Privacy Policy
The controller responsible for data processing is:
next interactive GmbH
Braunschweiger Str. 51
27321 Thedinghausen
info@next-interactive.de
We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we provide you with detailed information on how we handle your data.
1. Access Data and Hosting
You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores only a so-called server log file containing, for example, the name of the requested file, your IP address, date and time of access, data volume transferred and the requesting provider (access data) and documents the access. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offerings. This serves to safeguard our legitimate interests in the correct presentation of our offerings, which outweigh other interests in a balancing of interests, in accordance with Article 6(1) sentence 1 lit. f GDPR. All access data will be deleted at the latest seven days after the end of your visit to the site.
Hosting
The services for hosting and displaying the website are provided in part by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in designated forms on this website are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact options described in this privacy policy.
2. Data Processing for Contract Performance and Contact
2.1 Data Processing for Contract Performance
For the purpose of contract performance in accordance with Article 6(1) sentence 1 lit. b GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Mandatory fields are marked as such because we require the data in these cases to perform the contract and cannot process the order without this information. The data collected is evident from the respective input forms.
Further information on the processing of your data, in particular on the disclosure to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy. After complete contract performance, your data will be restricted for further processing and deleted after the expiration of tax and commercial retention periods in accordance with Article 6(1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Article 6(1) sentence 1 lit. a GDPR or we reserve the right to further data use that is permitted by law and which we inform you of in this statement.
2.2 Customer Account
Insofar as you have given your consent in accordance with Article 6(1) sentence 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening your customer account and storing your data for any future orders on our website. You can delete your customer account at any time, either by contacting us using the contact options described in this privacy policy or via a function provided for this purpose in your customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data in accordance with Article 6(1) sentence 1 lit. a GDPR or we reserve the right to further data use that is permitted by law and which we inform you of in this statement.
2.3 Contact
As part of customer communication, we collect personal data in accordance with Article 6(1) sentence 1 lit. b GDPR when you voluntarily provide it to us upon contacting us (e.g. via contact form or email) to process your enquiries. Mandatory fields are marked as such because we require the data in these cases to process your contact enquiry. The data collected is evident from the respective input forms. After complete processing of your enquiry, your data will be deleted unless you have expressly consented to further use of your data in accordance with Article 6(1) sentence 1 lit. a GDPR or we reserve the right to further data use that is permitted by law and which we inform you of in this statement.
3. Data Processing for Shipping
For contract performance in accordance with Article 6(1) sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with delivery, insofar as this is necessary for the delivery of ordered goods.
Data Disclosure to Shipping Service Providers for Shipping Notification Purposes
Insofar as you have given us your explicit consent during or after your order, we pass on your email address and telephone number to the selected shipping service provider in accordance with Article 6(1) sentence 1 lit. a GDPR so that it can contact you before delivery for the purpose of shipping notification or coordination.
You can revoke your consent at any time by contacting us using the contact options described in this privacy policy or directly with the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to further data use that is permitted by law and which we inform you of in this statement.
DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
4. Data Processing for Payment Processing
In processing payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.
4.1 Data Processing for Transaction Processing
Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers, who act as processors on our behalf, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for processing the payment. This serves contract performance in accordance with Article 6(1) sentence 1 lit. b GDPR. In some cases, payment service providers collect the data necessary for payment processing themselves, for example on their own website or via technical integration in the order process. The privacy policy of the respective payment service provider shall apply in this regard.
If you have questions about our payment processing partners and the basis of our cooperation with them, please contact us using the contact options described in this privacy policy.
4.2 Data Processing for Fraud Prevention and Optimising Our Payment Processes
Where applicable, we pass on further data to our service providers, which they use together with the data necessary for payment processing as our processors for fraud prevention and optimising our payment processes (e.g. invoicing, processing disputed payments, accounting support). This serves to safeguard our legitimate interests in our protection against fraud or in efficient payment management, which outweigh other interests in a balancing of interests, in accordance with Article 6(1) sentence 1 lit. f GDPR.
5. Cookies and Further Technologies
General Information
To make your visit to our website attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (persistent cookies).
We use such technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping basket function). Through these technologies, your IP address, the time of your visit, device and browser information as well as information about your use of our website (e.g. information about the contents of your shopping basket) are collected and processed. In a balancing of interests, this serves our legitimate interest in optimised presentation of our offerings in accordance with Article 6(1) sentence 1 lit. f GDPR.
We also use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to provide evidence of consents to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.
You can find the cookie settings for your browser using the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
Insofar as you have consented to the use of the technologies in accordance with Article 6(1) sentence 1 lit. a GDPR, you can revoke your consent at any time by contacting us using the contact options described in the privacy policy.
6. Use of Cookies and Other Technologies for Web Analytics and Advertising Purposes
Insofar as you have given your consent in accordance with Article 6(1) sentence 1 lit. a GDPR, we use the following cookies and other third-party technologies on our website. After the purpose has ceased and the respective technology is no longer used by us, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. Further information on your options to revoke can be found in the section "Cookies and Further Technologies". Further information, including the basis of our cooperation with the individual providers, can be found in the individual technologies. If you have questions about the providers and the basis of our cooperation with them, please contact us using the contact options described in this privacy policy.
6.1 Use of Google Services for Web Analytics and Advertising Purposes
We use the following technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google Technologies about your use of our website is normally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on Standard Data Protection Clauses of the European Commission. If your IP address is collected via Google Technologies, it will be shortened before storage on Google's servers by activating IP anonymisation. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there. Insofar as nothing different is stated in the individual technologies, data processing takes place on the basis of an agreement concluded between joint controllers in accordance with Article 26 GDPR. For more detailed information on data processing by Google, please see the Google privacy notices.
Google Analytics
For the purpose of website analysis, data (IP address, time of visit, device and browser information as well as information about your use of our website) is automatically collected and stored with Google Analytics, from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is generally not merged with other data from Google. Data processing takes place on the basis of a data processing agreement by Google.
YouTube Video Plugin
To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube Video Plugin in the enhanced privacy mode we use, transmitted to Google and subsequently processed by Google, only if you play a video.
6.2 Shopware Analytics
Purpose of processing: Together with our shop software service provider, we evaluate certain information about our customer base in joint responsibility (e.g. customer group, pages visited, click paths, date and time of visit, information about the device used (resolution, pixel density, operating system), referrer URL, information about the browser used, locale, search queries and time zone). This information is processed by an external service provider and made available to us in near-real-time so that we can monitor the use of our website and improve our offerings. Legal basis: Article 6(1) lit. f GDPR Data categories: Derivatives from master and contact data (customer group, no individual customer data), usage data, connection data Recipients of data: shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany (as joint controller), IT service provider The essence of joint responsibility: Joint responsibility exists between us and shopware AG; the data is collected on our shop and then transmitted to Shopware servers or their service providers; except for obtaining your consent for the use of cookies or similar technologies and fulfilling these information obligations, all obligations, in particular the implementation of data subject rights, rest with shopware AG, which you can contact at legal@shopware.com. You can also assert your data subject rights with us; we will then forward your request to shopware AG accordingly. shopware AG can derive behaviours on our store from the collected data, but cannot assign this data to you as a person. Intended third-country transfer: None Do we store personal data on your device based on your consent or read such data? Yes, see Consent Management for details.
6.3 Use of Facebook Services for Web Analytics and Advertising Purposes
Facebook Ads
We advertise this website on Facebook and other platforms via Facebook Ads. We determine the parameters of the respective advertising campaign. Facebook is responsible for the precise implementation, in particular the decision on the placement of advertisements with individual users. Insofar as nothing different is stated in the individual technologies, data processing takes place on the basis of an agreement between joint controllers in accordance with Article 26 GDPR. Joint responsibility is limited to the collection of data and its transmission to Facebook Ireland. The subsequent data processing by Facebook Ireland is not covered by this.
7. Social Media
Our Online Presence on Instagram, Pinterest
Insofar as you have given your consent to the respective social media operator in accordance with Article 6(1) sentence 1 lit. a GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media platforms mentioned above, from which usage profiles are created using pseudonyms. These can be used to display, for example, advertising that is likely to correspond to your interests both within and outside the platforms. Cookies are generally used for this purpose. For detailed information on data processing and use by the respective social media operator as well as a contact option and your respective rights and settings options to protect your privacy, please see the privacy notices of the providers linked below. Should you nevertheless require assistance in this regard, you can contact us.
Instagram is an offering of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland") The information automatically collected by Facebook Ireland about your use of our online presence on Instagram is normally transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on Standard Data Protection Clauses of the European Commission. Data processing in connection with visiting an Instagram fan page takes place on the basis of an agreement between joint controllers in accordance with Article 26 GDPR. For further information (information on Insights data), please see here.
Pinterest is an offering of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). The information automatically collected by Pinterest about your use of our online presence on Pinterest is normally transmitted to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on Standard Data Protection Clauses of the European Commission.
8. Contact Options and Your Rights
8.1 Your Rights
As a data subject, you have the following rights:
- pursuant to Article 15 GDPR, the right to request information to the extent specified therein regarding your personal data processed by us;
- pursuant to Article 16 GDPR, the right to request the immediate correction of incorrect or completion of your personal data stored by us;
- pursuant to Article 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is
- necessary for the exercise of the right to freedom of expression and information;
- required for the fulfilment of a legal obligation;
- required for reasons of public interest or
- necessary for the assertion, exercise or defence of legal claims;
- pursuant to Article 18 GDPR, the right to request the restriction of processing of your personal data, insofar as
- the accuracy of the data is disputed by you;
- the processing is unlawful, but you refuse to have the data deleted;
- we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or
- you have lodged an objection to the processing in accordance with Article 21 GDPR;
- pursuant to Article 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller;
- pursuant to Article 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or our company headquarters for this purpose.
| Right of Objection Insofar as we process personal data to safeguard our legitimate interests, which outweigh other interests in a balancing of interests, as explained above, you can object to this processing with effect for the future. If processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. Insofar as processing is carried out for other purposes, you only have a right of objection if there are grounds arising from your particular situation. After exercising your right of objection, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing is necessary for the assertion, exercise or defence of legal claims. This does not apply if processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose. |
8.2 Contact Options
If you have any questions about the collection, processing or use of your personal data, or if you wish to request information, correction, restriction or deletion of data as well as revocation of given consents or object to certain data use, please contact us directly using the contact details in our legal notice.