the session
One session (until the browser is closed)
Saves your language selection
Saves your cart contents
One session (until the browser is closed)
Temporary value transmission to optimize the website features
The legal basis for the processing of personal data in cookies that we place on our website to ensure the functionality of our website and our offer is Art. 6 (1) (f) GDPR.
Option of objection and elimination
As explained in the introduction to this section, you can enable or restrict the transfer of cookies by changing the settings in your internet browser. You can erase cookies that have already been saved by your internet browser at any time. If cookies are restricted or deactivated for our website, you may not be able to use all the functions offered by our website, however.
b. External cookies (third party cookies):
On our website, the Google Analytics analysis service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (in the following: “Google Analytics”) has been implemented.
Google Analytics places cookies which save the following information:
- type of internet browser used
- version of the internet browser
- the operating system that you use
- the referrer (previously visited website)
- your shortened IP address
- time of the server enquiry
Name of cookie
Purpose of the cookie
Helps to distinguish users
Is used to restrict requests
Helps to distinguish users
We use the function offered by Google Analytics to render your IP address anonymous before the saving or processing. Your IP address is usually shortened within the European Union/EEA and only then transmitted to Google servers in the USA. Your information will be processed on a pseudonymised basis, and we will not combine it with any of your other personal data.
We use the data collected in this way for statistical purposes in order to optimise our website and offers. The legal basis for this is Art. 6 (1) (f) GDPR.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) from being processed by Google by downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout?hl=en).
You can either prevent Google cookies from being saved directly in your browser settings or you can prevent the processing of your data by applying an “opt-out”. Click here to set the Opt-Out Cookie for Google Analytics
. In this context, an “opt-out cookie” is placed which prevents the collection of your user data on this website.
8. Icon links to social networks
On our website we use small icons that refer to our website on the web platforms of third parties (Facebook, Instagram, Twitter, YouTube and Google+). These are hyperlinks, which means that none of your data will be transferred automatically; this will only take place if you click on the icons and a new tab with the website of the third party provider opens in your browser.
9. Other third party content which is integrated in our website
For the purpose of ensuring an appealing design of our website, we integrate videos from the YouTube service of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter: “YouTube”). We use the advanced privacy mode so that information concerning your person is only shared with YouTube when you activate the video by clicking the play button on the video.
For further information about privacy, including the duration for which your information is stored on YouTube, please see the data protection guidelines of Google at: https://policies.google.com/privacy?hl=en&gl=en The legal basis for the integration of YouTube services on our website and the associated processing of your data is Art. 6 (1) (f) GDPR.
The legal basis for the processing of your data is Art. 26 German Federal Data Protection Act (BDSG) and Art. 88 GDPR.
10. Your rights
When we process your data, you are a “data subject” within the meaning of the GDPR. You have the following rights: a right of access, a right to rectification, a right to the restriction of processing, a right of erasure, a right to information and the right to data portability. In addition, you have a right of objection and a right of withdrawal.
Details on the individual rights are provided in the following:
a. Right of access
You have the right to ask us to confirm whether your personal data is being processed.
If we process your personal data, you have the right of access to the following information:
the purposes of processing;
the categories of personal data processed;
the recipients or categories of recipients to whom your personal data has been or will still be disclosed, especially for recipients in third countries or for international organisations;
where possible, the intended duration for which the personal data will be saved or, if this is not possible, the criteria for the determination of this duration;
the existence of a right to have the personal data concerning your person rectified or erased, a right to the restriction of its processing by us and the right to object to such processing;
the right to lodge a complaint with a supervisory authority;
if the personal data are not collected directly from you, all available information regarding the source of the data;
the existence of automated decision-making, including profiling in accordance with Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such a processing for you.
If we have transferred your data to an international organisation or to a third country, you also have the right to access information as to whether appropriate guarantees exist in the context of the transfer according to Art. 46 GDPR.
b. Right to rectification
You have the right to the rectification and/or completion of the data that we have stored about your person if this data is inaccurate or incomplete. We will then complete the rectification or completion without delay.
c. Right to the restriction of processing
Under certain conditions, you have the right to request that we restrict the processing of your personal data. In this respect, at least one of the following conditions must be fulfilled:
you dispute the accuracy of the personal data, and for a period of time that enables us to verify the accuracy of the personal data;
the processing is unlawful, but you decline the erasure of the personal data, requesting instead that the use of the personal data is restricted;
we no longer require the personal data for the purposes of processing, but you require it in order to establish, exercise or defend legal claims, or
you have lodged an objection to the processing according to Art. 21 (1) GDPR, insofar as it has not yet been determined as to whether our legitimate reasons override your interests.
d. Right to erasure
You have the right to ask us to erase your personal data immediately if we are obliged to do so. This is the case if one of the following conditions is fulfilled:
Your personal data are no longer required for the purposes for which they were collected or otherwise processed.
You withdraw your consent on which the processing was based according to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and there is no other legal basis for the processing.
You object to the processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing according to Article 21 (2) GDPR.
Your personal data has been unlawfully processed.
The erasure of personal data is required in order to fulfil a legal obligation under EU law or the law of the EU member states to which we are subject.
Your personal data were collected in relation to information society services offered according to Art. 8 (1) GDPR.
If we have made your personal data public and we are obliged to erase it in accordance with the aforementioned conditions, we will take appropriate measures, including technical measures, taking into account the technology and implementation costs available to us, to provide other Controllers who process the personal data with the appropriate notification that you have requested us to erase all links to this personal data or copies or replications of this personal data.
Your right to erasure does not exist, however, if the processing is required for the following reasons (derogations):
for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing by EU or member state law to which we are subject or for the performance of a task which is carried out in the public interest or in the exercising of official authority that has been conferred to us;
for reasons of public interest in the area of public health according to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR, in so far as the right referred to in (1) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
for the establishment, exercising or defence of legal claims.
e. Right of information
If you have exercised your right of rectification, erasure or restriction of processing towards our company, we are obliged to notify all recipients to whom we have disclosed your personal data of the rectification, erasure or restriction of the processing of your data, unless this proves to be impossible or is associated with a disproportionately high degree of cost.
f. Right to data portability
You have the right to receive the personal data that you have provided to us in a structured, commonplace and machine-readable format, and the right to have this data transferred to another Controller, subject to the following conditions:
(1) the processing is based on consent according to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, or on a contract according to Art. 6 (1) (b), and
(2) the processing is carried out using automated methods.
You have the right to have us transfer your personal data directly to another Controller, insofar as this is technically feasible and it does not impair the freedoms and rights of other persons.
This right to data portability shall not apply if the processing is necessary for the performance of a task in the public interest or the exercising of official authority that has been conferred to us.
g. Right to object
You have the right to object at any time to the processing of your personal data based on Art. 6 (1) (e) or (f) GDPR for reasons relating to your particular situation. This also applies to any profiling referred to in these provisions. After an objection, we will no longer process your personal data unless we can demonstrate compelling grounds for processing that override your interests, rights and freedoms, or if the processing serves the establishing, exercising or defending of legal claims.
If we process your personal data for direct advertising purposes, you have the right to object at any time to the processing of your personal data for the purposes of such advertising. This also applies to profiling insofar as this is connected with direct advertising.
If you object to the processing of your personal data for direct advertising purposes, we will no longer process it for these purposes.
In connection with the use of Information Society services – notwithstanding Directive 2002/58/EC (Directive on Privacy and Electronic Communications) – you have the possibility to exercise your objection by means of automated procedures with the use of technical specifications.
h. Right of withdrawal
According to Art. 7 (3) GDPR you have the right to withdraw your consent at any time. The withdrawal of your consent does not render the legality of the previous processing ineffective on a retroactive basis, however.
i. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint to a supervisory authority without prejudice to any other administrative or judicial remedy. In particular, you may exercise your right to lodge a complaint in your member state of residence, your place of work or the place of suspected infringement, if you are of the view that the processing of your personal data infringes the GDPR.
Version: 25 May 2018.