(1) Below we inform you about the type, scope and purpose of the processing of your personal data when you use this blog. Personal data is all information that relates to an identified or identifiable natural person.
(2) The person responsible within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. The person responsible for personal data processed by the provider of this shop within the meaning of the GDPR is: UMBRAMARIN, Tobias Pahlke, Lübecker Straße 20, 23701 Eutin, info@umbramarin.com (hereinafter "I"). Incidentally, Gambio's data protection declaration as a shop system provider also applies.
(3) If you conclude a contract with us via my online shop, Gambio will send me your name and the billing address as stored in your user account. If you provide further data in the context of your order (e.g. a different delivery address or a telephone number), these will also be sent to me.
(4) I process the data mentioned in paragraph 3 electronically for the proper fulfillment of the contract, in particular for delivery, invoicing, booking payments and processing returns and complaints. This data processing takes place on the basis of Article 6 Paragraph 1 Letter b GDPR. I keep this data stored until all mutual claims from the respective contractual relationship with you have been completely settled and the retention periods under commercial and tax law to which I am subject have expired.
(5) In order to conclude a contract between you and me, it is necessary that I receive your name and address. The necessity of providing this data results, among other things, from the terms and conditions of Gambio as well as from legal regulations (e.g. § 312i Paragraph 1 Item 3 BGB, § 14 Paragraph 4 UStG). Without providing this data, you cannot conclude a contract with me.
(6) If I send you physical goods on the basis of the purchase contract, I will transmit your name and shipping address to Deutsche Post (Deutsche Post AG, 53113 Bonn) or DHL (DHL Paket GmbH, 53113 Bonn) as the shipping service provider, exclusively for the purpose of delivering the shipment to you on the basis of Article 6 Paragraph 1 Letter b GDPR.
(7) If you use the PayPal service for payment, the PayPal data protection provisions also apply to the payment process. PayPal will act on your behalf.
(8) If you send me a message, Gambio will send me your name along with your message (legal basis: Article 6 (1) (a) GDPR). If you send me a message by e-mail, I will save your message with the sender data (name, e-mail address) in order to answer it and also to be able to respond to any subsequent questions you may have (legal basis: Article 6 Paragraph 1 Letter f GDPR). For receiving, storing and sending e-mails, I use an e-mail provider who acts for me as a processor in accordance with Article 28 GDPR. I will delete the data collected with your message no later than six months after the last communication with you about your request, subject to the regulation in the following paragraph.
(9) If you send me a legally relevant declaration on the contractual relationship (e.g. a revocation or a complaint), the legal basis for the processing, regardless of the transmission method, is also Article 6 (1) (b) GDPR. In such a case, I will delete the data related to your declaration as soon as all mutual claims from the contractual relationship have been finally settled and the commercial and tax retention periods have expired.
(10) I waive automated decision-making and profiling.
(11) With regard to the personal data that I process about you, you have the following rights:
a) You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, I will inform you of the personal data stored about you and the further information in accordance with Article 15 Paragraph 1 and 2 GDPR.
b) You have the right to have any incorrect personal data concerning you corrected immediately. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - including by means of a supplementary declaration.
c) You can request the immediate deletion of your personal data under the conditions of Article 17 Paragraph 1 GDPR, insofar as their processing is not required in accordance with Article 17 Paragraph 3 GDPR.
d) You can ask me to restrict the processing of your data if one of the requirements of Article 18 (1) GDPR is met. In particular, you can request the restriction instead of a deletion.
e) I will inform all recipients of any correction or deletion of your personal data and restriction of processing to whom I have disclosed personal data relating to you, unless this proves impossible or involves a disproportionate effort. I will also inform you about these recipients if you request this.
f) You have the right to receive the personal data that you have provided to me in a structured, common and machine-readable format and you can request that I transmit this data to another person responsible without hindrance, as far as this is technically possible.
g) If data processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the legality of the data processing that took place up to your withdrawal.
(12) RIGHT TO OBJECT: FOR REASONS ARISING FROM YOUR SPECIAL SITUATION, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF THE PERSONAL DATA CONCERNING YOU; This right of objection exists in relation to data processing that takes place on the basis of Article 6 Paragraph 1 Letter f GDPR to safeguard legitimate interests on our part or a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data prevail.
If you exercise your right of objection, I will no longer process the data in question, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or that the processing of the assertion, exercise or Serves defense of legal claims.
(13) IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT ADVERTISING (E.G. NEWSLETTER), YOU CAN OBJECT AT ANY TIME TO THE PROCESSING OF THE PERSONAL DATA CONCERNED FOR THE PURPOSE OF NOT USING THE PURPOSE OF THE PURPOSE OF THE PURPOSE OF THE PURPOSE PROCESSING.
(14) If you are of the opinion that the processing of your personal data violates the GDPR, you can lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation. This does not exclude other administrative or judicial remedies.