Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor required for the conclusion of a contract. You are not obliged to provide the data. Non-provisioning has no consequences. This only applies if no other information is provided during subsequent processing. "Personal data" means any information relating to an identified or identifiable natural person.
Person(s) in charge
Company: Alky LTD
CEO: Nicolai Hald
1) Server log files
You can visit our website without providing any personal information. Each time you access our website, usage data is transmitted through your Internet browser and stored in log data (server log files). This stored data includes the name of the page accessed, the date and time of access, the amount of data transferred, the browser you use, the operating system you use, the IP address you use in anonymised form and the source or reference from which you accessed the page. The processing is carried out in accordance with art. 6 par. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are any concrete indications of illegal use.
2) Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact. By sending your message you agree to the processing of the transmitted data. The processing takes place on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent until revocation. Your e-mail address will only be used to process your request. Your data will then be deleted if you have not consented to further processing and use.
3) Customer account
When opening a customer account, we collect your personal data to the extent stated there. The purpose of data processing is to improve your shopping experience and simplify order processing. The processing takes place on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.
4) Data collection when writing a customer review
When commenting on an article or a contribution, we collect your personal data (name, e-mail address, comment text) only to the extent provided by you. The purpose of the processing is to allow comments to be made and to display comments. By sending the comment you agree to the processing of the transmitted data. The processing takes place on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent until revocation. Your personal data will then be deleted.
When your comment is published, only the name you provide will be published.
5) Collection, processing and use of personal data for orders
When placing an order, we collect and use your personal data only insofar as this is necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to make it available means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) b GDPR and is necessary for the fulfilment of a contract with you. Your data will not be passed on to third parties without your express consent. Excluded from this are only our service partners, which we need to process the contractual relationship or service providers, whom we use in the context of order processing. In addition to the recipients named in the respective clauses of this data protection declaration, these are, for example, recipients of the following categories: shipping service providers, payment service providers, merchandise management service providers, service providers for order processing, web hosters, IT service providers and dropshipping dealers. In all cases we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.
a. Amazon Payments
If you choose a payment method of the payment service provider PAYONE, payment is processed by the payment service provider BS PAYONE GmbH, Lyoner Straße 9 60528 Frankfurt/Main, to whom we pass on the information provided during the order process together with the information about your order in accordance with Art. 6 Para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider PAYONE and only to the extent necessary for this purpose.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we pass your payment data on to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and exclusively within the framework required for payment processing. PayPal reserves the right to carry out credit checks for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal. For this purpose, your payment data may be passed on to credit agencies on the basis of PayPal's legitimate interest in determining your solvency pursuant to Art. 6 Para. 1 letter f GDPR. PayPal uses the result of the credit assessment in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
6) Use of e-mail address for sending newsletters
We will use your e-mail address exclusively for our own advertising purposes for sending out newsletters, irrespective of the execution of the contract, provided that you have expressly agreed to this. The processing takes place on the basis of Art. 6 (1) lit. a GDPR with your consent. You may revoke your consent at any time without prejudice to the legality of the processing carried out on the basis of the consent until revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the mailing list.
The newsletter is sent via "MailChimp", a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
The e-mail addresses of our newsletter recipients, as well as their further data described in the context of these notes, are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, MailChimp can use this data according to its own information to optimise or improve its own services, e.g. to technically optimise the sending and presentation of newsletters or for economic purposes, in order to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write them down or pass them on to third parties.
MailChimp is certified under the US-EU data protection agreement Privacy Shield and thus commits itself to comply with EU data protection regulations. We have concluded a "Data Processing Agreement" with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process them in accordance with their data protection regulations on our behalf and in particular not to pass them on to third parties. The data protection regulations of MailChimp can be viewed here.
7) Passing on the e-mail address to shipping companies for information about the shipping status
We will pass on your e-mail address to the transport company as part of the contract processing, provided that you have expressly agreed to this in the order process. The purpose of the transfer is to inform you by e-mail about the shipping status. The processing takes place on the basis of Art. 6 (1) lit. a GDPR with your consent. You may revoke your consent at any time by notifying us or the transport company, without prejudice to the legality of the processing carried out on the basis of the consent until revocation.
9) Use of Google Analytics
You can set an opt-out cookie to prevent collection by Google Analytics across devices. Opt-out cookies prevent the future collection of your data when you visit this website. You need to opt-out on all systems and devices in use for this to work comprehensively. If you click here, the opt-out cookie will be set: disable Google Analytics.
10) Use of Google Adwords Conversion Tracking
11) Use of Bing Ads
This website uses Bing Ads by the Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft”). When you click on an advert placed by Microsoft Bing Ads, a cookie is placed on your device in order to track conversions. These cookies are valid for a limited time and are not used for personal identification. If you visit certain pages of our website and the cookie is still valid, Microsoft and our website can detect that you have clicked on the ad and were directed to that page. Information collected using the conversion cookie is used to generate conversion statistics. We use this to learn how many users have clicked on our ads and are redirected using conversion tracking tags. It is not possible for us to personally identify individual users. This process is based on article 6 paragraph 1 of the GDPR for the legitimate interest in targeted advertising and the analysis and efficiency thereof. As per art 6. para. 1, you have the right to object to the collection of cookies and processing of personal data at any time. You can also prevent us from storing cookies by selecting the appropriate settings in your browser. However, this may compromise the functionality of the website. Your data will then be excluded in conversion tracking statistics. Bing has been certified according to the "Privacy Shield" US-EU data protection agreement and is thus obliged to comply with European data protection regulations. Find more information on data protection and the cookies used for Microsoft Bing here: https://privacy.microsoft.com/en-gb/privacystatement
12) Use of YouTube
13) Use of GoogleMaps
On our website we use the function for embedding GoogleMaps maps from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). This function enables the visual display of geographical information and interactive maps. Google also collects, processes and uses data from visitors to the pages into which GoogleMaps maps are integrated. Further information on the collection and use of data by Google can be found in Google's data protection information at https://www.google.com/privacypolicy.html. There you can also change your settings in the Privacy Center so that you can manage and protect your data processed by Google. Your data may also be transferred to the USA. The European Commission has passed an adequacy resolution for data transfers to the USA. For reasons arising from your particular situation, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) f GDPR.
14) Use of Zanox (AWIN)
15) Reviews at Trustpilot
If you participate in the evaluation system, your evaluation will be published on our website and on the websites of Trustpilot and its partners. For the purpose of using Trustpilot, we pass on your e-mail address, your first and last name and the invoice number generated by us to Trustpilot A/S, Trommesalen 5, 3. sal, 1614 København, Denmark. This consent can be revoked at any time by sending a message to the described contact option or directly to us.
16) Duration of storage
After complete contract processing, the data will first be stored for the duration of the warranty period, then under consideration of statutory, in particular tax and commercial law storage periods and then deleted after expiry of the period if you have not agreed to further processing and use.
17) Rights of the person concerned
If the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: right to information, to correction, to deletion, to restriction of processing, to data transferability. Furthermore, according to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) f GDPR and to processing for the purpose of direct advertising.
Contact us on request. You will find the contact details in our legal notice.
17) Right of appeal to the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.
last update: 28.10.2019