Privacy policy

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can identify you personally. Detailed information about data protection is provided in the privacy policy below.

Data collection on this website

Who is responsible for collecting data on this website?

Data on this website is processed by the website operator. Their contact details are provided in the “Information about the controller” section of this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us. This may include, for example, information you enter in a contact form.

Other data is collected by our IT systems automatically, or with your consent, when you visit the website. This is mainly technical data, such as your browser, operating system or the time of the page request. It is collected automatically as soon as you enter this website.

What do we use your data for?

Some data is collected to ensure that the website operates without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request correction or erasure of that data. If you have consented to processing, you can withdraw your consent at any time with future effect. In certain circumstances you may also request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time about these rights or other data protection questions.

Analytics and third-party tools

When you visit this website, your browsing behaviour may be statistically analysed, primarily using analytics programs.

Detailed information about these analytics programs is provided in the privacy policy below.

2. Hosting

We host our website content with the following providers:

Shopify

The provider is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Shopify is a tool for creating and hosting websites. When you visit our website, Shopify collects your IP address and information about your device and browser. Shopify also analyses visitor numbers, traffic sources and customer behaviour and creates user statistics. When you make a purchase, Shopify also collects your name, email address, delivery and billing addresses, payment data and other purchase-related data, such as phone number and transaction amounts. Shopify stores cookies in your browser for these analyses.

For details, see Shopify’s privacy policy: https://www.shopify.de/legal/datenschutz.

Shopify is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. Where consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and section 25(1) TTDSG insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TTDSG. Consent may be withdrawn at any time.

Strato

The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (“Strato”). When you visit our website, Strato collects various log files, including your IP addresses.

For further information, see Strato’s privacy policy: https://www.strato.de/datenschutz/.

Strato is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. Where consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and section 25(1) TTDSG insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TTDSG. Consent may be withdrawn at any time.

3. General information and mandatory disclosures

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection rules and this privacy policy.

When you use this website, various personal data is collected. Personal data is information that can identify you personally. This privacy policy explains what data we collect and what we use it for, as well as how and for what purpose this happens.

Please note that data transmission over the internet, for example communication by email, may have security vulnerabilities. Complete protection against access by third parties is not possible.

Information about the controller

The controller responsible for processing data on this website is:

Tran Thanh Pham
Robert-Bosch-Str. 29,
14641 Nauen

Telephone: +49 157 50112992
Email: kunde@retourenscout.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names and email addresses.

Retention period

Unless a more specific retention period is stated in this policy, your personal data remains with us until the purpose of processing no longer applies. If you make a valid erasure request or withdraw consent, your data will be deleted unless we have other legally permissible grounds to retain it, such as tax or commercial-law retention periods. In that case it will be deleted once those grounds cease to apply.

General information on the legal bases for processing on this website

If you have consented to processing, we process your personal data under Article 6(1)(a) GDPR or Article 9(2)(a) GDPR where special categories under Article 9(1) are processed. Where you expressly consent to transferring personal data to third countries, processing is also based on Article 49(1)(a) GDPR. If you consent to storing cookies or accessing information on your device, for example through device fingerprinting, processing is additionally based on section 25(1) TTDSG. Consent may be withdrawn at any time. Where data is required to perform a contract or take pre-contractual steps, processing is based on Article 6(1)(b) GDPR. Data needed to comply with a legal obligation is processed under Article 6(1)(c) GDPR. Processing may also be based on our legitimate interest under Article 6(1)(f) GDPR. The applicable legal bases in each case are explained in the following sections.

Recipients of personal data

We work with various external parties in the course of our business. This sometimes requires the transfer of personal data to them. We disclose personal data only when necessary to perform a contract, when legally required, for example disclosures to tax authorities, when we have a legitimate interest under Article 6(1)(f) GDPR, or when another legal basis permits disclosure. When using processors, we disclose our customers’ personal data only under a valid data processing agreement. For joint processing, a joint processing agreement is concluded.

Withdrawal of consent to processing

Many processing operations are possible only with your express consent. You can withdraw consent already given at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to object in specific cases and to direct marketing (Article 21 GDPR)

IF PROCESSING IS BASED ON ARTICLE 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA, INCLUDING PROFILING BASED ON THOSE PROVISIONS. THE RELEVANT LEGAL BASIS IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE DATA CONCERNED UNLESS WE DEMONSTRATE COMPELLING LEGITIMATE GROUNDS OVERRIDING YOUR INTERESTS, RIGHTS AND FREEDOMS, OR PROCESSING IS NEEDED TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING FOR THAT PURPOSE, INCLUDING PROFILING RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of GDPR infringements, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace or the place of the alleged infringement. This right is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data we process automatically on the basis of your consent or to perform a contract, or have it transmitted to a third party, in a commonly used machine-readable format. Direct transmission to another controller will be provided only where technically feasible.

Access, correction and erasure

Under the applicable law, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing, and where applicable to correction or erasure. You may contact us at any time about these rights or other questions concerning personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. You can contact us at any time. This right applies in the following cases:

• If you dispute the accuracy of your personal data stored by us, we generally need time to verify it. You may request restriction of processing for the duration of that verification.
• If processing of your personal data was or is unlawful, you may request restriction instead of erasure.
• If we no longer need your personal data but you need it to exercise, defend or establish legal claims, you may request restriction instead of erasure.
• If you have objected under Article 21(1) GDPR, your interests must be balanced against ours. Until it is established whose interests prevail, you may request restriction of processing.

Where processing has been restricted, the data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

4. Data collection on this website

Cookies

Our websites use cookies. Cookies are small data packets and do not damage your device. They are stored either temporarily for a session, as session cookies, or permanently, as persistent cookies. Session cookies are automatically deleted at the end of your visit. Persistent cookies remain on your device until you delete them or your browser deletes them automatically.

Cookies may originate from us, as first-party cookies, or from third-party companies. Third-party cookies enable the integration of certain third-party services within websites, such as cookies for processing payment services.

Cookies serve different functions. Many are technically necessary because certain website features would not work without them, such as the shopping cart or video display. Other cookies may be used to evaluate user behaviour or for advertising.

Cookies necessary for electronic communications, to provide functions you request, such as the cart, or to optimise the website, such as audience measurement cookies, are stored under Article 6(1)(f) GDPR unless another legal basis is stated. The operator has a legitimate interest in storing necessary cookies to provide technically error-free, optimised services. Where consent to cookies and similar recognition technologies is requested, processing is based exclusively on that consent, under Article 6(1)(a) GDPR and section 25(1) TTDSG. Consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, allow them only in individual cases, reject them in certain cases or generally, and delete them automatically when the browser closes. Disabling cookies may restrict this website’s functionality.

The cookies and services used on this website are described in this privacy policy.

5. Social media

Social media elements with Shariff

This website uses social media elements, for example Facebook, X, Instagram, Pinterest, XING, LinkedIn and Tumblr.

Social media elements can usually be identified by their respective logos. To ensure privacy on this website, we use them only with the “Shariff” solution. This application prevents embedded social media elements from transmitting your personal data to the respective provider as soon as you first enter the page.

A direct connection to the provider’s server is established only when you activate the social media element by clicking its button, giving consent. Once activated, the provider receives information that you visited this website with your IP address. If you are also logged into the relevant social media account, for example Facebook, the provider can associate your visit with that account.

Activating the plugin constitutes consent within the meaning of Article 6(1)(a) GDPR and section 25(1) TTDSG. You can withdraw that consent at any time with future effect.

The service is used to obtain the legally required consents for certain technologies. The legal basis is Article 6(1)(c) GDPR.

6. Newsletter

Newsletter data

To receive the newsletter offered on this website, we require your email address and information allowing us to verify that you own that address and agree to receive the newsletter. No other data is collected, except voluntarily. We use this data exclusively to send the requested information and do not disclose it to third parties.

Data entered in the newsletter subscription form is processed exclusively on the basis of your consent under Article 6(1)(a) GDPR. You can withdraw consent to storing the data and email address and using them for the newsletter at any time, for example through its unsubscribe link. Withdrawal does not affect the lawfulness of processing already carried out.

Data provided for receiving the newsletter is stored by us or the newsletter service provider until you unsubscribe and is removed from the mailing list after unsubscribing or when its purpose no longer applies. We reserve the right to delete or block email addresses from our mailing list at our discretion in accordance with our legitimate interest under Article 6(1)(f) GDPR.

Data stored by us for other purposes remains unaffected.

After you unsubscribe, your email address may be stored by us or the newsletter service provider on a suppression list where necessary to prevent future mailings. Suppression-list data is used only for this purpose and is not combined with other data. This serves both your interests and our interest in complying with legal requirements for newsletters, a legitimate interest under Article 6(1)(f) GDPR. Storage on the suppression list is not time-limited.

You may object to this storage if your interests outweigh our legitimate interest.

Source: https://www.e-recht24.de.