Privacy policy

A. Responsible for data processing

Responsible for the processing of personal data within the framework of this website in accordance with the provisions of the General Data Protection Regulation (DSGVO) is:

hookahLove UG (limited liability)
Gewerbestr. 4
86859 Igling

represented by the Managing Director Maximilian Held

Phone 08191-220000-2
E-mail: info@hookahLove.de

With this data protection declaration, we inform you about the scope of the processing of your personal data (hereinafter only "data").

B. Data processing

In the course of operating our website, we process data. The processing of data also includes disclosure by transmission.

For data transfers to the USA, there is an adequacy decision of the EU Commission, the EU-US Privacy Shield. In this, the Commission has certified that the guarantees for the transfer of data to the USA on the basis of the EU-US Privacy Shield correspond to the data protection standards in the EU. Insofar as we transfer data to the USA, we have marked the participation of our service providers in the EU-US Privacy Shield.

The individual data concerned, processing purposes, legal bases, recipients and transfers to third countries are listed below:

a) Log file

We log your visit to our websites. The following data is processed: Name of the website accessed, date and time of access, the amount of data transferred, the browser type and version, the operating system you are using, the referrer URL (the previously visited website), your IP address and the requesting provider. This is necessary to ensure the security of the website. We process the data accordingly on the basis of our legitimate interests pursuant to Art. 6 (1) f) DSGVO. The log file is deleted after seven days, unless it is needed to clarify or prove specific legal violations that have become known within the retention period.

b) Hosting

Within the scope of hosting, all data to be processed in connection with the operation of this website is stored. This is necessary to enable the operation of the website. We process the data accordingly on the basis of our legitimate interests pursuant to Art. 6 (1) f) DSGVO. To provide our online presence, we use the services of web hosting providers to whom we transmit the above-mentioned data.

c) Contacting

If you contact us, your data (name, contact details, if provided by you) and your message will be processed exclusively for the purpose of handling and processing your enquiry. We process this data on the basis of Art. 6 (1) b) DSGVO or Art. 6 (1) f) DSGVO to process your enquiry.

d) Newsletter

In order to provide you with regular information about our company and our offers, we offer to send you a newsletter. When you register for the newsletter, we process the data you enter (e-mail address and other voluntary information).

The sending of the newsletter by means of registration is based on your consent in accordance with Art. 6 para. 1 a) DSGVO.

Registration for the newsletter takes place in the so-called double opt-in process. To prevent misuse, we will send you an email after your registration asking you to confirm your registration. In order to be able to prove the registration process in accordance with the legal requirements, your registration is logged. This concerns the storage of the registration and confirmation time as well as your IP address.

e) Customer account

When you open a customer account, you thereby agree that your inventory data (name, address, e-mail address, bank details) as well as your usage data (user name, password) are stored. This allows us to identify you as a customer and gives you the opportunity to manage your orders.

Your data will be processed on the basis of your consent pursuant to Art. 6 (1) a) DSGVO.

f) Purchase transaction

We process your order data for the processing of the purchase contract. The processing of the data takes place accordingly on the basis of Art. 6 para. 1 b) DSGVO.

We transmit your address data to the company commissioned with the delivery. If it is necessary for the processing of the contract, we also transmit your e-mail address and/or your telephone number to the company commissioned with the delivery in order to coordinate a delivery date (notification).

We transmit your transaction data (name, date of order, payment method, date of dispatch and/or receipt, amount and payee, bank details or credit card details, if applicable) to the payment service provider commissioned to process the payment.

ff) In order to be able to offer you the payment options of Klarna, we will transmit personal data, such as contact data and order data, to Klarna. This enables Klarna to assess whether you can make use of the payment options offered via Klarna and to adapt the payment options to your needs. You can obtain general information about Klarna here . Your personal data will be processed by Klarna in accordance with the applicable data protection provisions and as set out in Klarna's privacy policy treated.

g) Cookies, website analysis and marketing

To enable the use of certain functions, we use so-called cookies. These are short data packages that are stored on your terminal device and exchanged with other providers. Some of the cookies we use are deleted immediately after you close your browser (so-called session cookies). Other cookies remain on your end device and make it possible to recognise your browser the next time you visit (persistent cookies).

You can delete all cookies stored on your terminal device and set the common browsers to prevent cookies from being stored.

In this case, you may have to change some settings each time you visit this website and accept that some functions may be impaired.

We use cookies in connection with the following functionalities:

aa) Google Analytics

We use "Google Analytics", a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), for website analysis.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site.

The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. We use the stored information to evaluate your use of the website, to compile reports on website activities for the website operators and to provide other services associated with website use. We process the data thus obtained on the basis of our overriding interest in the optimal marketing of our online offer in accordance with Art.6 (1) f) DSGVO. Google will not associate your IP address with any other data held by Google.

We would like to point out that this website uses Google Analytics with the extension "anonymizeIp()". This shortens IP addresses before they are transmitted to a server in the USA. A direct personal reference in connection with the stored data is thus generally excluded. Only in exceptional cases is the full IP address transmitted to a server in the USA and shortened there.

You can object to the collection of data at any time with effect for the future by using the Google Analytics browser deactivation add-on at

https://tools.google.com/dlpage/gaoptout?hl=de use.

Please also note the information on the use of data by Google in the Google Partner Network at:

https://www.google.com/intl/de/policies/privacy/partners/

www.google.de/privacy_ads.html

Google is certified under:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information on data protection can be found at: https://policies.google.com/privacy?hl=de&gl=de

bb) Facebook Remarketing/Retargeting: Facebook Custom Audiences (Pixel/Cookies)

We use a so-called tracking pixel on our website. When you visit certain pages, a cookie is stored on your terminal device. The cookies remain permanently on your PC. The cookies are used to track which advertisements and third-party pages users use to access our website. The procedure serves to optimise our advertising by evaluating the statistical data we receive with the help of the cookies. We process the data obtained in this way based on our overriding interest in the optimal marketing of our online offer in accordance with Art. 6 (1) f) DSGVO.

The cookies do not serve to identify you personally. The data is anonymous for us and does not allow us to draw any conclusions about the user. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Facebook server in the USA and stored there.

Facebook is certified under:

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

For more information on data protection, see:

https://www.facebook.com/help/568137493302217

You can object to the collection of data at any time with effect for the future by [insert opt-out option].

h) Integration of external content

We use external dynamic content to optimise the presentation and offer of our website. When the website is visited, a request is automatically made to the server of the respective content provider via API, during which certain log data (e.g. the user's IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.

We use external content in connection with the following functionalities:

aa) Google Maps

We use the map service "Google Maps" from Google to provide you with an interactive map. When displaying the map, data including your IP address and your location are transmitted to Google servers in the USA and stored there. This processing is carried out on the basis of our overriding legitimate interest in optimal marketing of our offer in accordance with Art. 6 (1) f) DSGVO.

Google is certified under:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information on data protection can be found at: https://policies.google.com/privacy?hl=de&gl=de

i) Social plugins

We use third-party plugins on our websites. These allow you to inform your contacts whether you like our website, point to content or share content. The plugins are identified by the logo of the respective third-party provider.

When you visit our site, your data is transferred to the respective third-party providers.

If you are also a user of a third-party provider, this data can be assigned to the corresponding user account with the provider.

A transfer of this data to the third-party provider may also occur if you are not registered as a user with the third-party provider and do not click on the plugin on our pages.

In the case of transmission without simultaneous registration with the third-party provider, however, it is not directly possible to establish a direct personal reference to you via the IP address, for example; this would only be possible via information from your provider.

The purpose and scope of data processing by the third-party provider can be found in the data protection information of the respective provider.

The processing of this data is based on our overriding legitimate interest in the optimal marketing of our online offer in accordance with Art. 6 (1) f) DSGVO.

Plugins from the following providers are used on our website:

Facebook Connect, of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

You can log in to our site with Facebook Connect. In this case, no additional registration is necessary. To register, you will be redirected to the Facebook page, where you can log in with your user data.

When you register via Facebook, our services are linked to your Facebook user profile. Through the link, the following information is automatically transmitted to us by the respective social media service provider:

- User name

- E-mail address

This information is mandatory for the conclusion of the contract in order to be able to identify you.

In addition, Facebook allows you to access your contacts when you authenticate using these services. However, we do not make use of this.

We would like to point out that the use of the Facebook login can lead to them collecting personal data and possibly using it further. However, this data collection and use is the responsibility of Facebook and cannot be influenced by us.

Certification at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Further information at: https://www.facebook.com/privacy/explanation https://www.facebook.com/full_data_use_policy

j) Facebook Custom Audiences (customer list)

We use the Custom Audience services of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook). In this process, customer data is transferred to Facebook in lists. The data is sent to Facebook servers in the USA. The data is used to analyse user behaviour on the internet and to personalise advertising and, if necessary, linked to an existing user account with Facebook.

Certification at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Further information at: https://www.facebook.com/privacy/explanation

C. Duration of data storage

We only store personal data for as long as it is necessary for the purposes for which it is processed or if you have withdrawn your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data can be up to 10 years, regardless of the processing purposes.

D. Your data subject rights

a) Information

Upon request, you will receive information about all personal data we have stored about you free of charge at any time.

b) rectification, erasure, restriction of processing (blocking), objection

If you no longer agree to the storage of your personal data or if this data has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law) on the basis of a corresponding instruction. The same applies if we are only to process data in a restrictive manner in the future.

c) Data portability

Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another responsible party if you wish.

d) Right of appeal

There is a right of appeal to the competent supervisory authority:

(https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).

e) Right of revocation for consents with effect for the future

You can revoke your consent at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of revocation.

f) Restrictions

Data for which we are not able to identify the data subject, e.g. if it has been anonymised for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.

g) Exercise of your data protection rights

For questions regarding the processing of your personal data, for information, correction, blocking, objection or deletion of data or the wish to transfer the data to another company, please contact

hookahLove UG (limited liability)
Gewerbestr. 4
86859 Igling

represented by the Managing Director Maximilian Held

Phone 08191-220000-2
E-mail: info@hookahLove.de