Data Privacy Policy
Thank you for visiting our online shop. Protection of your privacy is very important to us. Below you will find extensive information about how we handle your data.
1. Access data and hosting
You may visit our website without revealing any personal information. With every visit on the website, the web server stores automatically only a so-called server log file which contains e.g. the name of the requested file, your IP address, the date and time of the request, the volume of data transferred and the requesting provider (access data), and documents the request.
These access data are analysed exclusively for the purpose of ensuring the smooth operation of the website and improving our offer. This serves according to art. 6 (1) 1 lit f GDPR the protection of our legitimate interests in the proper presentation of our offer that are overriding in the process of balancing of interests. All access data are deleted no later than seven days after the end of your visit on our website.
Third-party hosting services
Data are also processed by a third-party provider that we have engaged to render hosting and website presentation services on our behalf. This provider processes on its servers all data that are collected in the manner specified below when you visit our website or fill in forms made available for this purpose in our online shop. Data are processed on other servers only in the scope described herein.
This service provider is based in an EU or EEA member state.
2. Data collection and use for processing the contract and for opening a customer account
We collect personal data that you voluntarily submit to us when you place an order, contact us (e.g. via contact form or by e-mail) or open a customer account with us. Mandatory fields are marked as such because we absolutely need those data to perform the contract or process your contact request or open your customer account, and you would otherwise not be able to complete your order and/or create your customer account or send the contact request. It is evident in each input form what data are collected. We use the data that you disclose to us to perform the contract and process your enquiries according to art. 6 (1) 1 lit b GDPR. Upon completion of the contract or deletion of your customer account, any further processing of your data will be restricted, and your data will be deleted upon expiry of the retention period applicable under relevant regulations, unless you expressly consent to the further use of your data or we reserve the right to further use your personal data in the scope and manner permitted by law, of which we inform you in this notice. Your customer account can be deleted at any time. For this purpose you can send a message to the contact option specified below.
3. Transfer of data
The ordered goods according to art. 6 (1) 1 lit. b GDPR. Depending on the payment service provider you have selected during the ordering process, we disclose the payment details collected for order processing purposes to the bank commissioned to handle the payment and, as the case may be, to the payment service provider commissioned by us or to the selected payment service. Some of those data are collected by the selected payment service providers themselves if you open an account with them. In such a case, during the ordering process, you must register with your payment service provider using your access data. In this respect, the privacy notice of the relevant payment service provider applies.
Disclosure of data to a shipping provider
If, when or after placing your order, you have given your express consent to us doing so, we disclose your e-mail address to the selected shipping provider based on that consent according to art. 6 (1) 1 lit. a GDPR, in order to enable the shipping provider to contact you to advise you of the delivery or agree with you the delivery details.
You may revoke your consent at any time by sending a message to the contact option described below or by directly notifying the shipping provider at the contact address specified below. After you revoke your consent, we will delete the data disclosed for this purpose, unless you expressly consent to the further use of your data or we reserve the right to further use your personal data in the scope and manner permitted by the law, of which we inform you in this notice.
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
Transfer of data to CloudFlare (Reverse Proxy)
We use the Content Delivery Network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 para. 1 lit. f DSGVO). A CDN is a network of [globally] distributed servers that is able to deliver optimized content to the website user. For this purpose, personal data may be processed in server log files by Cloudflare. Please compare the explanations under "Hosting".
Cloudflare is a recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f DSGVO not to operate a content delivery network ourselves.
You have the right to object to the processing. Whether the objection is successful is to be determined as part of a balancing of interests.
The processing of the data provided under this section is not required by law or contract. The functionality of the website is not guaranteed without the processing.
Your personal data will be stored by Cloudflare for as long as necessary for the purposes described.
For more information on objection and removal options vis-à-vis Cloudflare, please visit: https://www.cloudflare.com/resources/assets/slt3lc6tev37/6irgPTeaoaj1J5woivgzER/a9a61395ed36a9da51de8e14b743594c/Cloudflare_Standard_Contractual_Clauses_for_Customers_1_Oct_2020.pdf
Cloudflare has implemented compliance measures for international data transfers. These apply to all global activities where Cloudflare processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit: https://www.cloudflare.com/resources/assets/slt3lc6tev37/6irgPTeaoaj1J5woivgzER/a9a61395ed36a9da51de8e14b743594c/Cloudflare_Standard_Contractual_Clauses_for_Customers_1_Oct_2020.pdf
Fairing
We use Fairing as a tool for post-purchase surveys to make JUVIA even more relevant for our customers. Your e-mail address and, if applicable, other order and transaction data are used to allocate the responses. This data is transmitted to Fairing Inc. and is stored there. Fairing may process the data outside the EU, whereby all relevant data protection regulations are complied with. We do not pass this data on to third parties.
To protect your data, we use encryption and restrict access to sensitive information. You have the right to access, modify or request the deletion of your data. If you have any questions about data processing, you can contact us at any time.
Sovendus
Voucher offers from Sovendus GmbH: To select the voucher offer, we transmit the pseudonymised and encrypted hash value of your email address and your IP address to Sovendus GmbH, c/o Design Offices Bahnhofplatz 12, 76137 Karlsruhe (Sovendus) (Art. 6 (1) f GDPR). The pseudonymised hash value of the email address is used to take into account any objection to advertising by Sovendus (Art. 21 para. 3, Art. 6 para. 1 c GDPR). The IP address is used by Sovendus exclusively for data security purposes and is generally anonymised after seven days (Art. 6 (1) f GDPR). We also transmit the pseudonymised order number, order value with currency, session ID, coupon code and timestamp to Sovendus for billing purposes (Art. 6 para. 1 f GDPR). If you are interested in a voucher offer from Sovendus, there is no advertising objection to your e-mail address and you click on the voucher banner displayed only in this case, we will send your title, name, postcode, country and your e-mail address to Sovendus in encrypted form to prepare the voucher (Art. 6 para. 1 b, f GDPR). For further information on the processing of your data by Sovendus, please refer to the online data protection information at www.sovendus.com/datenschutz.
5. Use of data for payment processing
Credit assessment
In cases where we make deliveries before payment, e.g. in the case of a purchase on invoice, we will have to obtain information about your identity and creditworthiness using the services of specialised service providers (credit reference agencies) for the purpose of contract formation according to art. 22 (2) lit a GDPR. To this end, we will transfer your personal data needed for the credit assessment to the following company(ies):
arvato infoscore GmbH
Rheinstraße 99
76532 Baden-Baden Germany
CommDoo GmbH
Bebericher Str. 23
41063 Mönchengladbach Germany
In this process, we will apply appropriate measures to respect your rights, freedoms and legitimate interests. You can contact us via the contact option specified below to present your position and contest the decision.
7. Contact possibilities and your rights
You are entitled to obtain free-of-charge information concerning data stored about your person and, as the case may be, to correct, restrict the processing, enable the portability of, or delete those data. If you have any questions about how we collect, process or use your personal data, want to enquire about, correct, block or delete your data, or withdraw any consents you have given, or opt-out of any particular data use, please contact our in-house data protection officer
LABscope UG (haftungsbeschränkt)
Kollegienwall 15
49074 Osnabrück
datenschutz@labscope.de
You may also submit a complaint to the responsible data protection supervisory authority.
State Data Protection and Freedom-of-Information Officer of Nordrhein-Westfalen
Helga Block
Kavalleriestraße 2-4
40213 Düsseldorf
phone: 02 11/384 24-0
fax: 02 11/384 24-10
E-mail: poststelle@Idi.nrw.de
Homepage: https://www.Idi.nrw.de
Data Protection Officer:
datenschutz@juvia.com
Right to object
If we process personal data as described above to protect our legitimate interests that are overriding in the process of balancing of interests, you may object to such data processing with future effect. If your data are processed for direct marketing purposes, you may exercise this right at any time as described above. If your data are processed for other purposes, you have the right to object only on grounds relating to your particular situation.
After you have exercised your right to object, we will no longer process your personal data for such purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
This does not apply to the processing of personal data for direct marketing purposes. In such a case we will no longer process your personal data for such purposes.
Information about use of SSL
To protect the security of your data during transmission, we use state of the art encryption techniques over HTTPS.
The privacy policy has been prepared with the Trusted Shops' ’ Legal Text Generator in cooperation
with Wilde Beuger Solmecke Rechtsanwälte.
