Privacy policy

Protecting your privacy when you visit our website/shop is very important to us.Protecting your privacy when you visit our website/shop is very important to us.

This privacy policy describes how your personal data is collected, used and shared when you visit our website or shop with us at www.heychalky.de (the "Website"). This Privacy Policy provides our users with comprehensive and transparent information about the nature, scope and purpose of the collection and use of personal data in connection with the use of our Website.

Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only to the extent that no other indication is made in the subsequent processing operations. "Personal data" means any information relating to an identified or identifiable natural person.

The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Lidiia Diel, Wendlohstr., 103, 22459 Hamburg, Germany, e-mail: info@heychalky.de. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.


Server log files

You can visit our website without providing any personal information.

Every time you access our website, usage data is transmitted to us or our web hoster / IT service provider by your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 para. 1 lit. f DSGVO from our overriding legitimate interest in ensuring trouble-free operation of our website and to improve our offer.
Data collection and use for contract processing and when opening a customer account.

If you voluntarily provide us with this information when ordering goods or opening a customer account or registering for the newsletter.

Which data is collected can be seen from the respective input forms.

When registering for the newsletter, your e-mail address will be used for our own advertising purposes until you unsubscribe from the newsletter. You can unsubscribe at any time via a link provided for this purpose in the newsletter.

A transfer of your personal data is made by us in the context of the execution of the order used service providers (carriers, logistics providers, payment service providers, banks). After complete execution of the contract or deletion of your customer account, your data will be blocked for further use and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you below.

Cookies
In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.
In some cases, the cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
We may work together with advertising partners who help us to make our internet offer more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the paragraphs below.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for each browser at the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.

Contact
When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO. Your data will be deleted after final processing of your request, this is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.


Registration for the e-mail newsletter
If you have registered separately for the newsletter, your e-mail address will be used for our own advertising purposes. An e-mail newsletter will be sent to you regularly until you unsubscribe from the newsletter. You can unsubscribe at any time without incurring any costs other than the transmission costs according to the prime rates of your access provider.

Orders
Collection, processing and forwarding of personal data when placing orders

When you place an order, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and to process your requests. The provision of the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 (1) lit. b DSGVO and is necessary for the performance of a contract with you.

A transfer of your data takes place, for example, to the shipping companies and dropshipping providers selected by you, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of the data transfer is limited to a minimum.

Payment service provider
Klarna
If you select the payment method "Klarna purchase on account" or (if offered) the payment method "Klarna installment purchase", the payment will be processed by Klarna AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable the processing of the payment, your personal data (first and last name, street, house number, postal code, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery type) will be forwarded to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 para. 1 lit. a DSGVO during the ordering process. You can see which credit agencies your data may be forwarded to here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Klarna uses the information obtained about the statistical probability of non-payment for a weighed decision on the establishment, implementation or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna remains entitled to process your personal data, if applicable, insofar as this is necessary for the processing of payments in accordance with the contract. Your personal data will be processed in accordance with the applicable data protection regulations and as specified in Klarna's Privacy Policy for Data Subjects located in Germany https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf or for data subjects based in Austria https://cdn.klarna.com/1.0/shared/content/policy/data/de_at/data_protection.pdf will be treated.

Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

SOFORT
If you select the payment method "SOFORT", the payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we will pass on your information provided during the ordering process, together with information about your order, in accordance with Art. 6 (1) lit. b DSGVO. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be passed on for the purpose of payment processing with the payment service provider SOFORT and only insofar as it is necessary for this purpose. At the following Internet address you can obtain further information about the data protection provisions of SOFORT: https://www.klarna.com/sofort/datenschutz

Data subject rights and storage period
Duration of storage
After complete processing of the contract, the data will initially be stored for the duration of the warranty period, thereafter taking into account statutory, in particular tax and commercial law retention periods and then deleted after expiry of the period, unless you have consented to further processing and use.
Rights of the data subject

You have the following rights according to Art. 15 to 20 DSGVO if the legal requirements are met: right to information, to correction, to deletion, to restriction of processing, to data portability.

In addition, according to Art. 21 (1) DSGVO, you have the right to object to processing based on Art. 6 (1) f DSGVO and to processing for the purposes of direct marketing.

Contact us if you wish. You can find the contact details in our imprint.
Right of complaint to the supervisory authority

In accordance with Art. 77 DSGVO, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
Right of objection

If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO, you have the right to object to this processing with effect for the future at any time for reasons arising from your particular situation.

After the objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.

If personal data processing is carried out for direct marketing purposes, you may object to this processing at any time by notifying us. After the objection has been made, we will stop processing the data concerned for the purpose of direct marketing.

Last update: 18.04.2021