With this privacy policy we inform you about the data protection aspects of our offer on www.dienemann-bremen.de/shop. When using our online shop, the following data protection provisions apply.

We collect, process and use your personal data only in accordance with the following privacy policy. Personal data is all data that can be personally related to you as a natural person, such as your name, your telephone number, your address and other information that you provide to us when you use our services or when you contact us.

1.name and contact details of the controller

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is

A.W. Dienemann GmbH & Co KG
Malthusstr. 25
28307 Bremen

A.W. Dienemann GmbH & Co KG is represented by A.W. Dienemann Verwaltungs GmbH, Bremen Local Court, which in turn is represented by the Managing Director Mr Klaus Kahrs.

Managing Director: Klaus Kahrs

E-mail: info@dienemann-bremen.de
URL: http://www.dienemann-bremen.de

Telephone: +49 (0) 421 48 69 8-0
Fax: +49 (0) 421 48 69 88

You can contact our data protection officer, Mr Philip Kahrs, at philip.kahrs@dienemann-bremen.de or at our postal address with the addition "the data protection officer".

2.collection and storage of personal data and the nature and purpose of its use

a) When visiting the website

when you visit our website www.dienemann-bremen.de/shop, the browser used on your device automatically sends information to the server of our website.

This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

- IP address of the requesting device,
- date and time of access,
- name and URL of the retrieved file,
- website from which the access was made (referrer URL)
- browser used and, if applicable, the operating system of your device and the IP address of the requesting device. the operating system of your end device and the name of your access provider.

the aforementioned data is processed by us for the following purposes:

- Ensuring a smooth connection setup of the website,
- Ensuring a comfortable use of our website,
- Evaluation of system security and stability as well as
- for further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

b) Ordering process on our website (ordering as a guest)

If you wish to order an item from us, you can choose whether to create a customer account or order as a guest. If you create a customer account, your data will be saved for subsequent orders, whereas if you order as a guest, you will have to enter your data again when you place another order (see c). When ordering as a guest, you must enter the following personal data in the input masks provided for this purpose:

- Title
- First name and surname
- Address (street, house number, postcode, place of residence, country)
- E-mail address
- (if applicable) if a different delivery address is specified.) if a different delivery address is specified:
- title
- first name and surname
- address (street, house number, postcode, place of residence)
- optional (voluntary) company details (name and VAT ID no.), telephone number and fax number

The personal data you enter will be collected and stored exclusively for the fulfilment of the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

We may arrange for the personal data collected for the proper execution of the contract and for the fulfilment of the mutual obligations arising from the contract to be passed on to third parties, for example to our shipping and parcel service provider and the respective payment service provider, who will also use the personal data exclusively for the execution of the contract. The legal basis for the transfer of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR.

When you place an order on our website, we also store your IP address and the date and time of the order. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. This data is stored against the background that this is the only way we can prevent the misuse of our services and, if necessary, this data enables us to investigate criminal offences that have been committed. In this respect, the storage of this data is necessary for our security. This data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

We will provide any data subject with information about the personal data stored about them at any time upon request. Furthermore, we will correct or delete personal data at the request or notice of the data subject, provided that this does not conflict with any statutory retention obligations.

c) Registration on our website (customer account)

You also have the option of voluntarily registering on our website by providing personal data. By setting up a customer account, you register on our website. Which personal data is transmitted to us in the process is determined by the input mask used for registration. The following personal data must be provided:

- Title
- First name and surname
- Address (street, house number, postcode, place of residence, country)
- E-mail address
- (if applicable) if a different delivery address is specified.) if a different delivery address is specified:
- title
- first name and surname
- address (street, house number, postcode, place of residence)
- optional (voluntary) company data (name and VAT ID no.), telephone number and fax number

The personal data you enter is collected and stored exclusively for internal use by us and for our own purposes. We may arrange for the personal data collected for the proper execution of the contract and for the fulfilment of mutual obligations to be passed on to third parties, for example to our shipping and parcel service provider and the payment service provider, who will also use the personal data exclusively for internal purposes. The legal basis for the transfer of data, which only takes place if you order something in our shop, is Art. 6 para. 1 sentence 1 lit. b GDPR.

When you register on our website, we also store your IP address and the date and time of registration. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. The storage of this data takes place against the background that this is the only way we can prevent the misuse of our services and, if necessary, this data enables us to investigate criminal offences committed
. In this respect, the storage of this data is necessary for our security. This data will not be passed on to third parties unless there is a legal obligation to pass it on or it serves the purpose of criminal prosecution.

Your registration with voluntary provision of personal data serves to simplify the ordering process for you, as you will not have to enter your data again the next time you place an order after logging in to our site. You are free at any time to change the personal data provided during registration or to have it completely deleted from our database.

Upon request, we will provide any data subject with information about the personal data stored about them at any time. Furthermore, we will correct or delete personal data at the request or notice of the data subject, provided that this does not conflict with any statutory retention obligations.

3.cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, PC or similar) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more convenient for you. For example, we use session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit our website again to make use of our services, it is automatically recognised that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

The data processed by cookies are necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

4.use of social media plug-ins

a) We currently use the following social media plug-ins: Facebook, Google+, Twitter, WhatsApp, Pinterest.

We use the so-called two-click solution. This means that when you visit our website, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by the marking on the box above its initial letter or the logo. We give you the option of communicating directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have accessed the corresponding website of our online offering. In addition, the data mentioned under point 2. a) of this declaration is transmitted.

In the case of Facebook, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (for US providers in the USA). As the plug-in provider collects data via cookies in particular, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box.

b) We have no influence on the data collected and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

c) The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. We offer you the opportunity to interact with the social networks and other users via the plug-ins so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.

d) Data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will prevent you from being assigned to your profile with the plug-in provider.

e) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.

f) Addresses of the respective plug-in providers and URL with their data protection notices:
aa) Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection:
http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications
http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
bb) Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA;
https://www.google.com/policies/privacy/partners/?hl=en.
Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
cc) Twitter, Inc., 1355 Market St, Suite 900, San Francisco,
California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework.
dd) WhatsApp, WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, https://www.whatsapp.com/legal/#privacy-policy
gg) Pinterest, Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
https://policy.pinterest.com/de/privacy-policy

b) AddThis bookmarking

Our websites also contain AddThis plug-ins. These plug-ins allow you to set bookmarks or share interesting content with other users. We use the plug-ins to offer you the opportunity to interact with social networks and other users so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.

Via these plug-ins, your internet browser establishes a direct connection with the AddThis servers and, if applicable, the selected social network or bookmarking service. The recipients receive the information that you have accessed the corresponding website of our online offer and the data mentioned under § 3 of this declaration. This information is processed on the AddThis servers in the USA. If you send content on our website to social networks or bookmarking services, a connection may be established between your visit to our website and your user profile on the relevant network. We have no influence on the data collected and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

The plug-in provider stores this data as usage profiles and uses it for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right.

If you do not wish to participate in this process, you can object to the collection and storage of data at any time by setting an opt-out cookie with effect for the future: http://www.addthis.com/privacy/opt-out. Alternatively, you can set your browser to prevent the setting of cookies.

Further information on the purpose and scope of data collection and its processing by the plug-in provider as well as further information on your rights in this regard and setting options to protect your privacy can be obtained from AddThis LLC, 1595 Spring Hill Road, Sweet 300, Vienna, VA 22182, USA, www.addthis.com/privacy.

4.rights of data subjects

you have the right:
- in accordance with Art. 15 GDPR - to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

-in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us

-in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims

-in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;

-in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller

- in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future and

-to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

5.right to object

If we process your personal data on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you would like to exercise your right of cancellation or objection, please send us an email to shop@dienemann-bremen.de.

6.data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

7.up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and has the status [ May 2018 ]

Due to the further development of our website and the goods we offer or due to changes in legal or official requirements, it may become necessary to amend this privacy policy. You can access and print out the current privacy policy at any time on the website at https://www.dienemann-bremen.de/shop/info/privatsphaere-und-datenschutz.html