Disclaimer: This is a translation from German for information purposes only. While we endeavour to provide as accurate a translation as possible, errors cannot be ruled out and only the original German version is legally binding.
- 1. Which personal data we collect and contact details
- 2. Data collected while using the website
- 3. Cookies
- 4. Getting in touch
- 5. Data processing on account creation and for contract fulfillment
- 6. Use of personal data for direct marketing
- 7. Data processing during order placement
- 8. Social media: videos
- 9. Live chat
- 10. Web analysis services
- 12. HERE Maps
- 12. User rights
- 13. Duration of personal data retention
1. Which personal data we collect and contact details
1.1. Thank you for visiting our website and for your interest in our product. Below we will explain how your personal data is handled when using our website. Personal data is all data that can be used to identify you.
1.2. The entity responsible for processing data acquired during use of this website in accordance with the General Data Protection Regulation (EU GDPR) is pocketnavigation.de GmbH, Auf den Hähnen 36, 56581 Ehlscheid, Germany, Email: firstname.lastname@example.org, Phone +49 (0)2634 922271. As the natural or legal entity, pocketnavigation.de determines the purposes and means of processing personal data, be it independently or in cooperation with others.
1.3. This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. registration).
2. Data collected while using the website
If the website is used for information purposes only, i.e. if you are not registered or do not otherwise provide us with information, we only collect data transmitted to our servers via your browser (so-called "server log files"). When you are using our website, we require the following data to display the content:
- Our visited website
- Date and time of access
- Volume of transmitted data in bytes
- Source/link from which the page was accessed
- Browser used
- Operating system used
- IP-Address (where applicable: in anonymized form)
Processing is carried out in accordance with Art. 6, Sec. 1 (f) EU GDPR on the basis of our justified interest in improving the stability and functionality of the website. The data is not passed on to third parties or used in any other way. However, we reserve the right to review the server log files retrospectively if there are concrete indications of illegal use.
Cookies partly serve to simplify the order process by saving certain settings (for example by remembering the content of a virtual shopping cart for future website visits). When our cookies save personal data, this is done in accordance with Art. 6, Sec. 1 (b) EU GDPR either to execute a contract or in accordance with Art. 6, Sec. 1 (f) EU GDPR on the basis of our justified interest in providing the best possible website functionality and to present a user friendly experience to site visitors.
We may collaborate with advertising partners to make our site more interesting. In these cases, our partners may also save cookies on your device (third party cookies). Use of such cookies, their scope and what information they collect will be detailed below.
Please note that you can set your browser up to inform you when cookies are set allowing you to decide whether to accept them on a case-to-case basis, or to enable or disable cookies in general in certain scenarios. Browsers vary in how they approach cookie settings. Please check the Help section of your browser for more information on how to access cookie settings. Links for this information for the most commonly used browsers are:
Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Please note that turning cookies off for our website may result in reduced functionality.
4. Getting in Touch
If you decide to contact us (for instance via an online contact form or per email), personal data will be collected. What data is collected can be deduced from the available fields if a form is provided, or the automatically generated email. This data is saved exclusively for the purpose of answering any questions posed and for the technical administration required to do so. The legal basis for processing this data is our interest in answering customer questions in accordance with Art. 6, Sec. 1 (f) EU GDPR. If the purpose of establishing contact is the conclusion of a contract, the additional legislative basis for processing your information is in accordance with Art. 6, Sec. 1 (b) EU GDPR. Your data will be deleted once your request has been processed, assuming the matter was solved conclusively and there is no legal basis to retain the data.
5. Data processing on account creation and for contract fulfillment
In accordance with Art. 6, Sec. 1 (b) EU GDPR, personal data will be acquired and processed if it is provided during account creation or to execute a contract. Which data is collected can be deduced from the available fields in any required form, and the IP address is also saved. User accounts can be deleted at any time upon request to the aforementioned address. We save and use the data for contractual purposes. Following complete processing of the contract or deletion of your user account, your data is retained solely for tax-related and commercial purposes and deleted once all relevant periods have expired, unless you expressly consent to the further use of your data or unless a legally permitted continued use of the data is required on our part, which will be elaborated upon accordingly below.
6. Use of personal data for direct marketing
Newsletter for existing customers. If you provided us with your email address during the order process, we reserve the right to email you about special offers on products similar to the ones you already ordered. In accordance with § 7 sec. 3 UWG (German Unfair Competition Act, section on unreasonable nuisance), we do not require special permission for this. The data is processed exclusively on the basis of our legitimate interest in personalised direct marketing in accordance with Art. 6, Sec. 1 (f) EU GDPR. If you initially excluded your email address from being used for this purpose, you will not receive any such emails. You reserve the right to object to your email address being used for the reasons specified above with future effect by informing the responsible entity mentioned at the beginning. This will only incur the costs involved in transmitting the request at the basic rates. Your email address will not be used for advertising purposes effective immediately upon receipt of the objection.
7. Data processing during order placement
7.1. We cooperate with the following service providers to process orders. Their support is required wholly or partially to complete contracts. Certain personal data is transmitted to these service providers pursuant to the information below.
Where applicable, personal data will be passed on to the shipping provider commissioned with the delivery of physical goods. When required, payment data will be conveyed to the relevant credit institution. Payment service providers used are detailed below. The legislative basis for transferring said data is Art. 6, Sec. 1 (b) EU GDPR.
7.2. Use of payment service providers
When paying via PayPal, credit card via PayPal, direct debit via PayPal or where applicable "purchase on account" or installments via PayPal, your payment data will be passed on to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) for processing purposes. This is in accordance with Art. 6, Sec. 1 (b) EU GDPR and applies only when it is required for payment processing.
PayPal reserves the right to carry out credit checks for the payment methods: credit card via PayPal, direct debit via PayPal or - where applicable - "purchase on account" or installments via PayPal. In this case, your payment data may be passed on to credit agencies on the basis of PayPal's legitimate interest in determining your solvency pursuant to Art. 6, Sec. 1 (f) EU GDPR. PayPal will decide whether to provide the payment method in question based on the result of the credit check and the statistical probability of non-payment derived therefrom. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. This may include, but is not limited to, address data. For further information on Paypal’s data protection, including the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
You may object to PayPal processing your data at any time by sending them a message directly. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
8. Social Media: Videos
This website uses the YouTube embedding function to display and play videos hosted by Youtube, owned by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
The extended data protection mode is employed, which according to the provider means that user data is only collected if a user interacts with the video interface. In this case, Youtube cookies are employed to collect data about user behaviour. According to Youtube, this data is used to record video statistics, to improve the user experience and to prevent abuse. If you are logged into Google, any data will be allocated to your account on activating a video. If you do not want your activity to be associated with your YouTube user profile, you should log out beforehand. Google saves your data irrespective of whether you are logged in or not, in the form of usage profiles, and analyses them. This analysis is performed in accordance with Art. 6, Sec. 1 (f) EU GDPR on the basis of legitimate interest on the part of Google as regards implementing personalised advertising, market research and/or improving the design of their user interface in line with customer behaviour. You have the right to object to the generation of user profiles, but you have to contact YouTube to make use of it.
Irrespective of playback of embedded videos, accessing the website instigates a connection to the Google DoubleClick network, which may involve further data processing beyond our control.
Google LLC based in USA is certified by the US-European privacy agreement Privacy Shield, which guarantees adherence to EU data protection regulations.
9. Live chat
LiveZilla (LiveZilla GmbH)
This website uses a live chat system provided by LiveZilla GmbH, Byk-GuldenStraße 22, 78224 Singen, Germany (www.livezilla.net/home/en/), which collects and saves anonymous data for web analysis and to provide a functional live chat system. An alias may be used to create user profiles using this data. This may involve cookies. Cookies are small text files that are saved locally in the user’s browser cache. Cookies allow us to recognise a browser when a user revisits the website. Assuming the data collected includes personal information, it is processed in accordance with Art. 6, Sec. 1 (f) EU GDPR on the basis of our legitimate interest in effective customer support and the statistical analysis of user behaviour for optimisation purposes.
Data collected via LiveZilla technologies is not used to identify the user personally without their express consent, and is not merged with the alias bearer’s personal data. If you want to avoid LiveZilla cookies being used, you can configure your browser to this effect. Turning cookies off may result in reduced functionality of our website. You can object to the process of collecting and saving data in order to create a pseudonymous user profile with future effect at any time by sending an email to the address in the “About us” section of the website.
10. Web analysis services
Google Universal Analytics
This website has "_anonymizeIp()" enabled, which guarantees the IP address is anonymised via abbreviation and excludes any possibility to directly identify individuals. This ensures that in almost all circumstances IP addresses from within the EU or other countries party to the agreement are anonymised before being transmitted to the USA. Rarely, the full IP address may be transmitted to a Google server in the USA and abbreviated there. In these rare cases, processing is done in accordance with Art. 6, Sec. 1 (f) EU GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
Google uses this information on our behalf to assess the use of our website, to generate reports regarding website usage and to provide us with other services relating to the use of our website and internet-related services. The IP address transmitted to Google Analytics via your browser is not merged with any other data by Google.
You can prevent cookie usage in your browser settings, but this may result in some features of our website not working properly. In addition, you can prevent Google Analytics accessing and processing data related to website usage (including the IP address) by installing the following plugin:
Alternatively, and in particular if using a mobile device, use the following link to set an opt-out cookie, which will prevent Google Analytics from accessing data when using this website (this opt-out cookie will only work for the browser currently in use and for this specific domain. If you delete the cookies in your current browser, you will have to reclick the link afterwards):
Deactivate Google Analytics
Google LLC based in USA is certified by the US-European privacy agreement Privacy Shield, which guarantees adherence to EU data protection regulations.
This website also uses Google Analytics for a device independent analysis of user flow via a user ID. You can deactivate device independent analysis of your activity in your Google account under Data and Personalisation › Activity Controls › Device Information.
More information on Google Analytics data privacy can be found in Google’s data privacy statement: https://support.google.com/analytics/answer/6004245?hl=en
11. HERE Maps
Even when accessing sub-pages that are connected to the HERE maps, information regarding your use of our website (such as the IP address) is sent to and recorded on HERE servers.
The map is an essential part of our application and passing this data on is in accordance with Art. 6, Sec. 1 (f) GDPR on the basis of legitimate interest.
12. User rights
12.1. The effective data protection legislation guarantees individuals extensive access and intervention rights upon which we will elaborate below:
– Right of access in accordance with Art. 15 EU GDPR: In particular, you have the right to information as regards which personal data is processed and for what purpose, the categories of the processed personal data, the recipients or categories of recipients to whom the data was or is conveyed, the intended duration of the data retention and the criteria used to determine the duration of the data retention, the existence of the rights of rectification, deletion, limitation of processing, objection to processing, complaints to a regulatory authority, the origin of any data not collected by us, the existence of automated decision-making including profiling and, where applicable, detailed information on the logic involved and extent to which you were or are affected, as well as the intended goal, and your right to information as regards any guarantees if data is transferred to third countries in accordance with Art. 46 EU GDPR;
– Right to Rectification in accordance with Art. 16 EU GDPR: You have the right to demand inaccurate personal data be corrected, or missing data completed without undue delay;
– Right to deletion in accordance with Art. 17 EU GDPR: Assuming the conditions of Art. 17 sec. 1 EU GDPR apply, you have the right to demand deletion of your personal data. This right does not apply when processing is required in the name of exercising the right of freedom of expression and information, when it is legally required, when it is in the public interest or when it is required for the establishment, exercise or defence of legal claims;
– Right to restriction of processing in accordance with Art. 18 EU GDPR: you have the right to request restricted processing of your personal data, provided the accuracy of the contested data is verified, if the deletion of unlawful data is rejected and restricted data processing is requested instead, if the data is required on your part for the establishment, exercise or defence of legal claims after it has fulfilled its purpose for us, or if you have objected to processing on grounds related to your specific situation, and provided our legitimate interests have not yet been ruled to override yours;
– Notification obligation in accordance with Art. 19 EU GDPR: assuming you have exercised your rights to have your data corrected, deleted or restricted, we are obliged to inform any recipient of said data appropriately, unless this proves to be impossible or the procedure required to do so is considered disproportionate. You retain the right to be informed who said recipients are.
– Right to data portability in accordance with Art. 20 EU GDPR: you have the right to request any personal data we acquired from you in a structured, commonly used, machine-readable format for yourself or a responsible third party, provided this is technically possible.
– The right to withdraw consent as defined by Art. 7, Sec. 3 EU GDPR: you have the right to withdraw any consent given to process your data with future effect at any time. In this case we will delete the data in question immediately, provided there is no legal basis to retain it irrespective of consent. Withdrawal of consent will not affect the legality of consensual processing prior to withdrawal.
– Right to complaint in accordance with Art. 77 EU GDPR: You have the right to file a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. The complaint can be lodged in the member state of your residence or workplace, or the place where the breach has occurred, assuming you believe the processing of your personal data is in breach of EU GDPR.
12.2. RIGHT TO OBJECTION
IF WE PROCESS YOUR DATA ON THE BASIS OF OUR LEGITIMATE INTEREST OVERRIDING YOUR OWN, YOU HAVE THE RIGHT TO OBJECT ON THE GROUNDS OF YOUR PERSONAL SITUATION AT ANY TIME WITH FUTURE EFFECT.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECTION, WE WILL NO LONGER PROCESS THE DATA IN QUESTION. NEVERTHELESS, WE RETAIN THE RIGHT TO CONTINUE PROCESSING THE DATA IF WE CAN PROVE COMPELLING LEGAL GROUNDS FOR DOING SO AND THESE OVERRIDE YOUR INTERESTS, BASIC RIGHTS AND BASIC FREEDOMS, OR IF PROCESSING THE DATA SERVES LEGAL CLAIMS OR ENFORCING OR EXERCISING THE LAW.
IF WE USE YOUR DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE USE OF YOUR PERSONAL DATA FOR SUCH PURPOSES AT ANY TIME. THIS OBJECTION CAN BE MADE AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECTION, WE WILL STOP USING YOUR DATA FOR DIRECT MARKETING PURPOSES.
13. Duration of personal data retention
The period for which personal data is retained depends upon the law (for example, periods required by tax or commercial laws). Once this period has expired, the data will be deleted automatically, provided it is no longer required for contractual purposes, to initiate prospective contracts, and/or that there is no legitimate interest on our part to retain the data.