privacy

Data protection declaration

I. Introduction

The purpose of this data protection declaration is to comply with the data protection requirements existing for the operation and use of the website www.exstase.com, in particular the information obligations pursuant to Article 13 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR).

This data protection declaration only concerns the data processing processes associated with visiting the website and the processing of contracts concluded via the website.

II. Controller / Data Protection Officer / Supervisory Authority

1. Controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is Exstase Großhandel GmbH. The contact details and details of the persons authorised to represent the company can be found in the imprint of this website.

2. Supervisory authority for data protection

III. General information on data processing

1. Scope of the processing of personal data

As a matter of principle, we collect and process personal data of our users only insofar as this is necessary for the provision of a functional website as well as for the provision of our services and in the cases listed in this data protection declaration. Any further processing of personal data of our users will only be carried out if this is expressly permitted by legal regulations and/or the consent of the respective user - if required - has been obtained.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent for processing of personal data from the data subject, Art. 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation applicable to our company, Art. 6 Para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 (1) lit. d GDPR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.

3. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage ceases to exist. In addition, data may be stored if this is stipulated by the European or national legislator in EU regulations, laws or other provisions applicable to the Controller. Data will also be blocked or deleted if a storage period prescribed by the aforementioned regulations expires, unless there is a need to continue storing the data for the conclusion or fulfilment of a contract.

IV. Visiting the website

1. Description and scope of data processing

When you visit and use our website www.exstase.com, information is automatically sent to our website's server by the software used on your end device to view and use websites (internet browser). This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:

• the IP address of the requesting computer,
• the date and time of access,
• the name and URL of the accessed file,
• the website from which the access was made (referrer URL),
• the Internet browser you use and, if applicable, the operating system of your end device as well as the name of the service provider that provides you with your internet access (access provider).

2. Purpose of the data processing

This data is processed by us for the following purposes:

• Ensuring a good connection to the website,
• Ensuring a comfortable use of our website,
• evaluation of system security and stability

3. Legal basis for the data processing

The legal basis for data processing is Art. (1) p. 1 lit. f DS-GVO. Our legitimate interest is to present you with an informative and functional website. The processing of the above-mentioned data is necessary to protect our interest. Of course, we also take into account your legitimate interests, fundamental rights and freedoms. Therefore, under no circumstances do we use the collected data to draw conclusions about your person.

4. Period of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

V. Use of cookies

1. Description and scope of data processing

We use the following cookies on our website:

• Name: cb-enabled, cookie category: absolutely necessary cookie, function: storage of cookie preference

VI. Google Fonts

We integrate the fonts ("Google Fonts") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

VII.Data subject rights

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
• in accordance with Art. 16 GDPR, to demand the immediate rectification of inaccurate or incomplete personal data stored by us;
• in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
• in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
• revoke your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent in the future; and
• complain to a supervisory authority in accordance with Art. 77 GDPR. You can usually contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

IX. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) s. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for doing so which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without giving any indication of a specific situation. If you wish to exercise your right to revoke or object, you can use the contact form on this website for this purpose. Please enter the word "Objection" in the "Subject" field of the contact form.