1 Name and contact details of the data controller

This data protection information applies to data processing by:

Controller: HEMLEY Moese & Schwartz GmbH
Huelserstrasse 335, 47803 Krefeld, Deutschland
Email: info@hemley.de
Telefon: +49 (0)2151-360909-0
Fax: +49 (0)2151-875947

Handelsregister Krefeld HRB 4134
USt-IdNr. DE120149595

Management:
Jan Moese

2 Collection and storage of personal data as well as type and purpose of their use when merely visiting our website

When you visit our website www.ascot.de, information is automatically sent to our website server by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:

IP address of the requesting computer,
Date and time of access,
Name and URL of the file accessed,
Website from which access was made (referrer URL),

The browser used and, if applicable, the operating system of your computer as well as the name of your access provider. We process the aforementioned data for the following purposes:

Ensuring a smooth connection set-up of the website,

 

3 Ensuring a comfortable use of our website, evaluating system security and stability, and for other administrative purposes.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations of this in sections 8 and 9 of this data protection declaration.

Collection and storage of personal data as well as type and purpose of their use during registration

When you register, we store the information we have listed under 2. and additionally

Date and time of registration
First name, last name
E-mail
Password

Our terms and conditions valid at that time are also stored. Our registration form is encrypted so that the data entered there cannot be viewed by third parties. You have the possibility to change your registration data at any time.

We store this data for the purpose of providing you with an order option and access to your order data at any time. The order data are: Your orders, your account data, your address book, your password, your user data, your ratings.

The data processing is carried out upon your request and is necessary according to Art. 6 Para. 1 Sentence 1 lit. B DSGVO for the aforementioned purposes for the appropriate processing of your orders for the mutual fulfilment of obligations arising from the order contracts.

If you have concluded a contract with us for the ordering of goods, the duration of the storage of your data depends on the explanations below under 4 – Online ordering. If you have not placed an order, we will store your registration data for a reasonable period of time within which you can be expected to place an order after you have registered, but no longer than three months.

 

4 Collection and storage of personal data as well as type and purpose of their use for online orders

Only those who have completed the registration process can place an online order. We therefore store the information that we have explained under 2. and 3. Our order form is encrypted so that third parties cannot view the data entered there. When you place an order, we collect the following additional information:

Salutation, first name, last name,
e-mail address
Address
Telephone number (if given)
Date and time of order
Goods ordered
Details of the method of payment

We also store the text of the contract and our general terms and conditions applicable at the time of conclusion of the contract.

This data is collected

To be able to identify you as our customer,
To be able to deliver the ordered goods to you and to fulfil the contract
For invoicing purposes
To process payment claims and assert any other claims against you
For correspondence with you

The data processing is carried out at your request and is necessary for the aforementioned purposes for the mutual fulfilment of obligations arising from the purchase contract in accordance with Art. 6 Para. 1 Sentence 1 lit. b DSGVO.

5 Collection and storage of personal data and the type and purpose of their use when registering for our newsletter

If you have expressly consented in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO, we will use your e-mail address to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to provide an e-mail address. You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time by e-mail to info@hemley.de.

6 Collection and storage of personal data as well as type and purpose of their use when using our contact form

If you have any questions, we offer you the possibility of contacting us via a form provided on the website. In doing so, it is necessary to provide a valid e-mail address so that we know who the enquiry is from and so that we can answer it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is based on your voluntarily given consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO. The personal data collected by us for the use of the contact form will be automatically deleted after the request you have made has been dealt with. Our contact form is encrypted so that the data entered there cannot be viewed by third parties.

7 Transfer of data

Your personal data will not be passed on to third parties for purposes other than those listed below.
We only pass on your personal data to third parties if:
This is legally permissible and required in accordance with Art. 6 (1) p. 1 lit. b DSGVO for the processing of contractual relationships with you. We use the data you provide:

To fulfil and process your order,

Your data is passed on to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods,
For the processing of payments, we pass on your payment data to our house bank, if necessary;
The disclosure is necessary for the assertion, exercise or defence of legal claims in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO and there is no reason to assume

That you have an overriding interest worthy of protection in the non-disclosure of your data,
In the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c DSGVO.

Your data will not be passed on to any other third parties or used for advertising purposes outside of a consented newsletter mailing. Insofar as we pass on your data to third parties as described above, these third parties have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this in the description of the offer. We will only transfer your data to a service provider or partner outside the EEA if the delivery location you have specified in your order is outside the EEA. We transfer your data to service providers or partners outside the EEA if an adequacy decision by the Commission exists for the respective country. In the event of a transfer pursuant to Art. 46 or Art. 47 or Art. 49 para. 1 subpara. 2, we will inform you of the consequences of this circumstance in the offer. Commission adequacy decisions exist for the following countries: Andorra, Argentina, Canada (commercial organisations), Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay, USA (limited to the Privacy Shield framework). The Commission’s explanations of its adequacy decisions can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_de.

For explanations and statements on the EU-US Privacy Shield, see: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_de

8 Cookies

We use cookies to design our website according to your needs and to optimise it. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and which provide the party setting the cookie with certain information. Cookies cannot execute programs or transmit viruses to your computer. They are used to make the website as a whole more user-friendly and effective.

We use the following types of cookies, the scope and function of which are explained below:

Transient cookies (see a).
Persistent cookies (see b).

1. a) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
2. b) Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.

9 Analysis tools / tracking tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO. With the use of the

The tracking measures we use are intended to ensure that our website is designed to meet the needs of our customers and is optimised on an ongoing basis. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.

(1) Google Analytics

For the purpose of demand-oriented design and continuous optimisation of our pages, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymised usage profiles are created and cookies are used (see section 8). The information generated by the cookie about your use of this website, such as

browser type/version
operating system used,
Referrer URL (the previously visited page),
host name of the accessing computer (IP address),

time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (IP masking). You can prevent the installation of cookies by setting your browser

However, we would like to point out that in this case not all functions of this website can be used to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).

2) b.Google AdWords Remarketing

Our website uses Google Adwords Remarketing tags. Google Adwords Remarketing is a service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). For this purpose, so-called cookies are stored on your computer and these are used by Google to analyse the use of the website. The information generated by the cookie (including your IP address) is transferred to a Google server in the USA and stored there. The IP address is then shortened by Google by the last three digits. Thus, a clear assignment of the IP address is no longer possible. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Third-party providers, including Google, place advertisements on websites on the Internet.

Third-party vendors, including Google, use stored cookies to serve ads based on a user’s prior visits to this website. Google will not associate your IP address with any other data collected by Google. Google is registered with the Safe Harbor program of the U.S. Department of Commerce and complies with the data protection provisions of the U.S. Safe Harbor Agreement.

You can object to the collection and storage of data at any time with effect for the future. You can deactivate the use of cookies by Google by visiting the Google advertising deactivation page. Click here

However, please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

(3) YouTube plugin, links to social media

(a) We do not use any plug-ins of the media Facebook, Twitter and Instagram on our website. The icons shown merely represent links to these social media sites. Consequently, no data is transmitted to the servers of the above-mentioned providers unless you actively click on one of these links yourself.

(b) We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.

(c) By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under 2. of this declaration are transmitted. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

(d) Further information on the purpose and scope of data collection and processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

10 Data subject rights

You have the right

In accordance with Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal to a supervisory authority, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, pursuant to Article 22 (1) and (4) DS-GVO and meaningful information about the data involved. The data subject shall be informed of the existence of automated decision-making including profiling pursuant to Article 22 (1) and (4) of the Data Protection Regulation and of any meaningful information about the logic involved and the scope and intended effects of such processing for the data subject. You have the right to request information on whether the personal data concerning you are transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 of the GDPR in connection with the transfer;

in accordance with Art. 16 DSGVO, to have inaccurate or incomplete personal data we

of your personal data stored by us;

pursuant to Art. 17 DSGVO, you may request the deletion of your personal data stored by us in the following cases:

the personal data relating to you are no longer necessary for the purposes for which they were collected or processed in any other way are no longer necessary

You withdraw your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) DS-GVO and there is no other legal basis for the processing.

You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.

the personal data concerning you have been processed unlawfully.

the erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject

the personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) DS-GVO;

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, the controller shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase any links to, or copies or replications of, those personal data.

The right to erasure does not exist to the extent that the processing is necessary

To exercise the right to freedom of expression and information;

for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) DS-GVO;

for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) DS-GVO, insofar as the right referred to in (1) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or for the establishment, exercise or defence of legal claims.

According to Art. 18 DSGVO, you can demand the restriction of the processing of your personal data if,

you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;

the controller no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims; or

you have objected to the processing pursuant to Article 21(1) of the DS-GVO and it has not yet been determined whether the legitimate grounds of the controller outweigh your grounds.

Where the processing of personal data concerning you has been restricted, such data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted;

In accordance with Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. This must not affect the freedoms and rights of other persons.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent in the future, and

Complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

11 Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation. If you would like to make use of your right of revocation or objection, it is sufficient to send an e-mail to info@ascot.de.

Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us of your objection to advertising at the above email address.

12 Data security

We use the widespread SSL procedure (Secure Socket Layer) in connection with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed display of the key or lock symbol in the lower status bar of your browser. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

13 up-to-dateness and amendment of this data protection declaration

This data protection declaration is currently valid and has the status of May 2018. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at https://www.ascot.de/.

1. We process all data in-house – so we do not operate an external call centre.
2. We do not contact you at any time without your permission.
3. We do not share or sell customer data.
4. The shipping company that delivers your order will only be informed of the shipping address you

have provided.